last executing test programs: 1m23.186456594s ago: executing program 1 (id=524): io_setup(0x1, &(0x7f00000004c0)=0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r1, &(0x7f0000004000), 0x0, 0x2002, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) io_submit(r0, 0x0, 0x0) setresuid(0x0, 0xee01, 0xee00) syz_emit_vhci(0x0, 0xf) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000140)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x1e0}, 0x3, 0x0, 0xffffffffffffffff, 0xf4}) shmctl$SHM_LOCK(r2, 0xb) 1m19.151683249s ago: executing program 1 (id=534): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000), 0x2, 0xbb8, &(0x7f00000017c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_mount_image$udf(&(0x7f0000001a40), &(0x7f0000000500)='./file0\x00', 0x200000, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0x1, 0x495, &(0x7f0000000a40)="$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") 1m14.890961337s ago: executing program 1 (id=529): bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x803, 0x10000000}, 0xc) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2040}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdfff}, 0x14}, 0x1, 0x0, 0x0, 0x20004005}, 0x2000c800) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000007640)={0x0, 0xffffffffffffff93, &(0x7f0000007600)={&(0x7f0000000040)={0x34, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x34}}, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r6, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050004000000140004"], 0x58}}, 0x0) 1m12.406092627s ago: executing program 1 (id=535): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@errors_continue}]}, 0x1, 0x4be, &(0x7f0000000a00)="$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") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180), 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 1m8.070773137s ago: executing program 1 (id=544): getsockname(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x200000, &(0x7f00000000c0)=ANY=[], 0xfe, 0x1bb, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0xf4240}], 0x1, 0x800001, 0x0, 0x0) truncate(&(0x7f0000000280)='./file1\x00', 0x1fefff) 1m3.592285869s ago: executing program 1 (id=564): r0 = io_uring_setup(0x1691, &(0x7f0000000080)={0x0, 0x9d1, 0x40, 0x3, 0x1ff}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) getpriority(0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x4000)=nil, 0x1000, 0xb, 0x8012, r2, 0x83000000) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 1m3.468499331s ago: executing program 32 (id=564): r0 = io_uring_setup(0x1691, &(0x7f0000000080)={0x0, 0x9d1, 0x40, 0x3, 0x1ff}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) getpriority(0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x4000)=nil, 0x1000, 0xb, 0x8012, r2, 0x83000000) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 20.617932729s ago: executing program 5 (id=667): socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x0, @none}, &(0x7f0000000140)=0xe, 0x800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={0x34, r3, 0x1, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r4) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x34, r5, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}}, 0x0) 19.838318132s ago: executing program 5 (id=670): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200601, 0x0) lseek(r0, 0x81, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x0) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000370400000000ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="83450500010000001c0012800b00010067656e65766500000c00028005000d0002000000a19ad46a1816"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50}, {0x6}]}, 0x10) sendmmsg$inet(r2, &(0x7f0000000440)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty}}}], 0x20}}, {{&(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x2e}, @local}}}], 0x38}}], 0x2, 0x4000084) recvfrom$inet_nvme(r1, 0x0, 0x0, 0x40, 0x0, 0x0) 19.476110038s ago: executing program 5 (id=676): socket(0x840000000002, 0x3, 0xfa) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x2, 0x1, 0x704d, 0x1, 0x5, 0x1, 0x2, 0x0, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0x1, 0x100, 0xfe, 0x48, 0x7, 0x5, 0x2ca, 0x8, 0x76, 0x8, 0x0, 0x81, 0x40, 0x19b1, 0x8000, 0x7, 0x797, 0x4000000, 0x7, 0x3, 0xe, 0x7, 0x1, 0x1, 0x5, 0xe, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0xfffffff7, 0x4, 0x6, 0x40, 0x7f, 0x9, 0x1, 0x6, 0x3, 0x2284919, 0x4, 0x5643fa73, 0xfffeffff, 0x6, 0x800, 0x2, 0x8a, 0x6, 0x1, 0x6], [0xfffffed2, 0x7fffffff, 0xffff, 0x8, 0xe62, 0x3, 0x3, 0x9, 0xc33, 0x3, 0x7, 0x800, 0x6c368000, 0x8, 0x1000007, 0x0, 0x10, 0x5, 0x8, 0x8001, 0x3, 0x7fff, 0x9, 0x0, 0x5, 0x4, 0x401, 0x8, 0x40, 0xc10, 0x80000001, 0x3, 0x3, 0x3, 0x7, 0x8, 0x8, 0x5, 0x4, 0x9, 0x5, 0x3, 0x2, 0x3, 0x0, 0x11e, 0xa4, 0x0, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x3, 0x1, 0x6, 0x6, 0x0, 0x6, 0x8, 0x6, 0x4, 0x1000068], [0x1, 0x1, 0x4, 0xfffffffc, 0x0, 0x7fff, 0x405, 0x9, 0x2, 0xffc, 0x7, 0x4, 0xc, 0x7, 0xa, 0xa, 0x8, 0x4, 0x5, 0x5, 0x2, 0x30000000, 0x644, 0x2, 0xfffffffd, 0x7, 0x5, 0x7f, 0x7ff, 0xd, 0x400, 0xf, 0x41, 0x81, 0xc99, 0x25a, 0x2, 0x0, 0x2, 0x5d9fffa, 0x3ff, 0x40, 0x1, 0x8, 0x10000, 0xe7, 0x200, 0x7af5, 0x0, 0xb, 0x0, 0xffff, 0x7, 0xc, 0x2, 0x81, 0x9, 0x2, 0x7, 0x100, 0x7, 0x0, 0x6, 0x10], [0xffffff80, 0xd5800000, 0x0, 0x4, 0x2, 0x62a, 0x3, 0x407, 0xb343, 0x4, 0x1, 0x8, 0x8000, 0x8, 0xffffff81, 0x80000000, 0x5, 0x3, 0x201, 0xfff, 0x3, 0xfffffffd, 0x3c63, 0x7, 0x6, 0xe6, 0xffffffff, 0x3, 0x2, 0x7, 0x1, 0x7, 0x7, 0x8, 0x1, 0xf, 0x9, 0x17cb, 0x0, 0x3, 0x6fe, 0xe, 0x7, 0x13a, 0x7, 0x0, 0xb757, 0x2, 0x11b, 0x996, 0x54, 0x8c1, 0x0, 0x5, 0x4, 0x2, 0x5, 0x10000400, 0x9, 0x5, 0x3, 0xfffffffb, 0xc, 0x2]}, 0x45c) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xc0}, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x5b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 19.36156546s ago: executing program 5 (id=680): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) syz_emit_ethernet(0x82, 0x0, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000000f00)={0x2020}, 0x2020) 18.378031785s ago: executing program 5 (id=686): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_rr_get_interval(r0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') 12.445964441s ago: executing program 5 (id=697): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0xe, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000000000000000000000000000018130000", @ANYRES32=r3, @ANYBLOB="00000000000000008500000012000000180100002020642500000000001e20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a3312779a", 0x0, 0xe00, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) 12.344563382s ago: executing program 33 (id=697): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0xe, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000000000000000000000000000018130000", @ANYRES32=r3, @ANYBLOB="00000000000000008500000012000000180100002020642500000000001e20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a3312779a", 0x0, 0xe00, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) 10.770672357s ago: executing program 4 (id=703): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a000000000000060000000008001e0002"], 0x30}}, 0x4090) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x1208000, 0x0, 0x4, 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x6eafe621d11f40f8, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='tmpfs\x00', 0x0, &(0x7f0000000240)='nolazytime') syz_mount_image$hfs(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="73657373696f6e3d3078303030303030303030303030303030332c71756965742c73657373696f6e3d3078303030303030303030303030303030332c756d61736b3d30313735373737373737373737373737373737373737312c63726561746f723decf3ae122c00"], 0x1, 0x312, &(0x7f0000000b80)="$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") 10.630077889s ago: executing program 2 (id=704): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0xf, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000c00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095", @ANYRESOCT=r2], &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x61880, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000001040)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES64, @ANYRESHEX, @ANYRES16, @ANYRES8, @ANYRES32], 0xfe, 0x1d1, &(0x7f0000000640)="$eJzsmb0L00AYxp+7pB8WEURwcHGwYEWbJqlKlw4VHAWhFXUsNpZq2koboS04FBcXRwfB1X/AwaGTg5ubqw4qCA52dBMid7k2Z/qB1SXg+4Nen7t77+69t82zBARB/Ld8+fzj09MrtdYFAEdRRE6NfzPiGK7Ff3z+8Pyz+tUXrz68fDs49miR3I8BCMNDMjiBNw0DgeqF4e+rQ0ULHEU1dgMc55S+CQYrkj+jyKjjgeG2irmn6eERJXzPujP0O3d7vmeLxhGNK5qqfr4JYDln6ADIq3yYNj+ezu63fd8bJUUmXJ2zMXWo2Fc9mV+Do67VS/xet548nou+qg1srX4OOBylq2BoKl1DDpZlxSXR7n/KjPc3/uT+aRDHy6lIg0S6BEuOiAd6PXJyuXi3ueprWpL/CyGNC8DG1PuC71/7h52zygS2xsT+xEzgrOZPJsy1f1SC/oPKeDor9/rtrtf1Bq5bvWxftO1LbkUaUdTu8b+89KeCtn9mR2yWZTFpB8HImQDByFn33ajVHLf5evhdruHS/zhKZ6I9xF9FXju3/QymPlx+C1UydiZPEARBEARBEARBEARBEARxEKfBVm/NmPYCLYl7XUb/CgAA//+BWndb") 9.252950322s ago: executing program 4 (id=705): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x3, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x41b}}]}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1c, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xf, 0x3, 0x1}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x20040000) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) shutdown(r1, 0x1) 8.994650906s ago: executing program 0 (id=706): socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x840) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 8.364491536s ago: executing program 4 (id=707): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x4, &(0x7f00000001c0)=[{0x15, 0x0, 0x2}, {0x81, 0xfc, 0x7f}, {0x2}, {0x6}]}) 8.072701851s ago: executing program 2 (id=708): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 6.693584552s ago: executing program 3 (id=709): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_LOCK(0x0, 0xb) shmdt(0x0) 6.693455023s ago: executing program 4 (id=710): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) 6.688907833s ago: executing program 0 (id=719): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setpriority(0x0, r0, 0x3) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4) mount(0x0, 0x0, &(0x7f0000000040)='hfs\x00', 0x8000, 0x0) 6.320144209s ago: executing program 2 (id=711): socket$inet6(0x10, 0x2, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$alg(0x26, 0x5, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r1], 0x3c}}, 0x10) 4.96704856s ago: executing program 3 (id=713): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x1c, r4, 0x331, 0x1, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000095}, 0x0) 4.96580828s ago: executing program 0 (id=723): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000a80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6c733d63703835322c6e6f626172726965722c63726561746f723dbd3c66f52c626172726965722c706172743d3078303030303030303030303030303030322c756d61736b3d30303030303030303030303030303030303030363734352c00b08558549e3fb3af8feff2a5c10c825cef8ec0f1ddcd940f6058a48f0cc0887456a5b70061a195d3ed592d"], 0x3, 0x6a4, &(0x7f0000000100)="$eJzs3U9sHFcdB/DvbDbrbJBS918aEFKtRqqgEYmdVUmQkBoQQjlEKIJLr1biNFY2aeW4KK0Q2QAFiRMn1AOHIhQOPSGEkMoJUc5ISFw4+R6JG4ccAKOZnV2v7Y1jJ7HXbT8faTzv7Zv33m9+nT+7s402wGfW+ddzsJci509cuFXWV+52uit3O9cH5SRTSRpJs79K0U6Kj5Nz6S/5fPliPVzxoHlevfdR0Xz/w06/1qyXavvGVv02GbtlLzk0rBxIMtMv/mfbw24ar1qqcS6tjfeIimHcZcKODxIHk7a6SW+tsfHQ7ts/b4F963b/vrnJdHI4/btr+T4g9dXh4VeGydvy2tTbuzgAAABgt4z9LD/qqfu5n1s5sjfhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKdD0f/NwKJeGoPyTIrB7/+3Rn5TvzXhcB/Te1eq1XefmnQgAAAAAAAAAPBYXryf+7mVI4P6alF95/9SVXmu+vu5vJ2bWchSTuZW5rOc5SxlLsn0yECtW/PLy0tzm3v+MmXP1dXV23XP02N7nl4fV29joOP+T4NNGwEAAAAAAADAZ9aPcn7t+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgPiuRAf1Utzw3K02k0kxxK0ipmhpu3JhrsE/DnSQcAAAAAu69dr48U/+sXVovqM//R6nP/obydG1nOYpbTzUIuV88C+p/6G3/vdbordzvXy2XzwN/4147iqEZM/9nD+Jlnqy2eH/Y4n2/nezmRmVzMUhbz/cxnOQuZybeq0nyKTNdPL6ZX7rYziHVzvOfW1S5ujO3FkXIZ37EqknauZLGK7WQutQahN+rtjo3M9sdWsmHGO2V2itdq28zR5Xpd7tEv6vX+MF3t+cFhRmbr3JfZeHo075tzv8PjZONMc2kMn0E9tzZLWd040yPl/HC9LnP9093N+Q4fpa3PRO/nZW1w9B3dOufJl//xl4tXGzeuXb1y88T+OYwe0cZjojOSiRe2lYlumYneY2Ti0OPE/+S06mz0r6I7u1q+VPU9ksV8J2/mchZyJrOZy9nM5ms5nU5Oj+T1+a3zWp1rjZ2da8e/VBfKe9LPRu5Ne2bqQQ1lXp8eyevolW66aht9ZS1Lz2wjS0Ur47P0z7GhNL9QF8o5fjxyx5m8jZmYG8nEs1tn4tf/XU1ys3vj2tLV+be2Od/L9bo8bd9bf23+zRPZoZ2rd7c8Xp4p/2Olf9sYPTrKtmcHbRvy1aq/cWnWg61ra6U6n/ttDztTy5GO3hk3Ur/thbGzdKq2YyNt697l5M10h+9CANjHDr9yuNW+1/5b+4P2T9pX2xcOfXPq7NQXWzn41+afDvyu8dvG14tX8kF+mCOTjhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4Nbr7z7rX5bndhaR8W0njCA94Z2zRIRf+V1v7Y909qYWqrI+r3Sbbo3ppEzO0k+yJ1ae7BXFMZ03Rh+Eo7aQzjSXJtn/zAHbAbTi1ff+vUzXfe/cri9fk3Ft5YuHH67JnXznS+Onf71JXF7sJs/++kowR2w9rbgElHAgAAAAAAAAAAAGzXXvzzhjHTFr0J7CsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwyXT+9Rzspcjc7MnZsr5yt9Mtl0F5bctmkkaS4gdJ8XFyLv0l0yPDFQ+a59V7H/3q5fc/7KyN1Rxs39jQ7w//Xl3d4V706iUzSQ7U64eb2tZ4l0bG6+0wsL5iuIdlwo4PEgeT9v8AAAD//x5LB84=") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r1, 0x90101) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x80800) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r3) close_range(r0, 0xffffffffffffffff, 0x0) 4.789526873s ago: executing program 2 (id=714): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 3.937563887s ago: executing program 3 (id=715): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ptrace(0x10, r3) ptrace(0x8, r3) wait4(0x0, 0x0, 0x0, 0x0) 2.320642443s ago: executing program 0 (id=716): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) getdents64(0xffffffffffffffff, 0x0, 0x3f00) read$FUSE(0xffffffffffffffff, &(0x7f0000000cc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, r4, {0x8}}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001f", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.317927753s ago: executing program 4 (id=717): socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000200), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd_index=0x8000000, 0x2, 0x0}) io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0) 2.253857184s ago: executing program 3 (id=718): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) sched_setscheduler(r3, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) pselect6(0x40, &(0x7f0000000100)={0x8, 0x803, 0x14, 0x575, 0x7fffffff, 0x0, 0x7, 0xffffffff}, &(0x7f0000000180)={0xd, 0x7, 0x9, 0x8001, 0x6, 0x8, 0x80a1}, 0x0, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x2c, 0x0, &(0x7f00000002c0)=[@register_looper, @acquire, @request_death={0x400c630e, 0x1}, @clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000880)={0x44, 0x0, &(0x7f0000000700)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.22091581s ago: executing program 3 (id=720): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7ffffffd, 0x4) write$binfmt_script(r0, 0x0, 0x6f4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe8000000000000000000000000000aae0000002000000ee5b000000000000004e2000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000000010000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000010000100000000000000000000000a"], 0xf8}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private2, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {0x5, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x2}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7ee643bd1282d893}}}, 0xf8}}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r3, 0x0, 0x3, 0x0) 1.200788521s ago: executing program 4 (id=730): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x3, 0x1, 0x246, 0x7fffffffffffffff, 0xfffffffffffffffa, 0xffffffffffffffff, 0x0, 0x7fff, 0x6}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2f8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x2f, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @mcast1, [], [], 'veth1\x00', 'wlan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7fffffff, 0x9, 0xb3, 0x1, 0x0, "86d6b549c4bf723e1f33da7c11e5cee0b1adedc05fbfc6af15c3f8b75adf8819ec9d8cd0614114f5f1d3b7ba1d33f3750c2e3b8acf37107767e107dac4688212"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x141a82, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000600)=0x2) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="80fd", @ANYRES16=r1], 0x9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x1000}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) 1.156151672s ago: executing program 2 (id=731): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2004c898) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace$peeksig(0x4209, r1, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000001c0)=[{}]) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) socket(0x840000000002, 0x3, 0xff) msgget(0x1, 0x2b0) msgrcv(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x2000) msgsnd(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="a902ef002016ef22642fd4dfeed835fc4455ca00d6a2b3bb50a745b4f83c9024e98a2d92088e5375243b5249b24e11"], 0x8, 0x800) 236.334916ms ago: executing program 3 (id=721): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x4, &(0x7f00000001c0)=[{0x15, 0x0, 0x2}, {0x81, 0xfc, 0x7f}, {0x2}, {0x6}]}) 234.145437ms ago: executing program 0 (id=733): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r2, &(0x7f0000000180)="01010101", 0x4) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000001c0), &(0x7f0000000200), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r3) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000340), &(0x7f0000000380), 0x0) 233.306157ms ago: executing program 2 (id=722): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x3fd, @empty, 0x5}, 0x26) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x62) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e21, 0x9, @empty, 0x100}, 0x1c) 0s ago: executing program 0 (id=724): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'pim6reg\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0xa4, r4, 0x405, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0x88, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x402}}, {0x8, 0x6, r6}}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) kernel console output (not intermixed with test programs): 297] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.798249][ T4297] device bridge_slave_1 entered promiscuous mode [ 38.811789][ T4296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.813644][ T4296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.820811][ T4296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.895969][ T4306] device hsr_slave_0 entered promiscuous mode [ 38.944404][ T4306] device hsr_slave_1 entered promiscuous mode [ 38.984132][ T4306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.986443][ T4306] Cannot create hsr debugfs directory [ 38.990429][ T4310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.005607][ T4297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.009746][ T4310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.022015][ T4297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.085663][ T4296] device hsr_slave_0 entered promiscuous mode [ 39.135145][ T4296] device hsr_slave_1 entered promiscuous mode [ 39.174149][ T4296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.176319][ T4296] Cannot create hsr debugfs directory [ 39.190656][ T4310] team0: Port device team_slave_0 added [ 39.211226][ T4297] team0: Port device team_slave_0 added [ 39.218546][ T4310] team0: Port device team_slave_1 added [ 39.234982][ T4297] team0: Port device team_slave_1 added [ 39.285691][ T4297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.287704][ T4297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.300203][ T4297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.308478][ T4310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.310397][ T4310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.317854][ T4310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.322019][ T4310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.324202][ T4310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.331309][ T4310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.337847][ T4297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.339732][ T4297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.346995][ T4297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.445765][ T4310] device hsr_slave_0 entered promiscuous mode [ 39.484436][ T4310] device hsr_slave_1 entered promiscuous mode [ 39.524143][ T4310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.526231][ T4310] Cannot create hsr debugfs directory [ 39.585999][ T4297] device hsr_slave_0 entered promiscuous mode [ 39.624580][ T4297] device hsr_slave_1 entered promiscuous mode [ 39.664207][ T4297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.666465][ T4297] Cannot create hsr debugfs directory [ 39.679138][ T4302] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.725822][ T4302] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.800317][ T4302] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.854680][ T4309] Bluetooth: hci1: command 0x0409 tx timeout [ 39.856496][ T4309] Bluetooth: hci2: command 0x0409 tx timeout [ 39.875028][ T4302] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.934041][ T4301] Bluetooth: hci3: command 0x0409 tx timeout [ 39.934154][ T4309] Bluetooth: hci0: command 0x0409 tx timeout [ 40.010390][ T4306] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 40.014218][ T4304] Bluetooth: hci4: command 0x0409 tx timeout [ 40.053096][ T4306] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 40.119705][ T4306] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 40.161380][ T4306] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 40.208894][ T4296] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 40.263041][ T4296] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 40.316262][ T4296] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 40.370805][ T4296] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 40.452690][ T4310] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 40.526753][ T4310] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 40.558344][ T4310] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 40.605935][ T4310] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 40.661958][ T4302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.692633][ T4297] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 40.727191][ T4306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.738206][ T4297] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 40.780651][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.784973][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.788611][ T4297] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 40.835709][ T4297] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 40.881773][ T4302] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.892106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.894867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.905481][ T4306] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.912071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.915914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.918673][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.920767][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.923521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.926737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.929556][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.931586][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.934276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.937055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.939529][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.941813][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.946103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.948770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.970354][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.973520][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.976802][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.980024][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.981978][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.000323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.003701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.007757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.023056][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.026525][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.029289][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.032075][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.039038][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.041791][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.045273][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.048083][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.050984][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.053654][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.060145][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.063443][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.079611][ T4310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.089302][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.091977][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.095784][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.098656][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.102187][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.110898][ T4296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.115708][ T4302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.119517][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.126758][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.129468][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.138713][ T4310] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.146438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.148945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.172589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.180646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.186783][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.189451][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.192868][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.194956][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.212773][ T4297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.224820][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.234408][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.242439][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.245534][ T1594] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.247533][ T1594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.249830][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.252713][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.257942][ T4296] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.279507][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.282905][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.288507][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.291265][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.294140][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.296145][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.304455][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.306848][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.309487][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.312493][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.320021][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.322646][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.329248][ T4297] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.343619][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.347683][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.350874][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.353513][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.361380][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.363342][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.367122][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.369896][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.372601][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.375895][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.378595][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.380627][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.383472][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.412246][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.415493][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.418361][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.421575][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.431498][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.433672][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.449957][ T4302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.455725][ T4306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.457955][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.460563][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.462768][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.471298][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.476481][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.479120][ T1594] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.481168][ T1594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.483557][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.487530][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.500807][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.503628][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.506816][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.521026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.523862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.527691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.535379][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.552738][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.556362][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.561810][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.578456][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.582032][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.588722][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.591672][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.611221][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.616297][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.619776][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.622631][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.629699][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.632242][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.637645][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.640285][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.646645][ T4302] device veth0_vlan entered promiscuous mode [ 41.660402][ T4310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.664486][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.666649][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.675973][ T4297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.679470][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.681960][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.689941][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.695169][ T4302] device veth1_vlan entered promiscuous mode [ 41.709930][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.712627][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.716976][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.720309][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.725784][ T4306] device veth0_vlan entered promiscuous mode [ 41.731713][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.735834][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.757551][ T4306] device veth1_vlan entered promiscuous mode [ 41.760385][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.763069][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.773383][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.780720][ T4302] device veth0_macvtap entered promiscuous mode [ 41.793020][ T4302] device veth1_macvtap entered promiscuous mode [ 41.801420][ T4296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.810883][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.813515][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.816524][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.818642][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.820955][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.823686][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.845338][ T4306] device veth0_macvtap entered promiscuous