last executing test programs: 8.359227619s ago: executing program 4 (id=315): sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', 0x0, 0x800000, 0x0) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@none, 0x60}}}, 0xa) open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x9901) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) migrate_pages(r3, 0x200, &(0x7f0000000280)=0xfa34, 0x0) recvmsg(r2, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) 7.417612803s ago: executing program 4 (id=321): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) openat$ttynull(0xffffffffffffff9c, 0x0, 0x82084, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(0xffffffffffffffff, 0xc02064a5, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x8000) mmap$dsp(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x100000f, 0x11, r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) 6.687543821s ago: executing program 1 (id=323): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000c00)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x46}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}], 0x1, 0x240408d1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000240)="8a", 0x1, 0x40040c0, &(0x7f0000000080)={0xa, 0x3, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, 0x1c) listen(r1, 0x100101) r2 = accept4(r1, 0x0, 0x0, 0x80800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) r5 = fcntl$dupfd(r2, 0x406, r4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000100)=0xeea, 0x4) write$FUSE_ATTR(r5, &(0x7f0000000280)={0x78, 0xfffffffffffffff5, 0x0, {0x2, 0x3, 0x0, {0x0, 0x6, 0x400000000000000b, 0x0, 0x7ff, 0x2, 0x2, 0xd, 0x5, 0xa000, 0xa40, 0x0, 0x0, 0x3001, 0x2}}}, 0xffffff03) shutdown(r0, 0x1) 6.662707792s ago: executing program 1 (id=324): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) r3 = dup(0xffffffffffffffff) ioctl$BLKRRPART(r3, 0x125f, 0x0) 6.215052233s ago: executing program 3 (id=326): syz_mount_image$reiserfs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x1141, &(0x7f0000002380)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x900}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0x1, 0x8080c61) 6.214743733s ago: executing program 4 (id=327): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2008002, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xffc}}, {@nobh}, {@quota}]}, 0x1, 0x560, &(0x7f0000000440)="$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") socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) syz_mount_image$exfat(0x0, &(0x7f0000000200)='./bus\x00', 0xe1c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000002b40), 0x24, 0x0) 5.55033184s ago: executing program 1 (id=328): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x64) 5.55011414s ago: executing program 2 (id=329): setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_setup(0x6ed6, &(0x7f00000000c0)={0x0, 0xbf54, 0x1, 0x400000, 0x270}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict]}}, 0x0, 0x26}, 0x20) ioctl$sock_SIOCETHTOOL(r3, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x31, "2a161d2d71db37f20a8f1597f02515fcead4e1f5cad54790db5c4e0999e060075afd258fef16d5f349155f669fd5d425de"}}) 5.483226091s ago: executing program 0 (id=330): syz_open_dev$vim2m(0x0, 0x800, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = landlock_create_ruleset(&(0x7f0000000180)={0x8201, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, 0xffffffffffffffff, 0x4}, 0x38) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) openat(0xffffffffffffff9c, 0x0, 0xc49c2, 0x1d4) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xc, 0x6c033, 0xffffffffffffffff, 0x0) 4.995012524s ago: executing program 3 (id=331): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x31, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES8, @ANYRES16=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c0000140002800600130000000000080030"], 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x8000015) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@flushoncommit}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r0 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) pipe2$9p(&(0x7f0000000080), 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x70, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x43}]}}}]}, 0x70}}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @local}, 0x14) 4.72152473s ago: executing program 4 (id=333): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file7\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r4 = accept(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003f00)=[{{0x0, 0x0, &(0x7f00000070c0)=[{&(0x7f00000007c0)=""/4095, 0xfff}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0xfdef}, 0x1, 0x0, 0x0, 0x4000000}, 0xc040) 4.584858244s ago: executing program 0 (id=344): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe51de000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) fsopen(0x0, 0x1) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x2, 0x0) ioctl$COMEDI_INSN(r3, 0x8028640c, &(0x7f0000000040)={0xc000003, 0x1, &(0x7f0000000080)=[0x0]}) 4.583540834s ago: executing program 2 (id=334): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffff0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x800, 0x0, 0x80000000}, {0x1000000a, 0x4}], 0x10, 0x40004}, 0x94) close(0x3) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) close(0x3) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x6, 0x10000}, 0x80, 0x0}, 0xd0a0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r5, 0x1c) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r6, 0x1c) 4.255124463s ago: executing program 3 (id=335): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000003c0)={0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'lc\x00', 0x1, 0xa8a, 0x30}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) gettid() sendmsg$nl_generic(r2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 4.216274654s ago: executing program 3 (id=336): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x3ffd, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x2) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xffe0}, {0xffff, 0xffff}, {0x14, 0x1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) 4.058862037s ago: executing program 1 (id=337): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@none, 0x60}}}, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) waitid(0x1, r3, 0x0, 0x61000006, 0x0) ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 3.915040011s ago: executing program 3 (id=338): write(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) add_key(0x0, &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={'streebog256\x00'}}) openat$dsp(0xffffffffffffff9c, 0x0, 0x42f82, 0x0) 3.383247044s ago: executing program 0 (id=340): mkdirat(0xffffffffffffff9c, 0x0, 0x777) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)={0x18, r4, 0x65283e1aaa2ddbb1, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0) 3.382905774s ago: executing program 2 (id=341): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x240, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020) lseek(r3, 0xfffffffffffffff5, 0x1) 2.923535086s ago: executing program 1 (id=342): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQg4tIngRVDwIeunZH/Xm1R9X/S88SEvVtFjxIJHZH+222U03bXY3kM8HXva9mdm89903P97sDDsB7FkT6Z9MxKGI+DiJGKtPTyJiqJobjDhRW+72+lo+TUlsbLz9Z1Jd5tb6Wj6a3pM6UC88HRE/fRBxOLO53vLK6nyuWCws1ctTlYXzU+WV1SPnFnJzhbnC4rHpmZmjx186fmznYv3719WD1z954/lvT/z7/lNXP/o5iRNxsD6vOY6dMhET9c9kKP0I7/H6TlfWZ0m/G8BDSTfNgdpWHodiLAaquTZGetkyAKBbNgCAPSgxBgCAPabxPcCt9bV8I/X3G4neuvFaROyvxd+4vlmbM1i/Zre/eh109FZyz5WRJCLGd6D+iYj48vt3v05T1PvBtTSgFy5djogz4xOb9//JpnsWtuuFrWZuDFdfJu6bvNeOP9BPP6Tjn5dbjf8yd8Y/0WL8M9xi230YD97+M9d2oJq20vHfq033tt1uir9ufKBeeqw65htKzp4rFtJ92+MRMRlDw2l5urpo65Hb5M3/brarv3n899en732V1p++3l0ic21w+N73zOYquUeNu+HG5YhnBlvFn9zp/6TN+PdUh3W8+cqHX7Sbl8afxttIm+Pvro0rEc+17P+7fZlseX/iVHV1mGqsFC1899vno+3qb+7/NKX1N84FeiHt/9Gt4x9Pmu/XLG+/jl+ujP3Ybt6D42+9/u9L3qnm99WnXcxVKkvTEfuStzZPP3r3vY1yY/k0/slnW2//tWpbr//pOeGZDuMfvP7HNw8ff3el8c9uq/+3n7l6e36gXf2d9f9MNTdZn9LJ/q/TBj7KZwcAAAAAAAAAAAAAAAAAAAAAAAAAncpExMFIMtk7+Uwmm609w/vJGM0US+XK4bOl5cXZqD4rezyGMo2fuhxr+j3U6frv4TfKR+8rvxgRT0TEZ8Mj1XI2XyrO9jt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKg70Ob5/6nfh/vdOgCga/b3uwEAQM85/gPA3rO94/9I19oBAPSO838A2Hs6Pv6f6W47AIDecf4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl506eTJNG/+sr+XT8uyFleX50oUjs4XyfHZhOZ/Nl5bOZ+dKpbliIZsvLbT9R5dqL8VS6fxMLC5fnKoUypWp8srq6YXS8mLl9LmF3FzhdGGoZ5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOfKK6vzuWKxsCSzZWZkdzRj12QGY1c0Q6Zrmea9xEj/dlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9z/AQAA//+MoS4e") syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x3010009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setxattr$incfs_id(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000380)) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) 2.921704256s ago: executing program 3 (id=343): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, 0x0, 0x20000001) socket$tipc(0x1e, 0x2, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) fcntl$lock(r1, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x200) 2.906457446s ago: executing program 4 (id=345): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) statx(r1, &(0x7f00000001c0)='./file0/file0\x00', 0x400, 0x100, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./file0/file0\x00', 0x82) r3 = syz_open_dev$video(&(0x7f0000000200), 0x8000, 0x101101) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000440)=@fd={0x9, 0x8, 0x4, 0x100, 0x5, {}, {0x4, 0x2, 0xfe, 0x15, 0x1, 0x2, "455ca49c"}, 0x4, 0x4, {}, 0x1ff}) 2.483030617s ago: executing program 0 (id=346): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@block_validity}, {@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@sysvgroups}, {@oldalloc}, {@i_version}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@data_journal}, {@noauto_da_alloc}, {@norecovery}]}, 0x0, 0x577, &(0x7f0000000640)="$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") syz_mount_image$erofs(&(0x7f00000012c0), &(0x7f0000000880)='./file0\x00', 0x18000c6, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRES16], 0x0, 0x17d, &(0x7f0000001ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r3, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) 2.482711407s ago: executing program 2 (id=347): setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_setup(0x6ed6, &(0x7f00000000c0)={0x0, 0xbf54, 0x1, 0x400000, 