last executing test programs: 1m16.370152121s ago: executing program 4 (id=5): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000300)={[{@part={'part', 0x3d, 0x4}}, {@nls={'nls', 0x3d, 'euc-jp'}}, {@gid}, {@part={'part', 0x3d, 0x4}}, {@creator={'creator', 0x3d, "ddf2bd6c"}}, {@umask={'umask', 0x3d, 0x9}}, {@uid}, {@nodecompose}, {@creator={'creator', 0x3d, "85f19471"}}]}, 0x1, 0x6da, &(0x7f0000000580)="$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") mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x23010, 0x0) 1m15.087290311s ago: executing program 4 (id=20): syz_mount_image$udf(&(0x7f0000000f40), &(0x7f0000000f80)='./file1\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB='mode=00000000000000000000202,umask=00000000000000000000002,dmode=00000000000000000100002,gid=forget,longad,shortad,novrs,iocharset=cp437,uid=forget,umask=00000000000000000000006,dmode=00000000000000000000010,gid=', @ANYRESDEC=0x0, @ANYBLOB="010000006e6963622c73657373696f6e08003030303030303030303030303030303030ff352c00"], 0x2, 0xc47, &(0x7f0000000fc0)="$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") open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) 1m14.256854375s ago: executing program 4 (id=25): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x83d2, 0x9, 0x1, {0xb, @sliced={0x7, [0x1, 0xfffe, 0x4, 0x3, 0x101, 0xfff, 0x4, 0x6, 0x71, 0x5, 0x6, 0xdd, 0x4, 0x84a, 0x7, 0x3ff, 0x8, 0x101, 0x7, 0x3, 0x7f, 0x7, 0x3, 0x0, 0x6, 0x5, 0x1000, 0x1, 0x7, 0x101, 0x304, 0x4, 0x71, 0x6, 0x9, 0xfff6, 0x9b, 0xff92, 0x53, 0xae, 0x7, 0xc0, 0x8, 0x9, 0x8, 0xb, 0x3, 0x8], 0x9}}, 0x3}) 1m11.473833981s ago: executing program 32 (id=25): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x83d2, 0x9, 0x1, {0xb, @sliced={0x7, [0x1, 0xfffe, 0x4, 0x3, 0x101, 0xfff, 0x4, 0x6, 0x71, 0x5, 0x6, 0xdd, 0x4, 0x84a, 0x7, 0x3ff, 0x8, 0x101, 0x7, 0x3, 0x7f, 0x7, 0x3, 0x0, 0x6, 0x5, 0x1000, 0x1, 0x7, 0x101, 0x304, 0x4, 0x71, 0x6, 0x9, 0xfff6, 0x9b, 0xff92, 0x53, 0xae, 0x7, 0xc0, 0x8, 0x9, 0x8, 0xb, 0x3, 0x8], 0x9}}, 0x3}) 6.697077703s ago: executing program 3 (id=335): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8400, &(0x7f0000001a40)=ANY=[@ANYBLOB='grpquota_block_hardlimit=75706p']) 6.270120813s ago: executing program 5 (id=339): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000224e0000", 0x58}], 0x1) 5.955307264s ago: executing program 0 (id=340): creat(&(0x7f00000005c0)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000000)={[{@errors_remount}, {@nobh}]}, 0x1, 0x513, &(0x7f0000000380)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc6i07Sbt3dIqLriz4tqOv7WNu0lCZNadJ1Whbt4H8ggoJPPvki+AcIwzz4B8jAgL6ID6KiiM7og6DOlSQ3TidN2rrTNp3m84HTnHPvzf2ec0NO7o/TewMYWy9FxFsRMRERr0ZEMZ+e5in2uqm93IP77y21UxJZ9s5fk0jyab11tcuTEXE1f9tURHztyxHfTA7Gbe7sri/WatWtvFxp1TcrzZ3d62v1xdXqanVjfn7ujYU3F15fmM1yT9TOUi/zky99/vanv/W7G3++9u12tT73kShEXztOUrfphc626Glvo63TCDYCE3l7CqOuCAAAx9Lex/9gRHyis/9fjInO3lyfiVHUDAAAADgp2Rem499JRAYAAABcWGlETEeSlvOxANORppfycwMfjitprdFsfWqlsb2x3J4XUYpCurJWq87mY4VLUUja5bl8jG2v/FpfeT4inouI7xcvd8rlpUZtecTnPgAAAGBcXO07/v9HMe3kjzbg/wQAAACA86s0tAAAAABcFA75AQAA4OLrP/6/PaJ6AAAAAKfiK2+/3U5Z7/nXy+/ubK833r2+XG2ul+vbS+WlxtZmebXRWO3cs69+1PpqjcbmZ2Jj+2alVW22Ks2d3Rv1xvZG68baY4/ABgAAAM7Qcx+/8+skIvY+e7mTIr8PIMBj/jDqCgAnaWLUFQBGxl28YXwVRl0BYOSSI+YbvAMAAE+/mY8evP7fe/6/cwNwsRnrAwDjx/V/GF8FIwBhrKUR8YFu9plhywy9/v/L40bJsoi7xf1TnF8EAICzNd1JSVrOjwOmI03L5YhnI9JSFJKVtVp1Nj8++FWx8Ey7PNd5Z3LkmGEAAAAAAAAAAAAAAAAAAAAAAAAAoCvLksgAAACACy0i/VPSuZt/xEzxlen+8wOXkn8W44954Ufv/ODmYqu1Ndee/rfOs7wuRUTrh/n014Y+PgwAAAA4acne0Fnd4/T8de5MawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAGHhw/72lXjrLuH/5YkSUBsWfjKnO61QUIuLK35OY3Pe+JCImTiD+3q2IeH5Q/CQeZllWymvRHz+NiMunHL/U2TTD4189gfgwzu60+5+3Bn3/0nip8zr4+zeZpyc1vP9L88jPd/q5Qf3fswfWVh8Y44V7P6sMjX8r4oXJwf1Pr/9NhsR/+cDa/pVl2cEY3/j67u6w+NmPI2YG/v4kj8WqtOqblebO7vW1+uJqdbW6MT8/98bCmwuvL8xWVtZq1fzvwBjf+9jPHx7W/isD4v/2N93+97D2vzJspX3+c+/m/Q91s4VB8a+9PPD3dyqGxE/z375P5vn2/Jlefq+b3+/Fn9598bD2Lw/Z/kd9/teO2f5Xv/rd3x9zUQDgDDR3dtcXa7Xq1iGZqWMs8zRmfjF1Lqrxf2ay73Q/ufNSn/ebae+tPprSa9U5qNi+THZmsSbinDT5f5mRdksAAMApeLTTP+qaAAAAAAAAAAAAAAAAAAAAwPg6i9uJ9cfcG01TAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO9d8AAAD//ysA4A0=") 5.812919779s ago: executing program 3 (id=341): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0xb5) 5.663830701s ago: executing program 1 (id=342): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00e611ed6229b237ad2a184a94283e2b34c24caf7280c18475708140abe763dfb52cdb0ba0cdc8c572346d0a832984b36248c4fa844eda0af4b1652605421a7821dcfde12aa77458d811a84538a156b05b0ec3eaf24a90ceb5b7463d9fd38b49d41fbfa868653605702abe43d9c2c30aed4da0b8cc18c6b369f086a965442c1217f19a67a534064b7236a6660000000000"], 0x1, 0x190, &(0x7f0000000e40)="$eJzs2zuPElEYxvHnDAMi3lC8JMbCytjIACaoHX4UAiMhDkrABmKifg8L7fxwEmNnJRvmtsssxQbCHHb5/xrOw8vJvBMy8IaLABytjp7KyKi0Ck/K1S81Y7slADlZxrf/lwCOT+Gf7Q4A2LF4K40l/f77uadCKRkLHiWLVb2T1Mvn54fFN+mxG9dNWdez88VP6Vmy31Q27q+k9Rsb689VjerOTd3Sbd1RVXd1T7W43o/2S+bhbsMQAABHwqiezWt3OHo3DPxGmothbqriRrkU5lZaj/LLNF8Lc733Mejv8SwAbMNR/dfZnL3+C5nr342vfwCX33Q2f98NAn+S0yL6fMCxdPSdFvp6EG1EC6Poe9ottxd1EGcxmc7+XOjBP6x1WMz9oK6sPymrhcUXJQC58D6Nxt50Nn8xHHUH/sD/0G61228ar181vXDw99bHfwBXyOmbvu1OAAAAAAAAAAAAAADAtu7rge0WAAAAAORkj39Qk76LXxYDAAAAAAAAAAAAAAAAALAHJwEAAP//zigUWQ==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) 5.573963808s ago: executing program 2 (id=343): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x6, 0x11, &(0x7f0000000840)=ANY=[], &(0x7f0000000d40)='syzkaller\x00', 0xc, 0x1000, &(0x7f00000020c0)=""/4096, 0x40f00, 0x6a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000dc0)={0x2, 0xc, 0x1795, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) 5.465333015s ago: executing program 5 (id=344): socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@multicast, @random="00005403cb00", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x18, 0x87, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[@routing={0x87, 0x2, 0x2, 0x9, 0x0, [@mcast1]}]}}}}}, 0x0) 4.992282539s ago: executing program 3 (id=345): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000540)=0x16) 4.4688712s ago: executing program 2 (id=346): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x100, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x7}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}]}, 0x50}}, 0x0) 4.389672733s ago: executing program 5 (id=347): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000069000100000000000000d4244b3b"], 0x18}}, 0x0) 4.33877901s ago: executing program 1 (id=348): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000080)="0000501ef663", 0x0, 0x800004, 0x10030, 0x0, 0x0}) 3.928835685s ago: executing program 0 (id=349): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x8, @local, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000000)="8000102e75", 0x5}, {&(0x7f0000000500)="8d4999e1", 0x4}], 0x2}}], 0x1, 0x4000084) 3.82576447s ago: executing program 3 (id=350): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x801, 0x70bd27, 0x0, {}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x4}, @IFLA_GROUP={0x8, 0x1b, 0x3}]}, 0x30}}, 0x0) 3.57922445s ago: executing program 5 (id=351): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x4c882, 0x0) preadv2(r0, &(0x7f0000000100)=[{&(0x7f00000003c0)=""/194, 0x7ffff000}, {0x0}], 0x2, 0x0, 0x0, 0x0) 3.287141662s ago: executing program 1 (id=352): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001380), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000013c0)={0x2}) 2.909770367s ago: executing program 0 (id=353): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x24, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}]}]}, 0xb8}}, 0x0) 2.848310549s ago: executing program 3 (id=354): r0 = syz_usb_connect(0x0, 0x62, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d24060101030200010006000609240305050306058109240306010304050507"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000a00)={0x14, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="00034b0000004b03"]}, 0x0) 2.65134096s ago: executing program 2 (id=355): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000540)={0x2, 0x4e26, @private=0xa010102}, 0x10) 2.605582888s ago: executing program 5 (id=356): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="1c0000001e005f0214fffffffffffff80700"/28, 