mode [ 41.849868][ T4306] device veth1_macvtap entered promiscuous mode [ 41.854416][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.857206][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.859874][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.862598][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.880718][ T4302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.885527][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.888217][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.890870][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.894717][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.897407][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.900084][ T4310] device veth0_vlan entered promiscuous mode [ 41.911128][ T4302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.915795][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.918497][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.920869][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.925704][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.940889][ T4304] Bluetooth: hci2: command 0x041b tx timeout [ 41.942617][ T4304] Bluetooth: hci1: command 0x041b tx timeout [ 41.943309][ T4302] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.946922][ T4302] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.949241][ T4302] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.951548][ T4302] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.956944][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.960011][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.963151][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.967034][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.970663][ T4306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.980358][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.983490][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.989663][ T4310] device veth1_vlan entered promiscuous mode [ 41.993602][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.997505][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.002161][ T4306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.010441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 42.013025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.015451][ T4301] Bluetooth: hci0: command 0x041b tx timeout [ 42.017118][ T4301] Bluetooth: hci3: command 0x041b tx timeout [ 42.019858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.030771][ T4306] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.033297][ T4306] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.036428][ T4306] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.038907][ T4306] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.047997][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 42.051049][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 42.053231][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 42.059925][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.062630][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.066939][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.069449][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.081415][ T4296] device veth0_vlan entered promiscuous mode [ 42.094974][ T4304] Bluetooth: hci4: command 0x041b tx timeout [ 42.115914][ T4297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.119917][ T4296] device veth1_vlan entered promiscuous mode [ 42.127049][ T4310] device veth0_macvtap entered promiscuous mode [ 42.131638][ T4310] device veth1_macvtap entered promiscuous mode [ 42.149085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 42.151739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.159924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.162624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 42.166042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 42.211474][ T4310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.219397][ T4310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.222265][ T4310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.226440][ T4310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.230869][ T4310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.248455][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 42.251129][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.265292][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.272891][ T4310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.276186][ T4310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.278964][ T4310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.281724][ T4310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.290890][ T4310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.302554][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.305717][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.308425][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.311106][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.316243][ T4310] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.318666][ T4310] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.321218][ T4310] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.323628][ T4310] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.332142][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.332253][ T4296] device veth0_macvtap entered promiscuous mode [ 42.335913][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.350361][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 42.353034][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.358615][ T1594] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.360911][ T1594] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.371758][ T4296] device veth1_macvtap entered promiscuous mode [ 42.375521][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 42.378468][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.457117][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.459291][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.463178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 42.465582][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.465613][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.471953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.479543][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.482468][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.486048][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.489074][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.491746][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.495662][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.499983][ T4296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.514411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.517183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.519666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.525000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.527825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.530446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.533295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.536881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.543638][ T4297] device veth0_vlan entered promiscuous mode [ 42.561500][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.566586][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.569334][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.572096][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.582408][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.585913][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.589752][ T4296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.604359][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.606593][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.609730][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.612534][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.619656][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.635988][ T519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.638276][ T519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.640167][ T4296] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.642849][ T4296] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.645514][ T4296] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.647903][ T4296] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.675284][ T4297] device veth1_vlan entered promiscuous mode [ 42.701585][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 42.705407][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 42.709013][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.779916][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.782148][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.788344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.810780][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.813710][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.828528][ T4297] device veth0_macvtap entered promiscuous mode [ 42.849996][ T4297] device veth1_macvtap entered promiscuous mode [ 43.049095][ T1594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.051845][ T1594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.505400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 43.508176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.511114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.516677][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 43.521059][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 43.523259][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 43.527128][ T4392] loop3: detected capacity change from 0 to 8192 [ 43.553232][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.565017][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.595962][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.604472][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.618895][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.622198][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.629427][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.634535][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.643262][ T4297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.649619][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.660645][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.691875][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.695111][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.699926][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.708648][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.711454][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.717519][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.764041][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.766914][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.771048][ T4297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.810823][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.813754][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.833532][ T4297] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.844350][ T4297] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.846720][ T4297] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.849089][ T4297] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.941908][ T4400] loop3: detected capacity change from 0 to 256 [ 43.978707][ T4400] syz.3.7 uses obsolete (PF_INET,SOCK_PACKET) [ 43.982063][ T519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.991487][ T519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.004529][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 44.015223][ T4301] Bluetooth: hci1: command 0x040f tx timeout [ 44.017023][ T4301] Bluetooth: hci2: command 0x040f tx timeout [ 44.050975][ T519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.053375][ T519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.057424][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 44.104285][ T4304] Bluetooth: hci3: command 0x040f tx timeout [ 44.106202][ T4304] Bluetooth: hci0: command 0x040f tx timeout [ 44.180830][ T4405] loop1: detected capacity change from 0 to 512 [ 44.184524][ T4301] Bluetooth: hci4: command 0x040f tx timeout [ 44.240869][ T4405] ======================================================= [ 44.240869][ T4405] WARNING: The mand mount option has been deprecated and [ 44.240869][ T4405] and is ignored by this kernel. Remove the mand [ 44.240869][ T4405] option from the mount to silence this warning. [ 44.240869][ T4405] ======================================================= [ 44.291409][ T4405] EXT2-fs (loop1): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 44.307043][ T4405] EXT2-fs (loop1): error: couldn't mount RDWR because of unsupported optional features (1000000) [ 45.225644][ T4420] netlink: 'syz.3.13': attribute type 8 has an invalid length. [ 46.644200][ T4304] Bluetooth: hci2: command 0x0419 tx timeout [ 46.645962][ T4304] Bluetooth: hci1: command 0x0419 tx timeout [ 46.647599][ T4304] Bluetooth: hci0: command 0x0419 tx timeout [ 46.649248][ T4304] Bluetooth: hci3: command 0x0419 tx timeout [ 46.649932][ T4301] Bluetooth: hci4: command 0x0419 tx timeout [ 46.905915][ T4442] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 46.946144][ T4446] loop4: detected capacity change from 0 to 1024 [ 46.948587][ T4446] EXT4-fs: Ignoring removed nobh option [ 46.960484][ T4446] EXT4-fs: Ignoring removed bh option [ 46.981490][ T4446] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 47.030413][ T4446] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 47.056100][ T4443] netlink: 136 bytes leftover after parsing attributes in process `syz.3.18'. [ 47.064016][ T4448] netlink: 36 bytes leftover after parsing attributes in process `syz.0.21'. [ 47.170907][ T4462] tipc: Started in network mode [ 47.172348][ T4462] tipc: Node identity ac1414aa, cluster identity 4711 [ 47.175515][ T4462] tipc: Enabled bearer , priority 10 [ 47.181667][ T4462] tipc: Enabled bearer , priority 0 [ 47.262905][ T4297] EXT4-fs (loop4): unmounting filesystem. [ 48.299816][ T4412] tipc: Node number set to 2886997162 [ 48.366330][ T4490] netlink: 96 bytes leftover after parsing attributes in process `syz.3.33'. [ 48.386732][ T4488] syz.4.34 sent an empty control message without MSG_MORE. [ 48.685221][ T4498] netlink: 'syz.2.37': attribute type 3 has an invalid length. [ 49.753117][ T4498] netlink: 'syz.2.37': attribute type 3 has an invalid length. [ 49.833909][ C0] sched: RT throttling activated [ 52.558369][ T4522] netlink: 60 bytes leftover after parsing attributes in process `syz.0.43'. [ 52.774115][ T4304] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 52.776858][ T4304] Bluetooth: hci4: Injecting HCI hardware error event [ 52.779781][ T4309] Bluetooth: hci4: hardware error 0x00 [ 54.089884][ T4535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.47'. [ 56.172833][ T4581] xt_nat: multiple ranges no longer supported [ 56.828947][ T4309] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 57.024491][ T4580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.57'. [ 59.735929][ T4610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.66'. [ 60.872345][ T4622] overlayfs: workdir and upperdir must reside under the same mount [ 60.960445][ T4624] Invalid option length (1047307) for dns_resolver key [ 62.294766][ T4636] loop4: detected capacity change from 0 to 64 [ 62.299441][ T4636] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 62.303297][ T4636] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop4 [ 62.405512][ T4639] loop2: detected capacity change from 0 to 256 [ 63.766683][ T4636] netlink: 'syz.4.75': attribute type 2 has an invalid length. [ 63.814631][ T4639] FAT-fs (loop2): Directory bread(block 64) failed [ 63.831634][ T4639] FAT-fs (loop2): Directory bread(block 65) failed [ 63.841805][ T4639] FAT-fs (loop2): Directory bread(block 66) failed [ 63.851885][ T4639] FAT-fs (loop2): Directory bread(block 67) failed [ 63.853806][ T4639] FAT-fs (loop2): Directory bread(block 68) failed [ 63.866640][ T4639] FAT-fs (loop2): Directory bread(block 69) failed [ 63.872796][ T4650] loop1: detected capacity change from 0 to 1024 [ 63.878895][ T4639] FAT-fs (loop2): Directory bread(block 70) failed [ 63.880727][ T4639] FAT-fs (loop2): Directory bread(block 71) failed [ 63.882601][ T4639] FAT-fs (loop2): Directory bread(block 72) failed [ 63.899025][ T4639] FAT-fs (loop2): Directory bread(block 73) failed [ 