last executing test programs: 26.274848568s ago: executing program 3 (id=16): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x8000001, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x10}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) 26.246198209s ago: executing program 3 (id=17): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) pwritev2(r0, &(0x7f0000000600)=[{&(0x7f0000000400)="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", 0xfa}, {&(0x7f0000000540)="1860499c8bdf5f4a0d52e36371e1b5d09f68335f7d89ce4311ca3e9eed969ac55ca929ccb0f2b39a0c632838b7c30c7e9fad0a1eb18fc67cbb67d044973a4d", 0x3f}, {&(0x7f00000005c0)}], 0x3, 0x2622, 0x1, 0x14) prlimit64(0x0, 0x7, &(0x7f00000003c0)={0x4, 0xd7}, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x1d8, 0xfffffffffffffffd) unshare(0x2040400) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @mcast1}, 0x1c) r2 = socket$isdn_base(0x22, 0x2, 0x10) ioctl$IMGETCOUNT(r2, 0x8940, 0xfffffffffffffffe) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000002800009c2800000004000000020000000000001103000000000000000006962773eda8e4fe00000925662a1afca22703ae18d1f3df2500020000000000000c0200000000006100"], 0x0, 0x44}, 0x28) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000580)='./file1\x00', 0x1010801, &(0x7f0000000140)=ANY=[], 0x1, 0x216, &(0x7f00000001c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r3, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) getdents64(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x109040, 0x140) fallocate(r4, 0x20, 0x0, 0x8fffb) syz_init_net_socket$rose(0xb, 0x5, 0x0) r5 = syz_io_uring_setup(0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000001100)=0x0, &(0x7f0000001108)=0x0, &(0x7f0000001110)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000001200)=@IORING_OP_FUTEX_WAIT={0x33, 0x1, 0x0, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3}}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x1, 0x9, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0xeca1372a5614bd30) recvmmsg(r9, &(0x7f0000003f40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x22, 0x0) io_uring_enter(r5, 0x2, 0x0, 0x0, 0x0, 0x0) 26.165179231s ago: executing program 3 (id=18): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 26.075449562s ago: executing program 3 (id=20): r0 = socket$netlink(0x10, 0x3, 0x8000000004) syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x100) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@known='trusted.overlay.origin\x00') writev(r0, &(0x7f0000000000)=[{&(0x7f0000000400)="580000001500192340834b80040d8c560a067fbc45ff810500000d00070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000008000300090808004149004001040800", 0x58}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000040)={0x3002, r2}, 0x0) fcntl$setlease(r2, 0x400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./security\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./security/apparmor/.load\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r4, &(0x7f0000000380)='10000', 0x5) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000100000000000000000000000000000000000000000000000000000002000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010006"], 0xfc}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r6, &(0x7f0000000200)='1', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r7, &(0x7f0000000280)='0', 0x1) write(r3, &(0x7f0000000400)="04080076657273696f6e00020500000004080070726f66696c6500070502002f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x50) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r8, 0x400, 0x2) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x71228}, [@IFLA_MTU={0x8, 0x4, 0x81}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4004090) 25.508056646s ago: executing program 3 (id=30): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 22.745254113s ago: executing program 1 (id=77): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x5, 0x54c, 0x306}}, 0x118) write$UHID_INPUT2(r0, &(0x7f0000000380)={0xc, {0xfe, "00013d5bd6dee5088330aa4e336c0db5aef13a10e5adb5f9a8c0304758d64800141c2a9a782f491a4deca4e4d8c4e9049a3e200289be6bf69d501ac2c8a3aa9ea3e8bbe4e83c55824211c2198f8b1184715e69b3e07c9ef1abaa27a8bdb1c1d29cd767780d04fd9aa692507113b6130e0000001ec8d46e4f97cf570fba5ba959850e784c32095448dabce68a55e962f2abde23d8ab483fd50f78d1023ffbac1768e3b9eacbfcebe2ab342e7464b5533261aa89e3e42f018d323533d6a38426f5cf5c982ef95192aa80052af2331224cd24acbb7362aa2875f852c3a829647f56ced7eeb80db906655c480c1e24d7a2da4043352af0ed70d906abb25044e7"}}, 0x104) 22.727117653s ago: executing program 1 (id=78): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x8000001, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x10}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) 22.675780285s ago: executing program 1 (id=81): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) getpeername$ax25(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @default}, [@remote, @remote, @default, @rose, @null, @bcast, @bcast, @null]}, &(0x7f0000000300)=0x48) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'lo\x00', 0x1000}) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000400)=@newtfilter={0xfc, 0x2c, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x1}, {0x0, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0xcc, 0x2, [@TCA_BASIC_ACT={0xc8, 0x3, [@m_nat={0xc4, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x6}, @empty, @private=0xa010101, 0xff000000}}]}, {0x73, 0x6, "0fa6e0f43f76c0172fcc09a32decd4bdedeaf048bb1456ff684422f2e122fdb42802457c5266ffb57f535054b968eed88dc6a9c7c50b34aa9fad2989f7f6babc7482ba8f8d5a0e41f45ff1dbd27b821368fdcfe6ad7997ab6fd319ec6cff84d725f82a00"/111}, {0xc}, {0xc}}}]}]}}]}, 0xfc}}, 0x0) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="03030800030016000c004557007b006700000611"], 0x66) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {r4}}, './file0\x00'}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x9}, {0x0, [0x0, 0x71, 0x30, 0x30, 0x30, 0x61, 0x2e]}}, &(0x7f0000001940)=""/4100, 0x21, 0x1004, 0x0, 0x3, 0x10000, @value=r7}, 0x28) r9 = bpf$TOKEN_CREATE(0x24, &(0x7f0000001900)={0x0, r6}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000001880)=@base={0x8, 0x4, 0xfffffffd, 0x63, 0x50000, 0x1, 0x4, '\x00', r5, r8, 0x2, 0x5, 0x3, 0x0, @void, @value, @value=r9}, 0x50) 22.246299065s ago: executing program 3 (id=87): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) recvmmsg(r0, &(0x7f0000008ac0)=[{{0x0, 0x0, 0x0}, 0x10000}], 0x1, 0x10002, 0x0) 21.920264593s ago: executing program 32 (id=87): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) recvmmsg(r0, &(0x7f0000008ac0)=[{{0x0, 0x0, 0x0}, 0x10000}], 0x1, 0x10002, 0x0) 21.563916211s ago: executing program 1 (id=99): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1, 0x5, 0x54c, 0x306, 0x0, 0x0, "05"}}, 0x119) write$UHID_INPUT2(r0, &(0x7f0000000380)={0xc, {0xfe, "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"}}, 0x104) 21.366556306s ago: executing program 1 (id=102): capset(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000002240)={0x2020}, 0x2020) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000000140)={0x2020}, 0x2020) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x3000, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 21.295623728s ago: executing program 1 (id=105): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4148b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TOS={0x5, 0x5, 0xa}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}, 0x1, 0x2000000}, 0x0) 6.832022716s ago: executing program 4 (id=139): syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x2, 0xf3d, &(0x7f0000003e00)="$eJzs3U9sHNX9APA36117E5t4DfzAwI+QQisCBTskkZregkA9Ig7tHRQSGmEoauiBiD+mB0QlRJEQp4oDFRdKpRSplUCVKtRT21Or3npCvVCpSqWgHlqkxJXtN+vdZ092PbZn17ufj/T12zdvdr7f2bXsmdndtwEYW7W1nydPzmchvPvpO4++/FT2m9Vld7XXOLL2M4u9Vgih0dHPku19HhdcvfLSma3aLBxf+5n3w2OX2/edDiEshyPhs9AKHy0uffnhe48c/fj15i1vXXzmlT3a/bZ0PwAAYBRd+tPS3+77xx8fmPvq0uHTYaq9PD8+b8X+dDzuPxYPlPPj5Vro7mcd0WkyWW8iRi1ZbyJZr57kqRfkayTbaRSsN9kj30THsq32EwAAAPaj/Ly2FbLaQle/VltYWD/vX/X57GS28Nz5pXMXBlQoAAAAUNq/X117060QQgghhKg0GkNQgxBCiHGKldlBX4EAAAAAxk06X9gmy7s7U1d7a63+8l9+uLb1/WEXVP37L//+yv/Ba/7iAABQ3qgeTeb7lR9H5/MYpPMITiT32+7xfy3ZTn2bdRbNK9i1PBvep6mo/vRxHVZF9W/3eRyUovrT+TCHVVH96Tydw6qo/qmK6yirqP5mxXWUVVT/gYrrKKuo/oMV11FWUf3TFddRVlH9MxXXUVZR/TdUXEdZRfUfqriOsorqT95WO7T/jovqb1VcR1lF9c9VXEdZRfXfWHEdZRXVf1PFdZRVVP/NFdcxKHfGNn8cDifjnefP6TndfjnHAwAAgHH339Gc/+/utdcPB1+HEEKIfRpN/0f2Lg4OQQ1iSCIbghrE9aL9et8Q1CJE6Zjc8TYmBr4PuxSvDvLiAwAAADAU8s8F5B9AX4ny8Yke4/X4WaK18ebGCvl4o8f9J3uMT/UYBwAAAEL47Rvnbns72/ic/07nw+uYN+paKDGPUTrR3Xbz73SilZ3m3y/zlgEAADBesu98du3+R99/Ye6rS4dPd5z9Xovnu/k8oPV4beCT2M/fFzCT9LP8HPp0d55awXrp9YEbirb3+A53FAAAAMZYfv7eClltoeO8uxVqtYWFjfPx+dDIzp1fOnss9vPvZ/nDbGNqdflDFdcNAAAA9G/jfH/r8//8e3znw2S28Nz5pXMX1vsz7eWNWud1gdmN5VnndYFWsvx4wfITsZ9/f+f3Zw+sLV8484Olp3Z75wEAAGBMXHjx4jNPLi2d/aEbbrjhRvvGoP8yAQAAu+2LL95p/OjEzO/WP/+/Mf9d/vn/I7HfinP7/TmukL9PIP8cwKbP6z/RnWe2aL3nu9drJetNxJhK6m52bGfVgeR+c0X5Wt3bmSzIN53km0nypfMU1JP183yHkuXp/IT5erPJ8nQexnqSI0vy3x0AAACg2OILzz6/eOHFiw+ef/bJp88+ffa5E8dPffvUqWMPfeuhxbX39S92vrsfAAAA2I823vQ76EoAAAAAAAAAAAAAAAAAAABgfFXxdWKD3kcAAAAYd/96NYSwLIQQfcZ3Ny1bmRp0TUIIcd1YWf9a3YHXIYQQQqxHfTD/l2qDvv4AAAAAjJ+rV146E0IzhLDabmE529V87a211ptrV9bz5u3Mg3+dW418tcsPT3Td/+CuVsO4uxp/7/J2k13+/Zd/f+X/4LXdzd/Mb/T99y+5ZHy6XN57F38x35n/9nqf+dP9f7xc/qNJ/ntDf/lX3k/yP1Eu/31J/oN95t+0/8+Xy39/zD8f+0fv6Td/9/M/Fdt8Pw70mf+byf4/FfrNn+x/q8+EiQdifgAYR6P6BoD8KCE/jp6O/Xx/4+FmmEjut93j/1qynfqOK+/ebn4cdGvs58dLM0ne3Hbrn062d0PJOlNpXcOqqP7deh73WlH9jYrrKKuo/smK6yirqP6piusoq6j+ZsV1lFVUf7/noYNWVP9+ua5cVP90xXWUVVT/TMV1lNVV/20bj/p2/48PStHjf6jiOsoqqn+24jrKKqq/5GW1yhXVP1dxHWUV1X9jxXWUVVT/TRXXUVZR/TdXXMeg3BHbovPh/PxzNo7l/VbSn9risRzVawsAAACw3/xzbOf/i1c6Bl7HEEbzwOBrEEIIsc3Iltv/3Adey/hEc9gf7z39najv8fZF1fGflXWDrkMIsXexslLdtQaGz95+mhmAYeXv/3jz/I83z/948/xzPfl7+LOkn5voMV7vMd7oMT6ZjKe/r1M9xm9KtruSX9eMbu6qcvP4//W4/6Ee47f2GJ/vMX5bj/Hbe4zf0WMcAACA8XBLbJ0fAgAAwOh6+ZefvPnre5+4MvfVpcOnw+SmeeePxf5UfG39jdhP573PNeKr6T+O/Z/H9vex/XuyvvefAAAAwN7LvyfG6/8AAAAwuvLvKXX+DwAAAKNrLrbO/wEAAGB03Rhb5/8AAAAwwrLm1otjm18XuDu2/c7rBwAMv/+P7Z2xPRzbu2L7tdjmxwH3xPbrFdUHAOyen33vJ6fezjbm+z+RjF+Ny/N2k+X1KwVZrXsm/wOxPRjbb/RZT/p9AP3mzx3qM89e5Z/dYX4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYHTU1n6ePDmfhfDup+88+tPJN/+yuuyu9hpH1n5msdcKITTa98tHN/q/iitevfLSmc72WmyzcDxkIWsvD49dbmeaDiEshyPhs9AKHy0uffnhe48c/fj15i1vXXzmlT18CLr2DwAAAEbR/wIAAP///YUcvQ==") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x200) 6.435927085s ago: executing program 4 (id=140): r0 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @multicast2}}) 6.209727831s ago: executing program 33 (id=105): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4148b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TOS={0x5, 0x5, 0xa}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}, 0x1, 0x2000000}, 0x0) 6.166698962s ago: executing program 4 (id=143): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000b80)={0x14, &(0x7f0000000a00)={0x20, 0x6, 0x9, {0x9, 0x3, "964607d0b0d7cd"}}, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffea8, &(0x7f0000000100)=ANY=[]) 5.82390969s ago: executing program 0 (id=146): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/mtdblock0\x00', 0x8800, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, &(0x7f0000000380)='N', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) sendfile(r4, r3, 0x0, 0x20000) 4.697919087s ago: executing program 0 (id=147): semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(0x0, &(0x7f0000001240)=[{}, {0x2, 0x0, 0x2000}], 0x2) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)) 4.598259679s ago: executing program 0 (id=149): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011"], 