0x1c) 2.266284503s ago: executing program 1 (id=357): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000000)) 2.107370263s ago: executing program 0 (id=358): ioperm(0x0, 0x5, 0x4000000000000020) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) 1.8456424s ago: executing program 2 (id=359): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000010a03"], 0xb0}}, 0x0) 1.845294687s ago: executing program 5 (id=360): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202e917f300090502020002020000090582020002"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 1.386811751s ago: executing program 0 (id=361): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x109d02, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@target={'target ', {'PCI:', '1d', ':', '1a', ':', '1b', '.', '13'}}, 0x17) 930.774295ms ago: executing program 2 (id=362): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) 749.508595ms ago: executing program 1 (id=363): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002880)=ANY=[@ANYBLOB="48000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="ffef000040000000140012800b000100697036677265000004000280140003006970366772653000"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 598.702925ms ago: executing program 0 (id=364): r0 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000003c0)={0x0, 0x0}) 299.358206ms ago: executing program 3 (id=365): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000180)='./bus\x00', 0x804, &(0x7f0000000280)={[{@rodir}, {@shortname_lower}, {@utf8no}, {@uni_xlateno}, {@shortname_mixed}, {@utf8no}, {@shortname_winnt}, {@utf8no}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@fat=@check_strict}, {@shortname_win95}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@utf8no}, {@rodir}]}, 0x1, 0x27b, &(0x7f0000000640)="$eJzs3cFqK1UYAOB/mqRJdJEsXInQAV24Kq1P0CIVxIKgZKEutNgUpAmFFgJVMXblE/gEPo8b8QV8AC93d7u43LmkM0nTyyQlvWlT7v2+TQ//+f85/5kZ2tWc/vBB//jw5Ozo4tf/otFIYm0nduIyiXasxdjvUerfJ+VxAOCRu8yyeJrl6nno/GZGbUZlde3emwMA7sX03/9V9wIAPIyvv/n2i939/b2v0rQR0f9j0Eki/5nP7x7FT9GLbmxFK55HZBP5+LPP9/eimo6046P+cNAZVfa//7u4/u7/EVf129GKdnn9dpqbqh8OOrV4p1h/pxfdL/+KVrxXXv9JSX101uPjD6f634xW/PNjnEQvDovexvW/bafpp9mfz375bhQd1SfDQac+ySuyKw/6YAAAAAAAAAAAAAAAAAAAAAAAeKNtphPtm+fvjA/+nzM/53yg4dT5PFtpmmZJnn9dX433q1Fd5d4BAAAAAAAAAAAAAAAAAADgsTg7//n4oNfrni51MP6sv2QqXtyM1CPi7mttLFoVlaK1XhKx2Fq1qF9V3p5cWXAXzVE/3dOkGst7BMkk0pye2oh8rVGkmQ+mIq+9eiOuBuO36/ggue3hNspekiUMspLXrzKzav3VSLPYQUlyc87q6+/eqeesNWMqiYja5GbOv05tuffw4X4HAQAAAAAAAAAAAAAAAAAAueuPfksmL1bQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACswPX//19gMCyKZ+VkldGgGkVkxVsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgLfAyAAD//0MUZ+o=") syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) 49.531815ms ago: executing program 2 (id=366): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x12a0880, 0x0) 0s ago: executing program 1 (id=367): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xd) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.28' (ED25519) to the list of known hosts. [ 197.193168][ T5782] cgroup: Unknown subsys name 'net' [ 197.345877][ T5782] cgroup: Unknown subsys name 'cpuset' [ 197.363656][ T5782] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 229.562474][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.569413][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.628900][ T5782] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 254.734950][ T5805] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 254.749398][ T5812] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 254.761803][ T5812] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 254.770196][ T5812] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 254.778017][ T5812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 254.787085][ T5812] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 254.800153][ T5812] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 254.808618][ T5813] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 254.817582][ T5815] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 254.828035][ T5815] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 254.837558][ T5815] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 254.845802][ T5815] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 254.857407][ T5813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 254.861249][ T5815] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 254.868538][ T5813] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 254.873304][ T5815] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 254.887825][ T5820] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 254.891554][ T5815] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 254.896976][ T5820] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 254.909582][ T5819] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 254.912561][ T5813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 254.926829][ T5813] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 254.955359][ T5819] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 254.985797][ T5805] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 254.998345][ T5805] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 256.427590][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 256.485522][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 256.942379][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 256.985376][ T5805] Bluetooth: hci1: command tx timeout [ 256.991072][ T5805] Bluetooth: hci3: command tx timeout [ 256.997057][ T5812] Bluetooth: hci0: command tx timeout [ 256.998567][ T5819] Bluetooth: hci2: command tx timeout [ 257.074811][ T5819] Bluetooth: hci4: command tx timeout [ 257.285716][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 257.351575][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 257.739382][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.747095][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.756752][ T5808] bridge_slave_0: entered allmulticast mode [ 257.766378][ T5808] bridge_slave_0: entered promiscuous mode [ 257.828444][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.837256][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.845214][ T5814] bridge_slave_0: entered allmulticast mode [ 257.854745][ T5814] bridge_slave_0: entered promiscuous mode [ 257.868571][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.876272][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.883839][ T5808] bridge_slave_1: entered allmulticast mode [ 257.893154][ T5808] bridge_slave_1: entered promiscuous mode [ 257.910149][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.918241][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.926074][ T5814] bridge_slave_1: entered allmulticast mode [ 257.935640][ T5814] bridge_slave_1: entered promiscuous mode [ 258.188365][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.247013][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.352436][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.381046][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.622365][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.630128][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.638118][ T5807] bridge_slave_0: entered allmulticast mode [ 258.647899][ T5807] bridge_slave_0: entered promiscuous mode [ 258.660958][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.669392][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.677265][ T5803] bridge_slave_0: entered allmulticast mode [ 258.687028][ T5803] bridge_slave_0: entered promiscuous mode [ 258.770225][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.778436][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.786275][ T5807] bridge_slave_1: entered allmulticast mode [ 258.795720][ T5807] bridge_slave_1: entered promiscuous mode [ 258.806522][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.814054][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.824139][ T5803] bridge_slave_1: entered allmulticast mode [ 258.833742][ T5803] bridge_slave_1: entered promiscuous mode [ 258.889007][ T5814] team0: Port device team_slave_0 added [ 258.905817][ T5808] team0: Port device team_slave_0 added [ 259.016218][ T5814] team0: Port device team_slave_1 added [ 259.031402][ T5808] team0: Port device team_slave_1 added [ 259.066391][ T5819] Bluetooth: hci3: command tx timeout [ 259.068322][ T5805] Bluetooth: hci0: command tx timeout [ 259.071951][ T5819] Bluetooth: hci1: command tx timeout [ 259.078044][ T5820] Bluetooth: hci2: command tx timeout [ 259.131863][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.139396][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.146715][ T5820] Bluetooth: hci4: command tx timeout [ 259.153531][ T5810] bridge_slave_0: entered allmulticast mode [ 259.162048][ T5810] bridge_slave_0: entered promiscuous mode [ 259.287864][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.309237][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.331271][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.342022][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.349917][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.357656][ T5810] bridge_slave_1: entered allmulticast mode [ 259.366763][ T5810] bridge_slave_1: entered promiscuous mode [ 259.393605][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.400992][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.427567][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.442650][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.450111][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.476558][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.566881][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.626567][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.633802][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.661730][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.791871][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.818215][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.831761][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.839228][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.865660][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.923147][ T5807] team0: Port device team_slave_0 added [ 259.941463][ T5807] team0: Port device team_slave_1 added [ 260.107308][ T5803] team0: Port device team_slave_0 added [ 260.171376][ T5814] hsr_slave_0: entered promiscuous mode [ 260.181618][ T5814] hsr_slave_1: entered promiscuous mode [ 260.199408][ T5810] team0: Port device team_slave_0 added [ 260.246428][ T5803] team0: Port device team_slave_1 added [ 260.300144][ T5810] team0: Port device team_slave_1 added [ 260.309369][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.316842][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.344022][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.499762][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.508439][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.535340][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.603652][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.611043][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.637744][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.663654][ T5808] hsr_slave_0: entered promiscuous mode [ 260.673573][ T5808] hsr_slave_1: entered promiscuous mode [ 260.682224][ T5808] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.690118][ T5808] Cannot create hsr debugfs directory [ 260.698726][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.706130][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.732621][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.843227][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.850570][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.877100][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.017108][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.024346][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.051146][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.145076][ T5820] Bluetooth: hci2: command tx timeout [ 261.150902][ T5805] Bluetooth: hci0: command tx timeout [ 261.157717][ T5812] Bluetooth: hci1: command tx timeout [ 261.158459][ T5819] Bluetooth: hci3: command tx timeout [ 261.224831][ T5819] Bluetooth: hci4: command tx timeout [ 261.311291][ T5807] hsr_slave_0: entered promiscuous mode [ 261.321545][ T5807] hsr_slave_1: entered promiscuous mode [ 261.330404][ T5807] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.338321][ T5807] Cannot create hsr debugfs directory [ 261.461627][ T5803] hsr_slave_0: entered promiscuous mode [ 261.471657][ T5803] hsr_slave_1: entered promiscuous mode [ 261.480543][ T5803] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.488489][ T5803] Cannot create hsr debugfs directory [ 261.683859][ T5810] hsr_slave_0: entered promiscuous mode [ 261.692786][ T5810] hsr_slave_1: entered promiscuous mode [ 261.701647][ T5810] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.709526][ T5810] Cannot create hsr debugfs directory [ 262.727836][ T5808] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 262.762807][ T5808] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 262.837599][ T5808] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 262.857847][ T5808] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 263.056419][ T5814] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 263.102123][ T5814] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 263.153644][ T5814] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 263.194159][ T5814] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 263.231151][ T5819] Bluetooth: hci2: command tx timeout [ 263.237104][ T5820] Bluetooth: hci3: command tx timeout [ 263.237204][ T5819] Bluetooth: hci0: command tx timeout [ 263.242745][ T5805] Bluetooth: hci1: command tx timeout [ 263.304931][ T5820] Bluetooth: hci4: command tx timeout [ 263.362664][ T5807] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 263.413989][ T5807] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 263.440372][ T5807] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 263.507672][ T5807] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 263.666264][ T5803] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 263.710523][ T5803] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 263.828087][ T5803] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 263.850633][ T5803] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 263.956817][ T5810] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 264.060842][ T5810] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 264.091912][ T5810] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 264.151658][ T5810] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 264.414292][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.623906][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.649771][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.727733][ T4255] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.735404][ T4255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.874413][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.882066][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.956391][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.078933][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.086621][ T4198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.153049][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.225247][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.232826][ T4198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.429016][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.460942][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.601411][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.609080][ T4198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.707417][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.750402][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.758152][ T4198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.830953][ T5814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 265.855685][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.863244][ T4198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.979292][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.986936][ T4198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.053384][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.130598][ T5807] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 266.142757][ T5807] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 266.387301][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.487044][ T3923] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.494742][ T3923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.602761][ T5803] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 266.642410][ T3923] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.650149][ T3923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.854283][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.034479][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.252598][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.446483][ T5808] veth0_vlan: entered promiscuous mode [ 268.549314][ T5808] veth1_vlan: entered promiscuous mode [ 268.596958][ T5814] veth0_vlan: entered promiscuous mode [ 268.633339][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.711999][ T5814] veth1_vlan: entered promiscuous mode [ 268.951602][ T5808] veth0_macvtap: entered promiscuous mode [ 269.041870][ T5808] veth1_macvtap: entered promiscuous mode [ 269.103328][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.251782][ T5803] veth0_vlan: entered promiscuous mode [ 269.281050][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.299198][ T5814] veth0_macvtap: entered promiscuous mode [ 269.387900][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.420367][ T5814] veth1_macvtap: entered promiscuous mode [ 269.435803][ T5803] veth1_vlan: entered promiscuous mode [ 269.511107][ T5808] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.520564][ T5808] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.529812][ T5808] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.539159][ T5808] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.667926][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.803239][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.958798][ T5814] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.969457][ T5814] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.979617][ T5814] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.988818][ T5814] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.012993][ T5810] veth0_vlan: entered promiscuous mode [ 270.026465][ T5803] veth0_macvtap: entered promiscuous mode [ 270.052571][ T5803] veth1_macvtap: entered promiscuous mode [ 270.199671][ T5810] veth1_vlan: entered promiscuous mode [ 270.275478][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.347854][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.423633][ T5803] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.433692][ T5803] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.443052][ T5803] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.452363][ T5803] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.601402][ T5810] veth0_macvtap: entered promiscuous mode [ 270.703395][ T5810] veth1_macvtap: entered promiscuous mode [ 270.923400][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.038091][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.143985][ T5810] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.155126][ T5810] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.164242][ T5810] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.174828][ T5810] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.560133][ T5807] veth0_vlan: entered promiscuous mode [ 271.688904][ T5807] veth1_vlan: entered promiscuous mode [ 272.058250][ T5807] veth0_macvtap: entered promiscuous mode [ 272.116056][ T5807] veth1_macvtap: entered promiscuous mode [ 272.297208][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.435998][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.515069][ T5807] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.524151][ T5807] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.535623][ T5807] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.544920][ T5807] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.245850][ T3633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.253975][ T3633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.292361][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.301032][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.689622][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.699181][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.732368][ T3923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.741676][ T3923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.847019][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.855199][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.130950][ T5814] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 278.152068][ T3555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.162004][ T3555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.469026][ T3633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.477587][ T3633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.803255][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.811647][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.614925][ T5999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7'. [ 279.844403][ T6004] ieee802154 phy0 wpan0: encryption failed: -90 [ 279.886915][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.895268][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.157113][ T3763] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.167718][ T3763] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.129524][ T6017] loop4: detected capacity change from 0 to 1024 [ 281.696518][ T6026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17'. [ 281.930402][ T5807] hfsplus: bad catalog entry type [ 281.955304][ T5807] hfsplus: bad catalog entry type [ 282.317744][ T4198] hfsplus: b-tree write err: -5, ino 4 [ 282.791854][ T4198] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.029406][ T4198] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.263109][ T4198] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.465664][ T4198] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.005554][ T4198] bridge_slave_1: left allmulticast mode [ 284.018875][ T4198] bridge_slave_1: left promiscuous mode [ 284.025887][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.154344][ T4198] bridge_slave_0: left allmulticast mode [ 284.160482][ T4198] bridge_slave_0: left promiscuous mode [ 284.167420][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.811312][ T4198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.852078][ T4198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.875462][ T4198] bond0 (unregistering): Released all slaves [ 285.474733][ T4198] hsr_slave_0: left promiscuous mode [ 285.498159][ T4198] hsr_slave_1: left promiscuous mode [ 285.507494][ T4198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.515657][ T4198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.554086][ T4198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.562038][ T4198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.669524][ T4198] veth1_macvtap: left promiscuous mode [ 285.677440][ T4198] veth0_macvtap: left promiscuous mode [ 285.683410][ T4198] veth1_vlan: left promiscuous mode [ 285.689216][ T4198] veth0_vlan: left promiscuous mode [ 286.345949][ T1687] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 286.547333][ T1687] usb 4-1: Using ep0 maxpacket: 16 [ 286.607166][ T1687] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 286.615676][ T1687] usb 4-1: config 0 has no interface number 0 [ 286.622138][ T1687] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 286.633535][ T1687] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 286.809000][ T1687] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 286.822490][ T1687] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 286.831117][ T1687] usb 4-1: Product: syz [ 286.835767][ T1687] usb 4-1: SerialNumber: syz [ 287.008787][ T1687] usb 4-1: config 0 descriptor?? [ 287.060492][ T1687] cm109 4-1:0.8: invalid payload size 1024, expected 4 [ 287.073496][ T1687] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input5 [ 287.269391][ T4198] team0 (unregistering): Port device