last executing test programs: 11.62338598s ago: executing program 2 (id=93): socket$packet(0x11, 0x3, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffb6) 10.296304877s ago: executing program 2 (id=98): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) 8.397010581s ago: executing program 2 (id=102): r0 = syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000d80)="$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") pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x80a, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',uname=']) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_read_part_table(0x5dd, &(0x7f0000000000)="$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") r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r3) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)={0x3c, r4, 0x1, 0x70bd2d, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x9}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8}]}, 0x3c}}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) unshare(0x22000600) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r7, r6, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) r8 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0xff) copy_file_range(r8, 0x0, r8, &(0x7f0000000080)=0x8800000, 0x1, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0xb}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r7, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdc, &(0x7f0000000440)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000640), &(0x7f0000000740), 0x8, 0xd8, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000900)={@fallback=r0, r6, 0x12, 0x28, 0x0, @void, @void, @void, @value=r9}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000000400000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r11}, 0x10) readv(r5, &(0x7f0000000480)=[{&(0x7f0000000200)=""/216, 0xd8}], 0x1) 8.396725082s ago: executing program 3 (id=104): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_procfs(0x0, &(0x7f00000003c0)='setgroups\x00') dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x811) 6.578804565s ago: executing program 2 (id=119): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000}, 0x0) socket(0x1f, 0x3, 0x4) setuid(0x0) ioprio_get$uid(0x3, 0x0) 5.617201627s ago: executing program 1 (id=122): ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000340)={0x4, 0x8001, 0x4, 0x100, 0xffffffff}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x184}}, 0x0) 5.38401062s ago: executing program 1 (id=125): syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000043c0)=ANY=[@ANYBLOB="003bfa093f92d25f4b42889f58b36282edd6f82c49e007ed49b9ed030962f330bd57af2a"], 0x2, 0x1aa, &(0x7f0000000600)="$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") r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) 5.288834252s ago: executing program 4 (id=127): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000ed0320182abd7200fddbdf25510ffa69ffff15007b7adf0cfcf50184da5bb10d8b67c991a75dae240af107e63ee7ad"], 0x18}}, 0x84) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0xc0ed0005, &(0x7f0000000280)={[{@jqfmt_vfsold}, {@noquota}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@auto_da_alloc_val}]}, 0x0, 0x453, &(0x7f0000000900)="$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") 5.067451874s ago: executing program 1 (id=129): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0, 0x0, 0x9}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x3d17, 0x0, 0x200, 0x8, 0x1a, "fc12105588e633bbb1dfe72dace17a32d211ee"}) 5.026813115s ago: executing program 0 (id=130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xfffc}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4.971670506s ago: executing program 1 (id=131): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000240)=0x2) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r3, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) 4.688027239s ago: executing program 0 (id=132): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x8}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000000) mount(&(0x7f0000000140)=@nullb, 0x0, 0x0, 0x2208004, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, 'bond_slave_1\x00'}}, 0x1e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005500), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x2}) r2 = fsopen(&(0x7f0000000340)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 4.041477758s ago: executing program 4 (id=133): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() setsockopt(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000e40), 0x400, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x0, {}, 0x1}, 0x18) connect$can_j1939(r4, &(0x7f0000000640)={0x1d, r5}, 0x18) sendfile(r4, r3, 0x0, 0x1000000000000a) 2.774742224s ago: executing program 4 (id=134): syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x3060000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0x7ffff024}, {0x6, 0x0, 0x10}]}, 0x10) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b0000080039503230"], 0x15) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61122400000000006113340000000000bf1000000000000015000200091b00003d030100000000008701000000000000bc26000000000000bf67000000000000560300000ee600f06702000014000000160300000ee600f0bf050000000000000f610000000000006507f4ff02000400070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586e3f640f9f7e9a73b761ad4f0952a70046270d2b6436fdeecd791614ed46de741eb8cf91c046ef9beca574b350021c7ec6ef130f53748068ca432dae4e248b22b9ad8b2811f67916a1764578cba4b069037bfb3362d5691ac397f7e207145d970f0d97867552629b146645c785fb77dbeca38e49a9d5221f1f45f0a25890d04d91a15a05ae7e7ed6252c3d6c1973fb858de1da70d67317e7872b0603ce47ed2c1520e71b527bb42aa2e20e1e85df73736ed0a782ab7e7278dd54358cfdf6313d40f926332623625b49626481054787ab2dff85a9bebd6b317f26c691a65aa97bb3d1506a3a565e9c7ea5ad4611d2d77ee8a5c1b23814a26b6a20061fbb65bdd03770fa849f2a29ba69f90625f42592a70ba890f7a92878ae73574c3a233ee5954119931a1905210715fa77a8795f2fbec3797cb90f59fe8a4abec25f40c87bf25b750bbaa"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0}, 0x50) dup(r0) 2.773805554s ago: executing program 0 (id=144): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000ed0320182abd7200fddbdf25510ffa69ffff15007b7adf0cfcf50184da5bb10d8b67c991a75dae240af107e63ee7ad"], 0x18}}, 0x84) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0xc0ed0005, &(0x7f0000000280)={[{@jqfmt_vfsold}, {@noquota}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@auto_da_alloc_val}]}, 0x0, 0x453, &(0x7f0000000900)="$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") 2.773339294s ago: executing program 1 (id=135): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, 0x0, 0x0, 0x0) 2.773130434s ago: executing program 3 (id=136): socket$inet6(0xa, 0x1, 0xfffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r4, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x4000000000010046) 2.492027868s ago: executing program 1 (id=137): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r1 = epoll_create1(0x80000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xe000001a}) preadv(r2, &(0x7f0000000640)=[{&(0x7f0000000100)=""/115, 0x73}], 0x1, 0x80000001, 0x800000f5) ppoll(&(0x7f00000001c0)=[{r1, 0x1065}], 0x1, 0x0, 0x0, 0x0) 596.573512ms ago: executing program 3 (id=138): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r0, 0x0, 0x0) 381.928885ms ago: executing program 4 (id=139): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x28241, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) 355.280215ms ago: executing program 0 (id=140): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000003880), 0x0, 0x12141, 0x0) 354.823745ms ago: executing program 2 (id=141): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x30}}, 0x0) 286.208856ms ago: executing program 3 (id=142): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001a40)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x7, 0xfff1}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xb, 0xfff3}}]}}]}, 0x40}}, 0x0) 285.816666ms ago: executing program 4 (id=143): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 270.506296ms ago: executing program 2 (id=145): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_procfs(0x0, &(0x7f00000003c0)='setgroups\x00') dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x811) 254.992976ms ago: executing program 0 (id=146): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000001ac0)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x0, 0x40, &(0x7f00000000c0)="5d1643d5ab", 0x5, 0x6, 0x75, 0x6, 0x8, 0x79, 0x0}) 222.441747ms ago: executing program 3 (id=147): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) 168.063897ms ago: executing program 4 (id=148): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x14, r4, 0x209}, 0x14}}, 0x0) 129.618168ms ago: executing program 0 (id=149): syz_open_procfs(0x0, &(0x7f0000000240)='net/sctp\x00') socket$packet(0x11, 0x3, 0x300) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1, 0x0, 0x1ffffffff}, 0x18) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 0s ago: executing program 3 (id=150): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a000000000000000000000002001000000000000000000008"], 0x24}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1a0d"], 0x1d) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.142' (ED25519) to the list of known hosts. [ 42.715622][ T4017] cgroup: Unknown subsys name 'net' [ 42.966429][ T4017] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.339131][ T4017] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 44.721185][ T4027] chnl_net:caif_netlink_parms(): no params data found [ 44.774396][ T4031] chnl_net:caif_netlink_parms(): no params data found [ 44.837181][ T4032] chnl_net:caif_netlink_parms(): no params data found [ 44.884235][ T4027] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.885936][ T4027] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.888765][ T4027] device bridge_slave_0 entered promiscuous mode [ 44.903707][ T4027] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.905453][ T4027] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.907750][ T4027] device bridge_slave_1 entered promiscuous mode [ 44.912294][ T4036] chnl_net:caif_netlink_parms(): no params data found [ 44.944384][ T4031] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.946149][ T4031] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.948466][ T4031] device bridge_slave_0 entered promiscuous mode [ 44.969357][ T4032] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.971251][ T4032] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.973368][ T4032] device bridge_slave_0 entered promiscuous mode [ 44.976112][ T4031] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.977794][ T4031] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.980099][ T4031] device bridge_slave_1 entered promiscuous mode [ 44.994757][ T4027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.999603][ T4032] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.001688][ T4032] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.003967][ T4032] device bridge_slave_1 entered promiscuous mode [ 45.018275][ T4027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.032700][ T4031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.046828][ T4027] team0: Port device team_slave_0 added [ 45.050714][ T4038] chnl_net:caif_netlink_parms(): no params data found [ 45.063912][ T4031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.069967][ T4027] team0: Port device team_slave_1 added [ 45.083156][ T4032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.087177][ T4032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.109612][ T4027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.111695][ T4027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.117854][ T4027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.149394][ T4031] team0: Port device team_slave_0 added [ 45.151896][ T4027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.153703][ T4027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.159475][ T4027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.177967][ T4031] team0: Port device team_slave_1 added [ 45.185278][ T4036] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.187106][ T4036] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.189595][ T4036] device bridge_slave_0 entered promiscuous mode [ 45.194218][ T4032] team0: Port device team_slave_0 added [ 45.212831][ T4038] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.214538][ T4038] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.216843][ T4038] device bridge_slave_0 entered promiscuous mode [ 45.220206][ T4038] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.222385][ T4038] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.224803][ T4038] device bridge_slave_1 entered promiscuous mode [ 45.227086][ T4036] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.228897][ T4036] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.232305][ T4036] device bridge_slave_1 entered promiscuous mode [ 45.235536][ T4032] team0: Port device team_slave_1 added [ 45.270996][ T4031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.272679][ T4031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.278975][ T4031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.342710][ T4027] device hsr_slave_0 entered promiscuous mode [ 45.380757][ T4027] device hsr_slave_1 entered promiscuous mode [ 45.421171][ T4031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.422889][ T4031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.428894][ T4031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.433901][ T4038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.442635][ T4036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.445415][ T4032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.447153][ T4032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.453470][ T4032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.457748][ T4032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.459356][ T4032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.465512][ T4032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.471063][ T4038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.480058][ T4036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.529285][ T4038] team0: Port device team_slave_0 added [ 45.541844][ T4036] team0: Port device team_slave_0 added [ 45.549649][ T4038] team0: Port device team_slave_1 added [ 45.592552][ T4031] device hsr_slave_0 entered promiscuous mode [ 45.630704][ T4031] device hsr_slave_1 entered promiscuous mode [ 45.670460][ T4031] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.672460][ T4031] Cannot create hsr debugfs directory [ 45.674717][ T4036] team0: Port device team_slave_1 added [ 45.752300][ T4032] device hsr_slave_0 entered promiscuous mode [ 45.790669][ T4032] device hsr_slave_1 entered promiscuous mode [ 45.850523][ T4032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.852522][ T4032] Cannot create hsr debugfs directory [ 45.887369][ T4038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.889118][ T4038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.896131][ T4038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.905028][ T4036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.906705][ T4036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.913284][ T4036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.916548][ T4038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.918189][ T4038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.924525][ T4038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.950932][ T4036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.952711][ T4036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.958636][ T4036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.082260][ T4038] device hsr_slave_0 entered promiscuous mode [ 46.120719][ T4038] device hsr_slave_1 entered promiscuous mode [ 46.180679][ T4038] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.182598][ T4038] Cannot create hsr debugfs directory [ 46.232347][ T4036] device hsr_slave_0 entered promiscuous mode [ 46.271151][ T4036] device hsr_slave_1 entered promiscuous mode [ 46.310450][ T4036] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.312401][ T4036] Cannot create hsr debugfs directory [ 46.402828][ T4027] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.438443][ T4027] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 46.500970][ T3610] Bluetooth: hci0: command 0x0409 tx timeout [ 46.500970][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 46.513207][ T4027] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 46.564161][ T4027] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 46.580505][ T3610] Bluetooth: hci4: command 0x0409 tx timeout [ 46.582068][ T3610] Bluetooth: hci2: command 0x0409 tx timeout [ 46.591082][ T4070] Bluetooth: hci3: command 0x0409 tx timeout [ 46.683117][ T4031] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 46.713545][ T4031] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 46.755107][ T4031] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 46.809688][ T4031] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 46.886467][ T4032] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 46.930129][ T4032] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 46.972449][ T4032] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.029570][ T4032] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.096194][ T4036] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.154379][ T4036] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.211325][ T4036] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.252574][ T4036] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.322491][ T4027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.341469][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.345808][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.352861][ T4027] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.367046][ T4038] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 47.398993][ T4038] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 47.444663][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.447587][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.456681][ T370] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.458578][ T370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.462508][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.474968][ T4038] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 47.513922][ T4038] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 47.582742][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.585267][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.588155][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.589963][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.592304][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.612704][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.620105][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.628073][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.632688][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.639220][ T4031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.648151][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.650913][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.661854][ T4032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.682501][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.685356][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.688188][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.691171][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.696117][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.698832][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.715300][ T4032] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.719930][ T4031] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.728630][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.732192][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.734517][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.736812][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.739002][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.740757][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.744311][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.746882][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.749425][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.751289][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.756716][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.765126][ T4027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.777254][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.780082][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.790093][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.795108][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.797654][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.799412][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.815406][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.817715][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.821412][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.823786][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.825598][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.837003][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.840174][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.845739][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.848432][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.866905][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.869446][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.873583][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.876160][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.878494][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.882299][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.884584][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.896890][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.923346][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.926656][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.946938][ T4036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.962532][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.964937][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.968504][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.973214][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.975853][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.978163][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.981486][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.984919][ T4036] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.000218][ T4038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.004801][ T563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.007261][ T563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.028936][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.033352][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.037577][ T370] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.039470][ T370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.044694][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.047173][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.049516][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.051288][ T370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.054763][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.056771][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.058502][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.065139][ T4027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.068747][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.072225][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.083860][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.098750][ T4038] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.104022][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.107218][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.109788][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.120969][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.123393][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.144424][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.147652][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.153897][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.156282][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.158652][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.160368][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.163374][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.165981][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.168434][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.170345][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.174717][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.187306][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.189902][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.197705][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.215349][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.217350][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.219180][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.223227][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.230576][ T4036] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.233890][ T4036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.252246][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.254687][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.257057][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.267396][ T4031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.284509][ T563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.287733][ T563] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.291306][ T563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.293932][ T563] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.296492][ T563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.298834][ T563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.303321][ T563] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.305719][ T563] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.307998][ T563] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.329431][ T4027] device veth0_vlan entered promiscuous mode [ 48.335868][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.338555][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.341948][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.343942][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.345872][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.348790][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.365924][ T4027] device veth1_vlan entered promiscuous mode [ 48.376430][ T4032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.383325][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.391979][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.394495][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.397047][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.446611][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.451044][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.452987][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.469664][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.473248][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.475805][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.479373][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.486219][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.488635][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.504941][ T4036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.506954][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.509480][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.514101][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.516395][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.528026][ T4031] device veth0_vlan entered promiscuous mode [ 48.533353][ T4032] device veth0_vlan entered promiscuous mode [ 48.541767][ T4027] device veth0_macvtap entered promiscuous mode [ 48.547740][ T563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.550940][ T563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.554234][ T563] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.570955][ T4027] device veth1_macvtap entered promiscuous mode [ 48.575985][ T4032] device veth1_vlan entered promiscuous mode [ 48.580975][ T4069] Bluetooth: hci1: command 0x041b tx timeout [ 48.582570][ T4069] Bluetooth: hci0: command 0x041b tx timeout [ 48.587305][ T4031] device veth1_vlan entered promiscuous mode [ 48.612433][ T563] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.614736][ T563] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.617180][ T563] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.619862][ T563] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.624029][ T563] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.626013][ T563] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.627945][ T563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.631487][ T563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.654390][ T563] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.656758][ T563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.659216][ T563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.662081][ T4069] Bluetooth: hci3: command 0x041b tx timeout [ 48.664040][ T4069] Bluetooth: hci2: command 0x041b tx timeout [ 48.666549][ T4069] Bluetooth: hci4: command 0x041b tx timeout [ 48.673894][ T4038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.689366][ T4027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.695294][ T4032] device veth0_macvtap entered promiscuous mode [ 48.697605][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.700036][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.704218][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.706864][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.709541][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.725796][ T4027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.728329][ T4036] device veth0_vlan entered promiscuous mode [ 48.730982][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.733309][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.735577][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.738065][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.751977][ T4032] device veth1_macvtap entered promiscuous mode [ 48.756573][ T4027] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.758849][ T4027] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.763120][ T4027] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.765173][ T4027] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.769515][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.772824][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.775538][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.779666][ T4031] device veth0_macvtap entered promiscuous mode [ 48.791946][ T4036] device veth1_vlan entered promiscuous mode [ 48.802627][ T4031] device veth1_macvtap entered promiscuous mode [ 48.833491][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.836437][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.841653][ T4032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.845783][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.848308][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.856334][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.858769][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.861592][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.864100][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.886689][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.889154][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.893691][ T4032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.899621][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.903883][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.913762][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.916193][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.918491][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.922618][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.926103][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.943381][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.946163][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.949657][ T4032] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.952519][ T4032] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.954729][ T4032] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.956834][ T4032] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.969574][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.973936][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.976310][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.978786][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.984168][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.997333][ T4031] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.999383][ T4031] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.001948][ T4031] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.004133][ T4031] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.013616][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.016125][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.024937][ T4036] device veth0_macvtap entered promiscuous mode [ 49.034121][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.034728][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.037645][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.038168][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.043524][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.046152][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.048871][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.054056][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.059879][ T4036] device veth1_macvtap entered promiscuous mode [ 49.108407][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.112265][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.114731][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.119045][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.121791][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.134705][ T4038] device veth0_vlan entered promiscuous mode [ 49.139778][ T563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.145919][ T563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.172894][ T563] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.208827][ T4038] device veth1_vlan entered promiscuous mode [ 49.226607][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.229168][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.232955][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.235462][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.237718][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.240245][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.246104][ T4036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.255553][ T563] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.258044][ T563] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.269458][ T563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.273970][ T370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.275907][ T370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.279138][ T563] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.318274][ T4038] device veth0_macvtap entered promiscuous mode [ 49.329341][ T4038] device veth1_macvtap entered promiscuous mode [ 49.338748][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.342033][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.344458][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.346967][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.349961][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.360443][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.362504][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.373537][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.375884][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.378412][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.391171][ T4038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.395684][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.398099][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.409967][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.413266][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.415836][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.418324][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.428434][ T4038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.433251][ T4038] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.435403][ T4038] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.437602][ T4038] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.439737][ T4038] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.474036][ T370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.475339][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.475906][ T370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.478286][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.483494][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.486125][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.488456][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.491798][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.494100][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.496249][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.499962][ T4036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.504491][ T563] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.506993][ T563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.509495][ T563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.518289][ T563] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.546309][ T563] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.643445][ T4106] loop0: detected capacity change from 0 to 512 [ 49.809017][ T4106] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 49.812287][ T4106] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 49.960773][ T4106] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 49.966659][ T4106] EXT4-fs (loop0): 1 truncate cleaned up [ 49.968301][ T4106] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 50.127502][ T563] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.216169][ T563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.226279][ T563] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.252407][ T563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.255448][ T563] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.257833][ T563] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.260182][ T563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.264519][ T563] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.355840][ T4036] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.357941][ T4036] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.363639][ T4036] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.365763][ T4036] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.507552][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.536284][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.538386][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.559358][ T301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.561404][ T301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.565435][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.580794][ T263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.582196][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.583125][ T263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.593945][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.596611][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.599021][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.066289][ T4117] loop0: detected capacity change from 0 to 1024 [ 51.111635][ T4118] loop2: detected capacity change from 0 to 512 [ 51.212413][ T4073] Bluetooth: hci0: command 0x040f tx timeout [ 51.214076][ T4073] Bluetooth: hci1: command 0x040f tx timeout [ 51.219474][ T4073] Bluetooth: hci4: command 0x040f tx timeout [ 51.221800][ T4073] Bluetooth: hci2: command 0x040f tx timeout [ 51.223775][ T4073] Bluetooth: hci3: command 0x040f tx timeout [ 51.229206][ T4118] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 51.233453][ T4117] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 51.270565][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.272514][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.276926][ T4118] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (20904!=33349) [ 51.289398][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.294248][ T4118] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 51.296935][ T4118] EXT4-fs (loop2): orphan cleanup on readonly fs [ 51.298963][ T4118] EXT4-fs error (device loop2): ext4_map_blocks:628: inode #2: block 4: comm syz.2.3: lblock 0 mapped to illegal pblock 4 (length 1) [ 51.308962][ T4118] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 51.312517][ T4118] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,noquota,errors=continue,noload,data_err=ignore,usrjquota="init_itable=0x0000000000000601,auto_da_alloc=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 51.517457][ T4121] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 52.667451][ T4135] loop0: detected capacity change from 0 to 2048 [ 52.706537][ T4135] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 52.731574][ T4135] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 52.972920][ T4139] loop1: detected capacity change from 0 to 128 [ 53.024620][ T4143] loop4: detected capacity change from 0 to 1024 [ 53.096850][ T4143] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a000c018, mo2=0002] [ 53.099244][ T4143] System zones: 0-1, 3-12 [ 53.101426][ T4143] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,bsddf,barrier=0x0000000000000000,debug,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,min_batch_time=0x0000000000000007,,errors=continue. Quota mode: none. [ 53.265220][ T3610] Bluetooth: hci1: command 0x0419 tx timeout [ 53.266722][ T3610] Bluetooth: hci0: command 0x0419 tx timeout [ 53.292554][ T4153] loop1: detected capacity change from 0 to 512 [ 53.301556][ T3610] Bluetooth: hci3: command 0x0419 tx timeout [ 53.303196][ T3610] Bluetooth: hci2: command 0x0419 tx timeout [ 53.303603][ T4076] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 53.304649][ T3610] Bluetooth: hci4: command 0x0419 tx timeout [ 53.328054][ T4155] loop3: detected capacity change from 0 to 1024 [ 53.333926][ T4153] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 53.345403][ T4157] loop4: detected capacity change from 0 to 512 [ 53.354037][ T4153] EXT4-fs (loop1): 1 truncate cleaned up [ 53.355415][ T4153] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 53.367969][ T4155] ======================================================= [ 53.367969][ T4155] WARNING: The mand mount option has been deprecated and [ 53.367969][ T4155] and is ignored by this kernel. Remove the mand [ 53.367969][ T4155] option from the mount to silence this warning. [ 53.367969][ T4155] ======================================================= [ 53.387967][ T4162] loop2: detected capacity change from 0 to 256 [ 53.392597][ T4157] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 53.401077][ T4157] EXT4-fs (loop4): orphan cleanup on readonly fs [ 53.402602][ T4157] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #3: comm syz.4.16: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 53.407597][ T4157] EXT4-fs error (device loop4): ext4_quota_enable:6398: comm syz.4.16: Bad quota inode: 3, type: 0 [ 53.414411][ T4157] EXT4-fs warning (device loop4): ext4_enable_quotas:6439: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 53.418069][ T4157] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 53.419615][ T4157] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 53.468399][ T4155] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=continue,,errors=continue. Quota mode: none. [ 53.482470][ T4157] EXT4-fs error (device loop4): ext4_readdir:263: inode #12: block 13: comm syz.4.16: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=12, rec_len=0, size=4096 fake=0 [ 53.488113][ T4155] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 53.490174][ T4155] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 53.499019][ T4155] EXT4-fs (loop3): This should not happen!! Data will be lost [ 53.499019][ T4155] [ 53.502510][ T4155] EXT4-fs (loop3): Total free blocks count 0 [ 53.504242][ T4155] EXT4-fs (loop3): Free/Dirty block details [ 53.505681][ T4155] EXT4-fs (loop3): free_blocks=4293918720 [ 53.507168][ T4155] EXT4-fs (loop3): dirty_blocks=16 [ 53.508606][ T4155] EXT4-fs (loop3): Block reservation details [ 53.510047][ T4155] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 53.537378][ T4169] udc-core: couldn't find an available UDC or it's busy [ 53.564884][ T4155] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 53.567978][ T4155] EXT4-fs (loop3): This should not happen!! Data will be lost [ 53.567978][ T4155] [ 53.570545][ T4169] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 53.689390][ T4076] usb 1-1: Using ep0 maxpacket: 32 [ 53.944147][ T4076] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 53.946340][ T4076] usb 1-1: config 0 has no interface number 0 [ 54.238220][ T4178] loop3: detected capacity change from 0 to 512 [ 54.573895][ T4178] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 54.627581][ T4178] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (20904!