0x270}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict]}}, 0x0, 0x26}, 0x20) ioctl$sock_SIOCETHTOOL(r3, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x31, "2a161d2d71db37f20a8f1597f02515fcead4e1f5cad54790db5c4e0999e060075afd258fef16d5f349155f669fd5d425de"}}) 1.407083124s ago: executing program 2 (id=348): openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) r0 = io_uring_setup(0x68f7, &(0x7f00000002c0)={0x0, 0x48c7, 0x80, 0x0, 0x8100016b}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) sendmsg$inet(r3, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f00000008c0)='G', 0x1}], 0x1}, 0x8000) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) write$9p(r2, &(0x7f0000000500)="c6", 0x1) sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) close_range(r0, 0xffffffffffffffff, 0x0) 1.404048084s ago: executing program 1 (id=349): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @rand_addr=' \x01\x00', 0x5}, 0x1c, 0x0}, 0x8000) 1.403688474s ago: executing program 4 (id=350): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x64) 1.391444794s ago: executing program 0 (id=351): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setreuid(0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) 1.327076556s ago: executing program 2 (id=352): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24) listen(r0, 0xa) sendmsg(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x10, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001100)=0x0, &(0x7f0000001108)=0x0, &(0x7f0000001110)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r0, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/1024, 0x400}], 0x1}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001300)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000900)="ff00"/1048, 0x418}], 0x1, &(0x7f0000000a00)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}}) io_uring_enter(r1, 0x2, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000020)='./proc/net/afs/cells\x00', 0x2, 0x0) write(r5, &(0x7f0000000040)='add syz0 ::1\n', 0xd) openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) mount$afs(&(0x7f0000000d00)=@cell={0x23, 'syz0:', 'syz0'}, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) 0s ago: executing program 0 (id=353): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x60}, {}, {0x3}, {}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000040), 0x800) r1 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.69' (ED25519) to the list of known hosts. syzkaller login: [ 42.957585][ T4270] cgroup: Unknown subsys name 'net' [ 43.166780][ T4270] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.429916][ T4270] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 44.107777][ T4293] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 44.113865][ T4295] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 44.114462][ T4294] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 44.116638][ T4293] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 44.118160][ T4296] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 44.118416][ T4294] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 44.119471][ T4296] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 44.121050][ T4293] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 44.121978][ T4296] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 44.123479][ T4294] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 44.123987][ T4296] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 44.125381][ T4293] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 44.127850][ T4299] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 44.128524][ T4293] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 44.130303][ T4300] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 44.130702][ T4294] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 44.133270][ T4293] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 44.134018][ T4296] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 44.135384][ T4294] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 44.136239][ T4296] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 44.137851][ T4294] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 44.140126][ T4294] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 44.141528][ T4294] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 44.142832][ T4294] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 44.144366][ T4294] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 44.145544][ T4285] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 44.147810][ T4294] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 44.148177][ T4300] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 44.152336][ T4289] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 44.157659][ T4295] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 44.294349][ T4284] chnl_net:caif_netlink_parms(): no params data found [ 44.298343][ T4283] chnl_net:caif_netlink_parms(): no params data found [ 44.306658][ T4282] chnl_net:caif_netlink_parms(): no params data found [ 44.311520][ T4297] chnl_net:caif_netlink_parms(): no params data found [ 44.351143][ T4284] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.352314][ T4284] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.353887][ T4284] device bridge_slave_0 entered promiscuous mode [ 44.360650][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.362031][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.363749][ T4283] device bridge_slave_0 entered promiscuous mode [ 44.366998][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.368232][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.369833][ T4283] device bridge_slave_1 entered promiscuous mode [ 44.372904][ T4284] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.374770][ T4284] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.376259][ T4284] device bridge_slave_1 entered promiscuous mode [ 44.392471][ T4282] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.393722][ T4282] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.396888][ T4282] device bridge_slave_0 entered promiscuous mode [ 44.401682][ T4284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.406793][ T4282] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.408168][ T4282] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.410024][ T4282] device bridge_slave_1 entered promiscuous mode [ 44.412192][ T4283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.416075][ T4284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.417909][ T4297] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.419267][ T4297] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.420853][ T4297] device bridge_slave_0 entered promiscuous mode [ 44.428120][ T4283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.431654][ T4297] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.432963][ T4297] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.436176][ T4297] device bridge_slave_1 entered promiscuous mode [ 44.438571][ T4282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.441850][ T4282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.448068][ T4290] chnl_net:caif_netlink_parms(): no params data found [ 44.458367][ T4283] team0: Port device team_slave_0 added [ 44.462949][ T4283] team0: Port device team_slave_1 added [ 44.465446][ T4284] team0: Port device team_slave_0 added [ 44.467596][ T4297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.471879][ T4297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.478080][ T4282] team0: Port device team_slave_0 added [ 44.481381][ T4284] team0: Port device team_slave_1 added [ 44.483058][ T4282] team0: Port device team_slave_1 added [ 44.499845][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.501091][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.506797][ T4283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.511805][ T4297] team0: Port device team_slave_0 added [ 44.516935][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.518075][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.522232][ T4283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.525395][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.526719][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.531112][ T4284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.533981][ T4297] team0: Port device team_slave_1 added [ 44.536954][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.538177][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.542376][ T4282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.548066][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.549308][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.553562][ T4284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.557924][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.559077][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.563193][ T4282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.569852][ T4290] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.571195][ T4290] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.572791][ T4290] device bridge_slave_0 entered promiscuous mode [ 44.583748][ T4290] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.585188][ T4290] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.586794][ T4290] device bridge_slave_1 entered promiscuous mode [ 44.588599][ T4297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.589825][ T4297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.594342][ T4297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.635545][ T4282] device hsr_slave_0 entered promiscuous mode [ 44.675650][ T4282] device hsr_slave_1 entered promiscuous mode [ 44.755207][ T4283] device hsr_slave_0 entered promiscuous mode [ 44.804313][ T4283] device hsr_slave_1 entered promiscuous mode [ 44.844169][ T4283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.845524][ T4283] Cannot create hsr debugfs directory [ 44.847263][ T4297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.848448][ T4297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.852941][ T4297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.862266][ T4290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.873132][ T4290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.915308][ T4284] device hsr_slave_0 entered promiscuous mode [ 44.954347][ T4284] device hsr_slave_1 entered promiscuous mode [ 44.994213][ T4284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.995526][ T4284] Cannot create hsr debugfs directory [ 45.023480][ T4290] team0: Port device team_slave_0 added [ 45.065120][ T4297] device hsr_slave_0 entered promiscuous mode [ 45.104317][ T4297] device hsr_slave_1 entered promiscuous mode [ 45.144173][ T4297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.145574][ T4297] Cannot create hsr debugfs directory [ 45.148674][ T4290] team0: Port device team_slave_1 added [ 45.171373][ T4290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.172567][ T4290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.177249][ T4290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.185340][ T4290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.187646][ T4290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.191869][ T4290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.285236][ T4290] device hsr_slave_0 entered promiscuous mode [ 45.326585][ T4290] device hsr_slave_1 entered promiscuous mode [ 45.364190][ T4290] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.365469][ T4290] Cannot create hsr debugfs directory [ 45.386187][ T4283] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 45.445427][ T4283] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 45.501239][ T4283] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 45.541380][ T4283] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 45.600859][ T4284] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 45.626523][ T4284] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 45.665745][ T4284] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 45.711091][ T4284] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 45.757603][ T4282] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.810127][ T4297] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 45.846675][ T4282] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.887347][ T4282] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.927803][ T4282] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.966405][ T4297] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 46.023899][ T4297] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 46.072184][ T4297] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 46.117889][ T4290] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 46.147318][ T4290] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 46.155097][ T4292] Bluetooth: hci2: command 0x0409 tx timeout [ 46.156207][ T4292] Bluetooth: hci1: command 0x0409 tx timeout [ 46.187271][ T4290] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 46.228685][ T4290] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 46.234442][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 46.244262][ T48] Bluetooth: hci4: command 0x0409 tx timeout [ 46.244273][ T4292] Bluetooth: hci3: command 0x0409 tx timeout [ 46.298048][ T4284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.318530][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.320587][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.328434][ T4283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.335874][ T4282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.338085][ T4284] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.350169][ T4297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.352608][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.354512][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.356132][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.357375][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.362721][ T4297] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.365502][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.367164][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.368636][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.370160][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.371529][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.379232][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.380880][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.382483][ T1613] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.383656][ T1613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.385503][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.387308][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.389082][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.390757][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.398858][ T4283] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.401794][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.403474][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.405365][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.407057][ T1613] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.408209][ T1613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.409600][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.411249][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.412808][ T1613] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.414024][ T1613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.418418][ T4282] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.426776][ T4290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.432434][ T4284] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 46.436736][ T4284] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.439740][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.441263][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.442707][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.444416][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.446100][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.447808][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.449287][ T1613] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.450395][ T1613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.451874][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.453352][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.457808][ T1613] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.458954][ T1613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.460328][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.461987][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.463712][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.466045][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.467638][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.469336][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.470893][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.472420][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.477633][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.479172][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.480745][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.482334][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.483931][ T1613] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.485230][ T1613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.488157][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.489610][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.491179][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.495563][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.498331][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.499901][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.501018][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.509122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.510656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.512065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.513637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.518073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.521464][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.522889][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.524603][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.526885][ T4290] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.533737][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.540839][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.542330][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.543831][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.545885][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.547423][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.548522][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.549938][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.552006][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.554838][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.558624][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.566114][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.567582][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.569226][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.570841][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.572157][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.573529][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.577070][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.581518][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.583249][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.595036][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.597826][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.599620][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.611154][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.612686][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.615757][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.617390][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.619171][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.620753][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.622331][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.627287][ T4283] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.629426][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.631449][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.632966][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.639693][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.641280][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.643110][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.647163][ T4297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.648944][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.653221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.655382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.661188][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.662577][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.663886][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.666737][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.680891][ T4282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.684596][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.685897][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.687050][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.688667][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.691126][ T4284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.699612][ T4290] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.701652][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.705512][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.707105][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.713698][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.715590][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.730045][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.731741][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.749567][ T4282] device veth0_vlan entered promiscuous mode [ 46.754496][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.756073][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.758626][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.760100][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.764804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.766580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.768280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.769587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.773406][ T4284] device veth0_vlan entered promiscuous mode [ 46.783620][ T4282] device veth1_vlan entered promiscuous mode [ 46.790511][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.792185][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.793586][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.802942][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.805104][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.806418][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.808788][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.811965][ T4284] device veth1_vlan entered promiscuous mode [ 46.820086][ T4297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.833544][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.835811][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.837289][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.839502][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.841161][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.843303][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.846567][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.848135][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.849955][ T4282] device veth0_macvtap entered promiscuous mode [ 46.852451][ T4284] device veth0_macvtap entered promiscuous mode [ 46.862361][ T4284] device veth1_macvtap entered promiscuous mode [ 46.867288][ T4282] device veth1_macvtap entered promiscuous mode [ 46.869225][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.870801][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.872186][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.873832][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.878146][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.879463][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.881740][ T4290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.889181][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.890866][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.892521][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.896698][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.898365][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.899776][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.906561][ T4283] device veth0_vlan entered promiscuous mode [ 46.911543][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.917445][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.918987][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.920590][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.922163][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.933901][ T4297] device veth0_vlan entered promiscuous mode [ 46.936422][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.937880][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.944898][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.947508][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.949368][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.951874][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.955815][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.957405][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.958991][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.960572][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.964891][ T4297] device veth1_vlan entered promiscuous mode [ 46.968693][ T4284] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.970175][ T4284] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.971625][ T4284] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.973086][ T4284] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.980300][ T4283] device veth1_vlan entered promiscuous mode [ 46.982965][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.985362][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.988297][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.993897][ T4297] device veth0_macvtap entered promiscuous mode [ 46.998632][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.000291][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.001835][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.003281][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.008417][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.010052][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.011944][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.015581][ T4282] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.016759][ T4282] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.018066][ T4282] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.019378][ T4282] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.029584][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.031172][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.032711][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.035030][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.049901][ T4297] device veth1_macvtap entered promiscuous mode [ 47.063739][ T4283] device veth0_macvtap entered promiscuous mode [ 47.073008][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.075045][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.076584][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.078270][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.083338][ T4283] device veth1_macvtap entered promiscuous mode [ 47.090681][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.091792][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.092496][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.093848][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.096809][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.098781][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.101118][ T4297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.104039][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.106111][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.107527][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.109269][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.117482][ T4290] device veth0_vlan entered promiscuous mode [ 47.121011][ T4290] device veth1_vlan entered promiscuous mode [ 47.126570][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.128122][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.129702][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.131201][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.132852][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.134704][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.139360][ T565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.140670][ T565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.144948][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.146605][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.148307][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.150026][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.152467][ T4297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.153975][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.155678][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.157222][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.160951][ T565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.162359][ T565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.163574][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.166575][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.168565][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.170228][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.172041][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.173800][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.176262][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.179041][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.180315][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.181967][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.186283][ T4297] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.187744][ T4297] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.189141][ T4297] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.190614][ T4297] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.214377][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.216107][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.219612][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.220019][ T4290] device veth0_macvtap entered promiscuous mode [ 47.220891][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.223455][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.226421][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.229279][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.231058][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.232614][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.239514][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.241112][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.242802][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.245339][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.246503][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.248176][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.250608][ T4283] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.252124][ T4283] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.253570][ T4283] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.255527][ T4283] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.261278][ T4290] device veth1_macvtap entered promiscuous mode [ 47.278826][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.280666][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.282426][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.290101][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.291784][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.293488][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.296050][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.297704][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.299937][ T4290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.302328][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.304024][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.308557][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.310359][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.311975][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.315670][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.317143][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.318749][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.320988][ T4290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.323493][ T4290] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.327455][ T4290] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.328979][ T4290] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.330513][ T4290] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.377883][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.379593][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.381089][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.382730][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.390953][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.398513][ T565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.399883][ T565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.401222][ T565] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.465417][ T4372] process 'syz.2.3' launched './file0' with NULL argv: empty string added [ 47.748012][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.749506][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.755417][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.769460][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.770911][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.779067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.794741][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.796202][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.797747][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.809434][ T4354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.810874][ T4354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.812190][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.812335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.813767][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.816447][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.188629][ T4383] xt_CONNSECMARK: invalid mode: 0 [ 48.242498][ T4292] Bluetooth: hci2: command 0x041b tx timeout [ 48.243414][ T4295] Bluetooth: hci1: command 0x041b tx timeout [ 48.314769][ T4295] Bluetooth: hci3: command 0x041b tx timeout [ 48.345809][ T4292] Bluetooth: hci0: command 0x041b tx timeout [ 48.347887][ T4295] Bluetooth: hci4: command 0x041b tx timeout [ 48.747237][ T4390] device syzkaller0 entered promiscuous mode [ 48.812698][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 48.882679][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.886284][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.888724][ T4393] device bridge_slave_0 left promiscuous mode [ 48.890115][ T4393] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.925977][ T4393] device bridge_slave_1 left promiscuous mode [ 48.927149][ T4393] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.232029][ T4393] bond0: (slave bond_slave_0): Releasing backup interface [ 49.297075][ T4393] bond0: (slave bond_slave_1): Releasing backup interface [ 49.396234][ T4393] team0: Port device team_slave_0 removed [ 49.403175][ T4393] team0: Port device team_slave_1 removed [ 49.405209][ T4393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.406571][ T4393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.408706][ T4393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.410226][ T4393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.324391][ T4295] Bluetooth: hci2: command 0x040f tx timeout [ 50.324459][ T4292] Bluetooth: hci1: command 0x040f tx timeout [ 50.394691][ T4295] Bluetooth: hci4: command 0x040f tx timeout [ 50.394719][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 50.397122][ T48] Bluetooth: hci3: command 0x040f tx timeout [ 51.114711][ T4425] loop4: detected capacity change from 0 to 32768 [ 51.812273][ T4423] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 51.813490][ T4423] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 51.815217][ T4423] vhci_hcd vhci_hcd.0: Device attached [ 51.836435][ T4424] vhci_hcd: connection closed [ 51.838364][ T4426] vhci_hcd: stop threads [ 51.840348][ T4426] vhci_hcd: release socket [ 51.841141][ T4426] vhci_hcd: disconnect device [ 52.373956][ T4439] capability: warning: `syz.3.18' uses 32-bit capabilities (legacy support in use) [ 52.458911][ T4292] Bluetooth: hci2: command 0x0419 tx timeout [ 52.460805][ T4292] Bluetooth: hci1: command 0x0419 tx timeout [ 52.484111][ T4292] Bluetooth: hci4: command 0x0419 tx timeout [ 52.485384][ T4292] Bluetooth: hci3: command 0x0419 tx timeout [ 52.486572][ T4292] Bluetooth: hci0: command 0x0419 tx timeout [ 53.264647][ T4444] loop1: detected capacity change from 0 to 40427 [ 53.272534][ T4444] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 53.273859][ T4444] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 53.596006][ T4444] F2FS-fs (loop1): Found nat_bits in checkpoint [ 53.647585][ T4444] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 53.650055][ T4444] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 54.110413][ T4459] Zero length message leads to an empty skb [ 54.112987][ T4459] syz.1.20: attempt to access beyond end of device [ 54.112987][ T4459] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 54.142326][ T4463] device syzkaller0 entered promiscuous mode [ 54.149654][ T4463] tipc: Started in network mode [ 54.150538][ T4463] tipc: Node identity ae217fa5d911, cluster identity 4711 [ 54.152676][ T4463] tipc: Enabled bearer , priority 0 [ 54.156393][ T4462] tipc: Resetting bearer [ 54.485431][ T4462] tipc: Disabling bearer [ 54.519823][ T4467] usb usb8: usbfs: process 4467 (syz.4.26) did not claim interface 0 before use [ 54.576208][ T4469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.28'. [ 54.582516][ T4469] bridge0: port 3(veth3) entered blocking state [ 54.586413][ T4469] bridge0: port 3(veth3) entered disabled state [ 54.587999][ T4469] device veth3 entered promiscuous mode [ 54.608334][ T4471] loop4: detected capacity change from 0 to 4096 [ 54.616922][ T4469] bridge0: port 4(veth0_to_bond) entered blocking state [ 54.618254][ T4469] bridge0: port 4(veth0_to_bond) entered disabled state [ 54.619916][ T4469] device veth0_to_bond entered promiscuous mode [ 54.632978][ T4471] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 54.652344][ T4469] bridge0: port 5(veth5) entered blocking state [ 54.653535][ T4469] bridge0: port 5(veth5) entered disabled state [ 54.659819][ T4469] device veth5 entered promiscuous mode [ 54.678461][ T4290] EXT4-fs (loop4): unmounting filesystem. [ 55.591222][ T4496] loop4: detected capacity change from 0 to 512 [ 55.620962][ T4496] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 55.995242][ T4496] EXT4-fs warning (device loop4): __ext4_ioctl:1253: Setting inode version is not supported with metadata_csum enabled. [ 56.027199][ T4290] EXT4-fs (loop4): unmounting filesystem. [ 56.029602][ T27] audit: type=1326 audit(56.020:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4507 comm="syz.1.39" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b79228 code=0x0 [ 56.148867][ T4519] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 56.699481][ T4525] loop2: detected capacity change from 0 to 22 [ 56.703119][ T4525] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 56.709198][ T4525] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 57.015326][ T4530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.44'. [ 57.395484][ T4537] loop3: detected capacity change from 0 to 2048 [ 57.653142][ T4537] EXT4-fs: test_dummy_encryption requires encrypt feature [ 58.244078][ C0] sched: RT throttling activated [ 58.311442][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 58.313872][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.331019][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.336310][ T4547] device bridge_slave_0 left promiscuous mode [ 58.337543][ T4547] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.368868][ T4547] device bridge_slave_1 left promiscuous mode [ 58.371045][ T4547] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.952880][ T4547] bond0: (slave bond_slave_0): Releasing backup interface [ 60.030784][ T4547] bond0: (slave bond_slave_1): Releasing backup interface [ 60.051630][ T4547] team0: Port device team_slave_0 removed [ 60.061453][ T4547] team0: Port device team_slave_1 removed [ 60.062847][ T4547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.064438][ T4547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.066424][ T4547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.067661][ T4547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.077234][ T4551] team0: Mode changed to "random" [ 60.711534][ T4565] device vlan0 entered promiscuous mode [ 60.732960][ T4565] team0: Port device vlan0 added [ 60.813694][ T4574] netlink: 20 bytes leftover after parsing attributes in process `syz.0.56'. [ 