last executing test programs: 5.271350715s ago: executing program 3 (id=413): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x3b) 5.162239219s ago: executing program 3 (id=415): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x3d, 0x0, 0x7, 0x9b}, {0x4, 0xfd, 0x0, 0x1}]}) 4.922016467s ago: executing program 3 (id=418): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) read(r0, &(0x7f0000000dc0)=""/4096, 0x1000) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16], 0x14) 4.735543453s ago: executing program 3 (id=420): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)={0x14, 0x17, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}}, 0x48800) 4.694609154s ago: executing program 3 (id=421): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x8}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000001, &(0x7f0000000300), 0x2, 0x1}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 4.619055506s ago: executing program 3 (id=422): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x3, 0x0, 0x0, '\x00', {0x0, 0x6, "ed906b", 0x8, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c811ee12e"}}}}}}}, 0x0) 3.377039408s ago: executing program 0 (id=436): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)='m'}) 2.438513719s ago: executing program 0 (id=445): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x7, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0xff3e, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.340584822s ago: executing program 0 (id=447): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) io_uring_enter(0xffffffffffffffff, 0x52b7, 0xbf89, 0x58, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x8b, 0x100000500) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0) close(0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) sendto$inet(r2, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x10008095, 0x0, 0x0) 1.870933978s ago: executing program 2 (id=456): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0x14, 0x68, 0x0, 0x68, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}, 0x22) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) 1.683959154s ago: executing program 2 (id=458): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000001300c000b40000000000000000614000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x44) 1.593190187s ago: executing program 2 (id=460): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x4, 0x1286, &(0x7f0000002440)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) stat(&(0x7f0000003940)='./file0\x00', &(0x7f0000003980)) fstatfs(r0, 0x0) 1.377047604s ago: executing program 1 (id=461): syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f0000000c80)={[{@discard}, {@bh}, {@noblock_validity}]}, 0x2c, 0x52c, &(0x7f0000000640)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 895.27055ms ago: executing program 1 (id=463): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000040}, 0x44881) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 810.373083ms ago: executing program 4 (id=464): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltaction={0x14, 0x31, 0x8, 0x70bd26, 0x25dfdbfb}, 0x14}}, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r3, @ANYBLOB="100001800400", @ANYRES8=r0], 0x28}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 738.377035ms ago: executing program 1 (id=465): r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002c00)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0xffffff3b, @private0}, 0x1c, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1f8}}], 0x1, 0x80fe) 627.273979ms ago: executing program 4 (id=466): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 627.179959ms ago: executing program 1 (id=467): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000000301010400000000000000000a0000002400018014000180"], 0x38}}, 0x0) 526.323792ms ago: executing program 4 (id=468): unshare(0x26020480) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) 476.025214ms ago: executing program 1 (id=469): setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 445.716976ms ago: executing program 2 (id=470): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000500050009000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 421.561086ms ago: executing program 0 (id=471): openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x122) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x4040084) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x50) sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x4011) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(0xffffffffffffffff, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x33, 0x0, @rand_addr=0x64010101, @broadcast}, "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"}}, 0xfce) 324.960589ms ago: executing program 1 (id=472): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)='m'}) 324.843009ms ago: executing program 4 (id=473): syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d33b16266b5efb88aaa87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) 228.489573ms ago: executing program 2 (id=474): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 169.705645ms ago: executing program 4 (id=475): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)=""/93, 0x38}], 0x2}, 0x80000001}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 59.216598ms ago: executing program 2 (id=476): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000000c0)={[{@errors_remount}, {@nodelalloc}, {@nombcache}, {@oldalloc}, {@nodiscard}, {@quota}, {@bsdgroups}]}, 0x3, 0x452, &(0x7f0000000140)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000690001002a"], 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x4048000) 58.974408ms ago: executing program 0 (id=477): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000003280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000007"], 0x18}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002f80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @multicast1}}}], 0x20}}], 0x2, 0xf00) 5.0492ms ago: executing program 4 (id=478): dup(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@rand_addr=0x64010101, @in=@broadcast, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@local}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@multicast1, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x4}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0) 0s ago: executing program 0 (id=479): ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x220084d, &(0x7f0000001080)={[{@debug}, {@errors_continue}, {@oldalloc}, {@nodelalloc}, {@stripe={'stripe', 0x3d, 0x3}}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}, {@quota}]}, 0x1, 0xbc3, &(0x7f0000000480)="$eJzs3M1rHOcdB/DfjF5tq125lFL3YpVSbChdyy4ylSnULi699FDouWAhr4zQ+gVJxZUs6Kr9B0KScyCXQBIT40N89iWBXHNJ7GtMbiYoVgIhJBtmX/TmXUm2VhpF+nxgtM+zz+w8v+8O0swD2g3g0BrKfqQRJyLiShJRaDyfRkRvrdUfUanvt7y0MP710sJ4EtXqP79IIomIZ0sL481jJY3HY41Of0R8/Jckfvb/5+edmZufGiuXS9ON/pnZ67fOzMzN/37y+ti10rXSjbPn/zhybuT88OhIx7J+89nFB1/9+m+fV75957u7X772VhIXY6AxtjZHI/WODcXQynuyVndEjHXg+PtBVyPP2pxJ9xYvSne5KAAA2krX3MP9IgrRFas3b4X44JNciwMAAAA6otoVUQUAAAAOuMT6HwAAAA645v8BPFtaGG9u+f5Hwt56eikiBuv5lxtbfaQ7KrXH/uiJiKPPklj7sdak/rIdG4qIJ49H7z15PFr7uPVev/+VxYj4Zavzn9TyDzY+Cb0xfxoRwx2Yf2hD/8eU/2IH5s87PwCH08NL9QvZ89e/dOX+J1pc/7pbXLteRt7Xv+b93/Jz93+r+bva3P/9Y5tz3Hn7jdvtxrL8f3rw1/eaWzZ/9rijUC/g6WLEr7pb5U9W8idt8l/Z5hyF72+X2o3lnb/6ZsSpaJ2/KVn5fqLmqmnd9xOdmZgsl4brP1vOsfjRyLvt5s87f3b+j7bJv9X5v7XuSO2/1Odfly/fbze2df5qtfrf+kq1t/HMf8ZmZ6fPRvQmf6/11z1/bvO8zX2ax8jyn/7N5r//rfJnfxMqjfchS77YeMz6/9sw55/v3nl/s/zZ+i/P83/1Jc//K9uc47cfvnq63dia9W9ty+Z/koze21EoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6cNCIGIkmLEZHU2mlaLEYci4ifx9G0fHNm9ncTN/9942o2FjEYPenEZLk0HBGFej/J+mdr7dX+uQ39P0TE8Yh4vXCk1i+O3yxfzTs8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK45FxEAkaTEi0ohYLqRpsZh3VQAAAEDHDeZdAAAAALDrrP8BAADg4LP+BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYJcdP/nwURIRlQtHalumtzHWk2tlwG5L8y4AyE1X3gUAuenOuwAgNy+4xne7AAdQssV4f9uRvo7XAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD+derEw0dJRFQuHKltmd7GWE/LV5zcw+qA3ZTmXQCQm67NBrv3rg5g7/kVh8Or9RofOEySLcb7V/eprB/p27WaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANh/BmpbkhYjIq2107RYjPhJRAxGTzIxWS4NR8RPI+LTQk9f1u/Lu2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6bmZufmqsXC5Na2ho5NtI9kcZ9Ubef5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMjDzNz81Fi5XJqeybsSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIG8zc/NTY+VyaXobjfsvsvOaRt4ZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIzw8BAAD//2n2GFE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.247' (ED25519) to the list of known hosts. [ 63.304762][ T4176] cgroup: Unknown subsys name 'net' [ 63.439864][ T4176] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.957332][ T4176] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 66.451618][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 66.480272][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 66.510269][ T4199] chnl_net:caif_netlink_parms(): no params data found [ 66.560731][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 66.583775][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 66.720928][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.728839][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.737536][ T4189] device bridge_slave_0 entered promiscuous mode [ 66.757242][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.764574][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.773286][ T4190] device bridge_slave_0 entered promiscuous mode [ 66.784759][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.791859][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.800761][ T4189] device bridge_slave_1 entered promiscuous mode [ 66.822880][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.829992][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.838043][ T4190] device bridge_slave_1 entered promiscuous mode [ 66.878319][ T4199] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.885546][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.893792][ T4199] device bridge_slave_0 entered promiscuous mode [ 66.908345][ T4199] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.915596][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.923784][ T4199] device bridge_slave_1 entered promiscuous mode [ 66.935170][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.952149][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.960044][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.968315][ T4191] device bridge_slave_0 entered promiscuous mode [ 66.982586][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.989713][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.998008][ T4191] device bridge_slave_1 entered promiscuous mode [ 67.005910][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.013063][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.021372][ T4188] device bridge_slave_0 entered promiscuous mode [ 67.030693][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.042131][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.060037][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.076557][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.084055][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.092282][ T4188] device bridge_slave_1 entered promiscuous mode [ 67.108352][ T4199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.120078][ T4199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.153379][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.171488][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.198248][ T4189] team0: Port device team_slave_0 added [ 67.213408][ T4190] team0: Port device team_slave_0 added [ 67.234006][ T4189] team0: Port device team_slave_1 added [ 67.241822][ T4199] team0: Port device team_slave_0 added [ 67.250066][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.261522][ T4190] team0: Port device team_slave_1 added [ 67.285072][ T4199] team0: Port device team_slave_1 added [ 67.301073][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.328509][ T4191] team0: Port device team_slave_0 added [ 67.342810][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.349791][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.376045][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.404692][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.411683][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.437723][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.450331][ T4191] team0: Port device team_slave_1 added [ 67.472968][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.479953][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.506079][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.519997][ T4188] team0: Port device team_slave_0 added [ 67.526543][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.534466][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.560473][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.578508][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.585661][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.611714][ T4199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.624619][ T4188] team0: Port device team_slave_1 added [ 67.630918][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.637989][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.664133][ T4199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.700569][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.707622][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.734034][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.775413][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.782406][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.808918][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.839492][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.846692][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.872760][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.901973][ T4190] device hsr_slave_0 entered promiscuous mode [ 67.909157][ T4190] device hsr_slave_1 entered promiscuous mode [ 67.920029][ T4199] device hsr_slave_0 entered promiscuous mode [ 67.927214][ T4199] device hsr_slave_1 entered promiscuous mode [ 67.934050][ T4199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.941929][ T4199] Cannot create hsr debugfs directory [ 67.947986][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.955037][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.981050][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.000099][ T4189] device hsr_slave_0 entered promiscuous mode [ 68.007252][ T4189] device hsr_slave_1 entered promiscuous mode [ 68.015015][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.022578][ T4189] Cannot create hsr debugfs directory [ 68.083801][ T4191] device hsr_slave_0 entered promiscuous mode [ 68.090590][ T4191] device hsr_slave_1 entered promiscuous mode [ 68.095750][ T4201] Bluetooth: hci4: command 0x0409 tx timeout [ 68.098364][ T4195] Bluetooth: hci1: command 0x0409 tx timeout [ 68.110050][ T4195] Bluetooth: hci3: command 0x0409 tx timeout [ 68.114129][ T4201] Bluetooth: hci2: command 0x0409 tx timeout [ 68.122602][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.130296][ T4191] Cannot create hsr debugfs directory [ 68.158311][ T4188] device hsr_slave_0 entered promiscuous mode [ 68.165652][ T4188] device hsr_slave_1 entered promiscuous mode [ 68.172638][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.180663][ T4195] Bluetooth: hci0: command 0x0409 tx timeout [ 68.187359][ T4188] Cannot create hsr debugfs directory [ 68.525181][ T4189] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.537925][ T4189] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.553748][ T4189] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.572251][ T4189] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.620802][ T4199] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.637281][ T4199] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.655188][ T4199] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.671107][ T4199] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.701510][ T4190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.721899][ T4190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.749884][ T4190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.760787][ T4190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.830769][ T4191] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.862179][ T4191] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.872541][ T4191] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.886148][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.908986][ T4191] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.941940][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.972624][ T4199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.981243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.992052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.011660][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.022357][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.041631][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.053287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.063667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.072757][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.080041][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.090307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.101276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.110228][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.117338][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.126300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.135910][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.147924][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.176345][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.199747][ T4199] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.209688][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.218966][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.228715][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.237699][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.246990][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.260227][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.272497][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.283747][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.309916][ T4189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.324112][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.337706][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.345804][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.355028][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.362944][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.371564][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.381382][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.391175][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.400296][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.407426][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.415595][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.424193][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.432624][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.441658][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.451449][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.458589][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.468795][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.476975][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.492406][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.503009][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.538787][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.549789][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.559194][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.566335][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.577791][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.586725][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.614917][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.629090][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.639085][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.647904][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.660541][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.671311][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.678469][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.687995][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.697541][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.708291][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.738434][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.747689][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.757998][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.767247][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.779338][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.789079][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.801353][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.811373][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.834374][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.855680][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.870209][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.880329][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.888849][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.897834][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.906691][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.920752][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.934737][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.949436][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.958762][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.965905][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.997576][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.009899][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.020639][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.029665][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.039375][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.049174][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.056325][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.065587][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.075640][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.130062][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.145101][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.159947][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.171179][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.173973][ T1108] Bluetooth: hci2: command 0x041b tx timeout [ 70.181372][ T23] Bluetooth: hci1: command 0x041b tx timeout [ 70.193066][ T1108] Bluetooth: hci3: command 0x041b tx timeout [ 70.201198][ T1108] Bluetooth: hci4: command 0x041b tx timeout [ 70.207427][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.218762][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.229796][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.239159][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.251423][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.258363][ T1108] Bluetooth: hci0: command 0x041b tx timeout [ 70.272253][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.284767][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.301250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.310325][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.319244][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.330277][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.341159][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.350920][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.367545][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.404811][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.423215][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.456501][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.468019][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.500219][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.525069][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.535355][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.544930][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.552053][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.598497][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.609808][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.618053][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.630071][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.641552][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.659343][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.666611][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.690992][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.701659][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.714466][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.722091][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.731395][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.743571][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.757080][ T4189] device veth0_vlan entered promiscuous mode [ 70.789299][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.809836][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.831325][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.840484][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.848297][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.856290][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.864606][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.882035][ T4189] device veth1_vlan entered promiscuous mode [ 70.918761][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.929743][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.942579][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.986724][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.001849][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.011671][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.024488][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.033764][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.042197][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.050809][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.060248][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.070037][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.079496][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.089772][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.116243][ T4199] device veth0_vlan entered promiscuous mode [ 71.124236][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.139172][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.149633][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.166525][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.180049][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.190361][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.209338][ T4199] device veth1_vlan entered promiscuous mode [ 71.243171][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.252307][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.264716][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.290293][ T4191] device veth0_vlan entered promiscuous mode [ 71.300269][ T4189] device veth0_macvtap entered promiscuous mode [ 71.309942][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.324275][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.332623][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.342264][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.368938][ T4199] device veth0_macvtap entered promiscuous mode [ 71.387728][ T4189] device veth1_macvtap entered promiscuous mode [ 71.398740][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.408597][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.416682][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.426925][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.437328][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.447394][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.457817][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.464702][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.473709][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.474606][ T4191] device veth1_vlan entered promiscuous mode [ 71.505052][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.515137][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.530043][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.550757][ T4199] device veth1_macvtap entered promiscuous mode [ 71.581975][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.608360][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.618505][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.629491][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.639948][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.648597][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.671785][ T4190] device veth0_vlan entered promiscuous mode [ 71.684506][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.692588][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.704718][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.719089][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.727465][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.735562][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.745566][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.754766][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.764227][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.773348][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.785219][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.793025][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.808465][ T4191] device veth0_macvtap entered promiscuous mode [ 71.819385][ T4189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.829471][ T4189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.838611][ T4189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.847967][ T4189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.866151][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.875667][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.885213][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.895488][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.906213][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.917634][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.936848][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.944728][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.967919][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.978858][ T4191] device veth1_macvtap entered promiscuous mode [ 71.993747][ T4199] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.002506][ T4199] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.013332][ T4199] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.022069][ T4199] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.038423][ T4190] device veth1_vlan entered promiscuous mode [ 72.070569][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.081267][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.093908][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.106134][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.118002][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.146009][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.155290][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.164352][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.176227][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.187305][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.197645][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.208246][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.219700][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.250783][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.254846][ T1326] Bluetooth: hci4: command 0x040f tx timeout [ 72.270426][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.280989][ T1326] Bluetooth: hci1: command 0x040f tx timeout [ 72.293723][ T1326] Bluetooth: hci3: command 0x040f tx timeout [ 72.311077][ T1326] Bluetooth: hci2: command 0x040f tx timeout [ 72.318930][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.334115][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 72.346014][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.355912][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.365035][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.386264][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.397927][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.408744][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.419282][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.447351][ T4190] device veth0_macvtap entered promiscuous mode [ 72.466385][ T4190] device veth1_macvtap entered promiscuous mode [ 72.511857][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.522493][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.533326][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.544767][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.554796][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.565489][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.577529][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.601267][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.610638][ T4250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.622508][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.632372][ T4250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.641520][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.651323][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.660788][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.670762][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.681958][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.692316][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.703175][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.713190][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.723682][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.735640][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.764578][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.774710][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.785840][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.795433][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.804393][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.812350][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.832380][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.844436][ T4244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.852310][ T4244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.858942][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.868808][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.877885][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.907307][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.920387][ T4188] device veth0_vlan entered promiscuous mode [ 72.954765][ T4244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.967686][ T4244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.981310][ T4244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.990488][ T4244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.021355][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.031919][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.065608][ T4188] device veth1_vlan entered promiscuous mode [ 73.084596][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.103274][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.118528][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.136024][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.230501][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.238610][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.252725][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.260416][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.275624][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.354852][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.373658][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.393781][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.413052][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.450159][ T4188] device veth0_macvtap entered promiscuous mode [ 73.494817][ T4188] device veth1_macvtap entered promiscuous mode [ 73.551834][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.572796][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.607272][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.639479][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.676326][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.697364][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.717782][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.738379][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.766362][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.789777][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.793264][ T4244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.805303][ T4244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.823930][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.860001][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.885230][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.909029][ T4270] loop2: detected capacity change from 0 to 32768 [ 73.922252][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.954334][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.971624][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.982408][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.999815][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.010112][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.028706][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.039051][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.056365][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.070823][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.096444][ T4270] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.3 (4270) [ 74.113070][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.144591][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.201765][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.204721][ T4270] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 74.238102][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.253604][ T4270] BTRFS info (device loop2): setting nodatacow, compression disabled [ 74.257425][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.261838][ T4270] BTRFS info (device loop2): force clearing of disk cache [ 74.284434][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.333286][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 74.340037][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 74.357800][ T4272] loop3: detected capacity change from 0 to 32768 [ 74.362515][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 74.401289][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 74.409145][ T4270] BTRFS info (device loop2): turning off barriers [ 74.432793][ T4270] BTRFS info (device loop2): use no compression [ 74.438423][ T1326] Bluetooth: hci0: command 0x0419 tx timeout [ 74.515432][ T4270] BTRFS info (device loop2): disabling free space tree [ 74.523245][ T4270] BTRFS info (device loop2): enabling ssd optimizations [ 74.531045][ T4270] BTRFS info (device loop2): using spread ssd allocation scheme [ 74.539991][ T4270] BTRFS info (device loop2): not using ssd optimizations [ 74.557670][ T4272] XFS (loop3): Mounting V5 Filesystem [ 74.569969][ T4270] BTRFS info (device loop2): not using spread ssd allocation scheme [ 74.599988][ T4270] BTRFS info (device loop2): has skinny extents [ 74.659440][ T4250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.709720][ T4250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.779547][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.810425][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.839940][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.851223][ T4272] XFS (loop3): Ending clean mount [ 74.878821][ T4272] XFS (loop3): Quotacheck needed: Please wait. [ 74.954623][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.023341][ T4305] loop0: detected capacity change from 0 to 512 [ 75.050538][ T4272] XFS (loop3): Quotacheck: Done. [ 75.121163][ T4317] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 75.183280][ T4270] BTRFS info (device loop2): clearing free space tree [ 75.245355][ T4270] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 75.254302][ T4305] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.6: iget: bad i_size value: 38620345925642 [ 75.267894][ T4270] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 75.344842][ T4305] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.6: couldn't read orphan inode 15 (err -117) [ 75.407610][ T4270] BTRFS info (device loop2): checking UUID tree [ 75.419279][ T4305] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,delalloc,acl,journal_dev=0x0000000000000011,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback. [ 75.446378][ T4323] loop1: detected capacity change from 0 to 256 [ 75.591538][ T4323] FAT-fs (loop1): Directory bread(block 64) failed [ 75.608975][ T4189] XFS (loop3): Unmounting Filesystem [ 75.631767][ T26] audit: type=1800 audit(1781306242.523:2): pid=4270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 75.641087][ T4323] FAT-fs (loop1): Directory bread(block 65) failed [ 75.641212][ T4323] FAT-fs (loop1): Directory bread(block 66) failed [ 75.641248][ T4323] FAT-fs (loop1): Directory bread(block 67) failed [ 75.641402][ T4323] FAT-fs (loop1): Directory bread(block 68) failed [ 75.641437][ T4323] FAT-fs (loop1): Directory bread(block 69) failed [ 75.641511][ T4323] FAT-fs (loop1): Directory bread(block 70) failed [ 75.641544][ T4323] FAT-fs (loop1): Directory bread(block 71) failed [ 75.641615][ T4323] FAT-fs (loop1): Directory bread(block 72) failed [ 75.641648][ T4323] FAT-fs (loop1): Directory bread(block 73) failed [ 75.723433][ T4270] BTRFS info (device loop2): balance: start [ 75.724133][ T4270] BTRFS info (device loop2): balance: ended with status: 0 [ 76.094556][ T4318] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 76.388838][ T4250] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 672 with error 28 [ 76.513224][ T4250] EXT4-fs (loop0): This should not happen!! Data will be lost [ 76.513224][ T4250] [ 76.534087][ T4250] EXT4-fs (loop0): Total free blocks count 0 [ 76.540287][ T4250] EXT4-fs (loop0): Free/Dirty block details [ 76.552176][ T4250] EXT4-fs (loop0): free_blocks=0 [ 76.575381][ T4250] EXT4-fs (loop0): dirty_blocks=672 [ 76.599698][ T4250] EXT4-fs (loop0): Block reservation details [ 76.622982][ T4250] EXT4-fs (loop0): i_reserved_data_blocks=672 [ 76.660539][ T4348] loop1: detected capacity change from 0 to 512 [ 76.711160][ T4337] loop3: detected capacity change from 0 to 8192 [ 76.774342][ T4350] binder_alloc: 4349: binder_alloc_buf, no vma [ 76.794722][ T4348] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 76.815498][ T4348] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.352165][ T4368] loop0: detected capacity change from 0 to 512 [ 77.569163][ T4367] loop2: detected capacity change from 0 to 764 [ 78.952690][ C0] sched: RT throttling activated [ 79.024310][ T4368] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 79.037541][ T4368] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 79.457998][ T4367] Symlink component flag not implemented [ 79.590681][ T4367] Symlink component flag not implemented [ 80.165862][ T4368] EXT4-fs: error -4 creating inode table initialization thread [ 80.174147][ T4368] EXT4-fs (loop0): mount failed [ 80.711902][ T4393] binder: BINDER_SET_CONTEXT_MGR already set [ 80.731287][ T4393] binder: 4391:4393 ioctl 4018620d 200000004a80 returned -16 [ 80.797147][ T4397] loop2: detected capacity change from 0 to 512 [ 80.957184][ T4403] loop3: detected capacity change from 0 to 512 [ 81.018111][ T4403] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 81.539964][ T4414] loop3: detected capacity change from 0 to 128 [ 81.552506][ T4415] 9pnet: Insufficient options for proto=fd [ 81.705685][ T4418] xt_hashlimit: size too large, truncated to 1048576 [ 81.832805][ T1108] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 82.039881][ T4430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.44'. [ 82.072523][ T4430] netlink: 52 bytes leftover after parsing attributes in process `syz.3.44'. [ 82.103183][ T4431] usb usb8: usbfs: process 4431 (syz.2.43) did not claim interface 2 before use [ 82.121170][ T4430] Zero length message leads to an empty