0x7c}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@multicast1, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0xffffffffffffff3a, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) 4.597947019s ago: executing program 0 (id=150): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) 4.597777249s ago: executing program 4 (id=151): socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 4.004648344s ago: executing program 2 (id=152): prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write(r0, 0x0, 0x0) 3.148161045s ago: executing program 2 (id=153): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000000d0a01"], 0x40}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) 3.075931366s ago: executing program 2 (id=154): timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0x1, 0xfffffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r1, r5, &(0x7f0000000200)={0x0, 0x1460, 0x1, 0x3, 0xb6}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5e1e, 0x60, 0x2, 0x2ad}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e40, 0x4, 0x2009, 0x102, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3cb5, 0x1000, 0x3, 0x102c4, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2e84, 0x400, 0x2, 0x21b, 0x0, r1}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, '\x00', {0x1, 0x48a, 0x0, 0x0}}, 0x0) 3.039764307s ago: executing program 2 (id=155): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './sys/bus/pnp/devices/00:03/driver/unbind\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x6, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_clone3(0x0, 0xfffffec6) pidfd_send_signal(0xffffffffffffffff, 0x21, 0x0, 0x0) munlockall() process_mrelease(0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/pnp/devices/00:03/driver/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000100)='00:02', 0x5) 3.016008927s ago: executing program 2 (id=156): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$sock(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)="32fc96", 0x3}], 0x1}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 139.775746ms ago: executing program 2 (id=157): symlinkat(0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x441c2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4, 0xf01b0020}}], 0x40000000000013c, 0x700, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r1, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r4, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) 139.523866ms ago: executing program 4 (id=158): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x800) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(r1, 0x11a, 0x2, 0x0, 0x0) 123.600367ms ago: executing program 0 (id=159): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/acpi/parameters/ec_event_clearing\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='\x00', 0x1) 80.306908ms ago: executing program 0 (id=160): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000020), 0x4) syz_genetlink_get_family_id$team(&(0x7f00000002c0), r2) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000030)=@gcm_128={{0x303}}, 0x28) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000020), 0x4) setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000030)=@gcm_128={{0x303}}, 0x28) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='h', 0x1}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/256, 0x100}], 0x1}, 0x40) 0s ago: executing program 4 (id=161): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r0 = socket(0x2b, 0x1, 0x1) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.198' (ED25519) to the list of known hosts. [ 29.613438][ T4317] cgroup: Unknown subsys name 'net' [ 29.886514][ T4317] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 30.179857][ T4317] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 31.521022][ T4336] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 31.522967][ T4332] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 31.524532][ T4332] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 31.526112][ T4332] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 31.527430][ T4332] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 31.529327][ T4338] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 31.530795][ T4338] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 31.532129][ T4338] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 31.534141][ T4341] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 31.535858][ T4341] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 31.537160][ T4341] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 31.538425][ T4341] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 31.540050][ T4341] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 31.541130][ T4343] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 31.541403][ T4341] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 31.542807][ T4343] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 31.545064][ T4345] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 31.545311][ T4345] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 31.546963][ T4343] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 31.549814][ T4343] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 31.551227][ T4343] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 31.551232][ T4345] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 31.552512][ T4343] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 31.553713][ T4341] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 31.556547][ T4341] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 31.557512][ T4343] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 31.564587][ T4334] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 31.564688][ T4343] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 31.569134][ T4346] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 31.572866][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 31.682690][ T4342] chnl_net:caif_netlink_parms(): no params data found [ 31.691432][ T4330] chnl_net:caif_netlink_parms(): no params data found [ 31.730066][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 31.736360][ T4331] chnl_net:caif_netlink_parms(): no params data found [ 31.749493][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.750782][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.752714][ T4330] device bridge_slave_0 entered promiscuous mode [ 31.762517][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.763791][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.766932][ T4330] device bridge_slave_1 entered promiscuous mode [ 31.785788][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.787116][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.788645][ T4331] device bridge_slave_0 entered promiscuous mode [ 31.790527][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.791837][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.793360][ T4331] device bridge_slave_1 entered promiscuous mode [ 31.797474][ T4342] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.798672][ T4342] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.800307][ T4342] device bridge_slave_0 entered promiscuous mode [ 31.807681][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.809047][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.810672][ T4329] device bridge_slave_0 entered promiscuous mode [ 31.813791][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.816659][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.818217][ T4342] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.819555][ T4342] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.821125][ T4342] device bridge_slave_1 entered promiscuous mode [ 31.826715][ T4335] chnl_net:caif_netlink_parms(): no params data found [ 31.828904][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.830185][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.831756][ T4329] device bridge_slave_1 entered promiscuous mode [ 31.851732][ T4331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.857398][ T4330] team0: Port device team_slave_0 added [ 31.859291][ T4331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.861719][ T4342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.863921][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.867882][ T4330] team0: Port device team_slave_1 added [ 31.871608][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.873811][ T4342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.888213][ T4335] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.889568][ T4335] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.891159][ T4335] device bridge_slave_0 entered promiscuous mode [ 31.898077][ T4331] team0: Port device team_slave_0 added [ 31.899920][ T4329] team0: Port device team_slave_0 added [ 31.901776][ T4329] team0: Port device team_slave_1 added [ 31.907206][ T4335] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.908483][ T4335] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.910055][ T4335] device bridge_slave_1 entered promiscuous mode [ 31.913576][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.914772][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.919241][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.921856][ T4331] team0: Port device team_slave_1 added [ 31.930228][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.931425][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.936638][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.940267][ T4342] team0: Port device team_slave_0 added [ 31.941562][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.942767][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.947607][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.952743][ T4335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.955328][ T4335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.957307][ T4342] team0: Port device team_slave_1 added [ 31.958533][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.959692][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.963930][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.967759][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.969013][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.973301][ T4331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.982345][ T4342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.983469][ T4342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.989814][ T4342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.993371][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.995250][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.999417][ T4331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.004602][ T4335] team0: Port device team_slave_0 added [ 32.008341][ T4342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.009478][ T4342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.013744][ T4342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.020577][ T4335] team0: Port device team_slave_1 added [ 32.075358][ T4330] device hsr_slave_0 entered promiscuous mode [ 32.114657][ T4330] device hsr_slave_1 entered promiscuous mode [ 32.161031][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.162212][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.168585][ T4335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.177939][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.179054][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.183043][ T4335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.214998][ T4329] device hsr_slave_0 entered promiscuous mode [ 32.254199][ T4329] device hsr_slave_1 