60.824699][ T4547] tipc: Started in network mode [ 60.826236][ T4547] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 60.830390][ T4547] tipc: Enabled bearer , priority 0 [ 60.991094][ T4577] netlink: 'syz.0.56': attribute type 6 has an invalid length. [ 60.992537][ T4577] netlink: 72 bytes leftover after parsing attributes in process `syz.0.56'. [ 62.669707][ T4407] tipc: Node number set to 11578026 [ 62.779397][ T4581] loop3: detected capacity change from 0 to 32768 [ 62.791389][ T4581] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.59 (4581) [ 63.090013][ T4581] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 63.095912][ T4581] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 63.099753][ T4581] BTRFS info (device loop3): setting nodatacow, compression disabled [ 63.101242][ T4581] BTRFS info (device loop3): enabling auto defrag [ 63.104192][ T4581] BTRFS info (device loop3): max_inline at 0 [ 63.106557][ T4581] BTRFS info (device loop3): using free space tree [ 63.235301][ T4621] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input2 [ 63.340618][ T4297] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 63.570372][ T4645] loop2: detected capacity change from 0 to 512 [ 63.573268][ T4640] netlink: 68 bytes leftover after parsing attributes in process `syz.4.70'. [ 63.583755][ T4632] netlink: 16 bytes leftover after parsing attributes in process `syz.1.69'. [ 63.587329][ T4632] netlink: 18 bytes leftover after parsing attributes in process `syz.1.69'. [ 63.912689][ T4645] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 64.978333][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.981117][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.016282][ T4651] loop4: detected capacity change from 0 to 32768 [ 65.112504][ T4669] device syzkaller0 entered promiscuous mode [ 65.132252][ T4284] EXT4-fs (loop2): unmounting filesystem. [ 65.164896][ T4651] XFS (loop4): Mounting V5 Filesystem [ 65.271584][ T4651] XFS (loop4): Ending clean mount [ 65.275295][ T4651] XFS (loop4): Quotacheck needed: Please wait. [ 65.287543][ T4651] XFS (loop4): Quotacheck: Done. [ 65.475066][ T4680] xt_CONNSECMARK: invalid mode: 0 [ 65.592422][ T4687] loop3: detected capacity change from 0 to 1024 [ 65.616795][ T4295] Bluetooth: hci3: Invalid connection link type handle 0x00c8 [ 65.958808][ T4687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.80'. [ 65.966420][ T4290] XFS (loop4): Unmounting Filesystem [ 66.097411][ T4685] loop0: detected capacity change from 0 to 32768 [ 66.100767][ T4685] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.79 (4685) [ 66.125172][ T4685] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 66.126912][ T4685] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 66.128440][ T4685] BTRFS info (device loop0): setting nodatacow, compression disabled [ 66.134625][ T4685] BTRFS info (device loop0): enabling auto defrag [ 66.137038][ T4685] BTRFS info (device loop0): max_inline at 0 [ 66.138108][ T4685] BTRFS info (device loop0): using free space tree [ 66.140894][ T4697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.83'. [ 66.367091][ T4697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.83'. [ 66.920072][ T4727] loop1: detected capacity change from 0 to 2048 [ 66.977444][ T4727] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 67.025060][ T4282] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 67.428065][ T4740] loop0: detected capacity change from 0 to 8 [ 67.447205][ T4739] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 67.600266][ T4739] mac80211_hwsim hwsim3 : renamed from wlan0 [ 68.559296][ T4760] vivid-000: kernel_thread() failed [ 68.842763][ T4757] loop2: detected capacity change from 0 to 32768 [ 69.035410][ T4757] XFS (loop2): Mounting V5 Filesystem [ 69.160023][ T4757] XFS (loop2): Ending clean mount [ 69.170183][ T4757] XFS (loop2): Quotacheck needed: Please wait. [ 69.186058][ T4757] XFS (loop2): Quotacheck: Done. [ 69.390114][ T4295] Bluetooth: hci2: Invalid connection link type handle 0x00c8 [ 69.881044][ T22] cfg80211: failed to load regulatory.db [ 69.911950][ T4284] XFS (loop2): Unmounting Filesystem [ 70.134501][ T4802] bridge0: port 6(hsr0) entered blocking state [ 70.135890][ T4802] bridge0: port 6(hsr0) entered disabled state [ 70.141297][ T4802] device hsr0 entered promiscuous mode [ 70.143953][ T4802] bridge0: port 6(hsr0) entered blocking state [ 70.145110][ T4802] bridge0: port 6(hsr0) entered forwarding state [ 70.512946][ T4808] loop3: detected capacity change from 0 to 2048 [ 71.088586][ T4808] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 71.089998][ T4808] UDF-fs: Scanning with blocksize 512 failed [ 71.099008][ T4808] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 71.299382][ T4825] loop1: detected capacity change from 0 to 128 [ 71.302928][ T4825] FAT-fs (loop1): Unrecognized mount option "gid=u$U-FJm " [ 71.302928][ T4825] nW # ϲغ^`FGkQ" or missing value [ 71.325785][ T4825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.329519][ T4825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.507505][ T4829] loop2: detected capacity change from 0 to 2048 [ 71.706439][ T4829] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 71.755622][ T4744] kworker/u4:17: attempt to access beyond end of device [ 71.755622][ T4744] loop3: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 71.757938][ T4744] Buffer I/O error on dev loop3, logical block 1024, lost async page write [ 71.759300][ T4744] kworker/u4:17: attempt to access beyond end of device [ 71.759300][ T4744] loop3: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 71.761465][ T4744] Buffer I/O error on dev loop3, logical block 1024, lost async page write [ 71.762762][ T4744] kworker/u4:17: attempt to access beyond end of device [ 71.762762][ T4744] loop3: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 71.770452][ T4744] Buffer I/O error on dev loop3, logical block 1025, lost async page write [ 71.772997][ T4744] kworker/u4:17: attempt to access beyond end of device [ 71.772997][ T4744] loop3: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 71.778814][ T4744] Buffer I/O error on dev loop3, logical block 1025, lost async page write [ 71.782392][ T4744] kworker/u4:17: attempt to access beyond end of device [ 71.782392][ T4744] loop3: rw=1, sector=2052, nr_sectors = 2 limit=2048 [ 71.784744][ T4744] Buffer I/O error on dev loop3, logical block 1026, lost async page write [ 71.786454][ T4744] kworker/u4:17: attempt to access beyond end of device [ 71.786454][ T4744] loop3: rw=1, sector=2052, nr_sectors = 2 limit=2048 [ 71.789149][ T4744] Buffer I/O error on dev loop3, logical block 1026, lost async page write [ 71.790627][ T4744] kworker/u4:17: attempt to access beyond end of device [ 71.790627][ T4744] loop3: rw=1, sector=2054, nr_sectors = 2 limit=2048 [ 71.793227][ T4744] Buffer I/O error on dev loop3, logical block 1027, lost async page write [ 71.794911][ T4744] kworker/u4:17: attempt to access beyond end of device [ 71.794911][ T4744] loop3: rw=1, sector=2054, nr_sectors = 2 limit=2048 [ 71.797367][ T4744] Buffer I/O error on dev loop3, logical block 1027, lost async page write [ 71.799009][ T4744] kworker/u4:17: attempt to access beyond end of device [ 71.799009][ T4744] loop3: rw=1, sector=2056, nr_sectors = 2 limit=2048 [ 71.801194][ T4744] Buffer I/O error on dev loop3, logical block 1028, lost async page write [ 71.802603][ T4744] kworker/u4:17: attempt to access beyond end of device [ 71.802603][ T4744] loop3: rw=1, sector=2056, nr_sectors = 2 limit=2048 [ 71.804839][ T4744] Buffer I/O error on dev loop3, logical block 1028, lost async page write [ 72.339411][ T4407] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 73.214414][ T4407] usb 1-1: unable to get BOS descriptor or descriptor too short [ 73.253388][ T4407] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.256393][ T4407] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 73.259825][ T4407] usb 1-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 73.261475][ T4407] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.262919][ T4407] usb 1-1: Product: syz [ 73.263668][ T4407] usb 1-1: Manufacturer: syz [ 73.264976][ T4407] usb 1-1: SerialNumber: syz [ 73.450319][ T4859] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 73.556851][ T4865] bridge0: port 1(hsr0) entered blocking state [ 73.558305][ T4865] bridge0: port 1(hsr0) entered disabled state [ 73.562136][ T4865] device hsr0 entered promiscuous mode [ 73.564428][ T4865] bridge0: port 1(hsr0) entered blocking state [ 73.566152][ T4865] bridge0: port 1(hsr0) entered forwarding state [ 74.071972][ T4407] usb 1-1: cannot find UAC_HEADER [ 74.083835][ T4407] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 74.097900][ T4407] usb 1-1: USB disconnect, device number 2 [ 74.107066][ T4275] udevd[4275]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 74.238948][ T4871] loop1: detected capacity change from 0 to 512 [ 74.268413][ T4871] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 75.861243][ T4884] loop4: detected capacity change from 0 to 2048 [ 76.264054][ T4283] EXT4-fs (loop1): unmounting filesystem. [ 76.274703][ T4884] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 76.486551][ T4894] null_blk: disk nullb1 created [ 77.914336][ T4922] bridge0: port 3(hsr0) entered blocking state [ 77.915494][ T4922] bridge0: port 3(hsr0) entered disabled state [ 77.916998][ T4922] device hsr0 entered promiscuous mode [ 77.918209][ T4922] bridge0: port 3(hsr0) entered blocking state [ 77.919302][ T4922] bridge0: port 3(hsr0) entered forwarding state [ 78.230985][ T4929] loop4: detected capacity change from 0 to 512 [ 78.242369][ T4925] binder: 4924:4925 tried to acquire reference to desc 0, got 1 instead [ 78.249376][ T4925] binder: 4924:4925 got transaction with too large buffer [ 78.250774][ T4925] binder: 4924:4925 transaction call to 4924:0 failed 5/29201/-22, size 88-24 line 3521 [ 78.253832][ T4929] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.134: iget: bad extended attribute block 134217728 [ 78.265020][ T4929] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.134: couldn't read orphan inode 15 (err -117) [ 78.631466][ T4932] loop0: detected capacity change from 0 to 22 [ 78.634631][ T4932] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 78.647894][ T4932] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 78.785105][ T113] binder: undelivered TRANSACTION_ERROR: 29201 [ 78.786512][ T4927] netlink: 28 bytes leftover after parsing