last executing test programs: 3.789083619s ago: executing program 1 (id=1350): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfff3}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2a, 0x7d1cdc3e828018e9, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) 3.690136851s ago: executing program 1 (id=1355): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x8, &(0x7f0000000700), 0xff, 0x48f, &(0x7f0000000b80)="$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") syz_emit_vhci(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) utimensat(r1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000001ec0)={0x0, 0x0}) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="04050400c9"], 0x7) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) linkat(0xffffffffffffff9c, &(0x7f0000000800)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file7\x00', 0x1400) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x26e1, 0x109) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@grpquota}, {@resgid}]}, 0x9e, 0x4a3, &(0x7f00000004c0)="$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") fallocate(r3, 0x3, 0x800000, 0x8000c62) 3.608756502s ago: executing program 0 (id=1358): syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, &(0x7f0000000180)) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0xffffffff, @local}, 0x31) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 3.562204562s ago: executing program 0 (id=1360): setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000015c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}, [@typed={0xa, 0x1, 0x0, 0x0, @binary="f47106157a1e"}]}, 0x20}}, 0x4008800) 3.487768633s ago: executing program 0 (id=1361): syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010"], 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) 1.948941169s ago: executing program 2 (id=1369): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r2, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r3, @ANYBLOB="040046000a0034000101010101010000080026006c0900008000518020000080090001"], 0xb4}, 0x1, 0x0, 0x0, 0x4090}, 0x0) 1.691936462s ago: executing program 2 (id=1372): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) read$qrtrtun(0xffffffffffffffff, 0x0, 0xeffd) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.689178452s ago: executing program 4 (id=1373): setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000015c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}, [@typed={0xa, 0x1, 0x0, 0x0, @binary="f47106157a1e"}]}, 0x20}}, 0x4008800) 1.680655343s ago: executing program 3 (id=1374): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x101, 0x0) 1.651298253s ago: executing program 1 (id=1375): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$netlink(r0, &(0x7f00000001c0)=@unspec, 0xc) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x40) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000005, 0x6031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 1.568201944s ago: executing program 3 (id=1376): r0 = socket(0x2a, 0x2, 0xffffffff) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@delqdisc={0x24, 0x25, 0x800, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x6, 0x7}, {0x3, 0x8}, {0xfff1, 0x54ace61ca367eb27}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004000) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffcb7, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_DIVISOR={0x8, 0x4, 0x10}]}}]}, 0x40}}, 0x40808c4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.567873034s ago: executing program 4 (id=1377): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2a, 0x7d1cdc3e828018e9, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) 1.485406736s ago: executing program 2 (id=1378): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x6, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 1.393769667s ago: executing program 3 (id=1379): r0 = syz_open_dev$video4linux(&(0x7f0000001380), 0x20000000000000, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0305602, &(0x7f0000000000)={0x1, 0xb, {0x0, 0x4000000, 0x0, 0x0, 0x0, 0x7}}) 1.360962307s ago: executing program 4 (id=1380): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') lseek(r0, 0x10001, 0x0) 695.496818ms ago: executing program 2 (id=1381): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f00000002c0)='./file1\x00', 0x109042, 0x0) fallocate(r0, 0x10, 0x0, 0x6fffffc) 631.99073ms ago: executing program 3 (id=1382): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 630.688889ms ago: executing program 1 (id=1383): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x1) close(0x3) 572.25737ms ago: executing program 4 (id=1384): syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, &(0x7f0000000180)) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) 509.742291ms ago: executing program 4 (id=1385): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x8, &(0x7f0000000700), 0xff, 0x48f, &(0x7f0000000b80)="$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") syz_emit_vhci(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) utimensat(r1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000001ec0)={0x0, 0x0}) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="04050400c9"], 0x7) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) linkat(0xffffffffffffff9c, &(0x7f0000000800)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file7\x00', 0x1400) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x26e1, 0x109) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@grpquota}, {@resgid}]}, 0x9e, 0x4a3, &(0x7f00000004c0)="$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") fallocate(r3, 0x3, 0x800000, 0x8000c62) 498.297082ms ago: executing program 3 (id=1386): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x14d002) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) 444.024633ms ago: executing program 1 (id=1387): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) pread64(0xffffffffffffffff, 0x0, 0x0, 0xf27b) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='G', 0x1}], 0x1}}, {{&(0x7f0000000780)={0xa, 0x4e24, 0x5, @local, 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000a80)="098b4873", 0x4}], 0x1}}], 0x2, 0x8000) 443.763733ms ago: executing program 0 (id=1388): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) read$qrtrtun(0xffffffffffffffff, 0x0, 0xeffd) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 441.012332ms ago: executing program 2 (id=1389): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, 0x0, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="933c547ecfa7"}, 0x14) syz_emit_ethernet(0x36, &(0x7f00000006c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x68, 0x0, 0x2, 0x6, 0x0, @loopback, @broadcast}, {{0x4e23, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x8, 0x0, 0x9}}}}}}, 0x0) 212.872196ms ago: executing program 0 (id=1390): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2a, 0x7d1cdc3e828018e9, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) 135.213868ms ago: executing program 4 (id=1391): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000fc0), 0xa01) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x1f0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESDEC=r0]) 60.202188ms ago: executing program 1 (id=1392): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3200c00, &(0x7f0000000d00)=ANY=[], 0x3, 0xa80, &(0x7f0000000180)="$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") syz_emit_vhci(0x0, 0xf8) 59.673959ms ago: executing program 3 (id=1393): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x8, &(0x7f0000000700), 0xff, 0x48f, &(0x7f0000000b80)="$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") syz_emit_vhci(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) utimensat(r1, 0x0, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000001ec0)={0x0, 0x0}) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="04050400c9"], 0x7) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) linkat(0xffffffffffffff9c, &(0x7f0000000800)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file7\x00', 0x1400) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x26e1, 0x109) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@grpquota}, {@resgid}]}, 0x9e, 0x4a3, &(0x7f00000004c0)="$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") 47.944159ms ago: executing program 2 (id=1394): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x84, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRES8], 0x8b, 0x2db, &(0x7f00000002c0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 0s ago: executing program 0 (id=1395): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.134' (ED25519) to the list of known hosts. [ 35.008819][ T4284] cgroup: Unknown subsys name 'net' [ 35.291800][ T4284] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 35.619043][ T4284] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 36.653561][ T4295] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.656334][ T4295] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.659132][ T4295] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.661658][ T4295] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.664004][ T4295] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 36.666070][ T4295] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.759749][ T4303] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 36.762216][ T4303] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 36.766380][ T4303] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 36.768827][ T4303] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 36.777469][ T4306] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 36.779801][ T4306] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 36.782383][ T4306] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 36.783426][ T4307] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 36.784690][ T4306] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 36.789692][ T4310] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 36.790138][ T4306] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 36.792347][ T4310] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 36.794012][ T4306] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 36.795474][ T4310] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 36.797900][ T4306] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 36.801173][ T4306] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 36.804473][ T4311] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 36.804708][ T4306] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 36.809527][ T4306] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 36.821093][ T4295] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 36.823341][ T4295] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 36.826108][ T4295] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 36.829203][ T4295] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 36.831283][ T4295] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.024700][ T4294] chnl_net:caif_netlink_parms(): no params data found [ 37.030472][ T4299] chnl_net:caif_netlink_parms(): no params data found [ 37.115202][ T4304] chnl_net:caif_netlink_parms(): no params data found [ 37.133579][ T4299] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.135739][ T4299] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.142109][ T4299] device bridge_slave_0 entered promiscuous mode [ 37.161524][ T4299] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.163625][ T4299] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.166059][ T4299] device bridge_slave_1 entered promiscuous mode [ 37.170781][ T4298] chnl_net:caif_netlink_parms(): no params data found [ 37.191802][ T4294] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.193778][ T4294] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.197524][ T4294] device bridge_slave_0 entered promiscuous mode [ 37.202641][ T4300] chnl_net:caif_netlink_parms(): no params data found [ 37.211173][ T4299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.218295][ T4294] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.220172][ T4294] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.222641][ T4294] device bridge_slave_1 entered promiscuous mode [ 37.239583][ T4299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.246107][ T4304] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.248117][ T4304] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.250565][ T4304] device bridge_slave_0 entered promiscuous mode [ 37.274111][ T4304] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.276110][ T4304] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.278849][ T4304] device bridge_slave_1 entered promiscuous mode [ 37.301040][ T4299] team0: Port device team_slave_0 added [ 37.317890][ T4294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.325404][ T4299] team0: Port device team_slave_1 added [ 37.341119][ T4304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.343675][ T4298] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.345666][ T4298] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.348268][ T4298] device bridge_slave_0 entered promiscuous mode [ 37.352713][ T4294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.364756][ T4304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.371388][ T4298] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.373427][ T4298] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.375969][ T4298] device bridge_slave_1 entered promiscuous mode [ 37.382886][ T4300] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.384788][ T4300] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.387620][ T4300] device bridge_slave_0 entered promiscuous mode [ 37.390651][ T4300] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.392535][ T4300] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.395165][ T4300] device bridge_slave_1 entered promiscuous mode [ 37.431280][ T4294] team0: Port device team_slave_0 added [ 37.433469][ T4299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.435240][ T4299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.442218][ T4299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.451583][ T4304] team0: Port device team_slave_0 added [ 37.454659][ T4298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.462227][ T4294] team0: Port device team_slave_1 added [ 37.464279][ T4299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.466130][ T4299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.473216][ T4299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.478687][ T4304] team0: Port device team_slave_1 added [ 37.484774][ T4298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.489408][ T4300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.513399][ T4300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.522769][ T4298] team0: Port device team_slave_0 added [ 37.529703][ T4294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.531524][ T4294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.538752][ T4294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.542837][ T4304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.544732][ T4304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.552009][ T4304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.560732][ T4298] team0: Port device team_slave_1 added [ 37.571702][ T4294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.573551][ T4294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.580528][ T4294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.584176][ T4304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.586050][ T4304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.593107][ T4304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.607679][ T4300] team0: Port device team_slave_0 added [ 37.632770][ T4300] team0: Port device team_slave_1 added [ 37.678902][ T4299] device hsr_slave_0 entered promiscuous mode [ 37.717095][ T4299] device hsr_slave_1 entered promiscuous mode [ 37.788133][ T4298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.790024][ T4298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.797220][ T4298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.868491][ T4304] device hsr_slave_0 entered promiscuous mode [ 37.927212][ T4304] device hsr_slave_1 entered promiscuous mode [ 37.976839][ T4304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.979109][ T4304] Cannot create hsr debugfs directory [ 37.981025][ T4298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.982870][ T4298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.989812][ T4298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.038366][ T4294] device hsr_slave_0 entered promiscuous mode [ 38.077046][ T4294] device hsr_slave_1 entered promiscuous mode [ 38.116917][ T4294] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.119104][ T4294] Cannot create hsr debugfs directory [ 38.139455][ T4300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.141396][ T4300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.148756][ T4300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.165928][ T4300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.168080][ T4300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.174676][ T4300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.278499][ T4298] device hsr_slave_0 entered promiscuous mode [ 38.327115][ T4298] device hsr_slave_1 entered promiscuous mode [ 38.376914][ T4298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.378993][ T4298] Cannot create hsr debugfs directory [ 38.438495][ T4300] device hsr_slave_0 entered promiscuous mode [ 38.497177][ T4300] device hsr_slave_1 entered promiscuous mode [ 38.536824][ T4300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.538812][ T4300] Cannot create hsr debugfs directory [ 38.680574][ T4294] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.698752][ T4294] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.737161][ T4303] Bluetooth: hci0: command 0x0409 tx timeout [ 38.743686][ T4294] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.788420][ T4294] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.806941][ T4303] Bluetooth: hci2: command 0x0409 tx timeout [ 38.850327][ T4304] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.886968][ T4303] Bluetooth: hci4: command 0x0409 tx timeout [ 38.887112][ T4295] Bluetooth: hci3: command 0x0409 tx timeout [ 38.888735][ T4303] Bluetooth: hci1: command 0x0409 tx timeout [ 38.894073][ T4304] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.931958][ T4304] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.968445][ T4304] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.025513][ T4299] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.071888][ T4299] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.109309][ T4299] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.155880][ T4299] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.246388][ T4300] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.294393][ T4300] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.338809][ T4300] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.387762][ T4300] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.444529][ T4298] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.478771][ T4298] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.518843][ T4298] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.585368][ T4298] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.658462][ T4304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.665434][ T4294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.686181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.689717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.701865][ T4304] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.704504][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.708022][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.717594][ T4294] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.739034][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.741757][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.744664][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.746931][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.750706][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.753587][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.755979][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.757907][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.762903][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.765522][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.769340][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.771908][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.774366][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.776335][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.792983][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.795704][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.798615][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.800563][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.813822][ T4299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.816395][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.820972][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.825064][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.849761][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.853006][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.855555][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.859818][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.862380][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.864864][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.868316][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.871133][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.882646][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.885181][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.888844][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.892758][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.895411][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.907723][ T4300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.912992][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.915461][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.919413][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.921852][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.924499][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.931472][ T4299] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.945531][ T207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.948645][ T207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.951094][ T207] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.952986][ T207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.955233][ T207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.958903][ T207] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.961572][ T207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.970412][ T4298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.992919][ T207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.995716][ T207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.000747][ T207] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.002747][ T207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.005048][ T207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.013202][ T207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.015865][ T207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.019897][ T207] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.022416][ T207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.025108][ T207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.029024][ T207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.032108][ T207] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.034745][ T207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.038346][ T207] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.040908][ T207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.043451][ T207] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.051499][ T4298] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.053494][ T207] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.055982][ T207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.059337][ T207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.063102][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.075518][ T207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.078706][ T207] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.083665][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.113792][ T4300] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.117772][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.120822][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.124071][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.126037][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.158094][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.160631][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.163443][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.165937][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.167882][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.178826][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.181452][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.183934][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.185804][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.195129][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.197961][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.200555][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.203085][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.204990][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.210455][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.215762][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.223156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.226092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.230057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.243001][ T4294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.246481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.251000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.253101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.265326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.283774][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.286613][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.291340][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.294330][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.303172][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.305866][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.314922][ T4298] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.319142][ T4298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.332281][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.334850][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.343055][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.347694][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.350259][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.352979][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.366453][ T4304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.380444][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.382524][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.384593][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.388519][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.391908][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.394067][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.403891][ T4299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.423922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.432389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.435072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.438631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.453307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.455933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.459780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.461892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.465175][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.496050][ T4298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.510370][ T207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.513024][ T207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.515625][ T207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.519292][ T207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.530124][ T4294] device veth0_vlan entered promiscuous mode [ 40.533836][ T4304] device veth0_vlan entered promiscuous mode [ 40.538963][ T207] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.541409][ T207] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.543787][ T207] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.546183][ T207] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.554407][ T4294] device veth1_vlan entered promiscuous mode [ 40.562081][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.564584][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.568561][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.581598][ T4304] device veth1_vlan entered promiscuous mode [ 40.610729][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.613448][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.616314][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.624422][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.627983][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.631171][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.633561][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.648790][ T4299] device veth0_vlan entered promiscuous mode [ 40.652237][ T207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.654327][ T207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.660004][ T4300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.685175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.688824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.691460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.694041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.700534][ T4299] device veth1_vlan entered promiscuous mode [ 40.707550][ T4294] device veth0_macvtap entered promiscuous mode [ 40.715152][ T4304] device veth0_macvtap entered promiscuous mode [ 40.722344][ T4294] device veth1_macvtap entered promiscuous mode [ 40.737474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.740659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.743102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.745618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.750043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.752551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.755209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.760032][ T4304] device veth1_macvtap entered promiscuous mode [ 40.791016][ T4304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.795640][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.798974][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.801633][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.804215][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.810606][ T4303] Bluetooth: hci0: command 0x041b tx timeout [ 40.812973][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.818710][ T4299] device veth0_macvtap entered promiscuous mode [ 40.829385][ T4299] device veth1_macvtap entered promiscuous mode [ 40.833106][ T207] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.835690][ T207] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.838669][ T207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.841324][ T207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.844002][ T207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.846614][ T207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.855242][ T207] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.858526][ T207] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.861100][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.864004][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.867957][ T4294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.869994][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.872718][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.884281][ T4300] device veth0_vlan entered promiscuous mode [ 40.887607][ T4303] Bluetooth: hci2: command 0x041b tx timeout [ 40.891529][ T4304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.904696][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.908304][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.914062][ T4304] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.916431][ T4304] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.919367][ T4304] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.921679][ T4304] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.926406][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.930756][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.934281][ T4294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.944521][ T207] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.947967][ T207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.950573][ T207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.953118][ T207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.955802][ T207] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.958431][ T207] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.961706][ T4300] device veth1_vlan entered promiscuous mode [ 40.964177][ T4299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.967288][ T4297] Bluetooth: hci3: command 0x041b tx timeout [ 40.967471][ T4303] Bluetooth: hci4: command 0x041b tx timeout [ 40.968858][ T4297] Bluetooth: hci1: command 0x041b tx timeout [ 40.973336][ T4299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.975899][ T4299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.979144][ T4299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.983227][ T4299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.987530][ T4299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.990350][ T4299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.992838][ T4299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.995569][ T4299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.000486][ T4299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.013012][ T4294] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.015478][ T4294] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.018411][ T4294] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.020748][ T4294] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.024368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.027581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.030174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.032771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.035416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.040050][ T4299] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.042408][ T4299] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.044775][ T4299] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.048163][ T4299] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.053301][ T4298] device veth0_vlan entered promiscuous mode [ 41.105228][ T4298] device veth1_vlan entered promiscuous mode [ 41.119924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.122499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.125040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.129796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.132370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.159292][ T4298] device veth0_macvtap entered promiscuous mode [ 41.178972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.199605][ T4298] device veth1_macvtap entered promiscuous mode [ 41.216171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.219911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.240203][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.241606][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.242400][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.244580][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.251652][ T4300] device veth0_macvtap entered promiscuous mode [ 41.256502][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.259229][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.261687][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.265201][ T4300] device veth1_macvtap entered promiscuous mode [ 41.285679][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.289725][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.292290][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.294982][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.298385][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.301158][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.304888][ T4300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.310065][ T4298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.312837][ T4298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.315456][ T4298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.318705][ T4298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.321346][ T4298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.324038][ T4298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.326515][ T4298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.330302][ T4298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.334096][ T4298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.360826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.363429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.366175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.371600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.374587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.387357][ T4355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.389503][ T4355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.392507][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.396096][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.401100][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.403853][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.406646][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.409251][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.411891][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.415821][ T4300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.422075][ T4298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.424920][ T4298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.427590][ T4298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.430346][ T4298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.432976][ T4298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.435723][ T4298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.439150][ T4298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.441890][ T4298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.445631][ T4298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.452825][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.455628][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.459132][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.461836][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.466004][ T4300] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.472906][ T4300] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.475244][ T4300] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.479158][ T4300] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.492678][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.494814][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.497937][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.505195][ T4298] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.508883][ T4298] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.511155][ T4298] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.513396][ T4298] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.562150][ T4355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.564448][ T4355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.568666][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.570781][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.577783][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.591122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.741148][ T4353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.743356][ T4353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.746002][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.843392][ T4353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.845553][ T4353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.000466][ T4355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.004040][ T4355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.014699][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.017562][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.027102][ T4355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.309158][ T4355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.808215][ T4303] Bluetooth: hci0: command 0x040f tx timeout [ 43.809850][ T4303] Bluetooth: hci2: command 0x040f tx timeout [ 43.811456][ T4303] Bluetooth: hci4: command 0x040f tx timeout [ 43.813070][ T4303] Bluetooth: hci3: command 0x040f tx timeout [ 43.900756][ T4295] Bluetooth: hci1: command 0x040f tx timeout [ 43.905431][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 44.082866][ T4395] can0: slcan on ttyS3. [ 44.177504][ T4396] can0 (unregistered): slcan off ttyS3. [ 46.140936][ T4295] Bluetooth: hci4: command 0x0419 tx timeout [ 46.143171][ T4303] Bluetooth: hci3: command 0x0419 tx timeout [ 46.145282][ T4303] Bluetooth: hci2: command 0x0419 tx timeout [ 46.147493][ T4295] Bluetooth: hci0: command 0x0419 tx timeout [ 46.149920][ T4295] Bluetooth: hci1: command 0x0419 tx timeout [ 47.232939][ T4431] process 'syz.2.12' launched '/dev/fd/6' with NULL argv: empty string added [ 47.241529][ T4431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.243935][ T4431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.544577][ T4449] netlink: 'syz.4.21': attribute type 10 has an invalid length. [ 49.634652][ T4449] team0: Port device wlan1 added [ 51.786457][ T4297] Bluetooth: hci3: command 0x0405 tx timeout [ 53.786688][ C0] sched: RT throttling activated [ 53.819638][ T4500] netlink: 36 bytes leftover after parsing attributes in process `syz.3.33'. [ 55.385543][ T4519] Cannot find del_set index 4 as target [ 55.398633][ T4519] xt_CT: You must specify a L4 protocol and not use inversions on it [ 60.574183][ T4567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.654838][ T4567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.877558][ T4575] xt_nfacct: accounting object `syz1' does not exists [ 62.452793][ T4588] ======================================================= [ 62.452793][ T4588] WARNING: The mand mount option has been deprecated and [ 62.452793][ T4588] and is ignored by this kernel. Remove the mand [ 62.452793][ T4588] option from the mount to silence this warning. [ 62.452793][ T4588] ======================================================= [ 63.202340][ T4591] mmap: syz.4.62 (4591) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 63.365832][ T4588] ISOFS: Unable to identify CD-ROM format. [ 63.689940][ T4375] kernel write not supported for file /49/attr/exec (pid: 4375 comm: kworker/0:6) [ 64.115210][ T4616] Cannot find del_set index 4 as target [ 64.117792][ T4616] xt_CT: You must specify a L4 protocol and not use inversions on it [ 65.092954][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.094891][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.500866][ T4633] input: syz1 as /devices/virtual/input/input2 [ 66.936863][ T4643] netlink: 'syz.2.78': attribute type 28 has an invalid length. [ 67.660867][ T4653] 9pnet_fd: Insufficient options for proto=fd [ 68.060050][ T4666] Cannot find del_set index 4 as target [ 68.064774][ T4666] xt_CT: You must specify a L4 protocol and not use inversions on it [ 68.306490][ T4673] loop0: detected capacity change from 0 to 1024 [ 68.573802][ T4680] netlink: 'syz.0.92': attribute type 4 has an invalid length. [ 69.791020][ T1963] cfg80211: failed to load regulatory.db [ 71.029630][ T4702] 9pnet_fd: Insufficient options for proto=fd [ 71.252962][ T4710] loop0: detected capacity change from 0 to 256 [ 71.255039][ T4710] exfat: Deprecated parameter 'utf8' [ 71.256480][ T4710] exfat: Deprecated parameter 'namecase' [ 71.258094][ T4710] exfat: Deprecated parameter 'utf8' [ 71.280334][ T4710] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 72.143679][ T4714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.146185][ T4714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.375573][ T4749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.118'. [ 75.746525][ T4773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.753526][ T4773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.879821][ T4755] loop1: detected capacity change from 0 to 40427 [ 75.921740][ T4755] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 75.946131][ T4755] F2FS-fs (loop1): invalid crc value [ 75.989474][ T4755] F2FS-fs (loop1): Found nat_bits in checkpoint [ 76.049236][ T4755] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 76.788709][ T27] audit: type=1326 audit(529.771:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4766 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9595ad28 code=0x7fc00000 [ 77.919229][ T4294] syz-executor: attempt to access beyond end of device [ 77.919229][ T4294] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 78.472821][ T27] audit: type=1326 audit(531.451:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4810 comm="syz.1.137" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8035ad28 code=0x0 [ 79.594732][ T4821] hub 2-0:1.0: USB hub found [ 79.597823][ T4821] hub 2-0:1.0: 8 ports detected [ 81.538318][ T4845] loop1: detected capacity change from 0 to 8 [ 81.817447][ T4850] netlink: 452 bytes leftover after parsing attributes in process `syz.3.149'. [ 82.018884][ T4830] loop0: detected capacity change from 0 to 40427 [ 82.064868][ T4830] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff [ 82.360491][ T4830] F2FS-fs (loop0): invalid crc value [ 82.799524][ T4858] ISOFS: Unable to identify CD-ROM format. [ 82.806473][ T4830] F2FS-fs (loop0): Found nat_bits in checkpoint [ 82.864911][ T4830] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 83.732538][ T4300] syz-executor: attempt to access beyond end of device [ 83.732538][ T4300] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 84.156195][ T4882] device syzkaller1 entered promiscuous mode [ 84.384639][ T4893] loop1: detected capacity change from 0 to 1024 [ 84.404599][ T4893] EXT4-fs: Ignoring removed bh option [ 84.414887][ T4893] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 84.475722][ T4893] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 85.773610][ T4294] EXT4-fs (loop1): unmounting filesystem. [ 86.003046][ T4915] Zero length message leads to an empty skb [ 86.712432][ T4923] loop3: detected capacity change from 0 to 8 [ 86.995579][ T4929] device syzkaller1 entered promiscuous mode [ 87.225665][ T4921] loop1: detected capacity change from 0 to 40427 [ 87.253535][ T4921] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 87.266400][ T4921] F2FS-fs (loop1): invalid crc value [ 87.277794][ T4921] F2FS-fs (loop1): Found nat_bits in checkpoint [ 87.335405][ T4921] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 87.431483][ T4940] loop3: detected capacity change from 0 to 512 [ 87.442415][ T4940] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.178: bad orphan inode 15 [ 87.445931][ T4940] ext4_test_bit(bit=14, block=5) = 0 [ 87.454004][ T4940] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 87.584576][ T4940] netlink: 12 bytes leftover after parsing attributes in process `syz.3.178'. [ 88.004799][ T4299] EXT4-fs (loop3): unmounting filesystem. [ 88.985602][ T4959] loop2: detected capacity change from 0 to 256 [ 90.336939][ T4963] netlink: 20 bytes leftover after parsing attributes in process `syz.2.184'. [ 92.082526][ T4969] loop1: detected capacity change from 0 to 512 [ 92.128247][ T4969] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.187: casefold flag without casefold feature [ 92.131864][ T4969] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.187: couldn't read orphan inode 15 (err -117) [ 92.138664][ T4969] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 93.851441][ T4294] EXT4-fs (loop1): unmounting filesystem. [ 94.022461][ T4989] loop1: detected capacity change from 0 to 8 [ 94.049164][ T4989] SQUASHFS error: lzo decompression failed, data probably corrupt [ 94.051332][ T4989] SQUASHFS error: Failed to read block 0x91: -5 [ 94.053018][ T4989] SQUASHFS error: Unable to read metadata cache entry [8f] [ 94.054844][ T4989] SQUASHFS error: Unable to read inode 0x11f [ 94.059700][ T4985] loop3: detected capacity change from 0 to 4096 [ 94.157154][ T4985] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 94.242473][ T4288] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 94.253728][ T4989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.190'. [ 94.851232][ T4299] EXT4-fs (loop3): unmounting filesystem. [ 96.821870][ T4988] loop0: detected capacity change from 0 to 40427 [ 96.824707][ T4988] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff [ 96.830204][ T4988] F2FS-fs (loop0): invalid crc value [ 96.849908][ T4988] F2FS-fs (loop0): Found nat_bits in checkpoint [ 96.867967][ T5016] device syzkaller1 entered promiscuous mode [ 96.884420][ T4988] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 97.612367][ T5034] loop2: detected capacity change from 0 to 256 [ 97.647225][ T5034] exfat: Deprecated parameter 'namecase' [ 97.697017][ T5034] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 97.791007][ T5037] loop1: detected capacity change from 0 to 512 [ 97.814472][ T5037] EXT4-fs: Ignoring removed nobh option [ 97.828393][ T5037] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.205: invalid indirect mapped block 256 (level 2) [ 97.835223][ T5037] EXT4-fs (loop1): 2 truncates cleaned up [ 97.837380][ T5037] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 97.875645][ T4294] EXT4-fs (loop1): unmounting filesystem. [ 100.236360][ T5070] device syzkaller1 entered promiscuous mode [ 100.690858][ T5086] netlink: 68 bytes leftover after parsing attributes in process `syz.0.222'. [ 101.609674][ T27] audit: type=1326 audit(554.591:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5091 comm="syz.3.224" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffadb5ad28 code=0x0 [ 101.627910][ T5097] device syzkaller1 entered promiscuous mode [ 101.699246][ T5072] loop1: detected capacity change from 0 to 40427 [ 101.723722][ T5072] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 101.730001][ T5072] F2FS-fs (loop1): invalid crc value [ 101.742011][ T5072] F2FS-fs (loop1): Found nat_bits in checkpoint [ 101.802355][ T5072] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 102.357210][ T5117] netlink: 68 bytes leftover after parsing attributes in process `syz.4.233'. [ 102.604172][ T5121] loop4: detected capacity change from 0 to 128 [ 102.613658][ T5121] EXT4-fs: Ignoring removed bh option [ 102.812427][ T5121] EXT4-fs (loop4): Test dummy encryption mode enabled [ 102.831146][ T5121] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 102.866052][ T5121] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 103.016333][ T4298] EXT4-fs (loop4): unmounting filesystem. [ 103.932989][ T5144] device syzkaller1 entered promiscuous mode [ 104.126170][ T5148] loop1: detected capacity change from 0 to 256 [ 104.169808][ T5148] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 104.310986][ T5152] loop1: detected capacity change from 0 to 128 [ 104.445069][ T5158] loop3: detected capacity change from 0 to 256 [ 104.445347][ T5157] loop1: detected capacity change from 0 to 512 [ 104.451841][ T5158] exfat: Deprecated parameter 'namecase' [ 104.470991][ T5158] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 104.476149][ T5157] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.245: casefold flag without casefold feature [ 104.489791][ T5157] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.245: couldn't read orphan inode 15 (err -117) [ 104.509243][ T5157] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 105.471734][ T5163] loop3: detected capacity change from 0 to 2048 [ 105.688837][ T4294] EXT4-fs (loop1): unmounting filesystem. [ 105.706183][ T5163] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 105.929157][ T4299] EXT4-fs (loop3): unmounting filesystem. [ 106.472401][ T5176] device syzkaller1 entered promiscuous mode [ 106.571769][ T5184] loop1: detected capacity change from 0 to 2048 [ 106.591410][ T5184] UDF-fs: bad mount option "" or missing value [ 106.764860][ T4288] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 110.086432][ T5231] device syzkaller1 entered promiscuous mode [ 110.259162][ T5235] netlink: 68 bytes leftover after parsing attributes in process `syz.4.271'. [ 114.948618][ T5274] netlink: 68 bytes leftover after parsing attributes in process `syz.2.283'. [ 115.031492][ T5272] device syzkaller1 entered promiscuous mode [ 116.132864][ T5286] syz.2.286 sent an empty control message without MSG_MORE. [ 119.906495][ T5322] loop1: detected capacity change from 0 to 512 [ 120.138902][ T5322] loop1: detected capacity change from 0 to 1024 [ 120.141106][ T5322] EXT4-fs: Ignoring removed nobh option [ 120.799016][ T5322] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 121.031044][ T5322] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #11: comm syz.1.299: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 121.054639][ T5322] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.299: couldn't read orphan inode 11 (err -117) [ 121.074339][ T5322] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 121.217820][ T5322] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.299: Invalid block bitmap block 0 in block_group 0 [ 121.239546][ T5322] Quota error (device loop1): write_blk: dquota write failed [ 121.241885][ T5322] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 121.244649][ T5322] EXT4-fs error (device loop1): ext4_acquire_dquot:6795: comm syz.1.299: Failed to acquire dquot type 0 [ 121.250636][ T5347] device syzkaller1 entered promiscuous mode [ 121.313348][ T4294] EXT4-fs (loop1): unmounting filesystem. [ 123.490290][ T5388] device syzkaller1 entered promiscuous mode [ 123.602661][ T5395] loop0: detected capacity change from 0 to 16 [ 123.681948][ T5395] erofs: (device loop0): mounted with root inode @ nid 36. [ 126.377075][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.379153][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.532987][ T5442] device syzkaller1 entered promiscuous mode [ 127.847100][ T5452] netlink: 24 bytes leftover after parsing attributes in process `syz.3.334'. [ 129.810802][ T5469] Cannot find del_set index 4 as target [ 129.813246][ T5469] xt_CT: You must specify a L4 protocol and not use inversions on it [ 130.654495][ T5480] loop3: detected capacity change from 0 to 2048 [ 130.738268][ T5480] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.252590][ T5500] netlink: 24 bytes leftover after parsing attributes in process `syz.0.347'. [ 133.361150][ T5509] device syzkaller1 entered promiscuous mode [ 134.685733][ T5527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.731361][ T5527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.763935][ T5527] netlink: 20 bytes leftover after parsing attributes in process `syz.2.357'. [ 134.821391][ T5527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.357'. [ 134.823849][ T5527] device bridge_slave_1 left promiscuous mode [ 134.826702][ T5527] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.641808][ T5527] device bridge_slave_0 left promiscuous mode [ 135.643678][ T5527] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.216817][ T5549] netlink: 24 bytes leftover after parsing attributes in process `syz.3.362'. [ 138.664174][ T5560] loop0: detected capacity change from 0 to 1024 [ 139.680658][ T5572] loop4: detected capacity change from 0 to 512 [ 139.707123][ T5572] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 139.917647][ T5572] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #3: comm syz.4.373: corrupted inode contents [ 139.922611][ T5572] EXT4-fs error (device loop4): ext4_dirty_inode:6089: inode #3: comm syz.4.373: mark_inode_dirty error [ 140.223949][ T5572] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #3: comm syz.4.373: corrupted inode contents [ 140.345252][ T5572] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz.4.373: mark_inode_dirty error [ 140.625163][ T5572] Quota error (device loop4): write_blk: dquota write failed [ 140.627964][ T5572] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 140.630815][ T5572] EXT4-fs error (device loop4): ext4_acquire_dquot:6795: comm syz.4.373: Failed to acquire dquot type 0 [ 140.643952][ T5572] EXT4-fs (loop4): 1 orphan inode deleted [ 140.645505][ T5572] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 140.656050][ T39] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 140.670605][ T39] EXT4-fs error (device loop4): ext4_release_dquot:6818: comm kworker/u4:2: Failed to release dquot type 1 [ 144.197850][ T5609] loop0: detected capacity change from 0 to 1024 [ 144.229898][ T5609] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.443352][ T4298] EXT4-fs (loop4): unmounting filesystem. [ 148.374657][ T5650] netlink: 'syz.4.393': attribute type 3 has an invalid length. [ 148.379633][ T5650] netlink: 'syz.4.393': attribute type 3 has an invalid length. [ 148.535140][ T5656] loop4: detected capacity change from 0 to 256 [ 148.552130][ T5657] loop2: detected capacity change from 0 to 1024 [ 148.590588][ T5657] hfsplus: request for non-existent node 3 in B*Tree [ 148.592605][ T5657] hfsplus: request for non-existent node 3 in B*Tree [ 148.593134][ T5656] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 148.615693][ T5656] FAT-fs (loop4): Filesystem has been set read-only [ 152.654707][ T5683] loop3: detected capacity change from 0 to 512 [ 152.658779][ T5683] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 152.661464][ T5683] EXT4-fs (loop3): group descriptors corrupted! [ 152.823360][ T4288] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 154.606571][ T5701] loop1: detected capacity change from 0 to 256 [ 154.610004][ T5701] exfat: Bad value for 'uid' [ 155.691688][ T5703] loop2: detected capacity change from 0 to 2048 [ 155.739646][ T5703] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 155.775300][ T4288] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 158.644737][ T4304] EXT4-fs (loop2): unmounting filesystem. [ 159.696146][ T5750] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 159.696146][ T5750] The task syz.2.423 (5750) triggered the difference, watch for misbehavior. [ 160.961906][ T5770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.964451][ T5770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.076824][ T5778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.429'. [ 162.388447][ T5781] netlink: 20 bytes leftover after parsing attributes in process `syz.0.434'. [ 162.503590][ T5784] netlink: 20 bytes leftover after parsing attributes in process `syz.2.435'. [ 162.587676][ T5785] Cannot find del_set index 4 as target [ 162.598752][ T5785] xt_CT: You must specify a L4 protocol and not use inversions on it [ 164.497986][ T4295] Bluetooth: hci2: command 0x0406 tx timeout [ 164.499840][ T4295] Bluetooth: hci3: command 0x0406 tx timeout [ 165.037243][ T4297] Bluetooth: hci0: command 0x0406 tx timeout [ 165.038982][ T4297] Bluetooth: hci4: command 0x0406 tx timeout [ 165.040560][ T4297] Bluetooth: hci1: command 0x0406 tx timeout [ 165.597796][ T5819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.445'. [ 166.074753][ T5818] loop2: detected capacity change from 0 to 128 [ 166.318661][ T5821] netlink: 20 bytes leftover after parsing attributes in process `syz.1.447'. [ 166.426456][ T5823] loop1: detected capacity change from 0 to 512 [ 166.462478][ T5823] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.448: casefold flag without casefold feature [ 166.466236][ T5823] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.448: couldn't read orphan inode 15 (err -117) [ 166.474836][ T5823] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 167.468667][ T4294] EXT4-fs (loop1): unmounting filesystem. [ 168.563482][ T5844] netlink: 20 bytes leftover after parsing attributes in process `syz.2.455'. [ 168.834686][ T5849] netlink: 32 bytes leftover after parsing attributes in process `syz.4.454'. [ 171.921562][ T5869] netlink: 20 bytes leftover after parsing attributes in process `syz.1.459'. [ 172.233574][ T5879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.465'. [ 173.212515][ T5886] Cannot find del_set index 4 as target [ 173.217971][ T5886] xt_CT: You must specify a L4 protocol and not use inversions on it [ 173.260718][ T5888] netlink: 68 bytes leftover after parsing attributes in process `syz.3.469'. [ 173.580419][ T5892] netlink: 32 bytes leftover after parsing attributes in process `syz.4.468'. [ 176.491094][ T5907] loop3: detected capacity change from 0 to 4096 [ 176.540153][ T5907] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 177.409315][ T4299] EXT4-fs (loop3): unmounting filesystem. [ 177.534036][ T5925] netlink: 68 bytes leftover after parsing attributes in process `syz.2.480'. [ 178.706533][ T5937] netlink: 32 bytes leftover after parsing attributes in process `syz.3.481'. [ 181.181511][ T5949] loop2: detected