skb [ 82.228627][ T1108] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 82.254443][ T1108] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.275664][ T4433] syz.3.45 uses obsolete (PF_INET,SOCK_PACKET) [ 82.289758][ T1108] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 82.309278][ T1108] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.322211][ T4435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.419784][ T4435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.453288][ T1108] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 82.482769][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 82.493045][ T1108] usb 2-1: Product: syz [ 82.497251][ T1108] usb 2-1: Manufacturer: syz [ 82.567207][ T1108] cdc_wdm 2-1:1.0: skipping garbage [ 82.572646][ T1108] cdc_wdm 2-1:1.0: skipping garbage [ 82.604545][ T1108] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 82.621253][ T1108] cdc_wdm 2-1:1.0: Unknown control protocol [ 82.655768][ T4436] device ip_vti0 entered promiscuous mode [ 82.697568][ T4436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.46'. [ 82.752664][ T4436] syz.2.46 (4436) used greatest stack depth: 20432 bytes left [ 83.188719][ T4448] loop2: detected capacity change from 0 to 512 [ 83.434387][ T4448] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 84.190267][ T4468] capability: warning: `syz.3.59' uses 32-bit capabilities (legacy support in use) [ 84.231655][ T4468] program syz.3.59 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.628449][ T4195] usb 2-1: USB disconnect, device number 2 [ 86.510794][ T4502] loop1: detected capacity change from 0 to 1764 [ 86.827894][ T1111] cfg80211: failed to load regulatory.db [ 86.994946][ T4508] binder: BINDER_SET_CONTEXT_MGR already set [ 87.085108][ T4508] binder: 4506:4508 ioctl 4018620d 200000004a80 returned -16 [ 87.200050][ T4515] (unnamed net_device) (uninitialized): peer notification delay (5) is not a multiple of miimon (8), value rounded to 0 ms [ 87.368641][ T4515] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.429399][ T4521] device syzkaller0 entered promiscuous mode [ 87.500777][ T4521] TC_ACT_REPEAT abuse ? [ 87.809219][ T4535] loop2: detected capacity change from 0 to 1024 [ 87.883284][ T4535] ======================================================= [ 87.883284][ T4535] WARNING: The mand mount option has been deprecated and [ 87.883284][ T4535] and is ignored by this kernel. Remove the mand [ 87.883284][ T4535] option from the mount to silence this warning. [ 87.883284][ T4535] ======================================================= [ 87.968034][ T4532] syz.4.88 (4532) used greatest stack depth: 20208 bytes left [ 88.063019][ T4535] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 88.201117][ T4535] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,init_itable,mblk_io_submit,init_itable=0x0000000000000040,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 88.319062][ T4535] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.493665][ T4489] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: comm kworker/u4:8: lblock 0 mapped to illegal pblock 0 (length 1) [ 88.578416][ T4489] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 88.642751][ T4489] EXT4-fs (loop2): This should not happen!! Data will be lost [ 88.642751][ T4489] [ 88.811645][ T4559] device syzkaller0 entered promiscuous mode [ 88.915577][ T4561] binder: BINDER_SET_CONTEXT_MGR already set [ 88.921619][ T4561] binder: 4560:4561 ioctl 4018620d 200000004a80 returned -16 [ 88.948039][ T4565] sg_write: process 44 (syz.1.102) changed security contexts after opening file descriptor, this is not allowed. [ 89.240103][ T4537] loop3: detected capacity change from 0 to 32768 [ 89.392413][ T4537] XFS (loop3): Mounting V5 Filesystem [ 89.645237][ T4537] XFS (loop3): Ending clean mount [ 91.446837][ T4597] netlink: 200 bytes leftover after parsing attributes in process `syz.1.111'. [ 92.363947][ T4189] XFS (loop3): Unmounting Filesystem [ 93.163383][ T4622] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.171386][ T4622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.211844][ T4624] binder: BINDER_SET_CONTEXT_MGR already set [ 93.250224][ T4624] binder: 4623:4624 ioctl 4018620d 200000004a80 returned -16 [ 94.109964][ T4622] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.213589][ T4622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.555651][ T4635] loop3: detected capacity change from 0 to 1024 [ 94.563596][ T4634] netlink: 28 bytes leftover after parsing attributes in process `syz.1.125'. [ 94.738740][ T4634] loop1: detected capacity change from 0 to 512 [ 94.974642][ T4634] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,grpjquota=,sysvgroups,abort,. Quota mode: writeback. [ 95.018019][ T4646] loop0: detected capacity change from 0 to 512 [ 95.099758][ T4634] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.121962][ T4649] device macsec1 entered promiscuous mode [ 95.165721][ T4646] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,errors=remount-ro,usrjquota=,sysvgroups,usrquota,. Quota mode: writeback. [ 95.188186][ T4634] EXT4-fs error (device loop1): ext4_empty_dir:3145: inode #12: block 32: comm syz.1.125: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 95.221866][ T4646] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.332877][ T4634] EXT4-fs (loop1): Remounting filesystem read-only [ 95.352806][ T4634] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #12: comm syz.1.125: directory missing '.' [ 95.366422][ T4646] EXT4-fs error (device loop0): ext4_lookup:1858: inode #12: comm syz.0.129: iget: bad i_size value: 2533274857506816 [ 95.423234][ T4646] EXT4-fs (loop0): Remounting filesystem read-only [ 95.971017][ T4639] loop2: detected capacity change from 0 to 32768 [ 96.809337][ T4639] XFS (loop2): Mounting V5 Filesystem [ 96.916046][ T4681] process 'syz.4.139' launched './file0' with NULL argv: empty string added [ 96.981393][ T4639] XFS (loop2): Ending clean mount [ 97.044014][ T4686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.073822][ T4686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.113414][ T4686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.131674][ T4686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.180625][ T4686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.218990][ T4690] loop4: detected capacity change from 0 to 1024 [ 97.243920][ T4686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.280431][ T4692] program syz.1.144 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.573028][ T21] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 97.780410][ T4711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.152'. [ 97.989059][ T4717] netlink: 'syz.0.156': attribute type 1 has an invalid length. [ 98.057868][ T4338] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.250575][ T4721] device syzkaller1 entered promiscuous mode [ 98.372808][ T21] usb 3-1: unable to get BOS descriptor or descriptor too short [ 99.533087][ T21] usb 3-1: no configurations [ 99.537906][ T21] usb 3-1: can't read configurations, error -22 [ 99.591637][ T4199] XFS (loop2): Unmounting Filesystem [ 100.564282][ T4338] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 100.573030][ T4338] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.583399][ T4338] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 100.592936][ T4338] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.629581][ T4742] loop2: detected capacity change from 0 to 512 [ 100.653359][ T4338] usb 4-1: string descriptor 0 read error: -71 [ 100.664281][ T4338] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 100.677290][ T4742] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 100.713267][ T4338] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 100.780370][ T4742] EXT4-fs (loop2): 1 truncate cleaned up [ 100.791008][ T4338] usb 4-1: can't set config #1, error -71 [ 100.792007][ T4749] loop3: detected capacity change from 0 to 512 [ 100.813469][ T4742] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none. [ 100.832642][ T4338] usb 4-1: USB disconnect, device number 2 [ 100.908409][ T4749] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 100.967859][ T4749] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.351467][ T4758] loop4: detected capacity change from 0 to 32768 [ 101.506768][ T4758] XFS (loop4): Mounting V5 Filesystem [ 101.633543][ T4758] XFS (loop4): Ending clean mount [ 101.641262][ T4781] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 101.771138][ T4785] loop1: detected capacity change from 0 to 128 [ 101.832993][ T21] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 101.862627][ T4785] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000000001,nodelalloc,,errors=continue. Quota mode: none. [ 101.906357][ T4785] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.947668][ T4790] device syzkaller0 entered promiscuous mode [ 101.996690][ T4792] loop0: detected capacity change from 0 to 512 [ 102.011804][ T4790] tipc: Started in network mode [ 102.028938][ T4790] tipc: Node identity 92aadd85276b, cluster identity 4711 [ 102.037778][ T4790] tipc: Enabled bearer , priority 0 [ 102.099460][ T4790] tipc: Resetting bearer [ 102.121257][ T4788] tipc: Resetting bearer [ 102.128708][ T4792] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 102.154506][ T4792] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.202816][ T4232] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 102.224491][ T4788] tipc: Disabling bearer [ 102.243082][ T21] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 102.251739][ T21] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.292487][ T21] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 102.332615][ T21] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.422341][ T4801] netlink: 28 bytes leftover after parsing attributes in process `syz.0.183'. [ 102.463688][ T4801] netlink: 16 bytes leftover after parsing attributes in process `syz.0.183'. [ 102.501525][ T4804] loop3: detected capacity change from 0 to 128 [ 102.527994][ T21] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 102.550797][ T21] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 102.571254][ T21] usb 3-1: Product: syz [ 102.576952][ T21] usb 3-1: Manufacturer: syz [ 102.621457][ T4804] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 102.649341][ T4804] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 102.661800][ T21] cdc_wdm 3-1:1.0: skipping garbage [ 102.667742][ T21] cdc_wdm 3-1:1.0: skipping garbage [ 102.675884][ T21] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 102.681826][ T21] cdc_wdm 3-1:1.0: Unknown control protocol [ 102.731024][ T4816] loop0: detected capacity change from 0 to 512 [ 102.844401][ T4816] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 102.863800][ T4816] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.692215][ T4826] loop0: detected capacity change from 0 to 1024 [ 104.022823][ T4232] usb 5-1: unable to get BOS descriptor or descriptor too short [ 104.071387][ T4190] XFS (loop4): Unmounting Filesystem [ 104.108621][ T26] audit: type=1800 audit(1781306271.003:3): pid=4826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.190" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 