attributes in process `syz.2.132'. [ 78.804458][ T4929] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 78.832090][ T4929] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.134: bg 0: block 465: padding at end of block bitmap is not set [ 78.844433][ T4929] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 78.850383][ T4929] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.134: invalid indirect mapped block 234881024 (level 0) [ 78.858157][ T4929] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.134: invalid indirect mapped block 768 (level 1) [ 78.897187][ T4290] EXT4-fs (loop4): unmounting filesystem. [ 78.899969][ T4938] loop2: detected capacity change from 0 to 512 [ 78.911105][ T4938] EXT4-fs: Ignoring removed bh option [ 78.921852][ T4941] loop4: detected capacity change from 0 to 512 [ 78.943901][ T4938] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.148: corrupted in-inode xattr [ 78.948806][ T4938] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.148: couldn't read orphan inode 15 (err -117) [ 78.959771][ T4941] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 78.966037][ T4938] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 79.930317][ T4284] EXT4-fs (loop2): unmounting filesystem. [ 80.288045][ T4290] EXT4-fs (loop4): unmounting filesystem. [ 80.735044][ T4966] loop3: detected capacity change from 0 to 64 [ 81.345469][ T4980] loop2: detected capacity change from 0 to 512 [ 82.875229][ T4987] netlink: 'syz.0.161': attribute type 39 has an invalid length. [ 82.886465][ T4980] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.149: iget: bad extended attribute block 134217728 [ 82.889255][ T4980] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.149: couldn't read orphan inode 15 (err -117) [ 82.891481][ T4980] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 83.039335][ T4996] loop1: detected capacity change from 0 to 22 [ 83.043163][ T4996] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 83.062755][ T4996] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 83.243858][ T4980] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.149: bg 0: block 465: padding at end of block bitmap is not set [ 83.250653][ T4980] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 83.252375][ T4980] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.149: invalid indirect mapped block 234881024 (level 0) [ 83.256588][ T4980] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.149: invalid indirect mapped block 768 (level 1) [ 83.288226][ T4284] EXT4-fs (loop2): unmounting filesystem. [ 84.152667][ T5010] Injecting memory failure for pfn 0x138801 at process virtual address 0x20001000 [ 84.473065][ T5010] Memory failure: 0x138801: recovery action for dirty LRU page: Recovered [ 85.665332][ T5018] loop4: detected capacity change from 0 to 32768 [ 85.845996][ T5031] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 86.430249][ T5035] tipc: Started in network mode [ 86.431382][ T5035] tipc: Node identity eada0393577b, cluster identity 4711 [ 86.439709][ T5035] tipc: Enabled bearer , priority 0 [ 86.769678][ T5035] device syzkaller0 entered promiscuous mode [ 86.788073][ T5044] netlink: 'syz.3.167': attribute type 1 has an invalid length. [ 86.850122][ T5047] loop2: detected capacity change from 0 to 512 [ 86.856343][ T5049] loop1: detected capacity change from 0 to 512 [ 86.861244][ T5049] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.168: iget: bad extended attribute block 134217728 [ 86.862883][ T5044] bond1: (slave veth3): Enslaving as an active interface with a down link [ 86.867788][ T5049] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.168: couldn't read orphan inode 15 (err -117) [ 86.870481][ T5049] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 86.895622][ T4272] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 86.928082][ T5049] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.168: bg 0: block 465: padding at end of block bitmap is not set [ 86.935648][ T5049] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 86.938465][ T5049] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.168: invalid indirect mapped block 234881024 (level 0) [ 86.943718][ T5049] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.168: invalid indirect mapped block 768 (level 1) [ 86.966864][ T5051] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 86.969863][ T5035] tipc: Resetting bearer [ 86.982782][ T5044] device macvlan2 entered promiscuous mode [ 86.985775][ T5044] device bond1 entered promiscuous mode [ 86.986908][ T5044] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 86.989535][ T4283] EXT4-fs (loop1): unmounting filesystem. [ 86.997934][ T5044] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 87.002189][ T5044] device bond1 left promiscuous mode [ 87.378913][ T5033] tipc: Resetting bearer [ 87.716015][ T5033] tipc: Disabling bearer [ 87.730503][ T24] tipc: Node number set to 3181446035 [ 88.896178][ T5082] futex_wake_op: syz.4.179 tries to shift op by 144; fix this program [ 89.995820][ T5102] netlink: 84 bytes leftover after parsing attributes in process `syz.3.184'. [ 89.997862][ T5102] netlink: 'syz.3.184': attribute type 1 has an invalid length. [ 90.211646][ T5110] loop4: detected capacity change from 0 to 512 [ 90.907900][ T5117] loop2: detected capacity change from 0 to 256 [ 90.913698][ T5117] exfat: Deprecated parameter 'utf8' [ 90.914991][ T5117] exfat: Deprecated parameter 'utf8' [ 91.422888][ T4275] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 91.433344][ T5117] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 91.507784][ T5125] device syzkaller0 entered promiscuous mode [ 93.145628][ T5142] loop4: detected capacity change from 0 to 512 [ 93.149498][ T5142] EXT4-fs: Ignoring removed bh option [ 93.170245][ T5151] loop0: detected capacity change from 0 to 512 [ 93.172147][ T5151] EXT4-fs: Ignoring removed mblk_io_submit option [ 93.174694][ T5151] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 93.177583][ T5142] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.196: corrupted in-inode xattr [ 93.179986][ T5142] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.196: couldn't read orphan inode 15 (err -117) [ 93.182333][ T5151] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 93.183999][ T5142] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 93.319624][ T5151] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 93.326701][ T5151] EXT4-fs (loop0): 1 truncate cleaned up [ 93.327627][ T5151] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 93.567616][ T5151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.198'. [ 93.963418][ T4290] EXT4-fs (loop4): unmounting filesystem. [ 93.983037][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 94.151494][ T5174] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4290] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[5174] [ 94.382873][ T5173] loop1: detected capacity change from 0 to 512 [ 95.053994][ T5186] loop2: detected capacity change from 0 to 64 [ 95.157642][ T5185] device syzkaller0 entered promiscuous mode [ 95.723971][ T5203] loop4: detected capacity change from 0 to 164 [ 95.725124][ T5202] loop3: detected capacity change from 0 to 512 [ 95.726752][ T5202] EXT4-fs: Ignoring removed bh option [ 95.732731][ T5203] rock: corrupted directory entry. extent=32, offset=0, size=65773 [ 95.735747][ T5202] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.214: corrupted in-inode xattr [ 95.738133][ T5202] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.214: couldn't read orphan inode 15 (err -117) [ 95.740505][ T5202] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 96.778374][ T4297] EXT4-fs (loop3): unmounting filesystem. [ 96.985639][ T5229] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4297] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[5229] [ 97.867968][ T5245] netlink: 'syz.1.223': attribute type 2 has an invalid length. [ 98.473480][ T5264] loop2: detected capacity change from 0 to 164 [ 98.480404][ T5264] rock: corrupted directory entry. extent=32, offset=0, size=65773 [ 98.481461][ T5262] device syzkaller0 entered promiscuous mode [ 98.496503][ T5265] loop1: detected capacity change from 0 to 2048 [ 98.513674][ T5265] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 98.518114][ T5265] NILFS (loop1): mounting unchecked fs [ 98.581241][ T5265] NILFS (loop1): recovery complete [ 98.587780][ T5267] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 99.652584][ T5284] tipc: Enabling of bearer rejected, failed to enable media [ 99.851896][ T5299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.240'. [ 99.928293][ T5302] binder: 5301:5302 tried to acquire reference to desc 0, got 1 instead [ 99.953088][ T4336] binder: release 5301:5302 transaction 19 out, still active [ 99.954525][ T4336] binder: undelivered TRANSACTION_COMPLETE [ 99.955429][ T4336] binder: send failed reply for transaction 12 to 5301:5302 [ 100.025205][ T4336] binder: undelivered TRANSACTION_COMPLETE [ 100.039700][ T4336] binder: undelivered TRANSACTION_ERROR: 29189 [ 100.040913][ T4336] binder: send failed reply for transaction 19, target dead [ 100.270103][ T5313] xt_SECMARK: invalid mode: 2 [ 100.848839][ T5316] netlink: 84 bytes leftover after parsing attributes in process `syz.0.246'. [ 100.853741][ T5316] netlink: 'syz.0.246': attribute type 1 has an invalid length. [ 102.776728][ T5351] loop0: detected capacity change from 0 to 1024 [ 102.786767][ T5351] EXT4-fs: Ignoring removed bh option [ 102.792588][ T5351] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 102.817604][ T5344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.255'. [ 102.823195][ T5351] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 103.288779][ T5365] loop2: detected capacity change from 0 to 512 [ 103.298022][ T5365] ext4: Bad value for 'data' [ 103.356615][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 103.463572][ T5372] netlink: 128 bytes leftover after parsing attributes in process `syz.2.262'. [ 103.466834][ T5372] netlink: 128 bytes leftover after parsing attributes in process `syz.2.262'. [ 104.127702][ T5391] ======================================================= [ 104.127702][ T5391] WARNING: The mand mount option has been deprecated and [ 104.127702][ T5391] and is ignored by this kernel. Remove the mand [ 104.127702][ T5391] option from the mount to silence this warning. [ 104.127702][ T5391] ======================================================= [ 104.397349][ T27] audit: type=1326 audit(104.390:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5367 comm="syz.1.259" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b79228 code=0x7fc00000 [ 104.401822][ T27] audit: type=1326 audit(104.390:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5367 comm="syz.1.259" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffa9b79228 code=0x7fc00000 [ 104.418107][ T27] audit: type=1326 audit(104.390:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5367 comm="syz.1.259" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b79228 code=0x7fc00000 [ 104.440029][ T27] audit: type=1326 audit(104.390:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5367 comm="syz.1.259" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b79228 code=0x7fc00000 [ 104.454062][ T27] audit: type=1326 audit(104.390:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5367 comm="syz.1.259" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b79228 code=0x7fc00000 [ 104.467636][ T27] audit: type=1326 audit(104.390:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5367 comm="syz.1.259" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b79228 code=0x7fc00000 [ 104.481748][ T27] audit: type=1326 audit(104.390:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5367 comm="syz.1.259" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b79228 code=0x7fc00000 [ 104.487530][ T27] audit: type=1326 audit(104.390:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5367 comm="syz.1.259" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b79228 code=0x7fc00000 [ 104.492173][ T27] audit: type=1326 audit(104.390:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5367 comm="syz.1.259" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b79228 code=0x7fc00000 [ 104.500826][ T27] audit: type=1326 audit(104.390:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5367 comm="syz.1.259" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b79228 code=0x7fc00000 [ 104.860436][ T5402] fuse: Bad value for 'fd' [ 105.598673][ T4292] Bluetooth: hci3: command 0x0406 tx timeout [ 105.967052][ T5437] loop4: detected capacity change from 0 to 16 [ 105.975353][ T5437] erofs: (device loop4): mounted with root inode @ nid 36. [ 105.983247][ T5437] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 106.230868][ T5437] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -59 in[61, 4035] out[1851] [ 106.234225][ T5437] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 106.246158][ T5437] erofs: (device loop4): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 106.248801][ T5437] bio_check_eod: 13 callbacks suppressed [ 106.248810][ T5437] syz.4.277: attempt to access beyond end of device [ 106.248810][ T5437] loop4: rw=0, sector=296, nr_sectors = 8 limit=16 [ 106.251910][ T5437] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 106.253331][ T5437] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 106.707654][ T5457] loop0: detected capacity change from 0 to 512 [ 106.723480][ T5457] EXT2-fs (loop0): (no)acl options not supported [ 106.730438][ T5457] EXT2-fs (loop0): warning: mounting ext3 filesystem as ext2 [ 107.845391][ T5479] Injecting memory failure for pfn 0x141201 at process virtual address 0x20001000 [ 107.848211][ T5479] Memory failure: 0x141201: recovery action for unsplit thp: Ignored [ 108.970693][ T5491] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 5491 comm: syz.3.291) [ 109.284105][ T4407] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 109.906513][ T4407] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.909641][ T4407] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 109.911446][ T4407] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.983020][ T4407] usb 1-1: config 0 descriptor?? [ 110.018542][ T4407] pwc: Askey VC010 type 2 USB webcam detected. [ 110.511203][ T5516] tipc: Enabling of bearer rejected, failed to enable media [ 110.514857][ T5519] tipc: Enabling of bearer rejected, failed to enable media [ 110.632360][ T5525] bridge0: port 1(hsr0) entered blocking state [ 110.633557][ T5525] bridge0: port 1(hsr0) entered disabled state [ 110.637182][ T5525] device hsr0 entered promiscuous mode [ 110.639249][ T5525] bridge0: port 1(hsr0) entered blocking state [ 110.640238][ T5525] bridge0: port 1(hsr0) entered forwarding state [ 112.268613][ T4407] pwc: recv_control_msg error -71 req 02 val 2b00 [ 112.270156][ T4407] pwc: recv_control_msg error -71 req 02 val 2700 [ 112.273414][ T4407] pwc: recv_control_msg error -71 req 02 val 2c00 [ 112.274948][ T4407] pwc: recv_control_msg error -71 req 04 val 1000 [ 112.278000][ T4407] pwc: recv_control_msg error -71 req 04 val 1300 [ 112.279323][ T4407] pwc: recv_control_msg error -71 req 04 val 1400 [ 112.280910][ T4407] pwc: recv_control_msg error -71 req 02 val 2000 [ 112.282240][ T4407] pwc: recv_control_msg error -71 req 02 val 2100 [ 112.292562][ T4407] pwc: recv_control_msg error -71 req 04 val 1500 [ 112.395248][ T4407] pwc: recv_control_msg error -71 req 02 val 2500 [ 112.398092][ T4407] pwc: recv_control_msg error -71 req 02 val 2400 [ 112.399791][ T4407] pwc: recv_control_msg error -71 req 02 val 2600 [ 112.407831][ T4407] pwc: recv_control_msg error -71 req 02 val 2900 [ 112.415091][ T4407] pwc: recv_control_msg error -71 req 02 val 2800 [ 112.416392][ T4407] pwc: recv_control_msg error -71 req 04 val 1100 [ 112.417643][ T4407] pwc: recv_control_msg error -71 req 04 val 1200 [ 112.425755][ T4407] pwc: Registered as video11. [ 112.428110][ T4407] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input3 [ 113.123180][ T4407] usb 1-1: USB disconnect, device number 3 [ 114.815602][ T5574] Injecting memory failure for pfn 0x141601 at process virtual address 0x20001000 [ 114.817467][ T5574] Memory failure: 0x141601: recovery action for unsplit thp: Ignored [ 115.477709][ T5587] bridge0: port 3(hsr0) entered blocking state [ 115.479140][ T5587] bridge0: port 3(hsr0) entered disabled state [ 115.483345][ T5587] device hsr0 entered promiscuous mode [ 115.485892][ T5587] bridge0: port 3(hsr0) entered blocking state [ 115.486885][ T5587] bridge0: port 3(hsr0) entered forwarding state [ 117.490001][ T5616] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.491734][ T5616] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.493148][ T5616] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.494643][ T5616] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.497500][ T5616] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 118.511365][ T5636] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4290] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[5636] [ 119.210354][ T5650] Injecting memory failure for pfn 0x13ca01 at process virtual address 0x20001000 [ 119.212621][ T5650] Memory failure: 0x13ca01: recovery action for dirty LRU page: Recovered [ 119.944598][ T5668] netlink: 'syz.3.336': attribute type 13 has an invalid length. [ 119.955844][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 119.961599][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 119.963542][ T5668] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 120.753754][ T5686] loop2: detected capacity change from 0 to 128 [ 120.978335][ T5689] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4284] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[5689] [ 121.643423][ T5703] loop0: detected capacity change from 0 to 1024 [ 121.652977][ T5703] EXT4-fs: quotafile must be on filesystem root [ 124.212889][ T4407] Unable to handle kernel paging request at virtual address dfff800000000013 [ 124.214897][ T4407] KASAN: null-ptr-deref in range [0x0000000000000098-0x000000000000009f] [ 124.216604][ T4407] Mem abort info: [ 124.217249][ T4407] ESR = 0x0000000096000006 [ 124.218066][ T4407] EC = 0x25: DABT (current EL), IL = 32 bits [ 124.219148][ T4407] SET = 0, FnV = 0 [ 124.219825][ T4407] EA = 0, S1PTW = 0 [ 124.220491][ T4407] FSC = 0x06: level 2 translation fault [ 124.221428][ T4407] Data abort info: [ 124.221983][ T4407] ISV = 0, ISS = 0x00000006 [ 124.222760][ T4407] CM = 0, WnR = 0 [ 124.223460][ T4407] [dfff800000000013] address between user and kernel address ranges [ 124.225334][ T4407] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP [ 124.226576][ T4407] Modules linked in: [ 124.227243][ T4407] CPU: 0 PID: 4407 Comm: kworker/0:8 Not tainted syzkaller #0 [ 124.228403][ T4407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 124.230004][ T4407] Workqueue: kafsd afs_process_async_call [ 124.230924][ T4407] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 124.232158][ T4407] pc : __mutex_lock_common+0xfc/0x1f3c [ 124.233071][ T4407] lr : __mutex_lock_common+0xd0/0x1f3c [ 124.233974][ T4407] sp : ffff8000214978a0 [ 124.234716][ T4407] x29: ffff8000214979e0 x28: ffff700004292f28 x27: 0000000000000000 [ 124.236136][ T4407] x26: 0000000000000000 x25: 1fffe0001969db00 x24: 0000000000000000 [ 124.237591][ T4407] x23: dfff800000000000 x22: ffff800010fe6510 x21: ffff800021497960 [ 124.238938][ T4407] x20: 0000000000000000 x19: 0000000000000038 x18: 1fffe00033e7037e [ 124.240312][ T4407] x17: ffff80001538d000 x16: ffff8000082dbd50 x15: 0000000000000000 [ 124.241701][ T4407] x14: 0000000000000005 x13: 1ffff00004292f2c x12: 0000000000000000 [ 124.243049][ T4407] x11: ff0080000a97760c x10: 0000000000000000 x9 : 0000000000000003 [ 124.244356][ T4407] x8 : 0000000000000013 x7 : 0000000000000000 x6 : 0000000000000000 [ 124.245702][ T4407] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000020 [ 124.247078][ T4407] x2 : 0000000000000000 x1 : ffff800011cfedc0 x0 : 0000000000000000 [ 124.248552][ T4407] Call trace: [ 124.249162][ T4407] __mutex_lock_common+0xfc/0x1f3c [ 124.250041][ T4407] mutex_lock_nested+0x38/0x44 [ 124.250845][ T4407] rxrpc_kernel_abort_call+0x34/0x88 [ 124.251756][ T4407] afs_deliver_to_call+0x4d0/0xec0 [ 124.252644][ T4407] afs_process_async_call+0x90/0xf8 [ 124.253536][ T4407] process_one_work+0x7e4/0x13bc [ 124.254397][ T4407] worker_thread+0x8cc/0xfe8 [ 124.255195][ T4407] kthread+0x254/0x2e0 [ 124.255953][ T4407] ret_from_fork+0x10/0x20 [ 124.256717][ T4407] Code: b9486108 35000148 91018268 d343fd08 (38776908) [ 124.257920][ T4407] ---[ end trace 0000000000000000 ]--- [ 124.492320][ T4407] Kernel panic - not syncing: Oops: Fatal exception [ 124.493401][ T4407] SMP: stopping secondary CPUs [ 124.494168][ T4407] Kernel Offset: disabled [ 124.494878][ T4407] CPU features: 0x0a0000,000f0097,a65bfea7 [ 124.495833][ T4407] Memory Limit: none [ 124.699214][ T4407] Rebooting in 86400 seconds..