capacity change from 0 to 128 [ 181.272195][ T5949] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 181.300030][ T5949] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 181.532647][ T5959] netlink: 68 bytes leftover after parsing attributes in process `syz.1.493'. [ 181.683411][ T5963] netlink: 20 bytes leftover after parsing attributes in process `syz.2.492'. [ 182.540471][ T5970] loop2: detected capacity change from 0 to 256 [ 182.572028][ T5961] Cannot find del_set index 4 as target [ 182.590801][ T5970] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 183.277375][ T5961] xt_CT: You must specify a L4 protocol and not use inversions on it [ 185.353489][ T5989] loop1: detected capacity change from 0 to 128 [ 185.360002][ T5989] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 185.386625][ T5989] capability: warning: `syz.1.502' uses deprecated v2 capabilities in a way that may be insecure [ 185.469915][ T5994] netlink: 60 bytes leftover after parsing attributes in process `syz.2.505'. [ 185.628857][ T5999] netlink: 20 bytes leftover after parsing attributes in process `syz.1.506'. [ 187.368457][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.370365][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.832181][ T6034] netlink: 60 bytes leftover after parsing attributes in process `syz.2.518'. [ 190.018572][ T6036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.039650][ T6036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.061283][ T6038] loop2: detected capacity change from 0 to 512 [ 190.223450][ T6044] loop3: detected capacity change from 0 to 512 [ 190.235204][ T6044] EXT4-fs: inline encryption not supported [ 190.336602][ T6046] netlink: 'syz.1.519': attribute type 4 has an invalid length. [ 191.574036][ T6038] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 191.598664][ T6044] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 191.732621][ T4304] EXT4-fs (loop2): unmounting filesystem. [ 191.744334][ T4299] EXT4-fs (loop3): unmounting filesystem. [ 192.889022][ T6069] netlink: 60 bytes leftover after parsing attributes in process `syz.2.530'. [ 193.095551][ T6077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.114982][ T6077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.580139][ T6090] Cannot find del_set index 4 as target [ 194.705584][ T6093] xt_CT: You must specify a L4 protocol and not use inversions on it [ 194.938276][ T6101] netlink: 68 bytes leftover after parsing attributes in process `syz.4.542'. [ 194.965236][ T6103] loop3: detected capacity change from 0 to 512 [ 194.990940][ T6103] EXT4-fs: Ignoring removed i_version option [ 194.992608][ T6103] EXT4-fs: Ignoring removed nomblk_io_submit option [ 195.108038][ T6103] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 195.141808][ T6110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.155468][ T6110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.910533][ T6103] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 195.913805][ T6103] EXT4-fs warning (device loop3): ext4_enable_quotas:7030: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 195.948094][ T6103] EXT4-fs (loop3): mount failed [ 196.203923][ T6121] netlink: 'syz.4.544': attribute type 4 has an invalid length. [ 197.138696][ T6126] syz.0.546 uses obsolete (PF_INET,SOCK_PACKET) [ 198.094001][ T6134] syz.3.549 (6134) used obsolete PPPIOCDETACH ioctl [ 198.950885][ T6154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.554'. [ 200.954375][ T6166] netlink: 68 bytes leftover after parsing attributes in process `syz.4.558'. [ 201.373694][ T6176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.553062][ T6176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.360365][ T6186] netlink: 'syz.1.561': attribute type 4 has an invalid length. [ 203.531985][ T6202] Cannot find del_set index 4 as target [ 203.534612][ T6202] xt_CT: You must specify a L4 protocol and not use inversions on it [ 207.107284][ T6229] netlink: 'syz.2.578': attribute type 1 has an invalid length. [ 207.172757][ T6234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.175165][ T6234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.366478][ T6238] bond1: (slave gretap1): making interface the new active one [ 207.375369][ T6238] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 208.008537][ T6250] netlink: 'syz.4.581': attribute type 4 has an invalid length. [ 210.661442][ T6275] netlink: 16 bytes leftover after parsing attributes in process `syz.4.589'. [ 212.787754][ T6314] Bluetooth: MGMT ver 1.22 [ 216.037482][ T6367] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.040247][ T6367] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.624055][ T6424] netlink: 'syz.4.637': attribute type 29 has an invalid length. [ 220.626543][ T6424] netlink: 'syz.4.637': attribute type 29 has an invalid length. [ 220.630558][ T6424] netlink: 'syz.4.637': attribute type 29 has an invalid length. [ 221.364497][ T6430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.639'. [ 223.675889][ T6457] loop4: detected capacity change from 0 to 512 [ 223.722056][ T6457] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.646: casefold flag without casefold feature [ 223.865774][ T6457] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.646: couldn't read orphan inode 15 (err -117) [ 224.054772][ T6465] device veth0_to_team entered promiscuous mode [ 224.229258][ T6457] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 225.921423][ T4298] EXT4-fs (loop4): unmounting filesystem. [ 226.030223][ T6484] netlink: 96 bytes leftover after parsing attributes in process `syz.3.654'. [ 226.087743][ T6480] device syzkaller1 entered promiscuous mode [ 227.039034][ T6494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.041542][ T6494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.454001][ T6509] Cannot find del_set index 4 as target [ 228.456548][ T6509] xt_CT: You must specify a L4 protocol and not use inversions on it [ 228.559300][ T6511] netlink: 'syz.1.658': attribute type 4 has an invalid length. [ 236.372743][ T6582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.389244][ T6582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.392911][ T6580] loop4: detected capacity change from 0 to 1024 [ 236.411329][ T6580] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 238.849715][ T6593] device veth0_to_team entered promiscuous mode [ 240.220820][ T6610] device syzkaller1 left promiscuous mode [ 240.307553][ T6611] Cannot find del_set index 4 as target [ 240.310000][ T6611] xt_CT: You must specify a L4 protocol and not use inversions on it [ 246.275131][ T6656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.286069][ T6656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.318409][ T6658] loop0: detected capacity change from 0 to 512 [ 246.338603][ T6658] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.705: casefold flag without casefold feature [ 246.342650][ T6658] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.705: couldn't read orphan inode 15 (err -117) [ 246.410063][ T6658] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 247.594165][ T4300] EXT4-fs (loop0): unmounting filesystem. [ 248.118102][ T6674] netlink: 'syz.4.703': attribute type 4 has an invalid length. [ 248.809084][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.814307][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 253.670797][ T6712] loop3: detected capacity change from 0 to 2048 [ 253.757178][ T6712] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 254.058190][ T4299] EXT4-fs (loop3): unmounting filesystem. [ 275.445498][ T6870] device veth0_to_team entered promiscuous mode [ 275.590489][ T6880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.594031][ T6880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.436339][ T6962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.452576][ T6962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.837556][ T6967] device veth0_to_team entered promiscuous mode [ 291.134478][ T7019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.145125][ T7019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.062445][ T7026] netlink: 'syz.4.806': attribute type 4 has an invalid length. [ 294.629216][ T7041] loop4: detected capacity change from 0 to 512 [ 294.814284][ T7041] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.811: casefold flag without casefold feature [ 294.819348][ T7041] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.811: couldn't read orphan inode 15 (err -117) [ 294.829695][ T7041] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 296.595099][ T7056] loop0: detected capacity change from 0 to 512 [ 296.682024][ T7056] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.814: casefold flag without casefold feature [ 296.685647][ T7056] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.814: couldn't read orphan inode 15 (err -117) [ 296.699639][ T7056] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 296.768287][ T4298] EXT4-fs (loop4): unmounting filesystem. [ 298.916461][ T4300] EXT4-fs (loop0): unmounting filesystem. [ 298.986436][ T7076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.003918][ T7076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.292033][ T7079] netlink: 'syz.2.821': attribute type 4 has an invalid length. [ 303.667408][ T7108] loop2: detected capacity change from 0 to 512 [ 303.721711][ T7113] loop3: detected capacity change from 0 to 512 [ 303.727675][ T7108] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.830: casefold flag without casefold feature [ 303.737647][ T7108] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.830: couldn't read orphan inode 15 (err -117) [ 303.761753][ T7108] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 303.773266][ T7113] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.831: casefold flag without casefold feature [ 303.782529][ T7113] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.831: couldn't read orphan inode 15 (err -117) [ 303.822014][ T7113] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 304.821596][ T4304] EXT4-fs (loop2): unmounting filesystem. [ 305.512001][ T4299] EXT4-fs (loop3): unmounting filesystem. [ 307.733402][ T7153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.755353][ T7153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.058323][ T7158] netlink: 'syz.3.840': attribute type 4 has an invalid length. [ 310.727750][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.729581][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.553374][ T7230] loop1: detected capacity change from 0 to 512 [ 318.678990][ T7230] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.863: casefold flag without casefold feature [ 318.682930][ T7230] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.863: couldn't read orphan inode 15 (err -117) [ 318.706185][ T7230] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 321.257728][ T4294] EXT4-fs (loop1): unmounting filesystem. [ 335.122307][ T7360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.125036][ T7360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.165219][ T7374] netlink: 'syz.1.898': attribute type 4 has an invalid length. [ 337.115691][ T7384] loop4: detected capacity change from 0 to 512 [ 337.164554][ T7384] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.902: casefold flag without casefold feature [ 337.168442][ T7384] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.902: couldn't read orphan inode 15 (err -117) [ 337.171860][ T7384] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 337.276521][ T7391] device veth0_to_team entered promiscuous mode [ 339.835524][ T4298] EXT4-fs (loop4): unmounting filesystem. [ 346.830653][ T7459] loop1: detected capacity change from 0 to 512 [ 346.870117][ T7459] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.918: casefold flag without casefold feature [ 346.873923][ T7459] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.918: couldn't read orphan inode 15 (err -117) [ 347.308570][ T7459] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 348.882838][ T4294] EXT4-fs (loop1): unmounting filesystem. [ 348.896635][ T7487] netlink: 16 bytes leftover after parsing attributes in process `syz.0.927'. [ 349.035705][ T7489] netlink: 'syz.0.927': attribute type 1 has an invalid length. [ 349.112750][ T7494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.152111][ T7494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.214897][ T7489] netlink: 16 bytes leftover after parsing attributes in process `syz.0.927'. [ 349.253008][ T7493] bond1: (slave gretap1): making interface the new active one [ 349.255992][ T7493] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 349.347026][ T7494] netlink: 'syz.1.928': attribute type 4 has an invalid length. [ 353.024915][ T7535] loop4: detected capacity change from 0 to 512 [ 353.080857][ T7535] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.938: casefold flag without casefold feature [ 353.090279][ T7535] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.938: couldn't read orphan inode 15 (err -117) [ 353.110659][ T7535] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 354.263809][ T7547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.266217][ T7547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.274505][ T4298] EXT4-fs (loop4): unmounting filesystem. [ 354.453922][ T7547] netlink: 'syz.2.942': attribute type 4 has an invalid length. [ 357.055511][ T7580] tipc: Started in network mode [ 357.075671][ T7580] tipc: Node identity @, cluster identity 4711 [ 357.078194][ T7580] tipc: Enabling of bearer rejected, failed to enable media [ 361.234632][ T7611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.959'. [ 361.238210][ T7621] netlink: 'syz.1.964': attribute type 29 has an invalid length. [ 362.245836][ T7611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.959'. [ 362.290178][ T7611] device vlan2 entered promiscuous mode [ 362.302081][ T7611] device gretap0 entered promiscuous mode [ 362.313124][ T7621] netlink: 'syz.1.964': attribute type 29 has an invalid length. [ 362.444115][ T7627] netlink: 'syz.1.964': attribute type 29 has an invalid length. [ 362.671981][ T7646] device wireguard0 entered promiscuous mode [ 368.878050][ T7726] Driver unsupported XDP return value 0 on prog (id 27) dev N/A, expect packet loss! [ 371.687798][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.689533][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 372.186788][ T7767] netlink: 'syz.2.1004': attribute type 10 has an invalid length. [ 372.189189][ T7767] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1004'. [ 372.192071][ T7767] device batadv0 entered promiscuous mode [ 372.210482][ T7767] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 372.236129][ T7770] batman_adv: batadv0: Adding interface: dummy0 [ 372.264822][ T7770] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.326959][ T7770] batman_adv: batadv0: Interface activated: dummy0 [ 372.354179][ T7772] batadv0: mtu less than device minimum [ 372.358992][ T7772] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 372.364898][ T7772] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 372.370611][ T7772] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 372.376282][ T7772] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 372.381991][ T7772] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 372.387894][ T7772] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 372.393551][ T7772] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 372.399480][ T7772] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 375.596655][ T7834] loop3: detected capacity change from 0 to 2048 [ 375.643656][ T7834] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 375.689114][ T4299] EXT4-fs (loop3): unmounting filesystem. [ 376.096865][ T7821] netlink: 'syz.4.1022': attribute type 10 has an invalid length. [ 376.099156][ T7821] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1022'. [ 376.101580][ T7821] device batadv0 entered promiscuous mode [ 376.103827][ T7821] bridge0: port 3(batadv0) entered blocking state [ 376.105831][ T7821] bridge0: port 3(batadv0) entered disabled state [ 376.110428][ T7821] bridge0: port 3(batadv0) entered blocking state [ 376.112272][ T7821] bridge0: port 3(batadv0) entered forwarding state [ 376.115109][ T7825] batman_adv: batadv0: Adding interface: dummy0 [ 376.117413][ T7825] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.124401][ T7825] batman_adv: batadv0: Interface activated: dummy0 [ 376.158652][ T7844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.162650][ T7844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.223443][ T7841] device wireguard0 entered promiscuous mode [ 376.504397][ T4355] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 376.507538][ T4355] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 377.537932][ T7869] loop0: detected capacity change from 0 to 256 [ 377.571708][ T7869] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 377.574615][ T7869] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 378.314365][ T7869] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 378.454802][ T7875] loop4: detected capacity change from 0 to 4096 [ 378.516928][ T7875] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 378.682648][ T7875] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 381.050190][ T27] audit: type=1326 audit(381.032:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7928 comm="syz.4.1053" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9235ad28 code=0x7ffc0000 [ 381.054972][ T7926] loop1: detected capacity change from 0 to 1024 [ 381.058885][ T27] audit: type=1326 audit(381.042:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7928 comm="syz.4.1053" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9235ad28 code=0x7ffc0000 [ 381.546331][ T27] audit: type=1326 audit(381.042:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7928 comm="syz.4.1053" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=6 compat=0 ip=0xffff9235ad28 code=0x7ffc0000 [ 381.802452][ T27] audit: type=1326 audit(381.042:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7928 comm="syz.4.1053" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9235ad28 code=0x7ffc0000 [ 381.808319][ T27] audit: type=1326 audit(381.042:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7928 comm="syz.4.1053" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9235ad28 code=0x7ffc0000 [ 382.090469][ T4455] hfsplus: b-tree write err: -5, ino 4 [ 382.312256][ T7936] loop0: detected capacity change from 0 to 32768 [ 382.322781][ T7936] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1057 (7936) [ 382.337879][ T7936] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 382.340806][ T7936] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 382.342971][ T7936] BTRFS info (device loop0): enabling auto defrag [ 382.344731][ T7936] BTRFS info (device loop0): enabling ssd optimizations [ 382.346555][ T7936] BTRFS info (device loop0): using spread ssd allocation scheme [ 382.348658][ T7936] BTRFS info (device loop0): use no compression [ 382.350296][ T7936] BTRFS info (device loop0): force clearing of disk cache [ 382.352181][ T7936] BTRFS info (device loop0): max_inline at 60 [ 382.353732][ T7936] BTRFS info (device loop0): disabling free space tree [ 382.580780][ T7936] BTRFS info (device loop0): rebuilding free space tree [ 382.604923][ T7936] BTRFS info (device loop0): disabling free space tree [ 382.606949][ T7936] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 382.609656][ T7936] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 382.745672][ T4300] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 385.153993][ T8017] Cannot find del_set index 4 as target [ 385.156436][ T8017] xt_CT: You must specify a L4 protocol and not use inversions on it [ 388.054857][ T8063] Cannot find del_set index 4 as target [ 388.057673][ T8063] xt_CT: You must specify a L4 protocol and not use inversions on it [ 389.707775][ T8083] loop4: detected capacity change from 0 to 512 [ 389.773769][ T8083] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 389.855224][ T8083] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 390.119161][ T4298] EXT4-fs (loop4): unmounting filesystem. [ 390.271925][ T8104] loop3: detected capacity change from 0 to 2048 [ 390.500814][ T8113] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 390.627728][ T4295] Bluetooth: hci2: adv larger than maximum supported [ 390.627782][ T4295] Bluetooth: hci2: Malformed LE Event: 0x0d [ 391.455828][ T4295] Bluetooth: hci0: unexpected cc 0x0c2d length: 5 > 4 [ 391.820598][ T8133] usb usb1: usbfs: process 8133 (syz.0.1119) did not claim interface 0 before use [ 391.823088][ T8133] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 392.640941][ T8139] loop1: detected capacity change from 0 to 256 [ 392.778768][ T8143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.781273][ T8143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.854732][ T8143] loop3: detected capacity change from 0 to 4096 [ 392.877680][ T8143] ntfs3: Unknown parameter '' [ 394.241552][ T8173] loop3: detected capacity change from 0 to 128 [ 394.258626][ T8174] loop1: detected capacity change from 0 to 2048 [ 394.281654][ T8173] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 394.314123][ T8177] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 394.335620][ T8169] loop2: detected capacity change from 0 to 8192 [ 394.389536][ T8169] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 394.392448][ T8169] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 394.409138][ T8169] loop2: unable to read partition table [ 394.410777][ T8169] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 394.444469][ T3912] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 394.449518][ T8184] netlink: 'syz.4.1136': attribute type 10 has an invalid length. [ 394.449756][ T3912] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 394.452560][ T4299] EXT4-fs (loop3): unmounting filesystem. [ 394.463595][ T3912] loop2: unable to read partition table [ 394.576325][ T8191] loop3: detected capacity change from 0 to 2048 [ 394.628833][ T8191] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 394.697633][ T4299] EXT4-fs (loop3): unmounting filesystem. [ 396.210887][ T8221] loop0: detected capacity change from 0 to 512 [ 396.244046][ T8221] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.1146: casefold flag without casefold feature [ 396.290894][ T8221] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1146: couldn't read orphan inode 15 (err -117) [ 396.321565][ T8221] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 396.346112][ T8230] loop3: detected capacity change from 0 to 2048 [ 397.316748][ T8235] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 397.797298][ T4300] EXT4-fs (loop0): unmounting filesystem. [ 397.829237][ T8242] loop2: detected capacity change from 0 to 2048 [ 397.870939][ T8242] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 399.359739][ T8275] loop1: detected capacity change from 0 to 32768 [ 399.363518][ T8275] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1168 (8275) [ 399.370792][ T8275] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 399.373577][ T8275] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 399.375972][ T8275] BTRFS info (device loop1): doing ref verification [ 399.378223][ T8275] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 399.380977][ T8275] BTRFS info (device loop1): trying to use backup root at mount time [ 399.383150][ T8275] BTRFS info (device loop1): use zlib compression, level 3 [ 399.385146][ T8275] BTRFS info (device loop1): doing ref verification [ 399.387029][ T8275] BTRFS info (device loop1): using free space tree [ 400.707599][ T6895] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc5d5b7b3 level 0 [ 400.712187][ T8275] BTRFS error (device loop1): failed to load root extent [ 400.714120][ T8275] BTRFS warning (device loop1): try to load backup roots slot 1 [ 400.716533][ T4647] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x0a9d3682 level 0 [ 400.730725][ T8275] BTRFS warning (device loop1): couldn't read tree root [ 400.732709][ T8275] BTRFS warning (device loop1): try to load backup roots slot 2 [ 400.735214][ T8275] BTRFS error (device loop1): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 400.738652][ T8275] BTRFS warning (device loop1): couldn't read tree root [ 400.740508][ T8275] BTRFS warning (device loop1): try to load backup roots slot 3 [ 400.744848][ T207] BTRFS warning (device loop1): checksum verify failed on logical 5287936 mirror 1 wanted 0x10870a5f found 0x8466429c level 0 [ 400.748790][ T8275] BTRFS warning (device loop1): failed to read root (objectid=4): -5 [ 400.830452][ T8275] BTRFS error (device loop1): open_ctree failed: -22 [ 400.838106][ T8314] loop4: detected capacity change from 0 to 2048 [ 400.896454][ T8324] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 401.526998][ T8335] ALSA: mixer_oss: invalid OSS volume '' [ 401.824104][ T8341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1184'. [ 402.965848][ T8362] loop0: detected capacity change from 0 to 256 [ 402.985868][ T8362] exfat: Unknown parameter 'zero_size_dir' [ 403.018741][ T8365] loop1: detected capacity change from 0 to 2048 [ 403.109683][ T8365] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 403.143165][ T4288] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 403.898702][ T4294] EXT4-fs (loop1): unmounting filesystem. [ 404.100650][ T8386] ALSA: mixer_oss: invalid OSS volume '' [ 404.712179][ T8387] loop2: detected capacity change from 0 to 2048 [ 404.793896][ T8389] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 404.810798][ T4295] Bluetooth: hci4: adv larger than maximum supported [ 404.810851][ T4295] Bluetooth: hci4: Malformed LE Event: 0x0d [ 404.846576][ T8393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.849856][ T8393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.182680][ T8403] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1206'. [ 406.579646][ T8425] ALSA: mixer_oss: invalid OSS volume '' [ 406.661490][ T8421] loop4: detected capacity change from 0 to 2048 [ 406.722243][ T8427] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 406.784069][ T4295] Bluetooth: hci1: adv larger than maximum supported [ 406.784122][ T4295] Bluetooth: hci1: Malformed LE Event: 0x0d [ 407.450648][ T8449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.453046][ T8449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.358844][ T8463] loop2: detected capacity change from 0 to 512 [ 408.376254][ T8465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.381468][ T8465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.401013][ T8465] loop4: detected capacity change from 0 to 2048 [ 408.560740][ T8459] loop1: detected capacity change from 0 to 40427 [ 408.589425][ T8459] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3ffff [ 408.591672][ T8459] F2FS-fs (loop1): LFS not compatible with checkpoint=disable [ 408.633816][ T8463] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.1229: corrupted in-inode xattr [ 408.641620][ T8463] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1229: couldn't read orphan inode 15 (err -117) [ 408.645114][ T8463] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 408.673485][ T8463] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #2: comm syz.2.1229: Directory hole found for htree leaf block 0 [ 408.811558][ T4304] EXT4-fs (loop2): unmounting filesystem. [ 411.054992][ T8506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.059809][ T8506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.704260][ T8512] loop4: detected capacity change from 0 to 8 [ 411.708012][ T8512] Major/Minor mismatch, older Squashfs 0.0 filesystems are unsupported [ 411.738646][ T4288] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 411.814704][ T8515] loop4: detected capacity change from 0 to 256 [ 422.743769][ T8508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1242'. [ 423.035112][ T8542] loop4: detected capacity change from 0 to 64 [ 425.105984][ T8569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1263'. [ 429.403028][ T8691] Cannot find del_set index 4 as target [ 429.505372][ T8692] xt_CT: You must specify a L4 protocol and not use inversions on it [ 429.922347][ T8689] bridge0: port 3(syz_tun) entered blocking state [ 429.924352][ T8689] bridge0: port 3(syz_tun) entered disabled state [ 429.935349][ T8689] device syz_tun entered promiscuous mode [ 431.763669][ T8750] Cannot find del_set index 4 as target [ 431.775027][ T8750] xt_CT: You must specify a L4 protocol and not use inversions on it [ 433.157605][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 433.159743][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 433.502135][ T8780] loop0: detected capacity change from 0 to 2048 [ 433.593882][ T8780] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 433.713491][ T8788] loop2: detected capacity change from 0 to 40427 [ 433.773034][ T8788] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 433.775191][ T8788] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 433.805308][ T8788] F2FS-fs (loop2): invalid crc value [ 434.332948][ T8788] F2FS-fs (loop2): Found nat_bits in checkpoint [ 434.518477][ T8788] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 434.520526][ T8788] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 434.705032][ T8817] netlink: 'syz.1.1334': attribute type 8 has an invalid length. [ 434.737785][ T8817] device geneve2 entered promiscuous mode [ 434.806815][ T8824] loop4: detected capacity change from 0 to 512 [ 434.907127][ T8824] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1336: casefold flag without casefold feature [ 434.927282][ T8824] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1336: couldn't read orphan inode 15 (err -117) [ 434.942322][ T8824] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 434.950164][ T8836] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1339'. [ 435.814173][ T8848] loop3: detected capacity change from 0 to 2048 [ 435.861315][ T4298] EXT4-fs (loop4): unmounting filesystem. [ 435.884952][ T8852] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 436.206199][ T8874] loop1: detected capacity change from 0 to 512 [ 436.263627][ T8874] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.1355: casefold flag without casefold feature [ 436.300910][ T8874] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1355: couldn't read orphan inode 15 (err -117) [ 436.335013][ T8874] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 436.454685][ T8888] loop3: detected capacity change from 0 to 64 [ 437.765070][ T8909] loop2: detected capacity change from 0 to 512 [ 437.768161][ T8909] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 437.771222][ T8909] EXT4-fs (loop2): group descriptors corrupted! [ 438.191205][ T4294] EXT4-fs (loop1): unmounting filesystem. [ 439.250187][ T8938] loop2: detected capacity change from 0 to 1024 [ 439.301175][ T8938] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 439.391628][ T8949] loop4: detected capacity change from 0 to 512 [ 439.410458][ T8949] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1385: casefold flag without casefold feature [ 439.414567][ T4304] EXT4-fs (loop2): unmounting filesystem. [ 439.416343][ T8949] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1385: couldn't read orphan inode 15 (err -117) [ 439.452362][ T8949] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 439.702335][ T4298] EXT4-fs (loop4): unmounting filesystem. [ 439.811449][ T8968] loop3: detected capacity change from 0 to 512 [ 439.823881][ T8967] loop1: detected capacity change from 0 to 2048 [ 439.848710][ T8968] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1393: casefold flag without casefold feature [ 439.854066][ T8971] loop2: detected capacity change from 0 to 64 [ 439.857453][ T8968] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1393: couldn't read orphan inode 15 (err -117) [ 439.863225][ T8968] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 439.878739][ T8972] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 439.909321][ T8971] ================================================================== [ 439.911447][ T8971] BUG: KASAN: slab-out-of-bounds in hfs_bnode_read_key+0x310/0x454 [ 439.913501][ T8971] Write of size 94 at addr ffff0000d4d35500 by task syz.2.1394/8971 [ 439.915675][ T8971] [ 439.916313][ T8971] CPU: 0 PID: 8971 Comm: syz.2.1394 Not tainted 6.1.133-syzkaller #0 [ 439.918562][ T8971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 439.921385][ T8971] Call trace: [ 439.922256][ T8971] dump_backtrace+0x1c8/0x1f4 [ 439.923570][ T8971] show_stack+0x2c/0x3c [ 439.924700][ T8971] dump_stack_lvl+0x108/0x170 [ 439.925979][ T8971] print_report+0x174/0x4c0 [ 439.927180][ T8971] kasan_report+0xd4/0x130 [ 439.928338][ T8971] kasan_check_range+0x264/0x2a4 [ 439.929669][ T8971] memcpy+0x60/0x90 [ 439.930680][ T8971] hfs_bnode_read_key+0x310/0x454 [ 439.932023][ T8971] hfs_brec_insert+0x620/0x97c [ 439.933306][ T8971] hfs_cat_create+0x340/0x71c [ 439.934600][ T8971] hfs_create+0x70/0xe4 [ 439.935767][ T8971] path_openat+0xeac/0x2548 [ 439.936999][ T8971] do_filp_open+0x1bc/0x3cc [ 439.938240][ T8971] do_sys_openat2+0x128/0x3e0 [ 439.939575][ T8971] __arm64_sys_openat+0x1f0/0x240 [ 439.940984][ T8971] invoke_syscall+0x98/0x2bc [ 439.942220][ T8971] el0_svc_common+0x138/0x258 [ 439.943467][ T8971] do_el0_svc+0x58/0x13c [ 439.944607][ T8971] el0_svc+0x58/0x168 [ 439.945640][ T8971] el0t_64_sync_handler+0x84/0xf0 [ 439.946995][ T8971] el0t_64_sync+0x18c/0x190 [ 439.948206][ T8971] [ 439.948831][ T8971] Allocated by task 8971: [ 439.950006][ T8971] kasan_set_track+0x4c/0x80 [ 439.951189][ T8971] kasan_save_alloc_info+0x24/0x30 [ 439.952532][ T8971] __kasan_kmalloc+0xac/0xc4 [ 439.953751][ T8971] __kmalloc+0xd8/0x1c4 [ 439.954900][ T8971] hfs_find_init+0x88/0x1c8 [ 439.956135][ T8971] hfs_cat_create+0x168/0x71c [ 439.957389][ T8971] hfs_create+0x70/0xe4 [ 439.958512][ T8971] path_openat+0xeac/0x2548 [ 439.959720][ T8971] do_filp_open+0x1bc/0x3cc [ 439.960984][ T8971] do_sys_openat2+0x128/0x3e0 [ 439.962326][ T8971] __arm64_sys_openat+0x1f0/0x240 [ 439.963747][ T8971] invoke_syscall+0x98/0x2bc [ 439.965001][ T8971] el0_svc_common+0x138/0x258 [ 439.966322][ T8971] do_el0_svc+0x58/0x13c [ 439.967556][ T8971] el0_svc+0x58/0x168 [ 439.968694][ T8971] el0t_64_sync_handler+0x84/0xf0 [ 439.970044][ T8971] el0t_64_sync+0x18c/0x190 [ 439.971485][ T8971] [ 439.972079][ T8971] Last potentially related work creation: [ 439.973663][ T8971] kasan_save_stack+0x40/0x70 [ 439.974917][ T8971] __kasan_record_aux_stack+0xcc/0xe8 [ 439.976367][ T8971] kasan_record_aux_stack_noalloc+0x14/0x20 [ 439.977976][ T8971] kvfree_call_rcu+0xb4/0x714 [ 439.979307][ T8971] hash_ip4_add+0x1290/0x1d1c [ 439.980585][ T8971] hash_ip4_uadt+0x5c0/0x890 [ 439.981837][ T8971] call_ad+0x230/0x864 [ 439.982970][ T8971] ip_set_ad+0x5d8/0x7a8 [ 439.984115][ T8971] ip_set_uadd+0x74/0x8c [ 439.985272][ T8971] nfnetlink_rcv_msg+0xa78/0xf80 [ 439.986695][ T8971] netlink_rcv_skb+0x20c/0x3b8 [ 439.987978][ T8971] nfnetlink_rcv+0x21c/0x1e08 [ 439.989223][ T8971] netlink_unicast+0x65c/0x898 [ 439.990483][ T8971] netlink_sendmsg+0x844/0xb28 [ 439.991842][ T8971] ____sys_sendmsg+0x55c/0x8c4 [ 439.993140][ T8971] __sys_sendmsg+0x26c/0x33c [ 439.994385][ T8971] __arm64_sys_sendmsg+0x80/0x94 [ 439.995742][ T8971] invoke_syscall+0x98/0x2bc [ 439.996960][ T8971] el0_svc_common+0x138/0x258 [ 439.998203][ T8971] do_el0_svc+0x58/0x13c [ 439.999314][ T8971] el0_svc+0x58/0x168 [ 440.000411][ T8971] el0t_64_sync_handler+0x84/0xf0 [ 440.001830][ T8971] el0t_64_sync+0x18c/0x190 [ 440.003057][ T8971] [ 440.003689][ T8971] The buggy address belongs to the object at ffff0000d4d35500 [ 440.003689][ T8971] which belongs to the cache kmalloc-128 of size 128 [ 440.007483][ T8971] The buggy address is located 0 bytes inside of [ 440.007483][ T8971] 128-byte region [ffff0000d4d35500, ffff0000d4d35580) [ 440.010905][ T8971] [ 440.011578][ T8971] The buggy address belongs to the physical page: [ 440.013274][ T8971] page:000000003e0b81a9 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x114d35 [ 440.016115][ T8971] flags: 0x5ffc00000000200(slab|node=0|zone=2|lastcpupid=0x7ff) [ 440.018179][ T8971] raw: 05ffc00000000200 dead000000000100 dead000000000122 ffff0000c0002300 [ 440.020491][ T8971] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 440.022773][ T8971] page dumped because: kasan: bad access detected [ 440.024553][ T8971] [ 440.025172][ T8971] Memory state around the buggy address: [ 440.026773][ T8971] ffff0000d4d35400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 440.028943][ T8971] ffff0000d4d35480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 440.031163][ T8971] >ffff0000d4d35500: 00 00 00 00 00 00 00 00 00 06 fc fc fc fc fc fc [ 440.033377][ T8971] ^ [ 440.035139][ T8971] ffff0000d4d35580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 440.037384][ T8971] ffff0000d4d35600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 440.039633][ T8971] ================================================================== [ 440.066872][ T8971] Disabling lock debugging due to kernel taint [ 440.767624][ T4299] EXT4-fs (loop3): unmounting filesystem.