63.903169][ T4650] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 63.915595][ T4650] EXT4-fs (loop1): orphan cleanup on readonly fs [ 63.918229][ T4650] EXT4-fs error (device loop1): ext4_free_blocks:6210: comm syz.1.78: Freeing blocks not in datazone - block = 0, count = 4096 [ 63.989070][ T4650] EXT4-fs (loop1): 1 orphan inode deleted [ 64.005858][ T4650] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 64.912015][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.914083][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.766215][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 65.993760][ T4672] binder: 4671:4672 tried to acquire reference to desc 0, got 1 instead [ 66.001581][ T4672] binder: 4671:4672 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 66.020316][ T4674] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 66.022827][ T4672] binder: 4672 RLIMIT_NICE not set [ 66.544502][ T4672] binder: 4672 RLIMIT_NICE not set [ 66.639108][ T4680] binder: 4671:4680 got reply transaction with no transaction stack [ 66.641710][ T4680] binder: 4671:4680 transaction reply to 0:0 failed 6/29201/-71, size 0-0 line 2955 [ 66.676234][ T4672] binder: 4671:4672 got reply transaction with bad transaction stack, transaction 5 has target 4671:4672 [ 66.676284][ T4672] binder: 4671:4672 transaction reply to 0:0 failed 7/29201/-71, size 0-0 line 2970 [ 66.681554][ T4338] binder: release 4671:4672 transaction 5 out, still active [ 66.743044][ T4475] binder: release 4671:4672 transaction 5 in, still active [ 66.745481][ T4475] binder: send failed reply for transaction 5, target dead [ 66.747666][ T4475] binder: undelivered TRANSACTION_ERROR: 29201 [ 66.749551][ T4679] netlink: 20 bytes leftover after parsing attributes in process `syz.0.84'. [ 66.758258][ T4678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.86'. [ 66.911847][ T4692] netlink: 'syz.2.92': attribute type 4 has an invalid length. [ 66.957768][ T4691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.91'. [ 67.004654][ T4694] Zero length message leads to an empty skb [ 67.217005][ T4702] loop3: detected capacity change from 0 to 512 [ 67.233658][ T4702] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2818: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 67.239204][ T4702] EXT4-fs (loop3): 1 truncate cleaned up [ 67.241018][ T4702] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 68.758686][ T4718] loop2: detected capacity change from 0 to 256 [ 68.780247][ T4718] exfat: Deprecated parameter 'namecase' [ 68.792942][ T4717] binder: 4714:4717 tried to acquire reference to desc 0, got 1 instead [ 68.795642][ T4718] exfat: Deprecated parameter 'codepage' [ 68.805620][ T4718] exfat: Bad value for 'codepage' [ 68.820515][ T4717] binder: 4714:4717 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 68.854429][ T4717] binder: 4717 RLIMIT_NICE not set [ 68.855917][ T4717] binder: 4717 RLIMIT_NICE not set [ 68.905141][ T4717] binder_alloc: 4714: binder_alloc_buf, no vma [ 68.907012][ T4717] binder: cannot allocate buffer: vma cleared, target dead or dying [ 68.907046][ T4717] binder: 4714:4717 transaction reply to 4714:4717 failed 13/29189/-3, size 0-0 line 3239 [ 68.913352][ T4717] binder: send failed reply for transaction 12 to 4714:4717 [ 69.465300][ T4708] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 69.623686][ T112] cfg80211: failed to load regulatory.db [ 69.678124][ T4475] binder: undelivered TRANSACTION_COMPLETE [ 69.742684][ T4766] loop2: detected capacity change from 0 to 1024 [ 69.808721][ T4766] EXT4-fs: Ignoring removed nobh option [ 71.525983][ T4787] loop1: detected capacity change from 0 to 256 [ 71.814350][ T4766] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 71.823176][ T4310] EXT4-fs (loop3): unmounting filesystem. [ 71.834363][ T4766] EXT4-fs warning (device loop2): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop2. [ 71.899447][ T4787] FAT-fs (loop1): Directory bread(block 64) failed [ 71.901254][ T4787] FAT-fs (loop1): Directory bread(block 65) failed [ 71.903119][ T4787] FAT-fs (loop1): Directory bread(block 66) failed [ 71.964053][ T4787] FAT-fs (loop1): Directory bread(block 67) failed [ 71.979511][ T4787] FAT-fs (loop1): Directory bread(block 68) failed [ 71.981327][ T4787] FAT-fs (loop1): Directory bread(block 69) failed [ 71.983179][ T4787] FAT-fs (loop1): Directory bread(block 70) failed [ 72.034243][ T4787] FAT-fs (loop1): Directory bread(block 71) failed [ 72.036144][ T4787] FAT-fs (loop1): Directory bread(block 72) failed [ 72.037936][ T4787] FAT-fs (loop1): Directory bread(block 73) failed [ 73.947700][ T4850] loop3: detected capacity change from 0 to 128 [ 73.982482][ T4852] netlink: 'syz.4.114': attribute type 1 has an invalid length. [ 74.012734][ T4850] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 74.239580][ T4858] netlink: 'syz.4.114': attribute type 1 has an invalid length. [ 74.332589][ T4871] loop4: detected capacity change from 0 to 512 [ 74.352613][ T4871] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.357024][ T4871] EXT4-fs: Mount option(s) incompatible with ext3 [ 74.445750][ T4290] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 75.437182][ T4878] loop1: detected capacity change from 0 to 32768 [ 75.450802][ T4310] EXT4-fs (loop3): unmounting filesystem. [ 75.479962][ T4878] Dev loop1 SGI disklabel: csum bad, label corrupted [ 75.568888][ T4883] vhci_hcd: invalid port number 96 [ 75.573779][ T4883] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 75.851934][ T4888] loop2: detected capacity change from 0 to 128 [ 75.900710][ T4888] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 76.100156][ T4896] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 76.963683][ T4898] device bridge0 entered promiscuous mode [ 76.980122][ T4306] EXT4-fs (loop2): unmounting filesystem. [ 77.028320][ T4898] batman_adv: batadv0: Adding interface: macsec1 [ 77.041646][ T4898] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.100776][ T4898] batman_adv: batadv0: Interface activated: macsec1 [ 78.503612][ T4911] loop0: detected capacity change from 0 to 8 [ 78.520373][ T4912] loop2: detected capacity change from 0 to 164 [ 78.909649][ T4922] loop3: detected capacity change from 0 to 512 [ 79.554075][ T4922] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 79.601946][ T4922] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 79.623114][ T4922] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.136: invalid indirect mapped block 2683928664 (level 1) [ 79.673209][ T4922] EXT4-fs (loop3): Remounting filesystem read-only [ 79.680709][ T4922] EXT4-fs (loop3): 1 truncate cleaned up [ 79.682372][ T4922] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 79.796492][ T4542] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.901530][ T4934] xt_recent: hitcount (768) is larger than allowed maximum (255) [ 81.013976][ T4542] usb 1-1: Using ep0 maxpacket: 16 [ 81.018685][ T4542] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.021894][ T4542] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.039329][ T4942] netlink: 'syz.4.141': attribute type 4 has an invalid length. [ 81.046719][ T4542] usb 1-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.00 [ 81.049263][ T4542] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.067959][ T4542] usb 1-1: config 0 descriptor?? [ 81.135075][ T4310] EXT4-fs (loop3): unmounting filesystem. [ 81.230657][ T4946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.233563][ T4946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.281345][ T4949] loop1: detected capacity change from 0 to 512 [ 81.286528][ T4952] netlink: 28 bytes leftover after parsing attributes in process `syz.2.145'. [ 81.289053][ T4952] netlink: 28 bytes leftover after parsing attributes in process `syz.2.145'. [ 81.295953][ T4949] EXT2-fs (loop1): error: revision level too high, forcing read-only mode [ 81.298211][ T4949] EXT2-fs (loop1): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=a00a8] [ 81.324781][ T4946] loop3: detected capacity change from 0 to 1024 [ 81.480005][ T4946] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 81.548997][ T4542] wacom 0003:056A:00ED.0001: hidraw0: USB HID vff.fe Device [HID 056a:00ed] on usb-dummy_hcd.0-1/input0 [ 82.355723][ T4911] SQUASHFS error: Unable to read directory block [629:2b] [ 82.361331][ T4345] usb 1-1: USB disconnect, device number 2 [ 83.987430][ T4977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.149'. [ 84.079050][ T4967] fido_id[4967]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 84.377364][ T4991] bridge0: port 3(syz_tun) entered blocking state [ 84.379913][ T4991] bridge0: port 3(syz_tun) entered disabled state [ 84.422005][ T4991] device syz_tun entered promiscuous mode [ 84.425738][ T4991] bridge0: port 3(syz_tun) entered blocking state [ 84.427782][ T4991] bridge0: port 3(syz_tun) entered forwarding state [ 84.937897][ T27] audit: type=1326 audit(84.910:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4978 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c55a9a8 code=0x7fc00000 [ 85.039109][ T4310] EXT4-fs (loop3): unmounting filesystem. [ 85.153253][ T5002] loop2: detected capacity change from 0 to 512 [ 85.157108][ T5002] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 85.160910][ T5002] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 85.186132][ T5002] EXT4-fs (loop2): 1 truncate cleaned up [ 85.190840][ T5002] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 85.191588][ T5001] loop1: detected capacity change from 0 to 2048 [ 85.372324][ T5004] loop0: detected capacity change from 0 to 128 [ 85.401185][ T5004] FAT-fs (loop0): bogus logical sector size 0 [ 85.402855][ T5004] FAT-fs (loop0): Can't find a valid FAT filesystem [ 87.343486][ T5001] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 87.582399][ T4306] EXT4-fs (loop2): unmounting filesystem. [ 87.652599][ T5023] ptrace attach of "./syz-executor exec"[4297] was attempted by ""[5023] [ 88.467924][ T5028] binder_user_error: 1 callbacks suppressed [ 88.467937][ T5028] binder: 5025:5028 tried to acquire reference to desc 0, got 1 instead [ 88.475622][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 88.493550][ T5028] binder: 5025:5028 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 88.499833][ T5028] binder: 5025:5028 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 88.508834][ T5028] binder: 5028 RLIMIT_NICE not set [ 88.529537][ T5029] bridge0: port 3(vxlan0) entered blocking state [ 88.532093][ T5029] bridge0: port 3(vxlan0) entered disabled state [ 88.535176][ T5029] device vxlan0 entered promiscuous mode [ 88.545560][ T5034] binder_debug: 2 callbacks suppressed [ 88.545572][ T5034] binder: cannot allocate buffer: no space left [ 88.547234][ T5034] binder: 5025:5034 transaction async to 5025:0 failed 18/29201/-28, size 5234-0 line 3239 [ 88.574875][ T5031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.166'. [ 88.687747][ T5037] netlink: 24 bytes leftover after parsing attributes in process `syz.2.170'. [ 88.819237][ T5042] capability: warning: `syz.1.171' uses deprecated v2 capabilities in a way that may be insecure [ 89.565453][ T4331] binder: undelivered TRANSACTION_ERROR: 29201 [ 89.762877][ T5053] binder: 5052:5053 tried to acquire reference to desc 0, got 1 instead [ 89.768122][ T4345] binder: undelivered TRANSACTION_COMPLETE [ 89.788975][ T4331] binder: undelivered transaction 23, process died. [ 90.770562][ T5065] loop0: detected capacity change from 0 to 512 [ 90.922877][ T5065] EXT4-fs (loop0): 1 orphan inode deleted [ 90.937354][ T5065] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 91.544492][ T4543] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 91.575889][ T4543] EXT4-fs error (device loop0): ext4_release_dquot:6850: comm kworker/u4:11: Failed to release dquot type 1 [ 93.243811][ T4302] EXT4-fs (loop0): unmounting filesystem. [ 94.330057][ T5091] loop0: detected capacity change from 0 to 8 [ 94.356738][ T5091] SQUASHFS error: zlib decompression failed, data probably corrupt [ 94.371388][ T5091] SQUASHFS error: Failed to read block 0x9b: -5 [ 94.381502][ T5091] SQUASHFS error: Unable to read metadata cache entry [99] [ 94.583252][ T5091] SQUASHFS error: Unable to read inode 0x127 [ 95.619005][ T5090] sctp: failed to load transform for md5: -2 [ 98.386191][ T5123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.193'. [ 98.498433][ T5123] netlink: 48 bytes leftover after parsing attributes in process `syz.2.193'. [ 98.775950][ T5133] netlink: 165 bytes leftover after parsing attributes in process `syz.0.196'. [ 99.246992][ T5143] Dead loop on virtual device ip6_vti0, fix it urgently! [ 99.857453][ T5146] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 100.258538][ T5158] loop0: detected capacity change from 0 to 64 [ 101.277992][ T5165] binder: 5164:5165 tried to acquire reference to desc 0, got 1 instead [ 101.335069][ T5165] binder: 5164:5165 ioctl c0306201 20000280 returned -14 [ 101.353445][ T4349] binder: undelivered TRANSACTION_COMPLETE [ 101.355240][ T4349] binder: undelivered TRANSACTION_COMPLETE [ 101.431334][ T4349] binder: undelivered transaction 35, process died. [ 101.433376][ T4349] binder: undelivered transaction 34, process died. [ 101.437280][ T5167] device batadv0 entered promiscuous mode [ 101.439398][ T5167] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 101.443184][ T5167] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 102.437832][ T5153] loop4: detected capacity change from 0 to 32768 [ 102.467687][ T5153] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.203 (5153) [ 102.485559][ T5153] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 102.488749][ T5153] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 102.491186][ T5153] BTRFS info (device loop4): enabling ssd optimizations [ 102.493307][ T5153] BTRFS info (device loop4): using spread ssd allocation scheme [ 102.514219][ T5153] BTRFS info (device loop4): using free space tree [ 102.646026][ T4475] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 102.663770][ T4475] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 105.317923][ T4297] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 105.625122][ T5241] process 'syz.2.221' launched '/dev/fd/8' with NULL argv: empty string added [ 106.004593][ T5249] xt_CT: You must specify a L4 protocol and not use inversions on it [ 107.443711][ T5255] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 107.446189][ T5255] IPv6: NLM_F_CREATE should be set when creating new route [ 107.847394][ T5273] loop1: detected capacity change from 0 to 16 [ 107.850087][ T5273] erofs: Unknown parameter '' [ 108.729293][ T5255] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.732079][ T5255] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.604704][ T5255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.633528][ T5255] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.977481][ T5255] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.979982][ T5255] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.982398][ T5255] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.985018][ T5255] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.983719][ T5301] batman_adv: batadv0: Adding interface: ip6gretap1 [ 114.057655][ T5316] loop1: detected capacity change from 0 to 512 [ 114.066401][ T5301] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.073513][ T5301] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 114.131248][ T4288] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 114.147199][ T5302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.149327][ T5302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.336128][ T5302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.357626][ T5302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.365614][ T5302] batman_adv: batadv0: Interface deactivated: macsec1 [ 114.367690][ T5302] batman_adv: batadv0: Removing interface: macsec1 [ 114.380908][ T5302] batman_adv: batadv0: Removing interface: ip6gretap1 [ 114.507489][ T5324] loop1: detected capacity change from 0 to 47 [ 116.219369][ T5316] infiniband syz1: set active [ 116.222134][ T5316] infiniband syz1: added syz_tun [ 116.235717][ T5316] infiniband syz1: Couldn't open port 1 [ 116.253624][ T5316] RDS/IB: syz1: added [ 116.255384][ T5316] smc: adding ib device syz1 with port count 1 [ 116.257305][ T5316] smc: ib device syz1 port 1 has pnetid [ 116.271769][ T5342] binder: 5335:5342 tried to acquire reference to desc 0, got 1 