entered promiscuous mode [ 32.294048][ T4329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.295421][ T4329] Cannot create hsr debugfs directory [ 32.345133][ T4331] device hsr_slave_0 entered promiscuous mode [ 32.384164][ T4331] device hsr_slave_1 entered promiscuous mode [ 32.424080][ T4331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.425410][ T4331] Cannot create hsr debugfs directory [ 32.484947][ T4342] device hsr_slave_0 entered promiscuous mode [ 32.524152][ T4342] device hsr_slave_1 entered promiscuous mode [ 32.564006][ T4342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.565274][ T4342] Cannot create hsr debugfs directory [ 32.605060][ T4335] device hsr_slave_0 entered promiscuous mode [ 32.644159][ T4335] device hsr_slave_1 entered promiscuous mode [ 32.694105][ T4335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.695369][ T4335] Cannot create hsr debugfs directory [ 32.819656][ T4330] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.855110][ T4330] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.898406][ T4330] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.926251][ T4330] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.989933][ T4335] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.025697][ T4335] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.065066][ T4335] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.107886][ T4335] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.136728][ T4342] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.195151][ T4342] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.236207][ T4342] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.282516][ T4342] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.343224][ T4331] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.380089][ T4331] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.435481][ T4331] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.481880][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.485655][ T4331] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.532479][ T4329] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.567512][ T4329] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.594566][ T4336] Bluetooth: hci2: command 0x0409 tx timeout [ 33.595595][ T4336] Bluetooth: hci3: command 0x0409 tx timeout [ 33.604155][ T4332] Bluetooth: hci0: command 0x0409 tx timeout [ 33.605220][ T4332] Bluetooth: hci4: command 0x0409 tx timeout [ 33.606264][ T4332] Bluetooth: hci1: command 0x0409 tx timeout [ 33.616215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.618400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.621316][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.624445][ T4329] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.665510][ T4329] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.705903][ T4335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.707589][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.709326][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.711038][ T1200] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.712184][ T1200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.717317][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.718904][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.720449][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.722199][ T1200] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.723403][ T1200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.733409][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.741178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.748844][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.750385][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.757568][ T4335] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.758887][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.760606][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.762199][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.772713][ T4342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.775019][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.776657][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.778243][ T1598] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.779678][ T1598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.781122][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.789561][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.791197][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.792770][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.795163][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.796743][ T1200] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.797949][ T1200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.807921][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.809620][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.811365][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.813018][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.815234][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.817037][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.818676][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.820184][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.821660][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.833132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.834996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.839703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.841312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.842917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.845025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.848619][ T4342] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.851434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.853028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.857265][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.861652][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.866348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.867998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.869843][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.871066][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.872476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.874694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.876308][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.877499][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.878921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.889389][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.897498][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.899309][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.900674][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.902194][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.907595][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.909680][ T4331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.921790][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.923468][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.925639][ T1598] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.926913][ T1598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.928664][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.934735][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.936472][ T1598] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.937736][ T1598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.939248][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.954847][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.956687][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.958504][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.960104][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.962131][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.968635][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.970371][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.971989][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.973802][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.975789][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.979728][ T4331] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.981886][ T4342] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.983924][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.994451][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.995932][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.997481][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.008865][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.012090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.013493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.016898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.018603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.020116][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.021392][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.033910][ T4335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.036786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.038350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.040097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.041641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.043357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.050001][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.051280][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.052747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.055574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.057338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.058703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.067408][ T4331] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.069293][ T4331] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.077985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.079682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.081405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.083063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.087504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.089233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.093367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.103778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.106303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.108054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.109892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.111619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.113233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.119785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.121409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.123073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.126743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.135903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.137433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.139618][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.162375][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.163743][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.176358][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.177959][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.179795][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.181200][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.183852][ T4342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.188458][ T4330] device veth0_vlan entered promiscuous mode [ 34.208939][ T4330] device veth1_vlan entered promiscuous mode [ 