=33349) [ 54.635935][ T4178] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 54.638711][ T4178] EXT4-fs (loop3): orphan cleanup on readonly fs [ 54.640446][ T4178] EXT4-fs error (device loop3): ext4_map_blocks:628: inode #2: block 4: comm syz.3.23: lblock 0 mapped to illegal pblock 4 (length 1) [ 54.646154][ T4178] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 54.648225][ T4178] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,noquota,errors=continue,noload,data_err=ignore,usrjquota="init_itable=0x0000000000000601,auto_da_alloc=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 54.770595][ T4076] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 54.772744][ T4076] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.837249][ T4076] usb 1-1: Product: syz [ 54.838621][ T4076] usb 1-1: Manufacturer: syz [ 54.839752][ T4076] usb 1-1: SerialNumber: syz [ 54.854042][ T4076] usb 1-1: config 0 descriptor?? [ 54.892152][ T4076] smsc95xx v2.0.0 [ 55.230948][ T4190] loop4: detected capacity change from 0 to 1024 [ 55.379026][ T4190] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 55.611594][ T4188] netlink: 12 bytes leftover after parsing attributes in process `syz.3.25'. [ 55.988548][ T4194] loop1: detected capacity change from 0 to 512 [ 56.096982][ T4194] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 56.432948][ T4194] EXT4-fs (loop1): 1 truncate cleaned up [ 56.434515][ T4194] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 56.659639][ T4200] loop4: detected capacity change from 0 to 128 [ 56.910442][ T4076] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 56.913236][ T4076] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 56.930604][ T4076] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 56.937205][ T4076] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 57.181684][ T4076] usb 1-1: USB disconnect, device number 2 [ 57.419693][ T4200] loop4: detected capacity change from 0 to 256 [ 57.758228][ T4200] FAT-fs (loop4): unable to read block(1639268220928) for building NFS inode [ 57.876545][ T4206] loop1: detected capacity change from 0 to 4096 [ 59.109226][ T4206] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 60.186324][ T4235] loop4: detected capacity change from 0 to 512 [ 60.187419][ T4238] loop3: detected capacity change from 0 to 256 [ 60.191860][ T4235] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 60.194134][ T4235] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (20904!=33349) [ 60.212707][ T4241] netlink: 12 bytes leftover after parsing attributes in process `syz.0.40'. [ 60.220861][ T4235] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 60.224262][ T4235] EXT4-fs (loop4): orphan cleanup on readonly fs [ 60.226045][ T4235] EXT4-fs error (device loop4): ext4_map_blocks:628: inode #2: block 4: comm syz.4.36: lblock 0 mapped to illegal pblock 4 (length 1) [ 60.230648][ T4235] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 60.232629][ T4235] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,noquota,errors=continue,noload,data_err=ignore,usrjquota="init_itable=0x0000000000000601,auto_da_alloc=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 60.952667][ T4253] loop1: detected capacity change from 0 to 1024 [ 61.008110][ T4251] loop2: detected capacity change from 0 to 512 [ 61.170039][ T4253] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 61.171576][ T4251] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 61.238424][ T4251] EXT4-fs (loop2): 1 truncate cleaned up [ 61.239925][ T4251] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 61.286685][ T4256] loop0: detected capacity change from 0 to 16 [ 61.366792][ T4256] erofs: (device loop0): mounted with root inode @ nid 36. [ 61.865489][ T4269] loop4: detected capacity change from 0 to 4096 [ 63.388795][ T4269] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 64.598763][ T4293] loop1: detected capacity change from 0 to 256 [ 64.683897][ T4295] netlink: 7000 bytes leftover after parsing attributes in process `syz.4.54'. [ 65.385840][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 65.389499][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.391660][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.013564][ T4301] loop2: detected capacity change from 0 to 1024 [ 66.724752][ T4310] loop4: detected capacity change from 0 to 512 [ 66.832320][ T4309] loop1: detected capacity change from 0 to 512 [ 67.020619][ T4301] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 67.072995][ T4310] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 67.073018][ T4309] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 67.078006][ T4309] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (20904!=33349) [ 67.124080][ T4309] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 67.155044][ T4309] EXT4-fs (loop1): orphan cleanup on readonly fs [ 67.156503][ T4310] EXT4-fs (loop4): 1 truncate cleaned up [ 67.156717][ T4309] EXT4-fs error (device loop1): ext4_map_blocks:628: inode #2: block 4: comm syz.1.58: lblock 0 mapped to illegal pblock 4 (length 1) [ 67.158196][ T4310] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 67.166178][ T4309] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 67.168546][ T4309] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,noquota,errors=continue,noload,data_err=ignore,usrjquota="init_itable=0x0000000000000601,auto_da_alloc=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 67.446813][ T4315] loop2: detected capacity change from 0 to 16 [ 67.452652][ T4315] erofs: (device loop2): mounted with root inode @ nid 36. [ 67.782420][ T4322] loop1: detected capacity change from 0 to 512 [ 67.848115][ T4322] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 68.527922][ T4322] EXT4-fs (loop1): 1 truncate cleaned up [ 68.529333][ T4322] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 68.698896][ T4334] loop4: detected capacity change from 0 to 2048 [ 68.943152][ T4334] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 69.773110][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.774966][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.778581][ T3326] cfg80211: failed to load regulatory.db [ 69.795989][ T4351] loop1: detected capacity change from 0 to 1024 [ 71.401016][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 71.405202][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.407193][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.995916][ T4364] loop2: detected capacity change from 0 to 1024 [ 72.090138][ T4364] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 72.424092][ T4373] loop1: detected capacity change from 0 to 2048 [ 72.448366][ T4380] capability: warning: `syz.2.77' uses deprecated v2 capabilities in a way that may be insecure [ 72.512342][ T4380] loop2: detected capacity change from 0 to 512 [ 72.603009][ T4380] EXT4-fs (loop2): inline encryption not supported [ 73.316252][ T4380] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c119, mo2=0002] [ 73.320132][ T4380] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz.2.77: corrupted in-inode xattr [ 73.330951][ T4380] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.77: couldn't read orphan inode 15 (err -117) [ 73.338169][ T4380] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,init_itable=0x00000000000003f1,auto_da_alloc,noload,nombcache,noblock_validity,debug,inlinecrypt,,errors=continue. Quota mode: none. [ 73.367945][ T4373] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 73.544642][ T4393] loop3: detected capacity change from 0 to 512 [ 73.756487][ T4393] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 73.765521][ T4393] EXT4-fs (loop3): 1 truncate cleaned up [ 73.767065][ T4393] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 75.018794][ T4410] loop2: detected capacity change from 0 to 1024 [ 75.229599][ T4414] loop1: detected capacity change from 0 to 1024 [ 75.322213][ T4414] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 75.462365][ T4420] loop1: detected capacity change from 0 to 8 [ 78.353813][ T4449] loop3: detected capacity change from 0 to 16 [ 78.355906][ T4445] loop1: detected capacity change from 0 to 1024 [ 78.645891][ T4445] EXT4-fs (loop1): Ignoring removed orlov option [ 78.793516][ T4445] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 79.039229][ T4449] erofs: (device loop3): mounted with root inode @ nid 36. [ 79.090878][ T4445] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,data_err=ignore,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 79.214522][ T4457] loop2: detected capacity change from 0 to 512 [ 79.262563][ T4457] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 79.283716][ T4457] EXT4-fs (loop2): 1 truncate cleaned up [ 79.285162][ T4457] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 79.327570][ T4467] loop4: detected capacity change from 0 to 1024 [ 81.868041][ T4502] loop4: detected capacity change from 0 to 1024 [ 82.083566][ T4507] netlink: 'syz.0.123': attribute type 12 has an invalid length. [ 82.098468][ T4502] hfsplus: failed to load root directory [ 82.166981][ T4511] loop1: detected capacity change from 0 to 8 [ 82.531643][ T4520] loop4: detected capacity change from 0 to 512 [ 82.553231][ T4520] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 82.557809][ T4520] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (20904!