instead [ 116.275788][ T5342] binder: release 5335:5342 transaction 40 out, still active [ 116.314172][ T5342] binder: undelivered TRANSACTION_COMPLETE [ 116.790092][ T5353] loop2: detected capacity change from 0 to 256 [ 117.035967][ T5353] FAT-fs (loop2): Directory bread(block 64) failed [ 117.038039][ T5353] FAT-fs (loop2): Directory bread(block 65) failed [ 117.040550][ T5353] FAT-fs (loop2): Directory bread(block 66) failed [ 117.042590][ T5353] FAT-fs (loop2): Directory bread(block 67) failed [ 117.044955][ T5353] FAT-fs (loop2): Directory bread(block 68) failed [ 117.046970][ T5353] FAT-fs (loop2): Directory bread(block 69) failed [ 117.049329][ T5353] FAT-fs (loop2): Directory bread(block 70) failed [ 117.051391][ T5353] FAT-fs (loop2): Directory bread(block 71) failed [ 117.053558][ T5353] FAT-fs (loop2): Directory bread(block 72) failed [ 117.055569][ T5353] FAT-fs (loop2): Directory bread(block 73) failed [ 117.439050][ T5238] binder: send failed reply for transaction 40, target dead [ 117.657828][ T5359] loop4: detected capacity change from 0 to 4096 [ 117.669595][ T5359] ntfs3: Unknown parameter '01777777777777777777777' [ 118.950769][ T5373] loop2: detected capacity change from 0 to 128 [ 119.778700][ T5373] syz.2.264: attempt to access beyond end of device [ 119.778700][ T5373] loop2: rw=2049, sector=145, nr_sectors = 89 limit=128 [ 119.945400][ T5381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.266'. [ 119.948010][ T5381] netlink: 'syz.0.266': attribute type 5 has an invalid length. [ 119.971668][ T5381] netlink: 28 bytes leftover after parsing attributes in process `syz.0.266'. [ 119.992997][ T4348] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.995864][ T5373] syz.2.264: attempt to access beyond end of device [ 119.995864][ T5373] loop2: rw=2049, sector=241, nr_sectors = 528 limit=128 [ 120.005732][ T4348] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 120.011199][ T5381] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 120.038561][ T5381] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 120.044473][ T5381] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 120.050458][ T5381] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 120.064955][ T5381] device geneve2 entered promiscuous mode [ 120.178857][ T5373] syz.2.264: attempt to access beyond end of device [ 120.178857][ T5373] loop2: rw=524288, sector=241, nr_sectors = 256 limit=128 [ 120.182999][ T5373] syz.2.264: attempt to access beyond end of device [ 120.182999][ T5373] loop2: rw=0, sector=241, nr_sectors = 8 limit=128 [ 120.194245][ T5373] syz.2.264: attempt to access beyond end of device [ 120.194245][ T5373] loop2: rw=0, sector=241, nr_sectors = 8 limit=128 [ 120.198451][ T5373] syz.2.264: attempt to access beyond end of device [ 120.198451][ T5373] loop2: rw=0, sector=241, nr_sectors = 8 limit=128 [ 120.202034][ T5373] syz.2.264: attempt to access beyond end of device [ 120.202034][ T5373] loop2: rw=0, sector=241, nr_sectors = 8 limit=128 [ 120.224385][ T5382] syz.2.264: attempt to access beyond end of device [ 120.224385][ T5382] loop2: rw=0, sector=241, nr_sectors = 1 limit=128 [ 120.228474][ T5373] syz.2.264: attempt to access beyond end of device [ 120.228474][ T5373] loop2: rw=0, sector=241, nr_sectors = 1 limit=128 [ 120.232210][ T5373] Buffer I/O error on dev loop2, logical block 241, async page read [ 120.249425][ T5373] syz.2.264: attempt to access beyond end of device [ 120.249425][ T5373] loop2: rw=0, sector=242, nr_sectors = 1 limit=128 [ 120.253235][ T5373] Buffer I/O error on dev loop2, logical block 242, async page read [ 120.353762][ T5373] Buffer I/O error on dev loop2, logical block 243, async page read [ 120.517293][ T5373] Buffer I/O error on dev loop2, logical block 244, async page read [ 120.614040][ T5373] Buffer I/O error on dev loop2, logical block 245, async page read [ 120.693242][ T5373] Buffer I/O error on dev loop2, logical block 246, async page read [ 120.850946][ T5373] Buffer I/O error on dev loop2, logical block 247, async page read [ 120.984225][ T5373] Buffer I/O error on dev loop2, logical block 248, async page read [ 120.986474][ T5372] Buffer I/O error on dev loop2, logical block 241, async page read [ 120.988643][ T5372] Buffer I/O error on dev loop2, logical block 242, async page read [ 122.878783][ T5397] loop0: detected capacity change from 0 to 131072 [ 122.903648][ T5407] loop4: detected capacity change from 0 to 256 [ 122.942560][ T5397] F2FS-fs (loop0): Found nat_bits in checkpoint [ 122.980020][ T5397] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 123.000793][ T5415] binder: 5414:5415 tried to acquire reference to desc 0, got 1 instead [ 123.009499][ T4348] binder: undelivered TRANSACTION_COMPLETE [ 123.023846][ T4348] binder: undelivered transaction 45, process died. [ 123.060243][ T5407] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 126.410006][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.411851][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 128.308272][ T5456] netlink: 28 bytes leftover after parsing attributes in process `syz.0.281'. [ 128.534537][ T5453] loop2: detected capacity change from 0 to 512 [ 129.000445][ T5453] EXT2-fs (loop2): warning: mounting ext3 filesystem as ext2 [ 129.159927][ T5460] loop3: detected capacity change from 0 to 4096 [ 129.245208][ T5460] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 129.990933][ T5469] bridge0: port 3(syz_tun) entered blocking state [ 129.993889][ T5469] bridge0: port 3(syz_tun) entered disabled state [ 129.996414][ T5469] device syz_tun entered promiscuous mode [ 130.000803][ T5469] bridge0: port 3(syz_tun) entered blocking state [ 130.002710][ T5469] bridge0: port 3(syz_tun) entered forwarding state [ 131.499942][ T4310] EXT4-fs (loop3): unmounting filesystem. [ 131.713046][ T5489] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 131.715119][ T5489] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 131.749203][ T5489] vhci_hcd vhci_hcd.0: Device attached [ 131.879637][ T5493] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(15) [ 131.881500][ T5493] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 131.885491][ T5493] vhci_hcd vhci_hcd.0: Device attached [ 131.914831][ T5489] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(14) [ 131.916686][ T5489] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 131.934081][ T4348] vhci_hcd: vhci_device speed not set [ 131.947069][ T5489] vhci_hcd vhci_hcd.0: Device attached [ 131.961778][ T5493] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(17) [ 131.963707][ T5493] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 131.978265][ T5493] vhci_hcd vhci_hcd.0: Device attached [ 131.987150][ T5506] vhci_hcd: connection closed [ 131.988522][ T5501] vhci_hcd: connection closed [ 131.989961][ T5495] vhci_hcd: connection closed [ 131.991527][ T5490] vhci_hcd: connection closed [ 131.996871][ T4514] vhci_hcd: stop threads [ 132.000103][ T4514] vhci_hcd: release socket [ 132.001438][ T4514] vhci_hcd: disconnect device [ 132.004375][ T4348] usb 2-1: new full-speed USB device number 2 using vhci_hcd [ 132.007553][ T5491] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 132.018093][ T4514] vhci_hcd: stop threads [ 132.019284][ T4514] vhci_hcd: release socket [ 132.026038][ T4514] vhci_hcd: disconnect device [ 132.034599][ T4514] vhci_hcd: stop threads [ 132.036160][ T4514] vhci_hcd: release socket [ 132.727090][ T4514] vhci_hcd: disconnect device [ 133.223048][ T4514] vhci_hcd: stop threads [ 133.224465][ T4514] vhci_hcd: release socket [ 133.225744][ T4514] vhci_hcd: disconnect device [ 134.460873][ T5527] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 134.468110][ T5527] CIFS mount error: No usable UNC path provided in device string! [ 134.468110][ T5527] [ 134.471174][ T5527] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 136.358937][ T5541] bridge0: port 3(syz_tun) entered blocking state [ 136.382439][ T5541] bridge0: port 3(syz_tun) entered disabled state [ 136.393244][ T5541] device syz_tun entered promiscuous mode [ 136.396752][ T5541] bridge0: port 3(syz_tun) entered blocking state [ 136.398550][ T5541] bridge0: port 3(syz_tun) entered forwarding state [ 137.454202][ T4348] vhci_hcd: vhci_device speed not set [ 137.584449][ T5529] loop2: detected capacity change from 0 to 32768 [ 137.616978][ T5529] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.306 (5529) [ 137.639671][ T5529] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 137.642646][ T5529] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 137.645390][ T5529] BTRFS info (device loop2): using free space tree [ 138.237974][ T5538] loop1: detected capacity change from 0 to 32768 [ 138.348662][ T5529] BTRFS error (device loop2): open_ctree failed: -12 [ 138.369335][ T4338] kernel write not supported for file bpf-prog (pid: 4338 comm: kworker/0:4) [ 138.479965][ T5577] netlink: 'syz.0.316': attribute type 10 has an invalid length. [ 138.519609][ T5577] bridge0: port 3(syz_tun) entered disabled state [ 138.521597][ T5577] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.524601][ T5577] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.722417][ T5577] bridge0: port 3(syz_tun) entered blocking state [ 138.724345][ T5577] bridge0: port 3(syz_tun) entered forwarding state [ 138.727083][ T5577] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.729129][ T5577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.731241][ T5577] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.733166][ T5577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.460389][ T4288] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by udevd (4288) [ 139.466414][ T5577] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 139.600640][ T5584] loop4: detected capacity change from 0 to 4096 [ 139.792408][ T5584] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 140.662662][ T5584] ntfs3: loop4: Failed to load $Secure. [ 140.692506][ T5592] syz.1.321 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 140.817344][ T5584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.319'. [ 140.836865][ T5592] loop1: detected capacity change from 0 to 1024 [ 141.015235][ T5604] loop3: detected capacity change from 0 to 16 [ 141.022399][ T5604] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 141.696962][ T5606] bridge0: port 4(syz_tun) entered blocking state [ 141.701238][ T5606] bridge0: port 4(syz_tun) entered disabled state [ 141.708312][ T5606] device syz_tun entered promiscuous mode [ 141.713662][ T5606] bridge0: port 4(syz_tun) entered blocking state [ 141.715575][ T5606] bridge0: port 4(syz_tun) entered forwarding state [ 143.474993][ T5621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.477595][ T5621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.516807][ T5624] mmap: syz.4.329 (5624) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 143.664214][ T5624] loop4: detected capacity change from 0 to 256 [ 143.666571][ T5624] exfat: Deprecated parameter 'namecase' [ 143.697171][ T5624] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 145.648516][ T5639] sctp: failed to load transform for md5: -2 [ 149.214793][ T5679] bridge0: port 3(syz_tun) entered blocking state [ 149.249013][ T5679] bridge0: port 3(syz_tun) entered disabled state [ 149.268138][ T5679] device syz_tun entered promiscuous mode [ 152.981127][ T5706] netlink: 'syz.2.351': attribute type 10 has an invalid length. [ 153.006574][ T5706] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 155.586362][ T5722] loop1: detected capacity change from 0 to 32768 [ 155.592201][ T5724] netlink: 24 bytes leftover after parsing attributes in process `syz.2.357'. [ 157.393059][ T5733] loop4: detected capacity change from 0 to 16 [ 157.393663][ T5733] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 157.430609][ T5722] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 157.445403][ T5722] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 157.449966][ T5722] BTRFS info (device loop1): using free space tree [ 157.632323][ T5745] loop0: detected capacity change from 0 to 512 [ 157.645726][ T5745] EXT4-fs: Ignoring removed nomblk_io_submit option [ 157.647718][ T5745] EXT4-fs: Ignoring removed nomblk_io_submit option [ 157.781604][ T5745] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 158.703214][ T5722] BTRFS error (device loop1): open_ctree failed: -12 [ 158.917327][ T4302] EXT4-fs (loop0): unmounting filesystem. [ 159.952860][ T5785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.976742][ T5785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.987726][ T5786] tipc: Started in network mode [ 159.989031][ T5786] tipc: Node identity ac1414aa, cluster identity 4711 [ 159.991209][ T5786] tipc: Enabled bearer , priority 10 [ 160.019816][ T5787] netlink: 'syz.1.366': attribute type 10 has an invalid length. [ 160.034153][ T5787] bridge0: port 3(syz_tun) entered disabled state [ 160.036049][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.038395][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.091635][ T5787] bridge0: port 3(syz_tun) entered blocking state [ 160.093676][ T5787] bridge0: port 3(syz_tun) entered forwarding state [ 160.095694][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.097683][ T5787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.099861][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.101936][ T5787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.125185][ T4514] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 160.135156][ T5787] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 160.141364][ T5786] tipc: Enabled bearer , priority 0 [ 161.404457][ T4542] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 161.572327][ T4542] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 161.825633][ T5235] tipc: Node number set to 2886997162 [ 163.238997][ T5805] loop3: detected capacity change from 0 to 128 [ 164.275610][ T4304] Bluetooth: hci2: command 0x0406 tx timeout [ 164.277333][ T4304] Bluetooth: hci0: command 0x0406 tx timeout [ 164.278933][ T4304] Bluetooth: hci3: command 0x0406 tx timeout [ 164.280505][ T4304] Bluetooth: hci1: command 0x0406 tx timeout [ 164.486682][ T5811] fido_id[5811]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 164.491988][ T4796] bio_check_eod: 3214 callbacks suppressed [ 164.492001][ T4796] kworker/u4:23: attempt to access beyond end of device [ 164.492001][ T4796] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 164.631729][ T5817] loop1: detected capacity change from 0 to 512 [ 165.022135][ T5817] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 165.205478][ T5817] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.375: inode #64: comm syz.1.375: iget: illegal inode # [ 165.245764][ T5817] EXT4-fs (loop1): Remounting filesystem read-only [ 165.247696][ T5817] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.375: error while reading EA inode 64 err=-117 [ 165.251214][ T5817] EXT4-fs (loop1): Remounting filesystem read-only [ 165.253028][ T5817] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.375: inode #64: comm syz.1.375: iget: illegal inode # [ 165.257151][ T5817] EXT4-fs (loop1): Remounting filesystem read-only [ 165.258967][ T5817] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.375: error while reading EA inode 64 err=-117 [ 165.262555][ T5817] EXT4-fs (loop1): Remounting filesystem read-only [ 165.491713][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 165.513172][ T5827] loop0: detected capacity change from 0 to 2048 [ 166.605675][ T5827] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.260869][ T5837] loop1: detected capacity change from 0 to 2048 [ 169.158458][ T5853] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 170.748977][ T5855] bridge0: port 4(vlan2) entered blocking state [ 170.754261][ T5855] bridge0: port 4(vlan2) entered disabled state [ 170.779427][ T5855] device vlan2 entered promiscuous mode [ 170.781094][ T5855] device bond0 entered promiscuous mode [ 170.795721][ T5855] device bond_slave_0 entered promiscuous mode [ 170.797608][ T5855] device bond_slave_1 entered promiscuous mode [ 170.825161][ T5855] device macvlan2 entered promiscuous mode [ 170.993155][ T5863] loop4: detected capacity change from 0 to 1024 [ 171.930351][ T5875] hfsplus: bad catalog entry type [ 172.635627][ T4811] hfsplus: b-tree write err: -5, ino 4 [ 172.808290][ T5885] binder: 5883:5885 tried to acquire reference to desc 0, got 1 instead [ 172.892631][ T5304] binder: release 5883:5885 transaction 