last executing test programs: 10.809430818s ago: executing program 3 (id=133): chdir(&(0x7f0000000480)='./cgroup\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) lseek(r0, 0x1, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 10.67156199s ago: executing program 3 (id=134): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r3, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x3b, r6}) ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.763123223s ago: executing program 3 (id=140): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000003, 0xfffffefa, 0x6}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r0], 0x1c}}, 0x804) 9.603091016s ago: executing program 3 (id=142): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000440)='./file2\x00', 0x404, &(0x7f0000000380)={[{@errors_remount}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@resgid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x187102, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@noload}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x562, &(0x7f0000000440)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 8.091593438s ago: executing program 3 (id=145): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.866753821s ago: executing program 4 (id=146): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006110feff00000000620000000000000095"], &(0x7f0000000100)='GPL\x00', 0x9}, 0x94) 7.733278784s ago: executing program 4 (id=147): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) 7.27974038s ago: executing program 3 (id=148): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000300)={0x0, [0x2, 0x8, 0x5], [{0x0, 0xffffffff, 0x0, 0x0, 0x1}, {0x9, 0x0, 0x0, 0x1}, {0x0, 0x405}, {0x200000, 0x3}, {0x3}, {0x2, 0x2}, {0x0, 0x80000001}, {0x0, 0x4000006}, {}, {0x0, 0xfffffffc}, {}, {0x0, 0x800004}], 0x20}) 7.017765324s ago: executing program 32 (id=148): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000300)={0x0, [0x2, 0x8, 0x5], [{0x0, 0xffffffff, 0x0, 0x0, 0x1}, {0x9, 0x0, 0x0, 0x1}, {0x0, 0x405}, {0x200000, 0x3}, {0x3}, {0x2, 0x2}, {0x0, 0x80000001}, {0x0, 0x4000006}, {}, {0x0, 0xfffffffc}, {}, {0x0, 0x800004}], 0x20}) 5.027708584s ago: executing program 2 (id=157): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x3000046, &(0x7f0000000cc0)={[{@delalloc}, {@data_err_abort}, {@lazytime}, {@dioread_lock}, {@dioread_lock}, {@resgid}, {@jqfmt_vfsv0}, {@dioread_nolock}, {@nobh}, {@user_xattr}, {@mb_optimize_scan}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}]}, 0xfe, 0x562, &(0x7f0000000440)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2236824, 0x0) rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4.393940043s ago: executing program 2 (id=159): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r1, 0x4b4b, &(0x7f0000002c80)=""/268) 3.95666481s ago: executing program 0 (id=163): set_robust_list(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) 3.367834079s ago: executing program 0 (id=164): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) socket$inet(0x2, 0x2, 0x1) openat(0xffffffffffffff9c, 0x0, 0x80802, 0xa) set_tid_address(&(0x7f0000000140)) 3.183976552s ago: executing program 2 (id=166): bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000400), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000001c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000003c0)=0x1000, 0x12) 3.135683992s ago: executing program 0 (id=167): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRESHEX, @ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRESHEX], 0x1, 0x677, &(0x7f0000000640)="$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") fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x80400, 0x0) mkdirat(r1, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x408) 3.031347624s ago: executing program 2 (id=168): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) open(0x0, 0x20480, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknod$loop(0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x658, 0x2e0, 0xd0, 0x2e0, 0x0, 0x428, 0x588, 0x588, 0x588, 0x588, 0x588, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6, 0x0, 0x0, 0x4a}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x120, 0x160, 0x0, {}, [@common=@frag={{0x30}, {[0x10000, 0x8], 0x35, 0x28}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6b8) close(r1) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'bridge0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x4, [0xffffffff, 0x0, 0x0, 0x0, 0xfffffffd]}}) setsockopt$inet6_int(r0, 0x29, 0x17, &(0x7f0000000000)=0xfb2719d1, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r6, &(0x7f0000000d00)=[{&(0x7f0000002b80)=""/4112, 0x1010}], 0x1, 0x2, 0x200) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r8 = socket$unix(0x1, 0x1, 0x0) listen(r8, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) connect$unix(r9, &(0x7f0000000000)=@file={0x1}, 0x6e) setsockopt$sock_timeval(r9, 0x1, 0x43, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$unix(r9, &(0x7f0000000080)=@file={0x1}, 0x6e) 3.007052464s ago: executing program 4 (id=169): unshare(0x20000400) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, 0x0, 0x0) 2.60240218s ago: executing program 0 (id=171): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x4, 0x5, 0x37, 0x4, @vifc_lcl_addr=@multicast1, @broadcast}, 0x10) 2.272491026s ago: executing program 1 (id=172): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000098c0), 0x0, 0x0) fcntl$dupfd(r0, 0x406, r0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0x0, 0x0, 0x1000, 0x0, 0x0, "a099c0f51ac457a0b8ae219ee49ead58e9df11", 0x0, 0xfffffffa}) 2.174667037s ago: executing program 1 (id=173): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100) r2 = dup(r0) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x20000001) connect$unix(r2, &(0x7f0000002200)=@file={0x0, './file0\x00'}, 0x6e) 2.012905229s ago: executing program 4 (id=174): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f00000003c0), &(0x7f0000000100)='./file0\x00', 0x201048c, &(0x7f0000000300)=ANY=[], 0xfd, 0x644, &(0x7f0000000cc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x1c7102, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1.916380691s ago: executing program 2 (id=175): r0 = openat$kvm(0x0, &(0x7f0000000200), 0x22d02, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ftruncate(r2, 0xc17a) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000140)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 1.915936981s ago: executing program 0 (id=176): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x4, 0x0, &(0x7f0000000480)) 591.33704ms ago: executing program 4 (id=177): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) socket$inet(0x2, 0x2, 0x1) openat(0xffffffffffffff9c, 0x0, 0x80802, 0xa) set_tid_address(&(0x7f0000000140)) 590.44327ms ago: executing program 0 (id=186): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@errors_remount}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x10}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@nojournal_checksum}]}, 0x1, 0x553, &(0x7f0000001080)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x361, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x2c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000040)={0x6, 0x23, 0x9, 0xdedb, 0x2, "00000000c89cefe0"}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x20000328) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 