=33349) [ 82.568922][ T4520] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 82.571557][ T4520] EXT4-fs (loop4): orphan cleanup on readonly fs [ 82.573571][ T4520] EXT4-fs error (device loop4): ext4_map_blocks:628: inode #2: block 4: comm syz.4.127: lblock 0 mapped to illegal pblock 4 (length 1) [ 82.591393][ T4520] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 82.593338][ T4520] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,noquota,errors=continue,noload,data_err=ignore,usrjquota="init_itable=0x0000000000000601,auto_da_alloc=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 85.026959][ T4546] loop0: detected capacity change from 0 to 512 [ 86.278252][ T4545] sched: RT throttling activated [ 86.942946][ T4546] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 86.956516][ T4546] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (20904!=33349) [ 86.987112][ T4546] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 86.989715][ T4546] EXT4-fs (loop0): orphan cleanup on readonly fs [ 86.991362][ T4546] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #2: block 4: comm syz.0.144: lblock 0 mapped to illegal pblock 4 (length 1) [ 86.996568][ T4546] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 86.998644][ T4546] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,noquota,errors=continue,noload,data_err=ignore,usrjquota="init_itable=0x0000000000000601,auto_da_alloc=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 87.393474][ T4571] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 87.811181][ T4151] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 88.205664][ T4030] ================================================================== [ 88.207687][ T4030] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0xdd0/0x31c0 [ 88.209558][ T4030] Read of size 1 at addr ffff0000e8ab4202 by task kworker/u5:2/4030 [ 88.211370][ T4030] [ 88.211963][ T4030] CPU: 0 PID: 4030 Comm: kworker/u5:2 Not tainted 5.15.180-syzkaller #0 [ 88.214102][ T4030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 88.216574][ T4030] Workqueue: hci3 hci_rx_work [ 88.217853][ T4030] Call trace: [ 88.218698][ T4030] dump_backtrace+0x0/0x530 [ 88.219854][ T4030] show_stack+0x2c/0x3c [ 88.220855][ T4030] dump_stack_lvl+0x108/0x170 [ 88.222070][ T4030] print_address_description+0x7c/0x3f0 [ 88.223554][ T4030] kasan_report+0x174/0x1e4 [ 88.224681][ T4030] __asan_report_load1_noabort+0x44/0x50 [ 88.226040][ T4030] hci_le_meta_evt+0xdd0/0x31c0 [ 88.227220][ T4030] hci_event_packet+0xd34/0x12b4 [ 88.228386][ T4030] hci_rx_work+0x1d0/0x830 [ 88.229494][ T4030] process_one_work+0x790/0x11b8 [ 88.230783][ T4030] worker_thread+0x910/0x1034 [ 88.232002][ T4030] kthread+0x37c/0x45c [ 88.233017][ T4030] ret_from_fork+0x10/0x20 [ 88.234233][ T4030] [ 88.234791][ T4030] Allocated by task 4580: [ 88.235856][ T4030] ____kasan_kmalloc+0xbc/0xfc [ 88.237067][ T4030] __kasan_kmalloc+0x10/0x1c [ 88.238185][ T4030] __kmalloc_node_track_caller+0x234/0x448 [ 88.239668][ T4030] kmalloc_reserve+0xe8/0x270 [ 88.240874][ T4030] __alloc_skb+0x1a4/0x584 [ 88.242092][ T4030] vhci_write+0xb8/0x3b8 [ 88.243150][ T4030] vfs_write+0x884/0xb44 [ 88.244183][ T4030] ksys_write+0x15c/0x26c [ 88.245362][ T4030] __arm64_sys_write+0x7c/0x90 [ 88.246520][ T4030] invoke_syscall+0x98/0x2b8 [ 88.247765][ T4030] el0_svc_common+0x138/0x258 [ 88.248916][ T4030] do_el0_svc+0x58/0x14c [ 88.250025][ T4030] el0_svc+0x7c/0x1f0 [ 88.251043][ T4030] el0t_64_sync_handler+0x84/0xe4 [ 88.252248][ T4030] el0t_64_sync+0x1a0/0x1a4 [ 88.253357][ T4030] [ 88.253930][ T4030] Last potentially related work creation: [ 88.255312][ T4030] kasan_save_stack+0x38/0x68 [ 88.256469][ T4030] kasan_record_aux_stack+0xd4/0x11c [ 88.257831][ T4030] call_rcu+0x118/0xb40 [ 88.258806][ T4030] ip6_route_info_create+0x81c/0xf30 [ 88.260114][ T4030] ip6_route_add+0x38/0x17c [ 88.261253][ T4030] addrconf_prefix_route+0x27c/0x3f8 [ 88.262556][ T4030] inet6_addr_add+0x404/0x81c [ 88.263694][ T4030] inet6_rtm_newaddr+0x6c0/0x1e28 [ 88.264949][ T4030] rtnetlink_rcv_msg+0xa7c/0xdb4 [ 88.266219][ T4030] netlink_rcv_skb+0x20c/0x3b8 [ 88.267450][ T4030] rtnetlink_rcv+0x28/0x38 [ 88.268661][ T4030] netlink_unicast+0x664/0x938 [ 88.269854][ T4030] netlink_sendmsg+0x844/0xb38 [ 88.271093][ T4030] __sys_sendto+0x388/0x4d0 [ 88.272222][ T4030] __arm64_sys_sendto+0xd8/0xf8 [ 88.273450][ T4030] invoke_syscall+0x98/0x2b8 [ 88.274546][ T4030] el0_svc_common+0x138/0x258 [ 88.275727][ T4030] do_el0_svc+0x58/0x14c [ 88.276810][ T4030] el0_svc+0x7c/0x1f0 [ 88.277763][ T4030] el0t_64_sync_handler+0x84/0xe4 [ 88.279026][ T4030] el0t_64_sync+0x1a0/0x1a4 [ 88.280065][ T4030] [ 88.280635][ T4030] The buggy address belongs to the object at ffff0000e8ab4000 [ 88.280635][ T4030] which belongs to the cache kmalloc-512 of size 512 [ 88.284292][ T4030] The buggy address is located 2 bytes to the right of [ 88.284292][ T4030] 512-byte region [ffff0000e8ab4000, ffff0000e8ab4200) [ 88.287813][ T4030] The buggy address belongs to the page: [ 88.289237][ T4030] page:000000007d1469bd refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x128ab4 [ 88.291847][ T4030] head:000000007d1469bd order:2 compound_mapcount:0 compound_pincount:0 [ 88.294363][ T4030] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 88.296410][ T4030] raw: 05ffc00000010200 dead000000000100 dead000000000122 ffff0000c0002600 [ 88.298578][ T4030] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 88.300747][ T4030] page dumped because: kasan: bad access detected [ 88.302304][ T4030] [ 88.302874][ T4030] Memory state around the buggy address: [ 88.304284][ T4030] ffff0000e8ab4100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 88.306317][ T4030] ffff0000e8ab4180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 88.308262][ T4030] >ffff0000e8ab4200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 88.310243][ T4030] ^ [ 88.311333][ T4030] ffff0000e8ab4280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 88.313282][ T4030] ffff0000e8ab4300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 88.315317][ T4030] ================================================================== [ 88.317450][ T4030] Disabling lock debugging due to kernel taint [ 88.530322][ T4151] usb 1-1: Using ep0 maxpacket: 32 [ 88.650465][ T4151] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 88.652491][ T4151] usb 1-1: config 0 has no interface number 0 [ 88.810570][ T4151] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 88.812922][ T4151] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.814644][ T4151] usb 1-1: Product: syz [ 88.815553][ T4151] usb 1-1: Manufacturer: syz [ 88.816508][ T4151] usb 1-1: SerialNumber: syz [ 88.821342][ T4151] usb 1-1: config 0 descriptor?? [ 88.861416][ T4151] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 89.093664][ T4151] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 89.096990][ T4151] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 89.514476][ T4151] usb 1-1: USB disconnect, device number 3 [ 89.530293][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 89.536132][ T4151] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 89.542123][ T4151] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 89.545811][ T4151] quatech2 1-1:0.51: device disconnected