53 out, still active [ 172.923468][ T5304] binder: undelivered TRANSACTION_COMPLETE [ 172.937847][ T5304] binder: undelivered TRANSACTION_COMPLETE [ 173.009055][ T4347] binder: undelivered transaction 52, process died. [ 173.011189][ T4347] binder: send failed reply for transaction 53, target dead [ 174.540097][ T5906] bridge0: port 5(vlan2) entered blocking state [ 174.541978][ T5906] bridge0: port 5(vlan2) entered disabled state [ 175.748462][ T5906] device vlan2 entered promiscuous mode [ 175.750103][ T5906] device bond0 entered promiscuous mode [ 175.751627][ T5906] device bond_slave_0 entered promiscuous mode [ 175.753420][ T5906] device bond_slave_1 entered promiscuous mode [ 176.866774][ T5934] loop3: detected capacity change from 0 to 2048 [ 176.873746][ T5934] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 176.895954][ T5935] fuse: Unknown parameter 'fd18446744073709551615' [ 177.173982][ T5939] loop1: detected capacity change from 0 to 16 [ 177.909056][ T5939] erofs: (device loop1): mounted with root inode @ nid 36. [ 179.329593][ T5955] loop4: detected capacity change from 0 to 128 [ 179.945141][ T5955] EXT4-fs (loop4): Test dummy encryption mode enabled [ 179.981885][ T5955] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 181.347195][ T5980] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 182.434822][ T5975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.419'. [ 182.466567][ T4297] EXT4-fs (loop4): unmounting filesystem. [ 182.506166][ T5986] netlink: 32 bytes leftover after parsing attributes in process `syz.1.420'. [ 182.550815][ T5986] netlink: 32 bytes leftover after parsing attributes in process `syz.1.420'. [ 183.904318][ T6000] loop1: detected capacity change from 0 to 2048 [ 183.921058][ T6000] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 184.210733][ T6007] trusted_key: encrypted_key: insufficient parameters specified [ 185.104191][ T6016] loop0: detected capacity change from 0 to 128 [ 185.116463][ T6016] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 185.135245][ T6012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.432'. [ 185.138089][ T6012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.432'. [ 186.007398][ T6022] loop1: detected capacity change from 0 to 128 [ 186.023433][ T6024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.437'. [ 186.035815][ T6022] EXT4-fs (loop1): Test dummy encryption mode enabled [ 186.107549][ T6022] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 186.119469][ T6028] netlink: 32 bytes leftover after parsing attributes in process `syz.3.438'. [ 186.260236][ T6028] netlink: 32 bytes leftover after parsing attributes in process `syz.3.438'. [ 187.417460][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.419343][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.897376][ T6051] loop3: detected capacity change from 0 to 164 [ 188.934768][ T6051] rock: directory entry would overflow storage [ 188.936755][ T6051] rock: sig=0x5053, size=7, remaining=4 [ 188.938267][ T6051] isofs_fill_super: root inode is not a directory. Corrupted media? [ 189.986787][ T6066] loop0: detected capacity change from 0 to 256 [ 190.422793][ T6066] FAT-fs (loop0): Directory bread(block 64) failed [ 190.425039][ T6066] FAT-fs (loop0): Directory bread(block 65) failed [ 190.427427][ T6066] FAT-fs (loop0): Directory bread(block 66) failed [ 190.429483][ T6066] FAT-fs (loop0): Directory bread(block 67) failed [ 190.432020][ T6066] FAT-fs (loop0): Directory bread(block 68) failed [ 190.434138][ T6066] FAT-fs (loop0): Directory bread(block 69) failed [ 190.436407][ T6066] FAT-fs (loop0): Directory bread(block 70) failed [ 190.438566][ T6066] FAT-fs (loop0): Directory bread(block 71) failed [ 190.441044][ T6066] FAT-fs (loop0): Directory bread(block 72) failed [ 190.443080][ T6066] FAT-fs (loop0): Directory bread(block 73) failed [ 191.120787][ T6075] loop4: detected capacity change from 0 to 64 [ 191.516714][ T6076] loop3: detected capacity change from 0 to 512 [ 192.845430][ T6076] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 193.005662][ T6076] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.450: inode #64: comm syz.3.450: iget: illegal inode # [ 193.009915][ T6076] EXT4-fs (loop3): Remounting filesystem read-only [ 193.011657][ T6076] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.450: error while reading EA inode 64 err=-117 [ 193.016367][ T6076] EXT4-fs (loop3): Remounting filesystem read-only [ 193.018167][ T6076] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.450: inode #64: comm syz.3.450: iget: illegal inode # [ 193.022023][ T6076] EXT4-fs (loop3): Remounting filesystem read-only [ 193.023801][ T6076] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.450: error while reading EA inode 64 err=-117 [ 193.027441][ T6076] EXT4-fs (loop3): Remounting filesystem read-only [ 193.254600][ T4310] EXT4-fs (loop3): unmounting filesystem. [ 194.156492][ T6086] sctp: failed to load transform for md5: -2 [ 194.859151][ T6103] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 198.781122][ T6128] netlink: 96 bytes leftover after parsing attributes in process `syz.2.463'. [ 198.810572][ T6132] loop3: detected capacity change from 0 to 512 [ 198.843275][ T6132] EXT2-fs (loop3): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 198.849407][ T6132] EXT2-fs (loop3): error: couldn't mount RDWR because of unsupported optional features (1000000) [ 199.006116][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 200.061293][ T6142] loop3: detected capacity change from 0 to 2048 [ 200.153165][ T6142] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=3932051, location=3932051 [ 200.169495][ T6142] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 200.689401][ T6142] netlink: 136 bytes leftover after parsing attributes in process `syz.3.468'. [ 202.559807][ T6179] loop4: detected capacity change from 0 to 512 [ 202.571721][ T6181] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 202.581611][ T6179] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 202.589314][ T6180] netlink: 36 bytes leftover after parsing attributes in process `syz.2.477'. [ 202.613152][ T6179] EXT4-fs (loop4): 1 truncate cleaned up [ 202.618720][ T6179] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 202.718852][ T6181] netlink: 136 bytes leftover after parsing attributes in process `syz.1.475'. [ 202.814082][ T4309] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 202.816776][ T4309] Bluetooth: hci3: Injecting HCI hardware error event [ 202.824150][ T4304] Bluetooth: hci3: hardware error 0x00 [ 203.728034][ T4297] EXT4-fs (loop4): unmounting filesystem. [ 206.403452][ T4304] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 207.161537][ T6218] Invalid option length (1047307) for dns_resolver key [ 209.431113][ T6232] netlink: 'syz.4.490': attribute type 8 has an invalid length. [ 210.392722][ T6242] loop1: detected capacity change from 0 to 512 [ 210.448788][ T6242] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 210.580850][ T6242] EXT4-fs (loop1): 1 truncate cleaned up [ 210.582522][ T6242] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 210.779557][ T6253] loop0: detected capacity change from 0 to 512 [ 212.562716][ T6253] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 212.760993][ T6253] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.493: inode #64: comm syz.0.493: iget: illegal inode # [ 212.765584][ T6253] EXT4-fs (loop0): Remounting filesystem read-only [ 212.767419][ T6253] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.493: error while reading EA inode 64 err=-117 [ 212.772300][ T6253] EXT4-fs (loop0): Remounting filesystem read-only [ 212.774385][ T6253] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.493: inode #64: comm syz.0.493: iget: illegal inode # [ 212.779132][ T6253] EXT4-fs (loop0): Remounting filesystem read-only [ 212.780966][ T6253] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.493: error while reading EA inode 64 err=-117 [ 212.815548][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 212.818027][ T6253] EXT4-fs (loop0): Remounting filesystem read-only [ 213.049451][ T4302] EXT4-fs (loop0): unmounting filesystem. [ 214.150195][ T6272] loop0: detected capacity change from 0 to 512 [ 214.162980][ T6272] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 215.207226][ T6282] loop3: detected capacity change from 0 to 512 [ 215.370043][ T6282] EXT2-fs (loop3): error: revision level too high, forcing read-only mode [ 215.498621][ T6288] Invalid option length (1047307) for dns_resolver key [ 216.113002][ T6282] EXT2-fs (loop3): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=a00a8] [ 216.117980][ T6272] EXT4-fs (loop0): 1 truncate cleaned up [ 216.119557][ T6272] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 217.360905][ T4302] EXT4-fs (loop0): unmounting filesystem. [ 222.262003][ T6331] loop0: detected capacity change from 0 to 512 [ 222.359995][ T6331] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 223.735228][ T6345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.515'. [ 225.222076][ T6330] EXT4-fs (loop0): unmounting filesystem. [ 226.380455][ T6370] loop3: detected capacity change from 0 to 1024 [ 227.905294][ T6370] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 227.908099][ T6370] EXT4-fs (loop3): orphan cleanup on readonly fs [ 227.935316][ T6370] EXT4-fs error (device loop3): ext4_free_blocks:6210: comm syz.3.521: Freeing blocks not in datazone - block = 0, count = 4096 [ 227.960763][ T6367] loop1: detected capacity change from 0 to 4096 [ 227.962885][ T6370] EXT4-fs (loop3): 1 orphan inode deleted [ 227.972902][ T6370] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 228.165167][ T6367] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 229.580690][ T4310] EXT4-fs (loop3): unmounting filesystem. [ 230.432351][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 230.630840][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): vlan3: link becomes ready [ 230.644710][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): vlan3: link becomes ready [ 231.470959][ T6405] netlink: 'syz.1.529': attribute type 11 has an invalid length. [ 232.912297][ T6418] loop1: detected capacity change from 0 to 512 [ 233.148855][ T6418] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 236.639524][ T4296] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 237.406323][ T4296] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 237.559601][ T6450] loop0: detected capacity change from 0 to 4096 [ 237.791612][ T6450] Injecting memory failure for pfn 0x1407c8 at process virtual address 0x20000000 [ 237.810447][ T6450] Memory failure: 0x1407c8: corrupted page was clean: dropped without side effects [ 237.815213][ T6463] loop3: detected capacity change from 0 to 256 [ 237.821371][ T6450] Memory failure: 0x1407c8: recovery action for clean LRU page: Recovered [ 237.823758][ T6450] Injecting memory failure for pfn 0x149c7a at process virtual address 0x20001000 [ 237.829422][ T4296] bridge0: port 3(syz_tun) entered disabled state [ 237.848268][ T6463] FAT-fs (loop3): Directory bread(block 64) failed [ 237.849043][ T6450] Memory failure: 0x149c7a: corrupted page was clean: dropped without side effects [ 237.850275][ T6463] FAT-fs (loop3): Directory bread(block 65) failed [ 237.852978][ T6450] Memory failure: 0x149c7a: recovery action for clean LRU page: Recovered [ 237.854766][ T6463] FAT-fs (loop3): Directory bread(block 66) failed [ 237.859010][ T6463] FAT-fs (loop3): Directory bread(block 67) failed [ 237.860778][ T6463] FAT-fs (loop3): Directory bread(block 68) failed [ 237.862626][ T6463] FAT-fs (loop3): Directory bread(block 69) failed [ 237.864529][ T6463] FAT-fs (loop3): Directory bread(block 70) failed [ 237.866324][ T6463] FAT-fs (loop3): Directory bread(block 71) failed [ 237.868140][ T6463] FAT-fs (loop3): Directory bread(block 72) failed [ 237.869915][ T6463] FAT-fs (loop3): Directory bread(block 73) failed [ 237.870821][ T6450] Injecting memory failure for pfn 0x1488a3 at process virtual address 0x20002000 [ 237.902488][ T4296] infiniband syz1: set down [ 238.056894][ T4296] device syz_tun left promiscuous mode [ 238.058610][ T4296] bridge0: port 3(syz_tun) entered disabled state [ 238.065673][ T6450] Memory failure: 0x1488a3: corrupted page was clean: dropped without side effects [ 238.073779][ T6450] Memory failure: 0x1488a3: recovery action for clean LRU page: Recovered [ 238.080195][ T6450] Injecting memory failure for pfn 0x145e78 at process virtual address 0x20003000 [ 238.091166][ T6450] Memory failure: 0x145e78: corrupted page was clean: dropped without side effects [ 238.099883][ T4811] smc: removing ib device syz1 [ 238.102359][ T6450] Memory failure: 0x145e78: recovery action for clean LRU page: Recovered [ 238.168049][ T6469] FAT-fs (loop3): error, invalid access to FAT (entry 0x00006c61) [ 238.170530][ T6469] FAT-fs (loop3): Filesystem has been set read-only [ 238.808892][ T6450] Injecting memory failure for pfn 0x1420fe at process virtual address 0x20004000 [ 238.844058][ T5305] infiniband syz1: ib_query_port failed (-19) [ 238.864342][ T6450] Memory failure: 0x1420fe: corrupted page was clean: dropped without side effects [ 238.867141][ T6450] Memory failure: 0x1420fe: recovery action for clean LRU page: Recovered [ 238.869561][ T6450] Injecting memory failure for pfn 0x14351b at process virtual address 0x20005000 [ 238.878108][ T6450] Memory failure: 0x14351b: corrupted page was clean: dropped without side effects [ 238.880844][ T6450] Memory failure: 0x14351b: recovery action for clean LRU page: Recovered [ 238.883326][ T6450] Injecting memory failure for pfn 0x1484be at process virtual address 0x20006000 [ 238.902905][ T6450] Memory failure: 0x1484be: corrupted page was clean: dropped without side effects [ 238.908464][ T6450] Memory failure: 0x1484be: recovery action for clean LRU page: Recovered [ 238.910935][ T6450] Injecting memory failure for pfn 0x14681f at process virtual address 0x20007000 [ 239.629663][ T6450] Memory failure: 0x14681f: corrupted page was clean: dropped without side effects [ 239.633461][ T6450] Memory failure: 0x14681f: recovery action for clean LRU page: Recovered [ 239.638435][ T6450] Injecting memory failure for pfn 0x1484d1 at process virtual address 0x20008000 [ 239.654271][ T6450] Memory failure: 0x1484d1: corrupted page was clean: dropped without side effects [ 239.657161][ T6450] Memory failure: 0x1484d1: recovery action for clean LRU page: Recovered [ 239.668575][ T6450] Injecting memory failure for pfn 0x120f67 at process virtual address 0x20009000 [ 239.677504][ T6450] Memory failure: 0x120f67: corrupted page was clean: dropped without side effects [ 239.680471][ T6450] Memory failure: 0x120f67: recovery action for clean LRU page: Recovered [ 239.682881][ T6450] Injecting memory failure for pfn 0x1484d4 at process virtual address 0x2000a000 [ 239.866025][ T6450] Memory failure: 0x1484d4: corrupted page was clean: dropped without side effects [ 239.869154][ T6450] Memory failure: 0x1484d4: recovery action for clean LRU page: Recovered [ 239.871784][ T6450] Injecting memory failure for pfn 0x146b4c at process virtual address 0x2000b000 [ 240.642999][ T6450] Memory failure: 0x146b4c: corrupted page was clean: dropped without side effects [ 240.961793][ T6450] Memory failure: 0x146b4c: recovery action for clean LRU page: Recovered [ 240.964927][ T6450] Injecting memory failure for pfn 0x146b89 at process virtual address 0x2000c000 [ 241.027579][ T6488] loop3: detected capacity change from 0 to 512 [ 241.097820][ T6488] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 241.154552][ T6450] Memory failure: 0x146b89: corrupted page was clean: dropped without side effects [ 241.157998][ T6450] Memory failure: 0x146b89: recovery action for clean LRU page: Recovered [ 241.160369][ T6450] Injecting memory failure for pfn 0x146b8a at process virtual address 0x2000d000 [ 241.175597][ T6450] Memory failure: 0x146b8a: corrupted page was clean: dropped without side effects [ 241.178493][ T6450] Memory failure: 0x146b8a: recovery action for clean LRU page: Recovered [ 241.180961][ T6450] Injecting memory failure for pfn 0x146b8b at process virtual address 0x2000e000 [ 241.214165][ T6450] Memory failure: 0x146b8b: corrupted page was clean: dropped without side effects [ 241.217009][ T6450] Memory failure: 0x146b8b: recovery action for clean LRU page: Recovered [ 241.243290][ T6450] Injecting memory failure for pfn 0x146b8c at process virtual