104.114176][ T4232] usb 5-1: no configurations [ 104.134556][ T4232] usb 5-1: can't read configurations, error -22 [ 104.586656][ T4845] device syzkaller0 entered promiscuous mode [ 105.656284][ T23] usb 3-1: USB disconnect, device number 4 [ 105.769875][ T4862] loop4: detected capacity change from 0 to 1024 [ 105.837994][ T4862] EXT4-fs (loop4): Mount option "dioread_nolock" incompatible with ext2 [ 106.211457][ T4886] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 106.219280][ T4886] IPv6: NLM_F_CREATE should be set when creating new route [ 106.246547][ T4855] loop3: detected capacity change from 0 to 32768 [ 106.394347][ T4888] device syzkaller1 entered promiscuous mode [ 106.417267][ T4895] vcan0: tx address claim with different name [ 106.441429][ T4855] XFS (loop3): Mounting V5 Filesystem [ 106.517879][ T4855] XFS (loop3): Ending clean mount [ 106.755072][ T4189] XFS (loop3): Unmounting Filesystem [ 106.928156][ T4907] team0: Device xfrm0 is of different type [ 107.048002][ T4911] tipc: Started in network mode [ 107.083036][ T4911] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 107.107728][ T4911] tipc: Enabled bearer , priority 0 [ 107.136207][ T4910] device syzkaller0 entered promiscuous mode [ 107.319854][ T4920] loop2: detected capacity change from 0 to 128 [ 107.359720][ T4917] loop4: detected capacity change from 0 to 4096 [ 107.536707][ T4926] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 107.555300][ T4917] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 107.676383][ T26] audit: type=1800 audit(1781306274.573:4): pid=4917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.225" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 108.225021][ T4338] tipc: Node number set to 11578026 [ 108.675966][ T4936] loop2: detected capacity change from 0 to 32768 [ 108.692088][ T4965] device syzkaller0 entered promiscuous mode [ 108.858335][ T4936] XFS (loop2): Mounting V5 Filesystem [ 108.991123][ T4936] XFS (loop2): Ending clean mount [ 109.121377][ T4970] device syzkaller0 entered promiscuous mode [ 109.160148][ T4982] netlink: 16 bytes leftover after parsing attributes in process `syz.3.239'. [ 109.432098][ T4199] XFS (loop2): Unmounting Filesystem [ 109.831282][ T4998] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.840557][ T4998] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.849357][ T4998] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.859014][ T4998] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.877807][ T4998] team0: Port device vxlan0 added [ 110.142067][ T5009] loop4: detected capacity change from 0 to 256 [ 111.079002][ T5017] loop0: detected capacity change from 0 to 32768 [ 111.131007][ T5042] capability: warning: `syz.2.256' uses deprecated v2 capabilities in a way that may be insecure [ 111.177166][ T5017] XFS (loop0): Mounting V5 Filesystem [ 111.461158][ T5017] XFS (loop0): Ending clean mount [ 111.730871][ T5090] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 111.757889][ T5091] loop2: detected capacity change from 0 to 512 [ 111.831825][ T4191] XFS (loop0): Unmounting Filesystem [ 111.942475][ T5091] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.259: inode has both inline data and extents flags [ 112.014920][ T5091] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.259: couldn't read orphan inode 15 (err -117) [ 112.027798][ T5091] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 112.092420][ T5098] program syz.4.261 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.112134][ T5101] loop1: detected capacity change from 0 to 256 [ 112.708626][ T5116] loop0: detected capacity change from 0 to 4096 [ 112.828759][ T5116] EXT4-fs (loop0): inline encryption not supported [ 112.935638][ T5125] loop1: detected capacity change from 0 to 512 [ 114.587100][ T5125] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 114.742998][ T5116] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0003] [ 114.799001][ T5125] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 114.817554][ T5125] EXT4-fs (loop1): 1 truncate cleaned up [ 114.823326][ T5125] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 114.960787][ T5125] autofs4:pid:5125:autofs_fill_super: called with bogus options [ 115.050547][ T5123] device syzkaller0 entered promiscuous mode [ 115.222956][ T5116] System zones: 0-5 [ 115.254863][ T5116] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,discard,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 115.389434][ T5114] loop2: detected capacity change from 0 to 32768 [ 115.967200][ T5137] device syzkaller0 entered promiscuous mode [ 115.977708][ T5135] loop1: detected capacity change from 0 to 512 [ 115.992637][ T5139] loop2: detected capacity change from 0 to 128 [ 116.070386][ T26] audit: type=1800 audit(1781306282.963:5): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.278" name="file1" dev="loop2" ino=1048594 res=0 errno=0 [ 116.108412][ T5139] attempt to access beyond end of device [ 116.108412][ T5139] loop2: rw=2049, want=156, limit=128 [ 116.136767][ T5135] EXT4-fs (loop1): Unrecognized mount option "euid<00000000000000000000" or missing value [ 116.913590][ T4244] tipc: Subscription rejected, illegal request [ 117.037013][ T5159] loop0: detected capacity change from 0 to 512 [ 117.114044][ T5159] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.286: bad orphan inode 13 [ 117.150862][ T5148] loop1: detected capacity change from 0 to 32768 [ 117.168724][ T5159] ext4_test_bit(bit=12, block=4) = 1 [ 117.182830][ T5159] is_bad_inode(inode)=0 [ 117.187041][ T5159] NEXT_ORPHAN(inode)=0 [ 117.191138][ T5159] max_ino=32 [ 117.202993][ T5159] i_nlink=1 [ 117.206217][ T5159] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 117.259912][ T5148] XFS (loop1): Mounting V5 Filesystem [ 117.476186][ T5172] loop0: detected capacity change from 0 to 256 [ 117.531169][ T5148] XFS (loop1): Ending clean mount [ 117.815183][ T5175] netlink: 'syz.0.288': attribute type 1 has an invalid length. [ 117.902909][ T4338] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 117.927150][ T5175] device bond1 entered promiscuous mode [ 117.933347][ T5175] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.973112][ T5178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.288'. [ 118.055197][ T5178] bond1 (unregistering): Released all slaves [ 118.489157][ T5189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.293'. [ 118.922973][ T4338] usb 2-1: unable to get BOS descriptor or descriptor too short [ 119.002875][ T4338] usb 2-1: no configurations [ 119.007664][ T4338] usb 2-1: can't read configurations, error -22 [ 119.375127][ T5206] device ip6gretap0 entered promiscuous mode [ 119.382004][ T5206] device Ÿë entered promiscuous mode [ 119.445524][ T4188] XFS (loop1): Unmounting Filesystem [ 119.498682][ T5211] loop2: detected capacity change from 0 to 512 [ 119.656248][ T5221] netlink: 24 bytes leftover after parsing attributes in process `syz.4.308'. [ 119.665218][ T5211] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,grpjquota=,sysvgroups,abort,. Quota mode: writeback. [ 119.665345][ T5211] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.710798][ T5211] EXT4-fs error (device loop2): ext4_empty_dir:3145: inode #12: block 32: comm syz.2.305: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 119.781756][ T5211] EXT4-fs (loop2): Remounting filesystem read-only [ 119.788577][ T5211] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz.2.305: directory missing '.' [ 119.965119][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.997478][ T23] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 120.192226][ T5234] netlink: 72 bytes leftover after parsing attributes in process `syz.1.304'. [ 120.217106][ T5230] fido_id[5230]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 120.259410][ T5238] loop4: detected capacity change from 0 to 512 [ 120.328478][ T5240] loop2: detected capacity change from 0 to 512 [ 120.329191][ T5238] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 120.379507][ T5238] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.315: bad orphan inode 131083 [ 120.400626][ T5238] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 120.471358][ T26] audit: type=1800 audit(1781306287.363:6): pid=5238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.315" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 120.506113][ T5240] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 120.636550][ T5240] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.316: bg 0: block 104: invalid block bitmap [ 120.738776][ T5236] loop3: detected capacity change from 0 to 32768 [ 120.761580][ T5240] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 120.786912][ T5254] device syzkaller0 entered promiscuous mode [ 120.813657][ T5240] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.316: invalid indirect mapped block 1 (level 1) [ 120.840929][ T5240] EXT4-fs (loop2): 1 truncate cleaned up [ 120.858074][ T5240] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 120.947172][ T5236] XFS (loop3): Mounting V5 Filesystem [ 121.011175][ T5236] XFS (loop3): Ending clean mount [ 121.320682][ T5281] loop2: detected capacity change from 0 to 512 [ 121.394576][ T5281] EXT4-fs (loop2): Ignoring removed oldalloc option [ 121.412729][ T23] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 121.482993][ T5281] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,dioread_lock,oldalloc,block_validity,,errors=continue. Quota mode: writeback. [ 122.055184][ T5308] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 122.262886][ T23] usb 4-1: unable to get BOS descriptor or descriptor too short [ 122.344836][ T23] usb 4-1: no configurations [ 122.350760][ T23] usb 4-1: can't read configurations, error -22 [ 122.412575][ T5312] loop1: detected capacity change from 0 to 512 [ 122.539931][ T5312] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 122.690242][ T5312] EXT4-fs (loop1): 1 truncate cleaned up [ 122.696232][ T5312] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 123.290101][ T4189] XFS (loop3): Unmounting Filesystem [ 123.928612][ T5263] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 124.151056][ T5316] loop0: detected capacity change from 0 to 512 [ 124.284199][ T5316] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 124.322984][ T5316] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 124.375618][ T5316] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 124.445869][ T5316] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 124.476326][ T5316] System zones: 0-2, 18-18, 34-35 [ 124.483337][ T5316] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 124.529248][ T26] audit: type=1800 audit(1781306291.423:7): pid=5316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.342" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 124.667639][ T5337] loop1: detected capacity change from 0 to 512 [ 124.760341][ T5337] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 124.782929][ T5337] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.816603][ T5341] loop3: detected capacity change from 0 to 8192 [ 124.986070][ T5349] loop0: detected capacity change from 0 to 128 [ 125.211161][ T26] audit: type=1326 audit(1781306292.103:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5354 