34.213518][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.215531][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.217006][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.229668][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.231263][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.232928][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.249302][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.251039][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.252907][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.254817][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.259530][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.260968][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.262701][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.267202][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.268918][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.270460][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.272820][ T4342] device veth0_vlan entered promiscuous mode [ 34.279656][ T4331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.281736][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.283396][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.287499][ T4330] device veth0_macvtap entered promiscuous mode [ 34.288994][ T4335] device veth0_vlan entered promiscuous mode [ 34.292588][ T4342] device veth1_vlan entered promiscuous mode [ 34.297846][ T4330] device veth1_macvtap entered promiscuous mode [ 34.300249][ T4335] device veth1_vlan entered promiscuous mode [ 34.303134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.304859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.306378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.307923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.309328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.310607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.318977][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.329125][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.330754][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.332382][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.336785][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.347511][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.349237][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.351531][ T4342] device veth0_macvtap entered promiscuous mode [ 34.353740][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.357313][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.363837][ T4331] device veth0_vlan entered promiscuous mode [ 34.366759][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.368359][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.370083][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.371786][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.373459][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.375857][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.377589][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.379253][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.380853][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.382548][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.384870][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.387284][ T4330] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.388894][ T4330] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.390419][ T4330] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.391836][ T4330] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.396486][ T4335] device veth0_macvtap entered promiscuous mode [ 34.399143][ T4335] device veth1_macvtap entered promiscuous mode [ 34.406778][ T4342] device veth1_macvtap entered promiscuous mode [ 34.410232][ T4331] device veth1_vlan entered promiscuous mode [ 34.414123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.415646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.417138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.418604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.420070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.421762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.449882][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.451800][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.454740][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.456525][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.458344][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.459878][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.461549][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.463933][ T4342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.468684][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.470214][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.471891][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.473543][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.476928][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.478732][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.480318][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.482887][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.487113][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.489653][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.491467][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.493733][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.501185][ T4329] device veth0_vlan entered promiscuous mode [ 34.502874][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.505594][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.507334][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.509182][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.511399][ T4342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.513330][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.515217][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.516826][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.518353][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.519963][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.521622][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.525289][ T4335] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.526849][ T4335] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.528288][ T4335] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.529772][ T4335] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.532684][ T4331] device veth0_macvtap entered promiscuous mode [ 34.537399][ T4329] device veth1_vlan entered promiscuous mode [ 34.546919][ T4342] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.548373][ T4342] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.549849][ T4342] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.551216][ T4342] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.555656][ T4331] device veth1_macvtap entered promiscuous mode [ 34.559725][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.561015][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.569058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.570743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.572305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.573921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.576410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.578723][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.580569][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.582124][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.583810][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.586559][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.588328][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.590553][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.598075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.599805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.610549][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.612414][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.618458][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.620258][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.621784][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.623371][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.626043][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.638382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.640118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.641804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.643497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.649973][ T4329] device veth0_macvtap entered promiscuous mode [ 34.651857][ T4331] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.653411][ T4331] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.657330][ T4331] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.658885][ T4331] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.669469][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.670883][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.675423][ T4329] device veth1_macvtap entered promiscuous mode [ 34.678663][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.680190][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.681814][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.687746][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.689603][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.691294][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.693035][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.695294][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.695551][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.696857][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.698159][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.699665][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.702513][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.705327][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.709115][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.710704][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.712283][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.722122][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.724683][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.726301][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.727979][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.729650][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.731379][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.732979][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.735152][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.737295][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.742857][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.743669][ T4329] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.744669][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.751389][ T4329] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.752968][ T4329] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.754603][ T4329] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.756918][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.758517][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.760130][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.789988][ T1582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.791375][ T1582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.795424][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.800023][ T4336] Bluetooth: hci0: ACL packet for unknown connection handle 230 [ 