address 0x2000f000 [ 241.254722][ T6450] Memory failure: 0x146b8c: corrupted page was clean: dropped without side effects [ 241.260637][ T6450] Memory failure: 0x146b8c: recovery action for clean LRU page: Recovered [ 241.334755][ T6482] EXT4-fs (loop3): unmounting filesystem. [ 241.353172][ T4302] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 241.355737][ T4302] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 241.769660][ T6504] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 241.802961][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 241.870147][ T4304] Bluetooth: hci1: unexpected cc 0x042d length: 63 > 7 [ 241.881377][ T6499] loop0: detected capacity change from 0 to 32768 [ 241.887297][ T6499] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.559 (6499) [ 241.907600][ T6499] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 241.910705][ T6499] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 241.914314][ T6499] BTRFS info (device loop0): enabling ssd optimizations [ 241.918410][ T6499] BTRFS info (device loop0): using spread ssd allocation scheme [ 241.921765][ T6499] BTRFS info (device loop0): using free space tree [ 242.148191][ T4309] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 242.152458][ T4309] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 242.156924][ T4301] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 242.161382][ T4301] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 242.164612][ T4301] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 242.175038][ T4301] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 243.878333][ T6526] chnl_net:caif_netlink_parms(): no params data found [ 244.285426][ T4301] Bluetooth: hci0: command 0x0409 tx timeout [ 245.968846][ T4304] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 245.971445][ T4304] Bluetooth: hci1: Injecting HCI hardware error event [ 245.975814][ T4301] Bluetooth: hci1: hardware error 0x00 [ 246.019560][ T6526] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.032504][ T6526] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.052289][ T6565] loop4: detected capacity change from 0 to 1024 [ 246.057450][ T6526] device bridge_slave_0 entered promiscuous mode [ 246.058088][ T6565] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 246.062354][ T6565] EXT4-fs (loop4): orphan cleanup on readonly fs [ 246.068451][ T6565] EXT4-fs error (device loop4): ext4_free_blocks:6210: comm syz.4.572: Freeing blocks not in datazone - block = 0, count = 4096 [ 246.072555][ T6565] EXT4-fs (loop4): 1 orphan inode deleted [ 246.073537][ T6563] netlink: 12 bytes leftover after parsing attributes in process `syz.3.581'. [ 246.075869][ T6565] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 246.094611][ T6526] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.096778][ T6526] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.099430][ T6526] device bridge_slave_1 entered promiscuous mode [ 246.156892][ T6526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.161423][ T6526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.162068][ T4302] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 246.200054][ T6526] team0: Port device team_slave_0 added [ 246.205428][ T6526] team0: Port device team_slave_1 added [ 246.219746][ T6526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.221774][ T6526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.243745][ T6526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.262623][ T6526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.266366][ T6526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.274268][ T6526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.334172][ T4304] Bluetooth: hci0: command 0x041b tx timeout [ 246.518693][ T6576] loop3: detected capacity change from 0 to 512 [ 246.560899][ T6576] EXT4-fs: Ignoring removed mblk_io_submit option [ 246.562768][ T6576] EXT4-fs: Ignoring removed bh option [ 246.563444][ T4297] EXT4-fs (loop4): unmounting filesystem. [ 246.568606][ T6576] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 246.571778][ T6576] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 246.589366][ T6576] EXT4-fs (loop3): 1 truncate cleaned up [ 246.591075][ T6576] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 246.595854][ T6526] device hsr_slave_0 entered promiscuous mode [ 247.804358][ T6526] device hsr_slave_1 entered promiscuous mode [ 248.044491][ T6526] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.046639][ T6526] Cannot create hsr debugfs directory [ 248.178525][ T4301] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 248.414234][ T4301] Bluetooth: hci0: command 0x040f tx timeout [ 248.841629][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.843531][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.127395][ T4310] EXT4-fs (loop3): unmounting filesystem. [ 250.475919][ T6526] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 250.494210][ T4301] Bluetooth: hci0: command 0x0419 tx timeout [ 250.536072][ T6526] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 251.974093][ T6526] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 252.026598][ T6603] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 252.029227][ T6603] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 252.204960][ T6615] loop3: detected capacity change from 0 to 2048 [ 252.214568][ T6615] EXT4-fs (loop3): invalid inodes per group: 1 [ 252.214568][ T6615] [ 252.444745][ T6526] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 253.860414][ T6526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.870215][ T6526] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.974895][ T6526] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 253.978182][ T6526] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 253.986225][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 254.011594][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 254.022418][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 254.046109][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 254.055046][ T4811] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.057102][ T4811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.064453][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 254.084635][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 254.091970][ T4811] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.093978][ T4811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.101902][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 254.112403][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 254.136014][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 254.143647][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 254.148368][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 254.151450][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 254.155309][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 254.158106][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 254.160994][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 254.163783][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 254.366298][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 254.373116][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 254.381123][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 255.652941][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 255.660430][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 255.666236][ T6526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.934204][ T6700] loop3: detected capacity change from 0 to 262144 [ 261.474412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 261.477401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 261.549183][ T6700] F2FS-fs (loop3): Found nat_bits in checkpoint [ 261.727418][ T6700] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 264.139665][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 264.142676][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 264.155949][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 264.166073][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 264.168892][ T6526] device veth0_vlan entered promiscuous mode [ 264.183836][ T6526] device veth1_vlan entered promiscuous mode [ 264.203688][ T6526] device veth0_macvtap entered promiscuous mode [ 264.286326][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 264.289749][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 264.293099][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 265.817084][ T6526] device veth1_macvtap entered promiscuous mode [ 265.822607][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 265.843408][ T6526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.891288][ T6526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.904723][ T6526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.908423][ T6526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.911166][ T6526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.936770][ T6526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.945579][ T6526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.958196][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 265.962807][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 265.971374][ T6526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.014101][ T6526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.016889][ T6526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.019679][ T6526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.084052][ T6526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.087053][ T6526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.090925][ T6526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.093041][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 266.101583][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 266.273345][ T6526] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.283995][ T6526] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.286736][ T6526] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.303963][ T6526] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.099803][ T6759] loop0: detected capacity change from 0 to 4096 [ 268.183644][ T6759] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 268.427410][ T4763] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.588805][ T4763] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.594741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 269.301541][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.331890][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.342167][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 269.505118][ T4302] EXT4-fs (loop0): unmounting filesystem. [ 270.928738][ T27] audit: type=1326 audit(270.638:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6779 comm="syz.0.628" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffaed5a9a8 code=0x0 [ 271.851265][ T6794] loop5: detected capacity change from 0 to 1024 [ 271.916702][ T4288] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 273.011308][ T6801] loop4: detected capacity change from 0 to 4096 [ 274.191434][ T6801] Injecting memory failure for pfn 0x14e59a at process virtual address 0x20000000 [ 274.214341][ T6801] Memory failure: 0x14e59a: corrupted page was clean: dropped without side effects [ 274.217037][ T6801] Memory failure: 0x14e59a: recovery action for clean LRU page: Recovered [ 274.219309][ T6801] Injecting memory failure for pfn 0x146faa at process virtual address 0x20001000 [ 274.232638][ T6812] loop5: detected capacity change from 0 to 16 [ 274.241454][ T6812] erofs: (device loop5): mounted with root inode @ nid 36. [ 274.249367][ T6801] Memory failure: 0x146faa: corrupted page was clean: dropped without side effects [ 274.252263][ T6801] Memory failure: 0x146faa: recovery action for clean LRU page: Recovered [ 274.262476][ T6801] Injecting memory failure for pfn 0x14cabb at process virtual address 0x20002000 [ 274.435941][ T6801] Memory failure: 0x14cabb: corrupted page was clean: dropped without side effects [ 274.438682][ T6801] Memory failure: 0x14cabb: recovery action for clean LRU page: Recovered [ 274.440904][ T6801] Injecting memory failure for pfn 0x140e55 at process virtual address 0x20003000 [ 275.829547][ T6801] Memory failure: 0x140e55: corrupted page was clean: dropped without side effects [ 275.832705][ T6801] Memory failure: 0x140e55: recovery action for clean LRU page: Recovered [ 275.846948][ T6801] Injecting memory failure for pfn 0x140e54 at process virtual address 0x20004000 [ 275.861045][ T6801] Memory failure: 0x140e54: corrupted page was clean: dropped without side effects [ 275.868907][ T6801] Memory failure: 0x140e54: recovery action for clean LRU page: Recovered [ 275.871616][ T6801] Injecting memory failure for pfn 0x1466c2 at process virtual address 0x20005000 [ 275.891794][ T6801] Memory failure: 0x1466c2: corrupted page was clean: dropped without side effects [ 275.895070][ T6801] Memory failure: 0x1466c2: recovery action for clean LRU page: Recovered [ 275.897440][ T6801] Injecting memory failure for pfn 0x141bf6 at process virtual address 0x20006000 [ 275.907987][ T6801] Memory failure: 0x141bf6: corrupted page was clean: dropped without side effects [ 275.911011][ T6801] Memory failure: 0x141bf6: recovery action for clean LRU page: Recovered [ 275.921104][ T6801] Injecting memory failure for pfn 0x1492e9 at process virtual address 0x20007000 [ 275.924203][ T6801] Memory failure: 0x1492e9: corrupted page was clean: dropped without side effects [ 275.931330][ T6801] Memory failure: 0x1492e9: recovery action for clean LRU page: Recovered [ 275.939775][ T6826] loop3: detected capacity change from 0 to 1024 [ 275.944265][ T6801] Injecting memory failure for pfn 0x144462 at process virtual address 0x20008000 [ 276.036904][ T6801] Memory failure: 0x144462: corrupted page was clean: dropped without side effects [ 276.039729][ T6801] Memory failure: 0x144462: recovery action for clean LRU page: Recovered [ 276.042042][ T6801] Injecting memory failure for pfn 0x145ec8 at process virtual address 0x20009000 [ 276.067816][ T6801] Memory failure: 0x145ec8: corrupted page was clean: dropped without side effects [ 276.070811][ T6801] Memory failure: 0x145ec8: recovery action for clean LRU page: Recovered [ 276.073261][ T6801] Injecting memory failure for pfn 0x145ec9 at process virtual address 0x2000a000 [ 276.099286][ T6801] Memory failure: 0x145ec9: corrupted page was clean: dropped without side effects [ 276.102084][ T6801] Memory failure: 0x145ec9: recovery action for clean LRU page: Recovered [ 276.103584][ T6826] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 276.106874][ T6801] Injecting memory failure for pfn 0x145eca at process virtual address 0x2000b000 [ 276.109549][ T6835] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 276.111579][ T6835] IPv6: NLM_F_CREATE should be set when creating new route [ 276.124301][ T6801] Memory failure: 0x145eca: corrupted page was clean: dropped without side effects [ 276.127053][ T6801] Memory failure: 0x145eca: recovery action for clean LRU page: Recovered [ 276.129419][ T6801] Injecting memory failure for pfn 0x145ecb at process virtual address 0x2000c000 [ 276.159186][ T6801] Memory failure: 0x145ecb: corrupted page was clean: dropped without side effects [ 276.165622][ T6801] Memory failure: 0x145ecb: recovery action for clean LRU page: Recovered [ 276.169282][ T6801] Injecting memory failure for pfn 0x145ecc at process virtual address 0x2000d000 [ 276.179010][ T6801] Memory failure: 0x145ecc: corrupted page was clean: dropped without side effects [ 276.181954][ T6801] Memory failure: 0x145ecc: recovery action for clean LRU page: Recovered [ 276.192014][ T6801] Injecting memory failure for pfn 0x145ecd at process virtual address 0x2000e000 [ 276.201904][ T6801] Memory failure: 0x145ecd: corrupted page was clean: dropped without side effects [ 276.204785][ T6801] Memory failure: 0x145ecd: recovery action for clean LRU page: Recovered [ 276.207144][ T6801] Injecting memory failure for pfn 0x145ece at process virtual address 0x2000f000 [ 276.219970][ T6801] Memory failure: 0x145ece: corrupted page was clean: dropped without side effects [ 276.222575][ T6801] Memory failure: 0x145ece: recovery action for clean LRU page: Recovered [ 276.293627][ T4297] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 276.299121][ T4297] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 278.732904][ T6855] binder: 