comm="syz.1.356" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff650189e59 code=0x7ffc0000 [ 125.273472][ T5359] netlink: 'syz.0.358': attribute type 1 has an invalid length. [ 125.288021][ T26] audit: type=1326 audit(1781306292.143:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5354 comm="syz.1.356" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff650189e59 code=0x7ffc0000 [ 125.491154][ T5367] loop4: detected capacity change from 0 to 8192 [ 125.498157][ T26] audit: type=1326 audit(1781306292.143:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5354 comm="syz.1.356" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff650189e59 code=0x7ffc0000 [ 125.560365][ T5361] bond1: (slave bridge1): making interface the new active one [ 125.628154][ T26] audit: type=1326 audit(1781306292.143:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5354 comm="syz.1.356" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff650189e59 code=0x7ffc0000 [ 125.665596][ T5361] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 125.743036][ T26] audit: type=1326 audit(1781306292.143:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5354 comm="syz.1.356" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7ff650189e59 code=0x7ffc0000 [ 125.795337][ T5359] device team0 entered promiscuous mode [ 125.800961][ T5359] device team_slave_0 entered promiscuous mode [ 125.822441][ T26] audit: type=1326 audit(1781306292.153:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5354 comm="syz.1.356" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff650189e59 code=0x7ffc0000 [ 125.866498][ T5359] device team_slave_1 entered promiscuous mode [ 125.898489][ T5359] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.916511][ T26] audit: type=1326 audit(1781306292.153:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5354 comm="syz.1.356" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff650189e59 code=0x7ffc0000 [ 125.951666][ T5359] bond1: (slave team0): Enslaving as an active interface with an up link [ 126.042494][ T5381] netlink: 'syz.2.363': attribute type 4 has an invalid length. [ 126.079518][ T26] audit: type=1326 audit(1781306292.153:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5354 comm="syz.1.356" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff650189e59 code=0x7ffc0000 [ 126.104630][ T26] audit: type=1326 audit(1781306292.153:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5354 comm="syz.1.356" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7ff650189e59 code=0x7ffc0000 [ 126.363847][ T5383] loop4: detected capacity change from 0 to 8192 [ 126.467871][ T5378] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 126.476969][ T5378] FAT-fs (loop4): Filesystem has been set read-only [ 126.496679][ T5397] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.804719][ T1236] tipc: Subscription rejected, illegal request [ 126.980195][ T5418] loop2: detected capacity change from 0 to 512 [ 127.022208][ T5418] EXT4-fs (loop2): Ignoring removed bh option [ 127.113976][ T5418] EXT4-fs (loop2): 1 truncate cleaned up [ 127.155832][ T5418] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,errors=remount-ro,usrjquota=,. Quota mode: none. [ 127.351017][ T5434] netlink: 292 bytes leftover after parsing attributes in process `syz.4.389'. [ 127.392817][ T5434] netlink: 16 bytes leftover after parsing attributes in process `syz.4.389'. [ 127.440232][ T5436] binder: 5435:5436 ioctl 4018620d 0 returned -22 [ 127.978003][ T5458] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 128.110183][ T5464] loop0: detected capacity change from 0 to 1024 [ 128.212403][ T5464] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 128.310818][ T5464] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.363288][ T5474] binder: 5473:5474 ioctl 4018620d 0 returned -22 [ 128.434198][ T5464] EXT4-fs (loop0): shut down requested (2) [ 128.515969][ T5472] loop1: detected capacity change from 0 to 8192 [ 128.708252][ T5441] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 128.797724][ T5441] FAT-fs (loop1): Filesystem has been set read-only [ 128.897564][ T4338] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 129.001433][ T5498] loop0: detected capacity change from 0 to 128 [ 129.153601][ T5498] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 129.212386][ T5498] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.233512][ T5512] xt_hashlimit: size too large, truncated to 1048576 [ 129.303012][ T4338] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 129.311677][ T4338] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.359394][ T4338] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 129.383226][ T4338] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.494794][ T5516] binder: 5515:5516 ioctl 4018620d 0 returned -22 [ 129.543180][ T4338] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 129.583599][ T4338] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 129.611969][ T4338] usb 3-1: Product: syz [ 129.628494][ T4338] usb 3-1: Manufacturer: syz [ 129.738557][ T4338] cdc_wdm 3-1:1.0: skipping garbage [ 129.753347][ T4338] cdc_wdm 3-1:1.0: skipping garbage [ 129.786331][ T4338] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 129.792472][ T4338] cdc_wdm 3-1:1.0: Unknown control protocol [ 129.944378][ T1108] usb 3-1: USB disconnect, device number 5 [ 130.149650][ T5539] netlink: 'syz.4.432': attribute type 1 has an invalid length. [ 130.296328][ T5542] bond1: (slave bridge1): making interface the new active one [ 130.389045][ T5542] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 130.457706][ T5542] tipc: Resetting bearer [ 130.476308][ T5542] device team0 entered promiscuous mode [ 130.481923][ T5542] device team_slave_0 entered promiscuous mode [ 130.549645][ T5542] device team_slave_1 entered promiscuous mode [ 130.568202][ T5542] device vxlan0 entered promiscuous mode [ 130.580241][ T5551] binder: BINDER_SET_CONTEXT_MGR already set [ 130.600191][ T5542] tipc: Resetting bearer [ 130.618247][ T5551] binder: 5550:5551 ioctl 4018620d 200000004a80 returned -16 [ 130.629779][ T5542] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.653002][ T5542] tipc: Resetting bearer [ 130.660449][ T5542] bond1: (slave team0): Enslaving as an active interface with an up link [ 131.077539][ T5560] program syz.2.441 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.160807][ T5561] loop1: detected capacity change from 0 to 8192 [ 131.332770][ T5547] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 131.376964][ T5547] FAT-fs (loop1): Filesystem has been set read-only [ 131.873170][ T4195] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 131.897277][ T5584] 9pnet: Insufficient options for proto=fd [ 132.030815][ T5593] binder: BINDER_SET_CONTEXT_MGR already set [ 132.052870][ T5593] binder: 5590:5593 ioctl 4018620d 200000004a80 returned -16 [ 132.303295][ T4195] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 132.324652][ T4195] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.349938][ T4195] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 132.374034][ T4195] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.538171][ T5607] loop1: detected capacity change from 0 to 512 [ 132.544897][ T4195] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 132.563310][ T4195] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 132.580360][ T4195] usb 1-1: Product: syz [ 132.590875][ T4195] usb 1-1: Manufacturer: syz [ 132.654613][ T4195] cdc_wdm 1-1:1.0: skipping garbage [ 132.660114][ T4195] cdc_wdm 1-1:1.0: skipping garbage [ 132.671326][ T5607] EXT4-fs (loop1): Ignoring removed bh option [ 132.686288][ T5607] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 132.698746][ T4195] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 132.714745][ T4195] cdc_wdm 1-1:1.0: Unknown control protocol [ 132.726600][ T5607] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 132.766458][ T5607] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 132.788331][ T5607] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 132.804306][ T5607] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,bh,noblock_validity,,errors=continue. Quota mode: none. [ 132.827180][ T5608] loop2: detected capacity change from 0 to 8192 [ 132.879081][ T4195] usb 1-1: USB disconnect, device number 2 [ 132.897354][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.903728][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.030971][ T5603] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 133.103938][ T5603] FAT-fs (loop2): Filesystem has been set read-only [ 133.258901][ T5621] netlink: 12 bytes leftover after parsing attributes in process `syz.1.467'. [ 133.295579][ T5621] netlink: 16 bytes leftover after parsing attributes in process `syz.1.467'. [ 133.316353][ T5621] netlink: 16 bytes leftover after parsing attributes in process `syz.1.467'. [ 133.588662][ T5633] binder: BINDER_SET_CONTEXT_MGR already set [ 133.597711][ T5635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.470'. [ 133.610655][ T5633] binder: 5631:5633 ioctl 4018620d 200000004a80 returned -16 [ 133.835885][ T5643] loop2: detected capacity change from 0 to 512 [ 133.907914][ T5647] ================================================================== [ 133.916490][ T5647] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 133.925752][ T5647] Read of size 1 at addr ffff888060c14608 by task syz.4.478/5647 [ 133.933514][ T5647] [ 133.935882][ T5647] CPU: 0 PID: 5647 Comm: syz.4.478 Not tainted syzkaller #0 [ 133.943199][ T5647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 133.953297][ T5647] Call Trace: [ 133.956611][ T5647] [ 133.959581][ T5647] dump_stack_lvl+0x188/0x250 [ 133.964324][ T5647] ? show_regs_print_info+0x20/0x20 [ 133.969572][ T5647] ? load_image+0x400/0x400 [ 133.974105][ T5647] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 133.980309][ T5647] print_address_description+0x60/0x2d0 [ 133.985900][ T5647] ? xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 133.992444][ T5647] kasan_report+0xdf/0x130 [ 133.996914][ T5647] ? xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 134.003571][ T5647] xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 134.009966][ T5647] xfrm_policy_inexact_insert_node+0x950/0xb60 [ 134.016198][ T5647] xfrm_policy_inexact_alloc_chain+0x7ce/0xea0 [ 134.022402][ T5647] ? xfrm_policy_inexact_insert+0xe0/0x1460 [ 134.028345][ T5647] xfrm_policy_inexact_insert+0xe0/0x1460 [ 134.034118][ T5647] ? do_raw_spin_lock+0x128/0x2f0 [ 134.039188][ T5647] ? __rwlock_init+0x140/0x140 [ 134.043995][ T5647] ? policy_hash_bysel+0x135/0x7b0 [ 134.049158][ T5647] xfrm_policy_insert+0x112/0x930 [ 134.054226][ T5647] xfrm_add_policy+0x4f2/0x880 [ 134.059044][ T5647] ? xfrm_dump_sa_done+0xc0/0xc0 [ 134.064018][ T5647] ? apparmor_capable+0x12c/0x190 [ 134.069085][ T5647] ? __nla_parse+0x3c/0x50 [ 134.073545][ T5647] xfrm_user_rcv_msg+0x5e5/0x910 [ 134.078535][ T5647] ? xfrm_netlink_rcv+0x90/0x90 [ 134.083462][ T5647] ? xfrm_netlink_rcv+0x66/0x90 [ 134.088355][ T5647] ? __mutex_lock_common+0x465/0x2400 [ 134.093776][ T5647] ? __skb_clone+0x480/0x790 [ 134.098407][ T5647] netlink_rcv_skb+0x1f5/0x440 [ 134.103213][ T5647] ? xfrm_netlink_rcv+0x90/0x90 [ 134.108106][ T5647] ? netlink_ack+0xb50/0xb50 [ 134.112749][ T5647] ? __lock_acquire+0x7d10/0x7d10 [ 134.117821][ T5647] xfrm_netlink_rcv+0x75/0x90 [ 134.122542][ T5647] netlink_unicast+0x774/0x920 [ 134.127358][ T5647] netlink_sendmsg+0x8ba/0xbe0 [ 134.132175][ T5647] ? netlink_getsockopt+0x570/0x570 [ 134.137432][ T5647] ? aa_sock_msg_perm+0x94/0x150 [ 134.142410][ T5647] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 134.147747][ T5647] ? security_socket_sendmsg+0x7c/0xa0 [ 134.153256][ T5647] ? netlink_getsockopt+0x570/0x570 [ 134.158494][ T5647] ____sys_sendmsg+0x5b7/0x8f0 [ 134.163314][ T5647] ? __sys_sendmsg_sock+0x30/0x30 [ 134.168415][ T5647] ? import_iovec+0x6f/0xa0 [ 134.172962][ T5647] ___sys_sendmsg+0x236/0x2e0 [ 134.177690][ T5647] ? __sys_sendmsg+0x2a0/0x2a0 [ 134.182514][ T5647] ? percpu_counter_add_batch+0x13b/0x160 [ 134.188309][ T5647] __se_sys_sendmsg+0x1af/0x290 [ 134.193206][ T5647] ? __x64_sys_sendmsg+0x80/0x80 [ 134.198181][ T5647] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 134.204396][ T5647] ? lockdep_hardirqs_on+0x94/0x140 [ 134.209644][ T5647] do_syscall_64+0x4c/0xa0 [ 134.214125][ T5647] ? clear_bhb_loop+0x30/0x80 [ 134.218859][ T5647] ? clear_bhb_loop+0x30/0x80 [ 134.223587][ T5647] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.229537][ T5647] RIP: 0033:0x7f17e4cd9e59 [ 134.234004][ T5647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.249004][ T5649] loop0: detected capacity change from 0 to 4096 [ 134.253654][ T5647] RSP: 002b:00007f17e2f33028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.253735][ T5647] RAX: ffffffffffffffda RBX: 00007f17e4f52fa0 RCX: 00007f17e4cd9e59 [ 134.253752][ T5647] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 134.253767][ T5647] RBP: 00007f17e4d6fd6f R08: 0000000000000000 R09: 0000000000000000 [ 134.292542][ T5647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.300599][ T5647] R13: 00007f17e4f53038 R14: 00007f17e4f52fa0 R15: 00007fff244c1ef8 [ 134.308635][ T5647] [ 134.311693][ T5647] [ 134.314049][ T5647] Allocated by task 5647: [ 134.318415][ T5647] __kasan_kmalloc+0xb5/0xf0 [ 134.323064][ T5647] sk_prot_alloc+0xe7/0x210 [ 134.327608][ T5647] sk_alloc+0x2f/0x310 [ 134.331705][ T5647] pfkey_create+0xd8/0x560 [ 134.336158][ T5647] __sock_create+0x47b/0x900 [ 134.340785][ T5647] __sys_socket+0xe2/0x170 [ 134.345238][ T5647] __x64_sys_socket+0x76/0x80 [ 134.349946][ T5647] do_syscall_64+0x4c/0xa0 [ 134.354412][ T5647] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.360349][ T5647] [ 134.362698][ T5647] Last potentially related work creation: [ 134.368444][ T5647] kasan_save_stack+0x35/0x60 [ 134.373159][ T5647] kasan_record_aux_stack+0xb8/0x100 [ 134.378474][ T5647] call_rcu+0x189/0x950 [ 134.382669][ T5647] netlink_release+0x1369/0x17b0 [ 134.387637][ T5647] sock_close+0xd5/0x240 [ 134.391913][ T5647] __fput+0x234/0x930 [ 134.395936][ T5647] task_work_run+0x125/0x1a0 [ 134.400574][ T5647] exit_to_user_mode_loop+0x10f/0x130 [ 134.405987][ T5647] exit_to_user_mode_prepare+0xee/0x180 [ 134.411573][ T5647] syscall_exit_to_user_mode+0x16/0x40 [ 134.417081][ T5647] do_syscall_64+0x58/0xa0 [ 134.421545][ T5647] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.427473][ T5647] [ 134.429827][ T5647] Second to last potentially related work creation: [ 134.436435][ T5647] kasan_save_stack+0x35/0x60 [ 134.441150][ T5647] kasan_record_aux_stack+0xb8/0x100 [ 134.446471][ T5647] call_rcu+0x189/0x950 [ 134.450673][ T5647] netlink_release+0x1369/0x17b0 [ 134.455648][ T5647] sock_close+0xd5/0x240 [ 134.459929][ T5647] __fput+0x234/0x930 [ 134.463954][ T5647] task_work_run+0x125/0x1a0 [ 134.468585][ T5647] exit_to_user_mode_loop+0x10f/0x130 [ 134.473996][ T5647] exit_to_user_mode_prepare+0xee/0x180 [ 134.479577][ T5647] syscall_exit_to_user_mode+0x16/0x40 [ 134.485067][ T5647] do_syscall_64+0x58/0xa0 [ 134.489552][ T5647] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.495504][ T5647] [ 134.497855][ T5647] The buggy address belongs to the object at ffff888060c14000 [ 134.497855][ T5647] which belongs to the cache kmalloc-2k of size 2048 [ 134.511932][ T5647] The buggy address is located 1544 bytes inside of [ 134.511932][ T5647] 2048-byte region [ffff888060c14000, ffff888060c14800) [ 134.525413][ T5647] The buggy address belongs to the page: [ 134.531078][ T5647] page:ffffea0001830400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x60c10 [ 134.541258][ T5647] head:ffffea0001830400 order:3 compound_mapcount:0 compound_pincount:0 [ 134.549611][ T5647] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 134.557650][ T5647] raw: 00fff00000010200 ffffea0001d2dc00 0000000200000002 ffff888016c42000 [ 134.566262][ T5647] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 134.574862][ T5647] page dumped because: kasan: bad access detected [ 134.581302][ T5647] page_owner tracks the page as allocated [ 134.587037][ T5647] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4191, ts 68057380131, free_ts 24945311205 [ 134.606171][ T5647] get_page_from_freelist+0x1bbd/0x1ca0 [ 134.611759][ T5647] __alloc_pages+0x1ee/0x480 [ 134.616398][ T5647] new_slab+0xc0/0x4b0 [ 134.620498][ T5647] ___slab_alloc+0x80a/0xdd0 [ 134.625118][ T5647] __kmalloc+0x1cd/0x330 [ 134.629399][ T5647] __register_sysctl_table+0xe0/0x1230 [ 134.634974][ T5647] __devinet_sysctl_register+0x2ca/0x3a0 [ 134.640640][ T5647] devinet_sysctl_register+0x17c/0x1f0 [ 134.646141][ T5647] inetdev_init+0x28c/0x4d0 [ 134.650681][ T5647] inetdev_event+0x26f/0x1370 [ 134.655397][ T5647] raw_notifier_call_chain+0xcb/0x160 [ 134.660808][ T5647] register_netdevice+0x12a6/0x1710 [ 134.666052][ T5647] veth_newlink+0x8d7/0xe30 [ 134.670621][ T5647] rtnl_newlink+0x1359/0x1a50 [ 134.675331][ T5647] rtnetlink_rcv_msg+0x844/0xf30 [ 134.680312][ T5647] netlink_rcv_skb+0x1f5/0x440 [ 134.685190][ T5647] page last free stack trace: [ 134.689880][ T5647] free_unref_page_prepare+0x637/0x6c0 [ 134.695369][ T5647] free_unref_page+0x8f/0x2a0 [ 134.700081][ T5647] free_contig_range+0x96/0xf0 [ 134.704882][ T5647] destroy_args+0xf0/0xa00 [ 134.709325][ T5647] debug_vm_pgtable+0x321/0x380 [ 134.714205][ T5647] do_one_initcall+0x272/0x730 [ 134.719000][ T5647] do_initcall_level+0x137/0x1f0 [ 134.723975][ T5647] do_initcalls+0x4b/0x90 [ 134.728337][ T5647] kernel_init_freeable+0x3e9/0x570 [ 134.733567][ T5647] kernel_init+0x19/0x1b0 [ 134.737932][ T5647] ret_from_fork+0x1f/0x30 [ 134.742389][ T5647] [ 134.744750][ T5647] Memory state around the buggy address: [ 134.751107][ T5647] ffff888060c14500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 134.759207][ T5647] ffff888060c14580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 134.767306][ T5647] >ffff888060c14600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 134.775393][ T5647] ^ [ 134.779737][ T5647] ffff888060c14680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 134.787846][ T5647] ffff888060c14700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 134.795942][ T5647] ================================================================== [ 134.804018][ T5647] Disabling lock debugging due to kernel taint [ 134.810358][ T5647] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 134.817562][ T5647] CPU: 0 PID: 5647 Comm: syz.4.478 Tainted: G B syzkaller #0 [ 134.826248][ T5647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 134.836313][ T5647] Call Trace: [ 134.839608][ T5647] [ 134.842557][ T5647] dump_stack_lvl+0x188/0x250 [ 134.847256][ T5647] ? show_regs_print_info+0x20/0x20 [ 134.852470][ T5647] ? load_image+0x400/0x400 [ 134.856993][ T5647] panic+0x2e5/0x810 [ 134.860910][ T5647] ? bpf_jit_dump+0xd0/0xd0 [ 134.865458][ T5647] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 134.871379][ T5647] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 134.877308][ T5647] ? _raw_spin_unlock+0x40/0x40 [ 134.882180][ T5647] ? xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 134.888697][ T5647] check_panic_on_warn+0x80/0xa0 [ 134.893655][ T5647] ? xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 134.900170][ T5647] end_report+0x6d/0xf0 [ 134.904343][ T5647] kasan_report+0x102/0x130 [ 134.908864][ T5647] ? xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 134.915387][ T5647] xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 134.921745][ T5647] xfrm_policy_inexact_insert_node+0x950/0xb60 [ 134.927937][ T5647] xfrm_policy_inexact_alloc_chain+0x7ce/0xea0 [ 134.934107][ T5647] ? xfrm_policy_inexact_insert+0xe0/0x1460 [ 134.940020][ T5647] xfrm_policy_inexact_insert+0xe0/0x1460 [ 134.945754][ T5647] ? do_raw_spin_lock+0x128/0x2f0 [ 134.950814][ T5647] ? __rwlock_init+0x140/0x140 [ 134.955604][ T5647] ? policy_hash_bysel+0x135/0x7b0 [ 134.960736][ T5647] xfrm_policy_insert+0x112/0x930 [ 134.965816][ T5647] xfrm_add_policy+0x4f2/0x880 [ 134.970597][ T5647] ? xfrm_dump_sa_done+0xc0/0xc0 [ 134.975549][ T5647] ? apparmor_capable+0x12c/0x190 [ 134.980589][ T5647] ? __nla_parse+0x3c/0x50 [ 134.985022][ T5647] xfrm_user_rcv_msg+0x5e5/0x910 [ 134.989977][ T5647] ? xfrm_netlink_rcv+0x90/0x90 [ 134.994853][ T5647] ? xfrm_netlink_rcv+0x66/0x90 [ 134.999717][ T5647] ? __mutex_lock_common+0x465/0x2400 [ 135.005370][ T5647] ? __skb_clone+0x480/0x790 [ 135.009979][ T5647] netlink_rcv_skb+0x1f5/0x440 [ 135.014755][ T5647] ? xfrm_netlink_rcv+0x90/0x90 [ 135.019619][ T5647] ? netlink_ack+0xb50/0xb50 [ 135.024220][ T5647] ? __lock_acquire+0x7d10/0x7d10 [ 135.029266][ T5647] xfrm_netlink_rcv+0x75/0x90 [ 135.033956][ T5647] netlink_unicast+0x774/0x920 [ 135.038736][ T5647] netlink_sendmsg+0x8ba/0xbe0 [ 135.043517][ T5647] ? netlink_getsockopt+0x570/0x570 [ 135.048726][ T5647] ? aa_sock_msg_perm+0x94/0x150 [ 135.053679][ T5647] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 135.058973][ T5647] ? security_socket_sendmsg+0x7c/0xa0 [ 135.064441][ T5647] ? netlink_getsockopt+0x570/0x570 [ 135.069647][ T5647] ____sys_sendmsg+0x5b7/0x8f0 [ 135.074425][ T5647] ? __sys_sendmsg_sock+0x30/0x30 [ 135.079470][ T5647] ? import_iovec+0x6f/0xa0 [ 135.083989][ T5647] ___sys_sendmsg+0x236/0x2e0 [ 135.088683][ T5647] ? __sys_sendmsg+0x2a0/0x2a0 [ 135.093469][ T5647] ? percpu_counter_add_batch+0x13b/0x160 [ 135.099216][ T5647] __se_sys_sendmsg+0x1af/0x290 [ 135.104083][ T5647] ? __x64_sys_sendmsg+0x80/0x80 [ 135.109036][ T5647] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 135.115039][ T5647] ? lockdep_hardirqs_on+0x94/0x140 [ 135.120256][ T5647] do_syscall_64+0x4c/0xa0 [ 135.124683][ T5647] ? clear_bhb_loop+0x30/0x80 [ 135.129369][ T5647] ? clear_bhb_loop+0x30/0x80 [ 135.134056][ T5647] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 135.139960][ T5647] RIP: 0033:0x7f17e4cd9e59 [ 135.144392][ T5647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.164005][ T5647] RSP: 002b:00007f17e2f33028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.172429][ T5647] RAX: ffffffffffffffda RBX: 00007f17e4f52fa0 RCX: 00007f17e4cd9e59 [ 135.180410][ T5647] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 135.188414][ T5647] RBP: 00007f17e4d6fd6f R08: 0000000000000000 R09: 0000000000000000 [ 135.196396][ T5647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.204376][ T5647] R13: 00007f17e4f53038 R14: 00007f17e4f52fa0 R15: 00007fff244c1ef8 [ 135.212366][ T5647] [ 135.215497][ T5647] Kernel Offset: disabled [ 135.219834][ T5647] Rebooting in 86400 seconds..