34.826079][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.827464][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.828892][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.857343][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.858777][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.861492][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.893249][ T4412] netlink: 'syz.0.1': attribute type 12 has an invalid length. [ 34.896904][ T4412] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1'. [ 34.922913][ T1582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.924913][ T1582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.927865][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.943048][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.945673][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.947000][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.991829][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.993171][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.996800][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.117674][ T4431] loop1: detected capacity change from 0 to 128 [ 35.166688][ T4431] ======================================================= [ 35.166688][ T4431] WARNING: The mand mount option has been deprecated and [ 35.166688][ T4431] and is ignored by this kernel. Remove the mand [ 35.166688][ T4431] option from the mount to silence this warning. [ 35.166688][ T4431] ======================================================= [ 35.200084][ T4435] loop4: detected capacity change from 0 to 2048 [ 35.245195][ T4322] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 35.267696][ T4413] loop2: detected capacity change from 0 to 32768 [ 35.276209][ T4413] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.3 (4413) [ 35.295712][ T4413] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 35.297452][ T4413] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 35.298981][ T4413] BTRFS info (device loop2): ignoring bad roots [ 35.311208][ T4413] BTRFS info (device loop2): enabling disk space caching [ 35.312628][ T4413] BTRFS info (device loop2): enabling all of the rescue options [ 35.314552][ T4413] BTRFS info (device loop2): ignoring data csums [ 35.315603][ T4413] BTRFS info (device loop2): disabling log replay at mount time [ 35.321300][ T4413] BTRFS info (device loop2): turning on async discard [ 35.322745][ T4413] BTRFS info (device loop2): setting nodatacow, compression disabled [ 35.327597][ T4413] BTRFS info (device loop2): disabling disk space caching [ 35.329003][ T4413] BTRFS error (device loop2): cannot disable free space tree [ 35.337619][ T4413] BTRFS error (device loop2): open_ctree failed: -22 [ 35.338836][ T4422] loop0: detected capacity change from 0 to 32768 [ 35.349221][ T4422] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by syz.0.6 (4422) [ 35.352786][ T4336] Bluetooth: hci1: ACL packet for unknown connection handle 230 [ 35.361740][ T4422] BTRFS info (device loop0): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 35.363471][ T4422] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 35.374085][ T4422] BTRFS error (device loop0): unrecognized commit_interval value 0x0000700000000000 [ 35.377561][ T4447] delete_channel: no stack [ 35.379344][ T4422] BTRFS error (device loop0): open_ctree failed: -22 [ 35.401871][ T4321] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 35.408104][ T4422] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6'. [ 35.415389][ T4422] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6'. [ 35.416791][ T4422] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6'. [ 35.456952][ T4448] netlink: 'syz.1.15': attribute type 12 has an invalid length. [ 35.458422][ T4448] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15'. [ 35.549764][ T4457] netlink: 'syz.2.21': attribute type 12 has an invalid length. [ 35.551051][ T4457] netlink: 132 bytes leftover after parsing attributes in process `syz.2.21'. [ 35.607470][ T4323] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by udevd (4323) [ 35.613497][ T4456] loop3: detected capacity change from 0 to 8192 [ 35.630165][ T4456] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 35.632634][ T4456] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 35.635314][ T4456] REISERFS (device loop3): using ordered data mode [ 35.636387][ T4456] reiserfs: using flush barriers [ 35.639784][ T4459] loop1: detected capacity change from 0 to 4096 [ 35.643335][ T4456] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 35.644982][ T4459] ntfs3: Unknown parameter 'preal^©' [ 35.650448][ T4456] REISERFS (device loop3): checking transaction log (loop3) [ 35.669265][ T4464] loop2: detected capacity change from 0 to 1024 [ 35.670879][ T4464] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.679465][ T4336] Bluetooth: hci1: command 0x041b tx timeout [ 35.680559][ T4336] Bluetooth: hci4: command 0x041b tx timeout [ 35.681738][ T4336] Bluetooth: hci0: command 0x041b tx timeout [ 35.682723][ T4336] Bluetooth: hci3: command 0x041b tx timeout [ 35.683711][ T4336] Bluetooth: hci2: command 0x041b tx timeout [ 35.690880][ T4441] loop4: detected capacity change from 0 to 40427 [ 35.703591][ T4441] F2FS-fs (loop4): build fault injection attr: rate: 532, type: 0x3ffff [ 35.705889][ T4441] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x15a [ 35.708922][ T4441] F2FS-fs (loop4): invalid crc value [ 35.719634][ T4441] F2FS-fs (loop4): Found nat_bits in checkpoint [ 35.721634][ T4441] F2FS-fs (loop4) : inject kvmalloc in f2fs_kvmalloc of f2fs_build_node_manager+0xd6c/0x1b48 [ 35.723421][ T4441] F2FS-fs (loop4): Failed to initialize F2FS node manager (-12) [ 35.733704][ T4321] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 35.735497][ T4464] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 35.790592][ T4456] REISERFS (device loop3): Using tea hash to sort names [ 35.801102][ T4456] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 35.851485][ T4456] netlink: 68 bytes leftover after parsing attributes in process `syz.3.20'. [ 35.863913][ T27] audit: type=1400 audit(35.850:2): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/" pid=4453 comm="syz.3.20" [ 35.884315][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 35.887311][ T4476] loop0: detected capacity change from 0 to 164 [ 35.905393][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 35.906355][ T4477] Zero length message leads to an empty skb [ 35.920105][ T4476] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 35.930529][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 35.933477][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 35.945284][ T4476] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800 [ 35.964103][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 35.967093][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 35.974232][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 35.978328][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 35.982154][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 36.067146][ T4487] loop0: detected capacity change from 0 to 2048 [ 36.068592][ T4487] EXT4-fs: Ignoring removed mblk_io_submit option [ 36.069783][ T4487] EXT4-fs: Ignoring removed i_version option [ 36.070838][ T4487] ext4: Unknown parameter 'fowner<00000000000000000000' [ 36.108946][ T4322] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 36.278995][ T4332] Bluetooth: hci3: ACL packet for unknown connection handle 230 [ 36.328996][ T4502] netlink: 72 bytes leftover after parsing attributes in process `syz.1.34'. [ 36.330642][ T4502] netlink: 36 bytes leftover after parsing attributes in process `syz.1.34'. [ 36.397582][ T4506] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.399775][ T4506] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 36.411303][ T4503] netlink: 'syz.4.33': attribute type 12 has an invalid length. [ 36.412600][ T4503] netlink: 132 bytes leftover after parsing attributes in process `syz.4.33'. [ 36.420658][ T4506] EXT4-fs (loop1): 1 orphan inode deleted [ 36.422358][ T4506] EXT4-fs (loop1): 1 truncate cleaned up [ 36.423270][ T4506] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 36.448788][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 36.525582][ T4342] EXT4-fs (loop2): unmounting filesystem. [ 36.550803][ T4519] netlink: 'syz.1.41': attribute type 12 has an invalid length. [ 36.656142][ T4533] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.658628][ T4536] FAULT_INJECTION: forcing a failure. [ 36.658628][ T4536] name failslab, interval 1, probability 0, space 0, times 1 [ 36.660635][ T4536] CPU: 1 PID: 4536 Comm: syz.1.44 Not tainted syzkaller #0 [ 36.661818][ T4536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 36.663507][ T4536] Call trace: [ 36.664052][ T4536] dump_backtrace+0x1c4/0x1f0 [ 36.664845][ T4536] show_stack+0x2c/0x3c [ 36.665582][ T4536] __dump_stack+0x30/0x40 [ 36.666336][ T4536] dump_stack_lvl+0xf4/0x15c [ 36.667105][ T4536] dump_stack+0x1c/0x5c [ 36.667787][ T4536] should_fail_ex+0x3cc/0x524 [ 36.668603][ T4536] __should_failslab+0xc0/0x11c [ 36.669429][ T4536] should_failslab+0x10/0x28 [ 36.670184][ T4536] slab_pre_alloc_hook+0x6c/0x31c [ 36.671033][ T4536] kmem_cache_alloc_lru+0x60/0x284 [ 36.671912][ T4536] sock_alloc_inode+0x2c/0xcc [ 36.672714][ T4536] new_inode_pseudo+0x68/0x1cc [ 36.673513][ T4536] __sock_create+0x138/0x8a8 [ 36.674311][ T4536] __sys_socket+0xc0/0x1b0 [ 36.675109][ T4536] __arm64_sys_socket+0x7c/0x94 [ 36.675954][ T4536] invoke_syscall+0x98/0x290 [ 36.676747][ T4536] el0_svc_common+0x13c/0x258 [ 36.677505][ T4536] do_el0_svc+0x5c/0x134 [ 36.678237][ T4536] el0_svc+0x58/0x128 [ 36.678927][ T4536] el0t_64_sync_handler+0x84/0xf0 [ 36.679765][ T4536] el0t_64_sync+0x18c/0x190 [ 36.681359][ T4534] device batadv_slave_1 entered promiscuous mode [ 36.693557][ T4533] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 36.703700][ T4536] socket: no more sockets [ 36.722475][ T4533] EXT4-fs (loop0): 1 truncate cleaned up [ 36.723600][ T4533] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 36.728070][ T4533] netlink: 'syz.0.48': attribute type 1 has an invalid length. [ 36.776339][ T4537] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 36.778508][ T4537] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 36.780016][ T4537] REISERFS (device loop2): using ordered data mode [ 36.786137][ T4330] EXT4-fs (loop0): unmounting filesystem. [ 36.808449][ T4537] reiserfs: using flush barriers [ 36.812228][ T4537] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 36.819732][ T4534] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.47 (4534) [ 36.823658][ T4534] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 36.826231][ T4534] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 36.827869][ T4534] BTRFS info (device loop4): turning off barriers [ 36.828960][ T4534] BTRFS info (device loop4): turning on async discard [ 36.832188][ T4534] BTRFS info (device loop4): doing ref verification [ 36.833329][ T4534] BTRFS info (device loop4): using free space tree [ 36.839184][ T4537] REISERFS (device loop2): checking transaction log (loop2) [ 36.873586][ T4552] UDF-fs: bad mount option "0x0000000000000003ÿÿÿÿÿÿÿÿÿÿ" or missing value [ 36.891582][ T4537] REISERFS (device loop2): Using tea hash to sort names [ 36.892925][ T4537] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 36.896910][ T9] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0xf6cd2114e67efd10452f28c2e70db4e39c4a99e57adfafa6814b83c2a0ab8bbe level 0 [ 36.902292][ T4534] BTRFS error (device loop4): failed to load root extent [ 36.999980][ T4534] BTRFS error (device loop4): open_ctree failed: -22 [ 37.445514][ T4474] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by udevd (4474) [ 37.578534][ T4535] F2FS-fs (loop4): build fault injection attr: rate: 7, type: 0x3ffff [ 37.581125][ C1] F2FS-fs (loop4) : inject read IO error in f2fs_read_end_io of bio_endio+0x750/0x794 [ 37.618700][ T4535] F2FS-fs (loop4) : inject kmalloc in f2fs_kmalloc of f2fs_build_segment_manager+0x4ec/0x42d0 [ 37.620524][ T4535] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-12) [ 37.722323][ T4593] jffs2: notice: (4593) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 37.723164][ T4587] F2FS-fs (loop1): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 37.727658][ T4587] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 37.729326][ T4587] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7 [ 37.730705][ T4587] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3ffff [ 37.732424][ T4587] F2FS-fs (loop1): invalid crc value [ 37.740284][ T4587] F2FS-fs (loop1): Found nat_bits in checkpoint [ 37.751639][ T4587] F2FS-fs (loop1): Start checkpoint disabled! [ 37.754532][ T4332] Bluetooth: hci3: command 0x040f tx timeout [ 37.755575][ T4332] Bluetooth: hci0: command 0x040f tx timeout [ 37.756644][ T4332] Bluetooth: hci4: command 0x040f tx timeout [ 37.757695][ T4332] Bluetooth: hci1: command 0x040f tx timeout [ 37.759747][ T4597] process 'syz.0.58' launched './file0' with NULL argv: empty string added [ 37.763561][ T4587] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 37.765419][ T4587] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 37.773786][ T4587] F2FS-fs (loop1) : inject page get in f2fs_pagecache_get_page of generic_perform_write+0x240/0x508 [ 37.777962][ T4587] syz.1.56: attempt to access beyond end of device [ 37.777962][ T4587] loop1: rw=2049, sector=53248, nr_sectors = 400 limit=40427 [ 37.789165][ T4593] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 37.803280][ T4534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.817564][ T4534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.823039][ T4528] device batadv_slave_1 left promiscuous mode [ 37.853510][ T4342] EXT4-fs (loop2): unmounting filesystem. [ 37.963382][ T9] kworker/u4:0: attempt to access beyond end of device [ 37.963382][ T9] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 38.019940][ T4610] XFS (loop2): Mounting V5 Filesystem [ 38.030615][ T4610] XFS (loop2): Ending clean mount [ 38.084486][ T4621] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 38.100082][ T4621] syz.1.61 uses obsolete (PF_INET,SOCK_PACKET) [ 38.381067][ T4626] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 38.714584][ T4322] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 38.791698][ T4342] XFS (loop2): Unmounting Filesystem [ 38.886535][ T4664] Dev loop5: unable to read RDB block 7 [ 38.898461][ T4664] loop5: unable to read partition table [ 38.899481][ T4664] loop5: partition table beyond EOD, truncated [ 38.900532][ T4664] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 38.913318][ T4666] FAT-fs (loop0): Directory bread(block 64) failed [ 38.928295][ T4666] FAT-fs (loop0): Directory bread(block 65) failed [ 38.929516][ T4666] FAT-fs (loop0): Directory bread(block 66) failed [ 38.930578][ T4666] FAT-fs (loop0): Directory bread(block 67) failed [ 38.931681][ T4666] FAT-fs (loop0): Directory bread(block 68) failed [ 38.932642][ T4666] FAT-fs (loop0): Directory bread(block 69) failed [ 38.933735][ T4666] FAT-fs (loop0): Directory bread(block 70) failed [ 38.937847][ T4666] FAT-fs (loop0): Directory bread(block 71) failed [ 38.939025][ T4666] FAT-fs (loop0): Directory bread(block 72) failed [ 38.940373][ T4666] FAT-fs (loop0): Directory bread(block 73) failed [ 38.996747][ T4670] i2c i2c-0: new_device: Instantiated device stusb160x at 0x48 [ 39.000533][ T4670] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 39.007584][ T4670] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 39.083134][ T4672] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 39.085338][ T4672] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 39.088446][ T4672] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 39.090359][ T4672] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 39.092643][ T4672] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 39.105305][ T4672] ntfs: volume version 3.1. [ 39.108181][ T4672] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 39.110258][ T4672] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 39.121479][ T4672] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 39.123097][ T4672] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 39.201069][ T4674] jfs: Unrecognized mount option "rootcontext=root" or missing value [ 39.686870][ T39] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.718048][ T4332] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 39.720239][ T4332] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 39.721691][ T4332] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 39.723187][ T4332] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 39.726645][ T4691] FAULT_INJECTION: forcing a failure. [ 39.726645][ T4691] name failslab, interval 1, probability 0, space 0, times 0 [ 39.727255][ T4332] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 39.729884][ T4691] CPU: 1 PID: 4691 Comm: syz.0.90 Not tainted syzkaller #0 [ 39.730080][ T4332] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 39.731102][ T4691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 39.733863][ T4691] Call trace: [ 39.734483][ T4691] dump_backtrace+0x1c4/0x1f0 [ 39.735331][ T4691] show_stack+0x2c/0x3c [ 39.736030][ T4691] __dump_stack+0x30/0x40 [ 39.736786][ T4691] dump_stack_lvl+0xf4/0x15c [ 39.737616][ T4691] dump_stack+0x1c/0x5c [ 39.738357][ T4691] should_fail_ex+0x3cc/0x524 [ 39.739188][ T4691] __should_failslab+0xc0/0x11c [ 39.740067][ T4691] should_failslab+0x10/0x28 [ 39.740925][ T4691] __kmem_cache_alloc_node+0x7c/0x318 [ 39.741926][ T4691] kmalloc_trace+0x48/0x94 [ 39.742724][ T4691] binder_get_thread+0x1bc/0x664 [ 39.743563][ T4691] binder_ioctl+0x2e8/0x1b18 [ 39.744368][ T4691] __arm64_sys_ioctl+0x14c/0x1c8 [ 39.745243][ T4691] invoke_syscall+0x98/0x290 [ 39.746061][ T4691] el0_svc_common+0x13c/0x258 [ 39.746861][ T4691] do_el0_svc+0x5c/0x134 [ 39.747611][ T4691] el0_svc+0x58/0x128 [ 39.748307][ T4691] el0t_64_sync_handler+0x84/0xf0 [ 39.749156][ T4691] el0t_64_sync+0x18c/0x190 [ 39.757618][ T4691] binder: 4690:4691 ioctl c0306201 200001c0 returned -12 [ 39.810122][ T4699] Dev loop5: unable to read RDB block 7 [ 39.811344][ T4699] loop5: unable to read partition table [ 39.812479][ T4699] loop5: partition table beyond EOD, truncated [ 39.813643][ T4699] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 39.865730][ T4343] Bluetooth: hci1: command 0x0419 tx timeout [ 39.866298][ T4336] Bluetooth: hci4: command 0x0419 tx timeout [ 39.867854][ T4343] Bluetooth: hci0: command 0x0419 tx timeout [ 40.008052][ T4714] binder: 4713:4714 ioctl c0306201 200001c0 returned -14 [ 40.020546][ T39] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.033230][ T4377] input: syz0 as /devices/virtual/misc/uhid/0005:054C:0306.0001/input/input2 [ 40.047989][ T4712] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 40.049698][ T4377] sony 0005:054C:0306.0001: input,hidraw0: BLUETOOTH HID v0.00 Gamepad [syz0] on syz0 [ 40.099621][ T4712] ntfs3: Unknown parameter '%%' [ 40.162991][ T4323] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 40.167644][ T39] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.177008][ T4722] fido_id[4722]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 40.185458][ T4692] chnl_net:caif_netlink_parms(): no params data found [ 40.261121][ T4730] binder: 4729:4730 ioctl c0306201 200001c0 returned -14 [ 40.268707][ T39] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.303394][ T4736] set_capacity_and_notify: 18 callbacks suppressed [ 40.303403][ T4736] loop5: detected capacity change from 0 to 7 [ 40.316872][ T4734] netlink: 'syz.0.103': attribute type 13 has an invalid length. [ 40.319494][ T4734] gretap0: refused to change device tx_queue_len [ 40.320071][ T4718] loop4: detected capacity change from 0 to 32768 [ 40.322937][ T4734] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 40.323200][ T4736] Dev loop5: unable to read RDB block 7 [ 40.330896][ T4736] loop5: unable to read partition table [ 40.331967][ T4736] loop5: partition table beyond EOD, truncated [ 40.337470][ T4692] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.338706][ T4692] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.338979][ T4738] loop0: detected capacity change from 0 to 512 [ 40.340370][ T4692] device bridge_slave_0 entered promiscuous mode [ 40.343097][ T4692] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.346334][ T4692] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.347989][ T4692] device bridge_slave_1 entered promiscuous mode [ 40.350618][ T4738] EXT4-fs (loop0): orphan cleanup on readonly fs [ 40.351917][ T4736] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 40.358994][ T4738] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.103: bg 0: block 63: padding at end of block bitmap is not set [ 40.367246][ T4738] EXT4-fs (loop0): Remounting filesystem read-only [ 40.368399][ T4738] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 40.370798][ T4738] EXT4-fs error (device loop0): ext4_xattr_inode_update_ref:984: inode #11: comm syz.0.103: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 40.388602][ T4692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.393276][ T4692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.397055][ T4738] EXT4-fs (loop0): Remounting filesystem read-only [ 40.398233][ T4738] EXT4-fs warning (device loop0): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.0.103: ea_inode dec ref err=-117 [ 40.400380][ T4738] EXT4-fs (loop0): 1 orphan inode deleted [ 40.401300][ T4738] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 40.403046][ T4692] team0: Port device team_slave_0 added [ 40.417341][ T4692] team0: Port device team_slave_1 added [ 40.421672][ T4745] __nla_validate_parse: 4 callbacks suppressed [ 40.421681][ T4745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.106'. [ 40.423060][ T4692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.430799][ T4692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.438854][ T4718] XFS (loop4): Mounting V5 Filesystem [ 40.440439][ T4692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.443293][ T4692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.444596][ T4692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.448456][ T4692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.494077][ T4330] EXT4-fs (loop0): unmounting filesystem. [ 40.505283][ T4692] device hsr_slave_0 entered promiscuous mode [ 40.542329][ T4692] device hsr_slave_1 entered promiscuous mode [ 40.548265][ T4718] XFS (loop4): Ending clean mount [ 40.563429][ T4718] XFS (loop4): Quotacheck needed: Please wait. [ 40.567395][ T4692] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.568756][ T4692] Cannot create hsr debugfs directory [ 40.606978][ T4718] XFS (loop4): Quotacheck: Done. [ 40.657937][ T4759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.110'. [ 40.712241][ T4335] XFS (loop4): Unmounting Filesystem [ 40.717351][ T4759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.110'. [ 40.725261][ T4764] kAFS: bad VL server IP address [ 41.754098][ T4343] Bluetooth: hci2: command 0x0409 tx timeout [ 42.248660][ T4692] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 42.274183][ T4769] loop0: detected capacity change from 0 to 40427 [ 42.279418][ T4769] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 42.280774][ T4769] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 42.305349][ T4692] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 