team_slave_1 removed [ 287.344962][ T4198] team0 (unregistering): Port device team_slave_0 removed [ 287.355262][ T5805] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 287.378088][ T5805] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 287.408091][ T5805] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 287.534498][ C1] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71 [ 287.543557][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 287.553402][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 287.561767][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 287.569866][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 287.577722][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 287.585413][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 287.597103][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 287.605557][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 287.613148][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 287.620657][ T1687] usb 4-1: USB disconnect, device number 2 [ 287.626892][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 287.627016][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 287.648134][ T5805] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 287.686301][ T5805] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 287.728683][ T1687] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 287.944743][ T6073] caif0: entered promiscuous mode [ 287.951335][ T6073] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 288.001088][ T6074] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 289.351550][ T6094] loop0: detected capacity change from 0 to 64 [ 289.815737][ T6069] chnl_net:caif_netlink_parms(): no params data found [ 289.885593][ T5805] Bluetooth: hci2: command tx timeout [ 290.226177][ T6105] netlink: 28 bytes leftover after parsing attributes in process `syz.1.47'. [ 290.236109][ T6105] netlink: 28 bytes leftover after parsing attributes in process `syz.1.47'. [ 290.245467][ T6105] netlink: 'syz.1.47': attribute type 6 has an invalid length. [ 290.896301][ T6111] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 291.003904][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.010772][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 291.659980][ T6122] loop3: detected capacity change from 0 to 64 [ 291.740635][ T6069] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.749855][ T6069] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.757974][ T6069] bridge_slave_0: entered allmulticast mode [ 291.823155][ T6069] bridge_slave_0: entered promiscuous mode [ 291.848415][ T6124] netlink: 'syz.1.54': attribute type 21 has an invalid length. [ 291.856735][ T6124] netlink: 156 bytes leftover after parsing attributes in process `syz.1.54'. [ 291.866200][ T6124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.54'. [ 291.932416][ T6069] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.940789][ T6069] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.949597][ T6069] bridge_slave_1: entered allmulticast mode [ 291.959819][ T6069] bridge_slave_1: entered promiscuous mode [ 291.971867][ T5805] Bluetooth: hci2: command tx timeout [ 292.232375][ T6069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.321927][ T6069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.936825][ T6069] team0: Port device team_slave_0 added [ 293.045258][ T6069] team0: Port device team_slave_1 added [ 293.090474][ T6135] loop3: detected capacity change from 0 to 1764 [ 293.319920][ T6135] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 293.501617][ T6069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.509150][ T6069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.538975][ T6069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.685147][ T6146] loop0: detected capacity change from 0 to 1024 [ 293.745589][ T6069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.752893][ T6069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.783702][ T6069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.865055][ T5864] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 293.891670][ T6146] hfsplus: extend alloc file! (16384,256,150995124) [ 294.026353][ T5805] Bluetooth: hci2: command tx timeout [ 294.052741][ T5864] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 294.063186][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.071667][ T5864] usb 2-1: Product: syz [ 294.076271][ T5864] usb 2-1: Manufacturer: syz [ 294.081121][ T5864] usb 2-1: SerialNumber: syz [ 294.190825][ T5864] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 294.625165][ T1687] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 294.793504][ T6069] hsr_slave_0: entered promiscuous mode [ 294.803918][ T6069] hsr_slave_1: entered promiscuous mode [ 294.812780][ T6069] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.820703][ T6069] Cannot create hsr debugfs directory [ 295.389212][ T6159] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 295.435512][ T5860] usb 2-1: USB disconnect, device number 2 [ 295.462994][ C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 295.726737][ T1687] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 295.734942][ T1687] ath9k_htc: Failed to initialize the device [ 295.801477][ T5860] usb 2-1: ath9k_htc: USB layer deinitialized [ 296.116597][ T5805] Bluetooth: hci2: command tx timeout [ 297.431840][ T6069] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 297.449066][ T5860] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 297.565050][ T6069] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 297.661659][ T6179] loop2: detected capacity change from 0 to 2048 [ 297.693509][ T6069] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 297.711782][ T5860] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.715853][ T1687] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 297.771803][ T5860] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=21.78 [ 297.782448][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.791280][ T5860] usb 4-1: Product: syz [ 297.795832][ T5860] usb 4-1: Manufacturer: syz [ 297.800664][ T5860] usb 4-1: SerialNumber: syz [ 297.816523][ T6069] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 297.826032][ T6179] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 297.917810][ T5860] usb 4-1: config 0 descriptor?? [ 297.955385][ T1687] usb 2-1: Using ep0 maxpacket: 16 [ 298.004449][ T6186] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 298.016461][ T1687] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 298.033523][ T1687] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 298.050157][ T1687] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 298.061339][ T1687] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 298.071546][ T1687] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 298.081905][ T1687] usb 2-1: config 1 interface 0 has no altsetting 0 [ 298.089014][ T1687] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 298.098541][ T1687] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.157038][ T1687] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 298.397600][ T1687] scsi host1: usb-storage 2-1:1.0 [ 298.515688][ T5860] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 298.527656][ T5860] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 298.539651][ T5860] asix 4-1:0.0: probe with driver asix failed with error -71 [ 298.675175][ T5857] usb 2-1: USB disconnect, device number 3 [ 298.795393][ T5860] usb 4-1: USB disconnect, device number 3 [ 299.622679][ T6069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.865706][ T6069] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.943392][ T3578] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.951065][ T3578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.089498][ T3578] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.097262][ T3578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.808473][ T6210] IPv6: NLM_F_REPLACE set, but no existing node found! [ 300.925729][ T6213] netlink: 60 bytes leftover after parsing attributes in process `syz.2.83'. [ 301.975280][ T30] audit: type=1400 audit(1748552875.210:2): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=6226 comm="syz.2.89" [ 