6854:6855 tried to acquire reference to desc 0, got 1 instead [ 278.744183][ T6856] netlink: 12 bytes leftover after parsing attributes in process `syz.2.647'. [ 278.747910][ T6855] binder: 6854:6855 got new transaction with bad transaction stack, transaction 58 has target 6854:0 [ 278.750826][ T6855] binder: 6854:6855 transaction call to 6854:0 failed 59/29201/-71, size 0-0 line 3114 [ 278.762702][ T4310] EXT4-fs (loop3): unmounting filesystem. [ 278.845451][ T5303] binder: release 6854:6855 transaction 58 out, still active [ 278.885632][ T4350] binder: send failed reply for transaction 58, target dead [ 280.372508][ T6870] loop3: detected capacity change from 0 to 16 [ 280.390454][ T6870] erofs: (device loop3): mounted with root inode @ nid 36. [ 280.580221][ T6872] loop5: detected capacity change from 0 to 512 [ 280.632015][ T6872] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.653: casefold flag without casefold feature [ 280.648563][ T6872] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.653: couldn't read orphan inode 15 (err -117) [ 280.661644][ T6872] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 280.708448][ T6874] Injecting memory failure for pfn 0x14e55f at process virtual address 0x20000000 [ 280.711641][ T6874] Memory failure: 0x14e55f: recovery action for dirty LRU page: Recovered [ 280.714253][ T6874] Injecting memory failure for pfn 0x149fc0 at process virtual address 0x20001000 [ 280.724136][ T6874] Memory failure: 0x149fc0: recovery action for dirty LRU page: Recovered [ 280.726522][ T6874] Injecting memory failure for pfn 0x149fc1 at process virtual address 0x20002000 [ 280.735177][ T6874] Memory failure: 0x149fc1: recovery action for dirty LRU page: Recovered [ 280.742698][ T6858] loop0: detected capacity change from 0 to 32768 [ 280.751322][ T6874] Injecting memory failure for pfn 0x149fc2 at process virtual address 0x20003000 [ 280.769870][ T6874] Memory failure: 0x149fc2: recovery action for dirty LRU page: Recovered [ 280.772214][ T6874] Injecting memory failure for pfn 0x149fc3 at process virtual address 0x20004000 [ 280.779256][ T6874] Memory failure: 0x149fc3: recovery action for dirty LRU page: Recovered [ 280.781801][ T6874] Injecting memory failure for pfn 0x149fc4 at process virtual address 0x20005000 [ 280.785963][ T6874] Memory failure: 0x149fc4: recovery action for dirty LRU page: Recovered [ 280.788379][ T6874] Injecting memory failure for pfn 0x149fc5 at process virtual address 0x20006000 [ 280.792508][ T6874] Memory failure: 0x149fc5: recovery action for dirty LRU page: Recovered [ 280.795167][ T6874] Injecting memory failure for pfn 0x149fc6 at process virtual address 0x20007000 [ 280.798069][ T6874] Memory failure: 0x149fc6: recovery action for dirty LRU page: Recovered [ 280.800521][ T6874] Injecting memory failure for pfn 0x149fc7 at process virtual address 0x20008000 [ 280.804153][ T6874] Memory failure: 0x149fc7: recovery action for dirty LRU page: Recovered [ 280.806762][ T6874] Injecting memory failure for pfn 0x149fc8 at process virtual address 0x20009000 [ 280.809630][ T6874] Memory failure: 0x149fc8: recovery action for dirty LRU page: Recovered [ 280.811964][ T6874] Injecting memory failure for pfn 0x149fc9 at process virtual address 0x2000a000 [ 280.816159][ T6874] Memory failure: 0x149fc9: recovery action for dirty LRU page: Recovered [ 280.818565][ T6874] Injecting memory failure for pfn 0x149fca at process virtual address 0x2000b000 [ 280.821384][ T6874] Memory failure: 0x149fca: recovery action for dirty LRU page: Recovered [ 280.823785][ T6874] Injecting memory failure for pfn 0x14e54d at process virtual address 0x2000c000 [ 280.833761][ T6874] Memory failure: 0x14e54d: recovery action for dirty LRU page: Recovered [ 280.836317][ T6874] Injecting memory failure for pfn 0x14e54e at process virtual address 0x2000d000 [ 280.845628][ T6874] Memory failure: 0x14e54e: recovery action for dirty LRU page: Recovered [ 280.848303][ T6874] Injecting memory failure for pfn 0x14e54f at process virtual address 0x2000e000 [ 280.851279][ T6874] Memory failure: 0x14e54f: recovery action for dirty LRU page: Recovered [ 280.853722][ T6874] Injecting memory failure for pfn 0x14e550 at process virtual address 0x2000f000 [ 280.856574][ T6874] Memory failure: 0x14e550: recovery action for dirty LRU page: Recovered [ 280.859031][ T6874] Injecting memory failure for pfn 0x14e551 at process virtual address 0x20010000 [ 280.863721][ T6874] Memory failure: 0x14e551: recovery action for dirty LRU page: Recovered [ 280.902846][ T6526] EXT4-fs (loop5): unmounting filesystem. [ 284.778863][ T4309] Bluetooth: hci0: command 0x0405 tx timeout [ 285.485139][ T6900] netlink: 28 bytes leftover after parsing attributes in process `syz.0.660'. [ 285.919761][ T6938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.675'. [ 285.926526][ T6938] tmpfs: Unknown parameter 'nolazytime˙˙' [ 286.267962][ T6954] netlink: 'syz.2.681': attribute type 13 has an invalid length. [ 287.066001][ T6957] loop4: detected capacity change from 0 to 64 [ 292.634946][ T27] audit: type=1326 audit(548.369:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6985 comm="syz.2.692" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffba35a9a8 code=0x0 [ 292.833989][ T6994] loop0: detected capacity change from 0 to 2048 [ 292.878848][ T7000] loop3: detected capacity change from 0 to 2048 [ 292.973175][ T7000] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 292.977211][ T6994] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 293.123368][ T7008] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 293.302883][ T4309] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 293.314216][ T4309] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 293.317604][ T4309] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 293.320478][ T4309] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 293.323057][ T4309] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 293.325928][ T4309] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 293.471918][ T4811] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.492517][ T6994] netlink: 'syz.0.694': attribute type 13 has an invalid length. [ 293.558098][ T4302] EXT4-fs (loop0): unmounting filesystem. [ 293.682321][ T4811] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.316470][ T4811] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.693124][ T7022] loop0: detected capacity change from 0 to 262144 [ 295.699202][ T4309] Bluetooth: hci0: command 0x0409 tx timeout [ 295.880607][ T7035] tmpfs: Unknown parameter 'nolazytime˙˙' [ 295.922728][ T7035] loop4: detected capacity change from 0 to 64 [ 295.942685][ T7035] hfs: umask requires a value [ 295.952064][ T7035] hfs: unable to parse mount options [ 296.007069][ T4811] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.022318][ T4290] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 296.031922][ T7022] F2FS-fs (loop0): Found nat_bits in checkpoint [ 296.057903][ T7032] netlink: 12 bytes leftover after parsing attributes in process `syz.4.703'. [ 296.086726][ T7022] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 296.442662][ T4310] EXT4-fs (loop3): unmounting filesystem. [ 296.546914][ T7013] chnl_net:caif_netlink_parms(): no params data found [ 296.815883][ T7013] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.818000][ T7013] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.820716][ T7013] device bridge_slave_0 entered promiscuous mode [ 296.833122][ T7013] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.914166][ T7013] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.917097][ T7013] device bridge_slave_1 entered promiscuous mode [ 297.561893][ T27] audit: type=1326 audit(553.519:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7063 comm="syz.4.707" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9b5a9a8 code=0x0 [ 297.824057][ T4301] Bluetooth: hci0: command 0x041b tx timeout [ 297.846070][ T7058] netlink: 28 bytes leftover after parsing attributes in process `syz.0.706'. [ 297.852109][ T7058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.706'. [ 298.353183][ T7059] netlink: 'syz.0.706': attribute type 10 has an invalid length. [ 298.356510][ T7059] bridge0: port 4(team0) entered blocking state [ 298.358702][ T7059] bridge0: port 4(team0) entered disabled state [ 298.371083][ T7059] device team0 entered promiscuous mode [ 298.380147][ T7059] device team_slave_0 entered promiscuous mode [ 298.382275][ T7059] device team_slave_1 entered promiscuous mode [ 298.508764][ T7059] bridge0: port 4(team0) entered blocking state [ 298.510749][ T7059] bridge0: port 4(team0) entered forwarding state [ 298.866175][ T7013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.912617][ T4309] Bluetooth: hci0: command 0x040f tx timeout [ 300.336557][ T7013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.548837][ T7013] team0: Port device team_slave_0 added [ 300.562880][ T7092] loop0: detected capacity change from 0 to 1024 [ 300.574832][ T7013] team0: Port device team_slave_1 added [ 301.464589][ T7013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.466552][ T7013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.488592][ C1] dccp_v4_rcv: dropped packet with invalid checksum [ 301.490512][ C1] dccp_v4_rcv: dropped packet with invalid checksum [ 301.526176][ T7013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.530860][ T7013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.532995][ T7013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.008092][ T7013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.011738][ T7097] netlink: 'syz.2.714': attribute type 1 has an invalid length. [ 303.142366][ T4798] hfsplus: b-tree write err: -5, ino 4 [ 303.207949][ T4309] Bluetooth: hci0: command 0x0419 tx timeout [ 303.365569][ T7119] binder: 7116:7119 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 303.397787][ T7119] binder: 7116:7119 got reply transaction with no transaction stack [ 303.405937][ T7119] binder: 7116:7119 transaction reply to 0:0 failed 61/29201/-71, size 0-0 line 2955 [ 303.437104][ T7013] device hsr_slave_0 entered promiscuous mode [ 303.464765][ T5304] binder: undelivered TRANSACTION_ERROR: 29201 [ 303.467305][ T7013] device hsr_slave_1 entered promiscuous mode [ 303.910715][ T7013] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.262530][ T7013] Cannot create hsr debugfs directory [ 304.338305][ T27] audit: type=1326 audit(560.369:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7124 comm="syz.2.731" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba35a9a8 code=0x7ffc0000 [ 304.350098][ T27] audit: type=1326 audit(560.379:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7124 comm="syz.2.731" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffba35a9a8 code=0x7ffc0000 [ 304.374003][ T27] audit: type=1326 audit(560.389:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7124 comm="syz.2.731" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba35a9a8 code=0x7ffc0000 [ 304.392467][ T27] audit: type=1326 audit(560.389:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7124 comm="syz.2.731" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffba358ed4 code=0x7ffc0000 [ 304.416900][ T7132] loop4: detected capacity change from 0 to 512 [ 304.422655][ T27] audit: type=1326 audit(560.389:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7124 comm="syz.2.731" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba35a9a8 code=0x7ffc0000 [ 304.448521][ T27] audit: type=1326 audit(560.399:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7124 comm="syz.2.731" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffba35a9a8 code=0x7ffc0000 [ 304.457908][ T27] audit: type=1326 audit(560.399:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7124 comm="syz.2.731" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba35a9a8 code=0x7ffc0000 [ 304.464206][ T7132] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 304.464414][ T27] audit: type=1326 audit(560.399:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7124 comm="syz.2.731" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba35a9a8 code=0x7ffc0000 [ 304.504276][ T27] audit: type=1326 audit(560.429:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7124 comm="syz.2.731" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=220 compat=0 ip=0xffffba35a9a8 code=0x7ffc0000 [ 304.510695][ T27] audit: type=1326 audit(560.479:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7136 comm="syz.2.731" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffba3850c8 code=0x7ffc0000 [ 304.821514][ T7013] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 304.855950][ T7013] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 305.435275][ T7013] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 306.270545][ T7174] Unable to handle kernel paging request at virtual address dfff800000000068 [ 306.273352][ T7174] KASAN: null-ptr-deref in range [0x0000000000000340-0x0000000000000347] [ 306.275829][ T7174] Mem abort info: [ 306.276871][ T7174] ESR = 0x0000000096000006 [ 306.278137][ T7174] EC = 0x25: DABT (current EL), IL = 32 bits [ 306.279914][ T7174] SET = 0, FnV = 0 [ 306.280984][ T7174] EA = 0, S1PTW = 0 [ 306.282071][ T7174] FSC = 0x06: level 2 translation fault [ 306.283710][ T7174] Data abort info: [ 306.284802][ T7174] ISV = 0, ISS = 0x00000006 [ 306.286167][ T7174] CM = 0, WnR = 0 [ 306.287260][ T7174] [dfff800000000068] address between user and kernel address ranges [ 306.289746][ T7174] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP [ 306.291700][ T7174] Modules linked in: [ 306.292759][ T7174] CPU: 1 PID: 7174 Comm: syz.2.722 Not tainted 6.1.141-syzkaller #0 [ 306.294877][ T7174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 306.297722][ T7174] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 306.299903][ T7174] pc : find_match+0xa0/0xb0c [ 306.301165][ T7174] lr : find_match+0x74/0xb0c [ 306.302393][ T7174] sp : ffff8000218f6ec0 [ 306.303533][ T7174] x29: ffff8000218f6ee0 x28: 1fffe0001a17c944 x27: dfff800000000000 [ 306.305777][ T7174] x26: 0000000000000340 x25: ffff0000d0be4a37 x24: 0000000000000201 [ 306.307986][ T7174] x23: 0000000000000003 x22: ffff0000d0be4a20 x21: 0000000000000000 [ 306.310163][ T7174] x20: 1fffe0001a17c946 x19: 0000000000000000 x18: 0000000000000000 [ 306.312279][ T7174] x17: 0000000000000000 x16: ffff8000082d0750 x15: 0000000000000002 [ 306.314451][ T7174] x14: 00000000ffff0000 x13: 1ffff00002a0e0b1 x12: 0000000000ff0100 [ 306.316668][ T7174] x11: ff0080001077fb04 x10: 0000000000000002 x9 : ffff0000ca151bc0 [ 306.318797][ T7174] x8 : 0000000000000068 x7 : ffff8000218f7270 x6 : 0000000000000003 [ 306.321004][ T7174] x5 : ffff8000218f7270 x4 : ffff8000218f7260 x3 : 0000000000000003 [ 306.323274][ T7174] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 306.325494][ T7174] Call trace: [ 306.326420][ T7174] find_match+0xa0/0xb0c [ 306.327580][ T7174] rt6_nh_find_match+0xcc/0x138 [ 306.328922][ T7174] nexthop_for_each_fib6_nh+0x1a8/0x3d0 [ 306.330431][ T7174] __find_rr_leaf+0x3b8/0x5c8 [ 306.331774][ T7174] fib6_table_lookup+0x308/0x8b8 [ 306.333156][ T7174] ip6_pol_route+0x1f4/0x1024 [ 306.334437][ T7174] ip6_pol_route_output+0x60/0x94 [ 306.335787][ T7174] fib6_rule_lookup+0x258/0x4a8 [ 306.337105][ T7174] ip6_route_output_flags_noref+0x250/0x314 [ 306.338725][ T7174] ip6_route_output_flags+0xe4/0x368 [ 306.340145][ T7174] ip6_dst_lookup_tail+0x168/0x12c0 [ 306.341527][ T7174] ip6_dst_lookup_flow+0x54/0xe0 [ 306.342895][ T7174] dccp_v6_connect+0x71c/0xe24 [ 306.344207][ T7174] __inet_stream_connect+0x1fc/0xc3c [ 306.345674][ T7174] inet_stream_connect+0x74/0xb0 [ 306.347011][ T7174] __sys_connect+0x264/0x28c [ 306.348226][ T7174] __arm64_sys_connect+0x7c/0x94 [ 306.349575][ T7174] invoke_syscall+0x98/0x2bc [ 306.350904][ T7174] el0_svc_common+0x138/0x258 [ 306.352199][ T7174] do_el0_svc+0x58/0x13c [ 306.353401][ T7174] el0_svc+0x58/0x138 [ 306.354503][ T7174] el0t_64_sync_handler+0x84/0xf0 [ 306.355883][ T7174] el0t_64_sync+0x18c/0x190 [ 306.357128][ T7174] Code: 96055809 f94002c8 910d011a d343ff48 (387b6908) [ 306.359013][ T7174] ---[ end trace 0000000000000000 ]--- [ 306.976424][ T7174] Kernel panic - not syncing: Oops: Fatal exception [ 306.978302][ T7174] SMP: stopping secondary CPUs [ 306.979642][ T7174] Kernel Offset: disabled [ 306.980865][ T7174] CPU features: 0x080000,02070084,26017203 [ 306.982467][ T7174] Memory Limit: none [ 307.583748][ T7174] Rebooting in 86400 seconds..