42.337937][ T4769] F2FS-fs (loop0): Found nat_bits in checkpoint [ 42.356770][ T4769] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 42.357993][ T4769] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 42.461177][ T4692] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 42.496776][ T4692] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 42.879545][ T4692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.924783][ T4769] syz.0.113: attempt to access beyond end of device [ 42.924783][ T4769] loop0: rw=2049, sector=40424, nr_sectors = 8 limit=40427 [ 42.979169][ T4692] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.984574][ T4683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.986199][ T4683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.987548][ T4683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.989131][ T4683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.990503][ T4683] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.991639][ T4683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.993389][ T4683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.019977][ T4683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.027212][ T4683] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.028556][ T4683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.032807][ T4683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.099289][ T4802] netlink: 'syz.2.117': attribute type 13 has an invalid length. [ 43.113787][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 43.143050][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 43.153201][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 43.294241][ T4683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.295916][ T4683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.297638][ T4683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.299620][ T4683] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.301226][ T4683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.303563][ T4683] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.355578][ T4683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.363122][ T4683] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.785993][ T4804] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 43.789077][ T4804] device syzkaller0 entered promiscuous mode [ 43.834066][ T4332] Bluetooth: hci2: command 0x041b tx timeout [ 45.210056][ T4832] loop0: detected capacity change from 0 to 256 [ 45.226916][ T4832] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9436649, utbl_chksum : 0xe619d30d) [ 45.234494][ T4832] exFAT-fs (loop0): hint_cluster is invalid (17) [ 45.914728][ T4343] Bluetooth: hci2: command 0x040f tx timeout [ 47.994006][ T4332] Bluetooth: hci2: command 0x0419 tx timeout [ 53.706116][ T4683] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.709176][ T4683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.710900][ T4683] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.713320][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.161227][ T4862] can0: slcan on ttyS3. [ 54.674847][ T4855] can0 (unregistered): slcan off ttyS3. [ 54.785129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.786562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.793670][ T4692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.805687][ T4893] loop4: detected capacity change from 0 to 4096 [ 55.118030][ T4906] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 55.418670][ T4930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.420290][ T4930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.434398][ T39] device hsr_slave_0 left promiscuous mode [ 55.465439][ T39] device hsr_slave_1 left promiscuous mode [ 55.482241][ T4332] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 55.485004][ T4332] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 55.486810][ T4332] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 55.488705][ T4332] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 55.490696][ T4332] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 55.492275][ T4332] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 55.585719][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.587215][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.592790][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.594513][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.597244][ T39] device bridge_slave_1 left promiscuous mode [ 55.599074][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.699970][ T4948] loop2: detected capacity change from 0 to 40427 [ 55.706091][ T4948] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 55.706097][ T39] device bridge_slave_0 left promiscuous mode [ 55.707162][ T4948] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 55.708483][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.710270][ T4948] F2FS-fs (loop2): invalid crc value [ 55.728249][ T4948] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 55.783331][ T4948] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 55.784686][ T4948] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 56.984440][ T39] device veth1_macvtap left promiscuous mode [ 56.985674][ T39] device veth0_macvtap left promiscuous mode [ 56.987232][ T39] device veth1_vlan left promiscuous mode [ 56.988262][ T39] device veth0_vlan left promiscuous mode [ 57.062204][ T4979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.063754][ T4979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.524269][ T4343] Bluetooth: hci5: command 0x0409 tx timeout [ 58.452787][ T4988] netlink: 44 bytes leftover after parsing attributes in process `syz.2.153'. [ 59.016786][ T39] team0 (unregistering): Port device team_slave_1 removed [ 59.175259][ T39] team0 (unregistering): Port device team_slave_0 removed [ 59.334884][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 59.524790][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.604056][ T4332] Bluetooth: hci5: command 0x041b tx timeout [ 61.025419][ T39] bond0 (unregistering): Released all slaves [ 61.406351][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.408145][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.428200][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.430003][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.431845][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.433415][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.453863][ T4692] device veth0_vlan entered promiscuous mode [ 61.466255][ T4692] device veth1_vlan entered promiscuous mode [ 61.492028][ T4343] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 61.493763][ T4343] CPU: 0 PID: 4343 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 61.495013][ T4343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 61.496687][ T4343] Workqueue: hci3 hci_rx_work [ 61.497495][ T4343] Call trace: [ 61.498043][ T4343] dump_backtrace+0x1c4/0x1f0 [ 61.498794][ T4343] show_stack+0x2c/0x3c [ 61.499482][ T4343] __dump_stack+0x30/0x40 [ 61.500205][ T4343] dump_stack_lvl+0xf4/0x15c [ 61.500983][ T4343] dump_stack+0x1c/0x5c [ 61.501722][ T4343] sysfs_create_dir_ns+0x244/0x264 [ 61.502558][ T4343] kobject_add_internal+0x5a8/0xb18 [ 61.503431][ T4343] kobject_add+0x144/0x20c [ 61.504161][ T4343] device_add+0x3dc/0xe4c [ 61.504851][ T4343] hci_conn_add_sysfs+0xb8/0x1bc [ 61.505658][ T4343] le_conn_complete_evt+0xd3c/0x1300 [ 61.506554][ T4343] hci_le_conn_complete_evt+0x114/0x3b8 [ 61.507489][ T4343] hci_le_meta_evt+0x2c0/0x4a8 [ 61.508292][ T4343] hci_event_packet+0x64c/0xe60 [ 61.509085][ T4343] hci_rx_work+0x320/0xa94 [ 61.509809][ T4343] process_one_work+0x7e4/0x13bc [ 61.510659][ T4343] worker_thread+0x8cc/0xfe8 [ 61.511395][ T4343] kthread+0x254/0x2e0 [ 61.512080][ T4343] ret_from_fork+0x10/0x20 [ 61.519406][ T4343] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 61.521471][ T4343] Bluetooth: hci3: failed to register connection device [ 61.571657][ T4692] device veth0_macvtap entered promiscuous mode [ 61.576088][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.577638][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.579248][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.580899][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.589944][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.595496][ T5022] ------------[ cut here ]------------ [ 61.596469][ T5022] WARNING: CPU: 1 PID: 5022 at net/tls/tls_strp.c:493 tls_strp_msg_load+0x5ac/0x82c [ 61.598010][ T5022] Modules linked in: [ 61.598649][ T5022] CPU: 1 PID: 5022 Comm: syz.0.160 Not tainted syzkaller #0 [ 61.599782][ T5022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 61.601291][ T5022] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 61.602373][ T5022] pc : tls_strp_msg_load+0x5ac/0x82c [ 61.603188][ T5022] lr : tls_strp_msg_load+0x5ac/0x82c [ 61.604072][ T5022] sp : ffff800020ee74c0 [ 61.604734][ T5022] x29: ffff800020ee7540 x28: 1fffe0001eada91b x27: 1fffe0001eada91b [ 61.606144][ T5022] x26: ffff7000041dce9c x25: dfff800000000000 x24: ffff0000f56d48dc [ 61.607571][ T5022] x23: 0000000000000000 x22: 000000000000001e x21: ffff0000d7a95620 [ 61.608922][ T5022] x20: ffff0000f56d48d0 x19: ffff0000f56d48d8 x18: 0000000000000000 [ 61.610374][ T5022] x17: 0000000000000000 x16: ffff800011b9ccb8 x15: 0000000000000002 [ 61.611694][ T5022] x14: 0000000000000002 x13: 1ffff000041dcf06 x12: 0000000000080000 [ 61.613030][ T5022] x11: 0000000000000273 x10: ffff80002376c000 x9 : ffff800010899fd4 [ 61.614365][ T5022] x8 : 0000000000000274 x7 : 0000000000000000 x6 : ffff800020ee77fc [ 61.615668][ T5022] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000001 [ 61.617025][ T5022] x2 : 0000000000000001 x1 : 000000000000001e x0 : 0000000000000000 [ 61.618352][ T5022] Call trace: [ 61.618923][ T5022] tls_strp_msg_load+0x5ac/0x82c [ 61.619744][ T5022] tls_rx_rec_wait+0x784/0x8c0 [ 61.620504][ T5022] tls_sw_recvmsg+0x554/0x181c [ 61.621274][ T5022] inet_recvmsg+0x118/0x1c8 [ 61.622024][ T5022] ____sys_recvmsg+0x270/0x754 [ 61.622850][ T5022] __sys_recvmsg+0x250/0x33c [ 61.623587][ T5022] __arm64_sys_recvmsg+0x80/0x94 [ 61.624462][ T5022] invoke_syscall+0x98/0x290 [ 61.625293][ T5022] el0_svc_common+0x13c/0x258 [ 61.626079][ T5022] do_el0_svc+0x5c/0x134 [ 61.626758][ T5022] el0_svc+0x58/0x128 [ 61.627422][ T5022] el0t_64_sync_handler+0x84/0xf0 [ 61.628320][ T5022] el0t_64_sync+0x18c/0x190 [ 61.629088][ T5022] irq event stamp: 412 [ 61.629713][ T5022] hardirqs last enabled at (411): [] __local_bh_enable_ip+0x1f8/0x37c [ 61.631367][ T5022] hardirqs last disabled at (412): [] el1_dbg+0x24/0x80 [ 61.632810][ T5022] softirqs last enabled at (410): [] lock_sock_nested+0xe0/0x130 [ 61.634368][ T5022] softirqs last disabled at (408): [] lock_sock_nested+0x88/0x130 [ 61.636038][ T5022] ---[ end trace 0000000000000000 ]--- [ 61.642181][ T5019] netlink: 156 bytes leftover after parsing attributes in process `syz.2.157'. [ 61.648399][ T4692] device veth1_macvtap entered promiscuous mode [ 61.648968][ T5022] ================================================================== [ 61.650972][ T5022] BUG: KASAN: use-after-free in __skb_nsg+0x474/0x504 [ 61.652115][ T5022] Read of size 4 at addr ffff0000d86a7060 by task syz.0.160/5022 [ 61.652303][ T4934] chnl_net:caif_netlink_parms(): no params data found [ 61.653440][ T5022] [ 61.653447][ T5022] CPU: 0 PID: 5022 Comm: syz.0.160 Tainted: G W syzkaller #0 [ 61.653465][ T5022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 61.653470][ T5022] Call trace: [ 61.653473][ T5022] dump_backtrace+0x1c4/0x1f0 [ 61.659625][ T5022] show_stack+0x2c/0x3c [ 61.660331][ T5022] __dump_stack+0x30/0x40 [ 61.661087][ T5022] dump_stack_lvl+0xf4/0x15c [ 61.661901][ T5022] print_address_description+0x88/0x218 [ 61.662893][ T5022] print_report+0x50/0x68 [ 61.663687][ T5022] kasan_report+0xa8/0xfc [ 61.664440][ T5022] __asan_report_load4_noabort+0x2c/0x38 [ 61.665460][ T5022] __skb_nsg+0x474/0x504 [ 61.666159][ T5022] tls_decrypt_sg+0x268/0x27c8 [ 61.666987][ T5022] tls_decrypt_sw+0xb8/0x9e0 [ 61.667716][ T5022] tls_rx_one_record+0x164/0xc18 [ 61.668493][ T5022] tls_sw_recvmsg+0x7e8/0x181c [ 61.669304][ T5022] inet_recvmsg+0x118/0x1c8 [ 61.670069][ T5022] ____sys_recvmsg+0x270/0x754 [ 61.670855][ T5022] __sys_recvmsg+0x250/0x33c [ 61.671652][ T5022] __arm64_sys_recvmsg+0x80/0x94 [ 61.672517][ T5022] invoke_syscall+0x98/0x290 [ 61.673274][ T5022] el0_svc_common+0x13c/0x258 [ 61.674073][ T5022] do_el0_svc+0x5c/0x134 [ 61.674773][ T5022] el0_svc+0x58/0x128 [ 61.675474][ T5022] el0t_64_sync_handler+0x84/0xf0 [ 61.676340][ T5022] el0t_64_sync+0x18c/0x190 [ 61.677130][ T5022] [ 61.677535][ T5022] Allocated by task 5022: [ 61.678305][ T5022] kasan_set_track+0x4c/0x80 [ 61.679059][ T5022] kasan_save_alloc_info+0x24/0x30 [ 61.679924][ T5022] __kasan_slab_alloc+0x70/0x88 [ 61.680761][ T5022] slab_post_alloc_hook+0x74/0x430 [ 61.681693][ T5022] kmem_cache_alloc_node+0x258/0x344 [ 61.682600][ T5022] __alloc_skb+0x128/0x728 [ 61.683339][ T5022] tcp_stream_alloc_skb+0x48/0x2d8 [ 61.684201][ T5022] do_tcp_sendpages+0x798/0x22dc [ 61.685038][ T5022] tls_push_sg+0x128/0x6e4 [ 61.685802][ T5022] tls_tx_records+0x2bc/0x4e8 [ 61.686624][ T5022] tls_push_record+0x1860/0x2d78 [ 61.687464][ T5022] bpf_exec_tx_verdict+0xc88/0x1258 [ 61.688393][ T5022] tls_sw_sendmsg+0xabc/0x14d4 [ 61.689242][ T5022] inet_sendmsg+0x154/0x27c [ 61.690005][ T5022] ____sys_sendmsg+0x588/0x90c [ 61.690814][ T5022] __sys_sendmsg+0x288/0x374 [ 61.691576][ T5022] __arm64_sys_sendmsg+0x80/0x94 [ 61.692402][ T5022] invoke_syscall+0x98/0x290 [ 61.693140][ T5022] el0_svc_common+0x13c/0x258 [ 61.693878][ T5022] do_el0_svc+0x5c/0x134 [ 61.694566][ T5022] el0_svc+0x58/0x128 [ 61.695241][ T5022] el0t_64_sync_handler+0x84/0xf0 [ 61.696164][ T5022] el0t_64_sync+0x18c/0x190 [ 61.696945][ T5022] [ 61.697338][ T5022] Freed by task 5013: [ 61.698018][ T5022] kasan_set_track+0x4c/0x80 [ 61.698763][ T5022] kasan_save_free_info+0x38/0x5c [ 61.699597][ T5022] ____kasan_slab_free+0x148/0x1b0 [ 61.700434][ T5022] __kasan_slab_free+0x18/0x28 [ 61.701222][ T5022] slab_free_freelist_hook+0x16c/0x1e8 [ 61.702127][ T5022] kmem_cache_free+0x118/0x318 [ 61.702925][ T5022] kfree_skbmem+0x10c/0x198 [ 61.703677][ T5022] skb_attempt_defer_free+0x268/0x40c [ 61.704558][ T5022] tcp_recvmsg_locked+0xd6c/0x1c1c [ 61.705412][ T5022] tcp_recvmsg+0x194/0x67c [ 61.706164][ T5022] inet_recvmsg+0x118/0x1c8 [ 61.706919][ T5022] __sys_recvfrom+0x2cc/0x40c [ 61.707753][ T5022] __arm64_sys_recvfrom+0xe4/0x104 [ 61.708609][ T5022] invoke_syscall+0x98/0x290 [ 61.709349][ T5022] el0_svc_common+0x13c/0x258 [ 61.710120][ T5022] do_el0_svc+0x5c/0x134 [ 61.710840][ T5022] el0_svc+0x58/0x128 [ 61.711473][ T5022] el0t_64_sync_handler+0x84/0xf0 [ 61.712324][ T5022] el0t_64_sync+0x18c/0x190 [ 61.713096][ T5022] [ 61.713498][ T5022] The buggy address belongs to the object at ffff0000d86a6f00 [ 61.713498][ T5022] which belongs to the cache skbuff_fclone_cache of size 488 [ 61.715864][ T5022] The buggy address is located 352 bytes inside of [ 61.715864][ T5022] 488-byte region [ffff0000d86a6f00, ffff0000d86a70e8) [ 61.718060][ T5022] [ 61.718422][ T5022] The buggy address belongs to the physical page: [ 61.719490][ T5022] page:00000000b1ccfb66 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff0000d86a6c80 pfn:0x1186a6 [ 61.721311][ T5022] head:00000000b1ccfb66 order:1 compound_mapcount:0 compound_pincount:0 [ 61.722706][ T5022] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 61.724085][ T5022] raw: 05ffc00000010200 fffffc00036e3d80 dead000000000004 ffff0000c0870300 [ 61.725547][ T5022] raw: ffff0000d86a6c80 00000000800c000b 00000001ffffffff 0000000000000000 [ 61.726988][ T5022] page dumped because: kasan: bad access detected [ 61.728033][ T5022] [ 61.728447][ T5022] Memory state around the buggy address: [ 61.729429][ T5022] ffff0000d86a6f00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 61.730820][ T5022] ffff0000d86a6f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 61.732145][ T5022] >ffff0000d86a7000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 61.733422][ T5022] ^ [ 61.734615][ T5022] ffff0000d86a7080: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 61.735939][ T5022] ffff0000d86a7100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 61.737308][ T5022] ================================================================== [ 61.740203][ T4343] Bluetooth: hci5: command 0x040f tx timeout [ 61.741530][ T5022] Disabling lock debugging due to kernel taint [ 61.742887][ T5022] ------------[ cut here ]------------ [ 61.743750][ T5022] WARNING: CPU: 0 PID: 5022 at net/core/skbuff.c:4603 __skb_to_sgvec+0x540/0x900 [ 61.745287][ T5022] Modules linked in: [ 61.745922][ T5022] CPU: 0 PID: 5022 Comm: syz.0.160 Tainted: G B W syzkaller #0 [ 61.747461][ T5022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 61.749170][ T5022] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 61.750538][ T5022] pc : __skb_to_sgvec+0x540/0x900 [ 61.751426][ T5022] lr : __skb_to_sgvec+0x540/0x900 [ 61.752330][ T5022] sp : ffff800020ee7120 [ 61.753074][ T5022] x29: ffff800020ee7170 x28: 1fffe0001ce5aab9 x27: ffff0000f3d96508 [ 61.754485][ T5022] x26: dfff800000000000 x25: ffff0000e72d55d0 x24: 0000000000000000 [ 61.755873][ T5022] x23: 000000000000000d x22: ffff0000e72d55cc x21: 0000000000000000 [ 61.757223][ T5022] x20: 00000000fffffff1 x19: 00000000ffffffe4 x18: 1fffe00033e6df7e [ 61.758624][ T5022] x17: 0000000000fe010c x16: ffff800011b9ccb8 x15: 0000000000000002 [ 61.760003][ T5022] x14: 0000000000000008 x13: 1fffe0001e7b2c9d x12: 0000000000080000 [ 61.761431][ T5022] x11: 000000000007ffff x10: ffff80002376c000 x9 : ffff80000febc668 [ 61.762774][ T5022] x8 : 0000000000080000 x7 : 0000000000000000 x6 : 0000000000000000 [ 61.764185][ T5022] x5 : ffff0000f3d964a0 x4 : 0000000000000000 x3 : 00000000ffffffe4 [ 61.765573][ T5022] x2 : 000000000000000d x1 : 00000000fffffff1 x0 : 0000000000000000 [ 61.766993][ T5022] Call trace: [ 61.767556][ T5022] __skb_to_sgvec+0x540/0x900 [ 61.768342][ T5022] skb_to_sgvec+0x40/0xb4 [ 61.769105][ T5022] tls_decrypt_sg+0xe6c/0x27c8 [ 61.769903][ T5022] tls_decrypt_sw+0xb8/0x9e0 [ 61.770679][ T5022] tls_rx_one_record+0x164/0xc18 [ 61.771498][ T5022] tls_sw_recvmsg+0x7e8/0x181c [ 61.772291][ T5022] inet_recvmsg+0x118/0x1c8 [ 61.773048][ T5022] ____sys_recvmsg+0x270/0x754 [ 61.773913][ T5022] __sys_recvmsg+0x250/0x33c [ 61.774673][ T5022] __arm64_sys_recvmsg+0x80/0x94 [ 61.775503][ T5022] invoke_syscall+0x98/0x290 [ 61.776259][ T5022] el0_svc_common+0x13c/0x258 [ 61.777014][ T5022] do_el0_svc+0x5c/0x134 [ 61.777760][ T5022] el0_svc+0x58/0x128 [ 61.778429][ T5022] el0t_64_sync_handler+0x84/0xf0 [ 61.779277][ T5022] el0t_64_sync+0x18c/0x190 [ 61.780048][ T5022] irq event stamp: 735 [ 61.780737][ T5022] hardirqs last enabled at (735): [] finish_lock_switch+0xb0/0x1c8 [ 61.782416][ T5022] hardirqs last disabled at (734): [] __schedule+0x294/0x1a6c [ 61.783824][ T5022] softirqs last enabled at (638): [] handle_softirqs+0xb1c/0xc90 [ 61.785444][ T5022] softirqs last disabled at (415): [] __do_softirq+0x14/0x20 [ 61.786886][ T5022] ---[ end trace 0000000000000000 ]--- [ 61.788667][ T5022] ------------[ cut here ]------------ [ 61.789533][ T5022] kernel BUG at net/core/skbuff.c:4646! [ 61.790469][ T5022] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 61.791761][ T5022] Modules linked in: [ 61.792437][ T5022] CPU: 0 PID: 5022 Comm: syz.0.160 Tainted: G B W syzkaller #0 [ 61.792791][ T4692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.793923][ T5022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 61.797510][ T5022] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 61.797895][ T4692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.798763][ T5022] pc : __skb_to_sgvec+0x8fc/0x900 [ 61.798780][ T5022] lr : __skb_to_sgvec+0x8fc/0x900 [ 61.802160][ T5022] sp : ffff800020ee7120 [ 61.802887][ T5022] x29: ffff800020ee7170 x28: 1fffe0001ce5aab9 x27: ffff0000f3d96508 [ 61.804247][ T5022] x26: dfff800000000000 x25: 0000000000000000 x24: 0000000000000000 [ 61.805598][ T5022] x23: 000000000000000d x22: ffff0000e72d55cc x21: 0000000000000001 [ 61.805959][ T4692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.806882][ T5022] x20: ffff0000f3d968c0 x19: 00000000ffffffe4 x18: 1fffe00033e6df7e [ 61.810223][ T5022] x17: 0000000000fe010c x16: ffff800011b9ccb8 x15: 0000000000000002 [ 61.810836][ T4692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.811610][ T5022] x14: 0000000000000008 x13: 1fffe0001e7b2c9d x12: 0000000000080000 [ 61.814490][ T5022] x11: 000000000007ffff x10: ffff80002376c000 x9 : ffff80000febca24 [ 61.814954][ T4692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.815793][ T5022] x8 : 0000000000080000 x7 : 0000000000000000 x6 : 0000000000000000 [ 61.818407][ T4692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.819045][ T5022] x5 : ffff0000f3d964a0 x4 : 0000000000000000 x3 : 00000000ffffffe4 [ 61.820939][ T4692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.822094][ T5022] x2 : 000000000000000d x1 : 00000000ffffffe4 x0 : 0000000000000000 [ 61.823787][ T4692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.825130][ T5022] Call trace: [ 61.825136][ T5022] __skb_to_sgvec+0x8fc/0x900 [ 61.825150][ T5022] skb_to_sgvec+0x40/0xb4 [ 61.825155][ T5022] tls_decrypt_sg+0xe6c/0x27c8 [ 61.825162][ T5022] tls_decrypt_sw+0xb8/0x9e0 [ 61.825168][ T5022] tls_rx_one_record+0x164/0xc18 [ 61.825174][ T5022] tls_sw_recvmsg+0x7e8/0x181c [ 61.825179][ T5022] inet_recvmsg+0x118/0x1c8 [ 61.825186][ T5022] ____sys_recvmsg+0x270/0x754 [ 61.825193][ T5022] __sys_recvmsg+0x250/0x33c [ 61.829588][ T4692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.830276][ T5022] __arm64_sys_recvmsg+0x80/0x94 [ 61.836274][ T5022] invoke_syscall+0x98/0x290 [ 61.837045][ T5022] el0_svc_common+0x13c/0x258 [ 61.837755][ T5022] do_el0_svc+0x5c/0x134 [ 61.838440][ T5022] el0_svc+0x58/0x128 [ 61.839132][ T5022] el0t_64_sync_handler+0x84/0xf0 [ 61.839982][ T5022] el0t_64_sync+0x18c/0x190 [ 61.840753][ T5022] Code: d4210000 9617d88d d4210000 9617d88b (d4210000) [ 61.841880][ T5022] ---[ end trace 0000000000000000 ]--- [ 61.862636][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.864296][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.866031][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.894295][ T4692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.896274][ T4692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.898077][ T4692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.899862][ T4692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.901548][ T4692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.903722][ T4692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.907552][ T4692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.909412][ T4692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.911546][ T4692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.926402][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.928073][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.043823][ T5022] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 62.044995][ T5022] SMP: stopping secondary CPUs [ 62.045782][ T5022] Kernel Offset: disabled [ 62.046540][ T5022] CPU features: 0x0a0000,000f0097,a65bfea7 [ 62.047490][ T5022] Memory Limit: none [ 62.252698][ T5022] Rebooting in 86400 seconds..