302.879496][ T6069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.073516][ T6269] netlink: 'syz.1.104': attribute type 10 has an invalid length. [ 305.092071][ T6269] team0: Port device virt_wifi0 added [ 305.315480][ T6271] netlink: 28 bytes leftover after parsing attributes in process `syz.2.105'. [ 305.324977][ T6271] netlink: 72 bytes leftover after parsing attributes in process `syz.2.105'. [ 305.344125][ T6274] netlink: 'syz.0.106': attribute type 2 has an invalid length. [ 305.353767][ T6274] netlink: 192444 bytes leftover after parsing attributes in process `syz.0.106'. [ 305.997788][ T6281] netlink: 72 bytes leftover after parsing attributes in process `syz.1.108'. [ 306.139450][ T6069] veth0_vlan: entered promiscuous mode [ 306.310076][ T6069] veth1_vlan: entered promiscuous mode [ 306.841770][ T6069] veth0_macvtap: entered promiscuous mode [ 306.922890][ T6069] veth1_macvtap: entered promiscuous mode [ 307.003128][ T6293] ieee802154 phy0 wpan0: encryption failed: -90 [ 307.181170][ T6069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.306642][ T6069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.453433][ T6069] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.467873][ T6069] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.479082][ T6069] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.488247][ T6069] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.353694][ T6309] loop3: detected capacity change from 0 to 256 [ 308.628062][ T6309] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 309.130561][ T6319] netlink: 20 bytes leftover after parsing attributes in process `syz.0.122'. [ 310.625720][ T6339] capability: warning: `syz.3.128' uses 32-bit capabilities (legacy support in use) [ 312.320361][ T6361] loop3: detected capacity change from 0 to 1024 [ 312.595335][ T1687] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 312.836652][ T1687] usb 3-1: config 0 has too many interfaces: 202, using maximum allowed: 32 [ 312.845956][ T1687] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.856656][ T1687] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 202 [ 312.877999][ T3633] hfsplus: b-tree write err: -5, ino 4 [ 312.981482][ T1687] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 312.993545][ T1687] usb 3-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 313.003092][ T1687] usb 3-1: Product: syz [ 313.007663][ T1687] usb 3-1: Manufacturer: syz [ 313.012534][ T1687] usb 3-1: SerialNumber: syz [ 313.141575][ T1687] usb 3-1: config 0 descriptor?? [ 313.200229][ T1687] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 313.632135][ T1687] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 313.716468][ T1687] usb 3-1: USB disconnect, device number 2 [ 314.083431][ T5979] udevd[5979]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 314.289633][ T6391] loop0: detected capacity change from 0 to 512 [ 314.382915][ T6391] ======================================================= [ 314.382915][ T6391] WARNING: The mand mount option has been deprecated and [ 314.382915][ T6391] and is ignored by this kernel. Remove the mand [ 314.382915][ T6391] option from the mount to silence this warning. [ 314.382915][ T6391] ======================================================= [ 314.419227][ T6391] EXT4-fs: inline encryption not supported [ 314.590408][ T6391] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 314.640976][ T6391] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0002] [ 314.705626][ T6391] System zones: 1-12 [ 314.785649][ T6391] EXT4-fs (loop0): orphan cleanup on readonly fs [ 314.793342][ T6391] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.144: invalid indirect mapped block 12 (level 1) [ 314.966185][ T6391] EXT4-fs (loop0): Remounting filesystem read-only [ 314.973323][ T6391] EXT4-fs (loop0): 1 truncate cleaned up [ 314.981920][ T6391] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 315.519404][ T5808] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 316.160366][ T6420] xt_CT: You must specify a L4 protocol and not use inversions on it [ 316.962062][ T3923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.970442][ T3923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.075972][ T6427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.157'. [ 317.090660][ T6427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.157'. [ 317.309446][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.317801][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.519395][ T6475] netlink: 'syz.3.171': attribute type 4 has an invalid length. [ 319.527778][ T6475] netlink: 152 bytes leftover after parsing attributes in process `syz.3.171'. [ 319.564117][ T6475] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 321.045609][ T6502] warning: `syz.2.180' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 321.864694][ T6522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.185'. [ 322.501855][ T6533] bond0: option resend_igmp: invalid value (4096) [ 322.517098][ T6533] bond0: option resend_igmp: allowed values 0 - 255 [ 323.876120][ T6557] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 324.636019][ T1687] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 324.836346][ T1687] usb 3-1: Using ep0 maxpacket: 32 [ 324.869413][ T1687] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 324.878256][ T1687] usb 3-1: config 0 has no interface number 0 [ 324.884796][ T1687] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 324.896361][ T1687] usb 3-1: config 0 interface 85 has no altsetting 0 [ 325.009943][ T6586] Cannot find add_set index 0 as target [ 325.033132][ T1687] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 325.042825][ T1687] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.051285][ T1687] usb 3-1: Product: syz [ 325.055914][ T1687] usb 3-1: Manufacturer: syz [ 325.060755][ T1687] usb 3-1: SerialNumber: syz [ 325.282490][ T1687] usb 3-1: config 0 descriptor?? [ 325.748732][ T1687] appletouch 3-1:0.85: Failed to request geyser raw mode [ 325.757557][ T1687] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 325.884232][ T1687] usb 3-1: USB disconnect, device number 3 [ 328.610213][ T6653] loop5: detected capacity change from 0 to 2048 [ 328.725030][ T6662] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 328.733678][ T6662] overlayfs: missing 'lowerdir' [ 328.794326][ T6667] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 329.246202][ T6668] loop0: detected capacity change from 0 to 2048 [ 329.305136][ T6668] NILFS (loop0): invalid segment: Checksum error in segment payload [ 329.320915][ T6668] NILFS (loop0): trying rollback from an earlier position [ 329.335544][ T6667] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 329.346759][ T6667] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 329.393028][ T6667] Remounting filesystem read-only [ 329.403624][ T6668] NILFS (loop0): norecovery option specified, skipping roll-forward recovery [ 329.460432][ T6069] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 329.535659][ T6668] NILFS (loop0): couldn't remount because the filesystem is in an incomplete recovery state [ 329.674919][ T30] audit: type=1326 audit(1748552902.930:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30478e969 code=0x7ffc0000 [ 329.849303][ T30] audit: type=1326 audit(1748552903.010:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7fb30478e969 code=0x7ffc0000 [ 330.268574][ T30] audit: type=1326 audit(1748552903.510:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30478e969 code=0x7ffc0000 [ 330.291284][ T30] audit: type=1326 audit(1748552903.510:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30478e969 code=0x7ffc0000 [ 331.576247][ T6711] netlink: 256 bytes leftover after parsing attributes in process `syz.0.236'. [ 331.812883][ T6717] capability: warning: `syz.2.238' uses deprecated v2 capabilities in a way that may be insecure [ 332.786123][ T5864] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 333.000374][ T5864] usb 2-1: Using ep0 maxpacket: 16 [ 333.063041][ T5864] usb 2-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 333.073430][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.081941][ T5864] usb 2-1: Product: syz [ 333.086527][ T5864] usb 2-1: Manufacturer: syz [ 333.091393][ T5864] usb 2-1: SerialNumber: syz [ 333.185594][ T1687] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 333.370933][ T5864] usb 2-1: config 0 descriptor?? [ 333.452724][ T5864] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 333.460540][ T1687] usb 1-1: Using ep0 maxpacket: 32 [ 333.546913][ T1687] usb 1-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6 [ 333.556686][ T1687] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.667221][ T1687] usb 1-1: config 0 descriptor?? [ 333.707682][ T1687] usb 1-1: dvb_usb_v2: found a 'Anysee' in warm state [ 333.715382][ T1687] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 333.722340][ T1687] dvb_usb_anysee 1-1:0.0: probe with driver dvb_usb_anysee failed with error -22 [ 333.887076][ T5864] gspca_sn9c2028: read1 error -71 [ 333.925799][ T5864] gspca_sn9c2028: read1 error -71 [ 333.931509][ T5864] sn9c2028 2-1:0.0: probe with driver sn9c2028 failed with error -71 [ 334.048436][ T5864] usb 2-1: USB disconnect, device number 4 [ 335.298753][ T6790] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 335.362367][ T6791] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 335.408865][ T6778] syz.2.252 (6778): drop_caches: 2 [ 336.152197][ T5864] usb 1-1: USB disconnect, device number 2 [ 336.536614][ T6818] netlink: 40 bytes leftover after parsing attributes in process `syz.3.260'. [ 336.609262][ T6819] loop0: detected capacity change from 0 to 512 [ 336.878890][ T6819] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.886521][ T6829] ieee802154 phy0 wpan0: encryption failed: -22 [ 336.892128][ T6819] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.158990][ T6819] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.261: corrupted xattr block 33: overlapping e_value [ 337.648060][ T5808] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.855407][ T6841] loop2: detected capacity change from 0 to 1764 [ 338.647199][ T6847] loop1: detected capacity change from 0 to 4096 [ 338.725304][ T6847] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 339.167445][ T6877] netlink: 28 bytes leftover after parsing attributes in process `syz.0.274'. [ 339.177896][ T6877] netlink: 28 bytes leftover after parsing attributes in process `syz.0.274'. [ 340.086286][ T6890] loop2: detected capacity change from 0 to 2048 [ 340.316271][ T6890] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.867692][ T5810] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.244954][ T5857] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 343.456429][ T5857] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 343.465484][ T5857] usb 4-1: config 0 has no interface number 0 [ 343.539554][ T5857] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 343.549660][ T5857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.558148][ T5857] usb 4-1: Product: syz [ 343.562548][ T5857] usb 4-1: Manufacturer: syz [ 343.567645][ T5857] usb 4-1: SerialNumber: syz [ 343.733575][ T5857] usb 4-1: config 0 descriptor?? [ 344.014233][ T5857] usb 4-1: Found UVC 0.08 device syz (046d:0823) [ 344.029886][ T5857] usb 4-1: Failed to create links for entity 32 [ 344.039518][ T5857] usb 4-1: Failed to register entities (-22). [ 344.044974][ T1687] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 344.148789][ T5857] usb 4-1: USB disconnect, device number 4 [ 344.214800][ T1687] usb 3-1: Using ep0 maxpacket: 32 [ 344.283899][ T1687] usb 3-1: config 0 interface 0 has no altsetting 0 [ 344.332292][ T1687] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 344.342000][ T1687] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.350669][ T1687] usb 3-1: Product: syz [ 344.355222][ T1687] usb 3-1: Manufacturer: syz [ 344.360071][ T1687] usb 3-1: SerialNumber: syz [ 344.490055][ T1687] usb 3-1: config 0 descriptor?? [ 344.995153][ T1687] gs_usb 3-1:0.0: Couldn't get device config: (err=-71) [ 345.002564][ T1687] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 345.160055][ T1687] usb 3-1: USB disconnect, device number 4 [ 345.558834][ T7033] netlink: 'syz.3.306': attribute type 21 has an invalid length. [ 345.568421][ T7033] IPv6: NLM_F_CREATE should be specified when creating new route [ 345.576809][ T7033] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 345.584238][ T7033] IPv6: NLM_F_CREATE should be set when creating new route [ 345.591851][ T7033] IPv6: NLM_F_CREATE should be set when creating new route [ 345.599413][ T7033] IPv6: NLM_F_CREATE should be set when creating new route [ 346.872471][ T7054] loop0: detected capacity change from 0 to 256 [ 347.231079][ T7058] netlink: 336 bytes leftover after parsing attributes in process `syz.5.315'. [ 347.256999][ T7054] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 347.271622][ T7054] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 348.236131][ T7073] netlink: 36 bytes leftover after parsing attributes in process `syz.5.319'. [ 349.028193][ T7092] loop5: detected capacity change from 0 to 256 [ 350.668731][ T7129] tmpfs: Group quota block hardlimit too large. [ 350.852919][ T7135] loop1: detected capacity change from 0 to 64 [ 351.447967][ T7146] loop0: detected capacity change from 0 to 512 [ 351.578083][ T7146] EXT4-fs: Ignoring removed nobh option [ 351.646871][ T7146] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 351.778393][ T7158] loop1: detected capacity change from 0 to 64 [ 351.993617][ T7146] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.340: corrupted inode contents [ 352.155529][ T7146] EXT4-fs (loop0): Remounting filesystem read-only [ 352.162964][ T7146] EXT4-fs (loop0): 1 truncate cleaned up [ 352.171460][ T7146] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.185062][ T7146] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.248868][ T3923] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 352.260209][ T3923] Quota error (device loop0): write_blk: dquota write failed [ 352.268760][ T3923] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries [ 352.279221][ T3923] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 352.290121][ T3923] Quota error (device loop0): write_blk: dquota write failed [ 352.297970][ T3923] Quota error (device loop0): free_dqentry: Can't move quota data block (5) to free list [ 352.308534][ T3923] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 352.325113][ T3923] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 352.336619][ T3923] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 352.394032][ T7146] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.483164][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.491682][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 354.693510][ T7213] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 354.773210][ T1687] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 354.968106][ T1687] usb 4-1: Using ep0 maxpacket: 8 [ 355.013604][ T1687] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 355.022294][ T1687] usb 4-1: config 0 has no interface number 0 [ 355.150581][ T1687] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 355.160476][ T1687] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.169011][ T1687] usb 4-1: Product: syz [ 355.173431][ T1687] usb 4-1: Manufacturer: syz [ 355.181140][ T1687] usb 4-1: SerialNumber: syz [ 355.267847][ T1687] usb 4-1: config 0 descriptor?? [ 355.502644][ T1687] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 355.509744][ T1687] usb 4-1: No valid video chain found. [ 355.724322][ T1687] usb 4-1: USB disconnect, device number 5 [ 355.783709][ T7219] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 355.915554][ T5857] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 356.137057][ T5857] usb 6-1: Using ep0 maxpacket: 8 [ 356.170904][ T5857] usb 6-1: config 2 has an invalid interface number: 31 but max is 0 [ 356.179427][ T5857] usb 6-1: config 2 has no interface number 0 [ 356.187307][ T5857] usb 6-1: config 2 interface 31 has no altsetting 0 [ 356.326475][ T5857] usb 6-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 356.336234][ T5857] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.344882][ T5857] usb 6-1: Product: syz [ 356.349296][ T5857] usb 6-1: Manufacturer: syz [ 356.354142][ T5857] usb 6-1: SerialNumber: syz [ 357.046128][ T5857] ===================================================== [ 357.053766][ T5857] BUG: KMSAN: uninit-value in mii_nway_restart+0xfe/0x220 [ 357.061630][ T5857] mii_nway_restart+0xfe/0x220 [ 357.067183][ T5857] ch9200_bind+0x21c/0xfe0 [ 357.071709][ T7264] loop3: detected capacity change from 0 to 256 [ 357.078347][ T5857] usbnet_probe+0xbe9/0x4390 [ 357.083214][ T5857] usb_probe_interface+0xd04/0x1310 [ 357.086125][ T5805] Bluetooth: hci0: command 0x080f tx timeout [ 357.088717][ T5857] really_probe+0x4d4/0xd90 [ 357.101119][ T5857] __driver_probe_device+0x268/0x380 [ 357.106701][ T5857] driver_probe_device+0x70/0x8b0 [ 357.112055][ T5857] __device_attach_driver+0x4ee/0x950 [ 357.117862][ T5857] bus_for_each_drv+0x3e0/0x680 [ 357.132133][ T5857] __device_attach+0x3c8/0x5c0 [ 357.139678][ T5857] device_initial_probe+0x33/0x40 [ 357.146740][ T5857] bus_probe_device+0x3ba/0x5e0 [ 357.151852][ T5857] device_add+0x12a9/0x1c10 [ 357.156636][ T5857] usb_set_configuration+0x3493/0x3b70 [ 357.162382][ T5857] usb_generic_driver_probe+0xfc/0x290 [ 357.168369][ T5857] usb_probe_device+0x38a/0x690 [ 357.173508][ T5857] really_probe+0x4d4/0xd90 [ 357.178374][ T5857] __driver_probe_device+0x268/0x380 [ 357.183924][ T5857] driver_probe_device+0x70/0x8b0 [ 357.189312][ T5857] __device_attach_driver+0x4ee/0x950 [ 357.195456][ T5857] bus_for_each_drv+0x3e0/0x680 [ 357.200531][ T5857] __device_attach+0x3c8/0x5c0 [ 357.205643][ T5857] device_initial_probe+0x33/0x40 [ 357.211092][ T5857] bus_probe_device+0x3ba/0x5e0 [ 357.216348][ T5857] device_add+0x12a9/0x1c10 [ 357.221077][ T5857] usb_new_device+0x104b/0x20c0 [ 357.237353][ T5857] hub_event+0x5588/0x7580 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 357.244479][ T5857] process_scheduled_works+0xb91/0x1d80 [ 357.250371][ T5857] worker_thread+0xedf/0x1590 [ 357.255486][ T5857] kthread+0xd59/0xf00 [ 357.259869][ T5857] ret_from_fork+0x1e0/0x310 [ 357.264817][ T5857] ret_from_fork_asm+0x1a/0x30 [ 357.269912][ T5857] [ 357.272358][ T5857] Local variable buff created at: [ 357.279008][ T5857] ch9200_mdio_read+0x3d/0xd0 [ 357.283899][ T5857] mii_nway_restart+0x8f/0x220 [ 357.289125][ T5857] [ 357.291774][ T5857] CPU: 0 UID: 0 PID: 5857 Comm: kworker/0:3 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(undef) [ 357.303977][ T5857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 357.314701][ T5857] Workqueue: usb_hub_wq hub_event [ 357.320001][ T5857] ===================================================== [ 357.336401][ T5857] Disabling lock debugging due to kernel taint [ 357.345351][ T5857] Kernel panic - not syncing: kmsan.panic set ... [ 357.351970][ T5857] CPU: 0 UID: 0 PID: 5857 Comm: kworker/0:3 Tainted: G B 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(undef) [ 357.365629][ T5857] Tainted: [B]=BAD_PAGE [ 357.370005][ T5857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 357.380256][ T5857] Workqueue: usb_hub_wq hub_event [ 357.385587][ T5857] Call Trace: [ 357.389017][ T5857] [ 357.392091][ T5857] __dump_stack+0x26/0x30 [ 357.396642][ T5857] dump_stack_lvl+0x53/0x270 [ 357.401434][ T5857] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 357.407446][ T5857] dump_stack+0x1e/0x25 [ 357.411812][ T5857] panic+0x4bd/0xd50 [ 357.415982][ T5857] kmsan_report+0x29d/0x2a0 [ 357.420682][ T5857] ? worker_thread+0xedf/0x1590 [ 357.425713][ T5857] ? __pfx_warn_thunk_thunk+0x10/0x10 [ 357.431305][ T5857] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 357.437396][ T5857] ? __msan_warning+0x96/0x120 [ 357.442343][ T5857] ? mii_nway_restart+0xfe/0x220 [ 357.447516][ T5857] ? ch9200_bind+0x21c/0xfe0 [ 357.452280][ T5857] ? usbnet_probe+0xbe9/0x4390 [ 357.457252][ T5857] ? usb_probe_interface+0xd04/0x1310 [ 357.462877][ T5857] ? really_probe+0x4d4/0xd90 [ 357.467772][ T5857] ? __driver_probe_device+0x268/0x380 [ 357.473433][ T5857] ? driver_probe_device+0x70/0x8b0 [ 357.478846][ T5857] ? __device_attach_driver+0x4ee/0x950 [ 357.484611][ T5857] ? bus_for_each_drv+0x3e0/0x680 [ 357.489810][ T5857] ? __device_attach+0x3c8/0x5c0 [ 357.494960][ T5857] ? device_initial_probe+0x33/0x40 [ 357.500457][ T5857] ? bus_probe_device+0x3ba/0x5e0 [ 357.505667][ T5857] ? device_add+0x12a9/0x1c10 [ 357.510533][ T5857] ? usb_set_configuration+0x3493/0x3b70 [ 357.516377][ T5857] ? usb_generic_driver_probe+0xfc/0x290 [ 357.522194][ T5857] ? usb_probe_device+0x38a/0x690 [ 357.527423][ T5857] ? really_probe+0x4d4/0xd90 [ 357.532328][ T5857] ? __driver_probe_device+0x268/0x380 [ 357.538038][ T5857] ? driver_probe_device+0x70/0x8b0 [ 357.543506][ T5857] ? __device_attach_driver+0x4ee/0x950 [ 357.549306][ T5857] ? bus_for_each_drv+0x3e0/0x680 [ 357.554542][ T5857] ? __device_attach+0x3c8/0x5c0 [ 357.559729][ T5857] ? device_initial_probe+0x33/0x40 [ 357.565155][ T5857] ? bus_probe_device+0x3ba/0x5e0 [ 357.570385][ T5857] ? device_add+0x12a9/0x1c10 [ 357.575276][ T5857] ? usb_new_device+0x104b/0x20c0 [ 357.580505][ T5857] ? hub_event+0x5588/0x7580 [ 357.585326][ T5857] ? process_scheduled_works+0xb91/0x1d80 [ 357.591281][ T5857] ? worker_thread+0xedf/0x1590 [ 357.596342][ T5857] ? kthread+0xd59/0xf00 [ 357.600791][ T5857] ? ret_from_fork+0x1e0/0x310 [ 357.605775][ T5857] ? ret_from_fork_asm+0x1a/0x30 [ 357.610947][ T5857] ? kfree+0x3a8/0xec0 [ 357.615219][ T5857] ? control_read+0x26f/0x310 [ 357.620138][ T5857] ? kmsan_get_metadata+0xfb/0x160 [ 357.625457][ T5857] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 357.631500][ T5857] __msan_warning+0x96/0x120 [ 357.636291][ T5857] mii_nway_restart+0xfe/0x220 [ 357.641330][ T5857] ch9200_bind+0x21c/0xfe0 [ 357.645914][ T5857] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 357.651928][ T5857] ? __pfx_ch9200_bind+0x10/0x10 [ 357.657057][ T5857] usbnet_probe+0xbe9/0x4390 [ 357.661883][ T5857] ? pm_runtime_enable+0x3b2/0x4d0 [ 357.667373][ T5857] ? __pfx_usbnet_probe+0x10/0x10 [ 357.672630][ T5857] usb_probe_interface+0xd04/0x1310 [ 357.678081][ T5857] ? __pfx_usb_probe_interface+0x10/0x10 [ 357.683937][ T5857] really_probe+0x4d4/0xd90 [ 357.688697][ T5857] __driver_probe_device+0x268/0x380 [ 357.694232][ T5857] driver_probe_device+0x70/0x8b0 [ 357.699511][ T5857] ? kmsan_get_metadata+0xfb/0x160 [ 357.704821][ T5857] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 357.710996][ T5857] __device_attach_driver+0x4ee/0x950 [ 357.716622][ T5857] bus_for_each_drv+0x3e0/0x680 [ 357.721665][ T5857] ? __pfx___device_attach_driver+0x10/0x10 [ 357.727794][ T5857] __device_attach+0x3c8/0x5c0 [ 357.732782][ T5857] device_initial_probe+0x33/0x40 [ 357.738035][ T5857] bus_probe_device+0x3ba/0x5e0 [ 357.743117][ T5857] device_add+0x12a9/0x1c10 [ 357.747858][ T5857] usb_set_configuration+0x3493/0x3b70 [ 357.753658][ T5857] usb_generic_driver_probe+0xfc/0x290 [ 357.759353][ T5857] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 357.765643][ T5857] usb_probe_device+0x38a/0x690 [ 357.770816][ T5857] ? __pfx_usb_probe_device+0x10/0x10 [ 357.776420][ T5857] really_probe+0x4d4/0xd90 [ 357.781145][ T5857] __driver_probe_device+0x268/0x380 [ 357.786751][ T5857] driver_probe_device+0x70/0x8b0 [ 357.792035][ T5857] ? kmsan_get_metadata+0xfb/0x160 [ 357.797320][ T5857] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 357.803340][ T5857] __device_attach_driver+0x4ee/0x950 [ 357.809009][ T5857] bus_for_each_drv+0x3e0/0x680 [ 357.814066][ T5857] ? __pfx___device_attach_driver+0x10/0x10 [ 357.820259][ T5857] __device_attach+0x3c8/0x5c0 [ 357.825294][ T5857] device_initial_probe+0x33/0x40 [ 357.830536][ T5857] bus_probe_device+0x3ba/0x5e0 [ 357.835601][ T5857] device_add+0x12a9/0x1c10 [ 357.840334][ T5857] usb_new_device+0x104b/0x20c0 [ 357.845421][ T5857] hub_event+0x5588/0x7580 [ 357.850123][ T5857] ? pwq_dec_nr_in_flight+0x1678/0x1d80 [ 357.855927][ T5857] ? __pfx_hub_event+0x10/0x10 [ 357.860909][ T5857] process_scheduled_works+0xb91/0x1d80 [ 357.867198][ T5857] worker_thread+0xedf/0x1590 [ 357.872170][ T5857] kthread+0xd59/0xf00 [ 357.876495][ T5857] ? __pfx_worker_thread+0x10/0x10 [ 357.881843][ T5857] ? __pfx_kthread+0x10/0x10 [ 357.886661][ T5857] ret_from_fork+0x1e0/0x310 [ 357.891583][ T5857] ? __pfx_kthread+0x10/0x10 [ 357.896401][ T5857] ret_from_fork_asm+0x1a/0x30 [ 357.901411][ T5857] [ 357.904971][ T5857] Kernel Offset: disabled [ 357.909392][ T5857] Rebooting in 86400 seconds..