590.14252ms ago: executing program 1 (id=178): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$input_event(r0, &(0x7f0000000380)={{}, 0x11, 0x5, 0x1}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500), 0x0, 0x1}}, 0x40) 488.080222ms ago: executing program 1 (id=179): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x154, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x118, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xf0, 0x1, [@m_simple={0x30, 0x1f, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_nat={0xbc, 0xa, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xfffffff8, 0x2, 0x100, 0x1}, @broadcast, @multicast2, 0xff000000}}]}, {0x69, 0x6, "455c01c35a2bca70225b757b65e5e4a3d41b6fb981e9f5ab2f14ad001cda09785441b43636124ee3000e13fa20bea090aab2bdd9895404add20f4fcf1a162cef77fa8839a02231378329689c84c729801c399b2e8e9d7612504fe105d4368f62612597163d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_BPF_FLAGS_GEN={0x8}, @TCA_BPF_FD={0x8}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 336.120324ms ago: executing program 4 (id=180): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) creat(&(0x7f00000000c0)='./file2\x00', 0x23) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) 235.722676ms ago: executing program 1 (id=181): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRESHEX, @ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRESHEX], 0x1, 0x677, &(0x7f0000000640)="$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") fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x80400, 0x0) mkdirat(r1, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x408) 64.032138ms ago: executing program 1 (id=182): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000700)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7ff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@jqfmt_vfsv0}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0xfe, 0x461, &(0x7f0000002180)="$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") io_submit(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x1b0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000001c0)=@v2={0x2, @aes256, 0x4, '\x00', @a}) 0s ago: executing program 2 (id=183): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040), 0xff, 0x240, &(0x7f00000002c0)="$eJzs3T1oO2UcB/DvXRL/tg1SdRHEFxARLZS6CS51UShIKSKCChURF6UVaotb6+TioLNKJ5ciblZH6VJcFMGpaoe6CFocLA46RJJrpbYRX1Jz4n0+cLm75J77Pcfd97kQOBKgsaaTzCdpJZlJ0klSnN/gzmqaPl3dnthfTnq9x34oBttV65WzdlNJtpI8kGSvLPJCO9nYferop4NH7nl9vXP3u7tPToz1IE8dHx0+evLO4msfLNy/8dkX3y0WmU/3d8d19Yoh77WL5KZ/o9h/RNGuuwf8FUuvvP9lP/c3J7lrkP9OylQn74216/Y6ue/tP2r75vef3zrOvgJXr9fr9O+BWz2gccok3RTlbJJquSxnZ6vv8F+1JssXV9dennl+dX3lubpHKuCqdJPDhz+69uHUhfx/26ryD/xPVT9KHT6+tPN1f+GkVXeHgLG4rZr17/8zz2zeG/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmH5pJ/aC75h+aSf2iu8/kHAJqld63uJ5CButQ9/gAAAAAAAAAAAAAAAAAAAJdtT+wvn03jqvnJW8nxQ0naw+q3Bv9HnFw/eJ38sehv9puiajaSp+8YcQcjeq/mp69v+Kbe+p/eXm/9zZVk69Ukc+325euvOL3+/rkb/+TzzrMjFvibigvrDz4x3voX/bJTb/2Fg+Tj/vgzN2z8KXPLYD58/On2z9+I9V/6ecQdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDa/BgAA//8YZW08") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000e00)={0x0, 0x2904c, 0x5, 0x10003, '\x00', [{}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.190' (ED25519) to the list of known hosts. [ 50.870549][ T4157] cgroup: Unknown subsys name 'net' [ 51.007417][ T4157] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.208059][ T4157] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 54.127173][ T4170] chnl_net:caif_netlink_parms(): no params data found [ 54.197327][ T4171] chnl_net:caif_netlink_parms(): no params data found [ 54.210160][ T4168] chnl_net:caif_netlink_parms(): no params data found [ 54.279095][ T4174] chnl_net:caif_netlink_parms(): no params data found [ 54.291395][ T4170] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.298589][ T4170] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.307002][ T4170] device bridge_slave_0 entered promiscuous mode [ 54.318367][ T4170] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.325576][ T4170] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.333686][ T4170] device bridge_slave_1 entered promiscuous mode [ 54.373778][ T4169] chnl_net:caif_netlink_parms(): no params data found [ 54.398772][ T4170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.420630][ T4171] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.427906][ T4171] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.435765][ T4171] device bridge_slave_0 entered promiscuous mode [ 54.451434][ T4170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.470657][ T4171] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.477837][ T4171] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.486357][ T4171] device bridge_slave_1 entered promiscuous mode [ 54.493602][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.500625][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.508450][ T4168] device bridge_slave_0 entered promiscuous mode [ 54.543628][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.550694][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.561353][ T4168] device bridge_slave_1 entered promiscuous mode [ 54.597552][ T4170] team0: Port device team_slave_0 added [ 54.607463][ T4174] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.614713][ T4174] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.623058][ T4174] device bridge_slave_0 entered promiscuous mode [ 54.632127][ T4171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.641223][ T4174] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.649458][ T4174] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.657449][ T4174] device bridge_slave_1 entered promiscuous mode [ 54.672451][ T4170] team0: Port device team_slave_1 added [ 54.679725][ T4168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.693804][ T4168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.704194][ T4171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.779111][ T4171] team0: Port device team_slave_0 added [ 54.786624][ T4174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.798134][ T4174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.808211][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.815336][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.841361][ T4170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.853725][ T4169] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.860786][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.868610][ T4169] device bridge_slave_0 entered promiscuous mode [ 54.877842][ T4168] team0: Port device team_slave_0 added [ 54.886259][ T4168] team0: Port device team_slave_1 added [ 54.893222][ T4171] team0: Port device team_slave_1 added [ 54.911881][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.918939][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.945666][ T4170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.956951][ T4169] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.964174][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.971777][ T4169] device bridge_slave_1 entered promiscuous mode [ 54.995085][ T4174] team0: Port device team_slave_0 added [ 55.022416][ T4174] team0: Port device team_slave_1 added [ 55.028614][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.035710][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.061703][ T4171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.073738][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.080679][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.106715][ T4171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.125635][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.132771][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.158732][ T4168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.194992][ T4169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.204811][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.211759][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.237938][ T4168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.260748][ T4174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.267813][ T4174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.293887][ T4174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.314988][ T4169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.339354][ T4174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.346685][ T4174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.372642][ T4174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.389637][ T4170] device hsr_slave_0 entered promiscuous mode [ 55.396476][ T4170] device hsr_slave_1 entered promiscuous mode [ 55.413713][ T4169] team0: Port device team_slave_0 added [ 55.431751][ T4171] device hsr_slave_0 entered promiscuous mode [ 55.438446][ T4171] device hsr_slave_1 entered promiscuous mode [ 55.445520][ T4171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.453757][ T4171] Cannot create hsr debugfs directory [ 55.469353][ T4169] team0: Port device team_slave_1 added [ 55.528671][ T4168] device hsr_slave_0 entered promiscuous mode [ 55.535621][ T4168] device hsr_slave_1 entered promiscuous mode [ 55.542414][ T4168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.549953][ T4168] Cannot create hsr debugfs directory [ 55.565207][ T4174] device hsr_slave_0 entered promiscuous mode [ 55.571782][ T4174] device hsr_slave_1 entered promiscuous mode [ 55.578425][ T4174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.585993][ T4174] Cannot create hsr debugfs directory [ 55.606997][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.614146][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.640265][ T4169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.652985][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.659919][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.686100][ T4169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.803028][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 55.809829][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 55.816826][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 55.823058][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 55.837359][ T4169] device hsr_slave_0 entered promiscuous mode [ 55.844692][ T4169] device hsr_slave_1 entered promiscuous mode [ 55.851548][ T4169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.859159][ T4169] Cannot create hsr debugfs directory [ 55.892260][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 56.013707][ T4170] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.025415][ T4170] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.044966][ T4170] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.056189][ T4170] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.093747][ T4171] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.102884][ T4171] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.114371][ T4171] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.123786][ T4171] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.194183][ T4174] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.204884][ T4174] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.228913][ T4174] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.239953][ T4174] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.258308][ T4170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.286308][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.296190][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.321334][ T4170] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.355221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.364578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.374252][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.381391][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.389931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.405719][ T4168] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.416292][ T4168] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.434268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.445023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.453600][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.460632][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.483416][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.491957][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.508636][ T4171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.517947][ T4168] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.527047][ T4168] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.553016][ T4171] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.579728][ T4174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.587370][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.595892][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.603678][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.613319][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.621619][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.628694][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.637472][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.646495][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.654954][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.661993][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.669700][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.682407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.691960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.704093][ T4169] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.717005][ T4169] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.728661][ T4169] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.740206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.748648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.763355][ T4169] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.780847][ T4174] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.793776][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.803948][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.812696][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.820970][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.829014][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.837041][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.845445][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.855793][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.866112][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.887243][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.895580][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.905777][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.914902][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.923886][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.932898][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.939943][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.947781][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.958070][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.967984][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.993375][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.001906][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.019481][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.028814][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.037738][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.046655][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.053743][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.083798][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.093083][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.101878][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.110657][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.134019][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.156336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.166279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.219698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.245099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.255236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.267141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.276155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.285084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.293795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.304693][ T4174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.317048][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.350265][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.378282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.400332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.435056][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.444610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.458082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.489728][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.506396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.518699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.527485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.536900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.545710][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.552814][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.579024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.589190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.602751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.611409][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.618511][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.627878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.636690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.647031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.655542][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.662597][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.674635][ T4171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.695292][ T4170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.707696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.716425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.726702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.736415][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.743514][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.752915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.761428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.769209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.776956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.785920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.794602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.805426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.814504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.824848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.840489][ T4168] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.851477][ T4168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.873605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.881592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.892013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.892553][ T4245] Bluetooth: hci4: command 0x041b tx timeout [ 57.908173][ T4245] Bluetooth: hci3: command 0x041b tx timeout [ 57.908237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.917645][ T4245] Bluetooth: hci2: command 0x041b tx timeout [ 57.931669][ T4245] Bluetooth: hci0: command 0x041b tx timeout [ 57.944907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.953800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.962341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.970565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.979021][ T4245] Bluetooth: hci1: command 0x041b tx timeout [ 57.980390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.995374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.003198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.013830][ T4174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.033602][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.044468][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.082630][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.091261][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.100801][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.110895][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.120781][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.130304][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.146014][ T4170] device veth0_vlan entered promiscuous mode [ 58.167761][ T4169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.179114][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.188913][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.199791][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.209681][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.218146][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.226712][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.235728][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.245262][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.253476][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.278742][ T4170] device veth1_vlan entered promiscuous mode [ 58.299936][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.313613][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.323556][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.333056][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.340550][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.358775][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.368204][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.390414][ T4174] device veth0_vlan entered promiscuous mode [ 58.408564][ T4171] device veth0_vlan entered promiscuous mode [ 58.422845][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.431658][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.457037][ T4174] device veth1_vlan entered promiscuous mode [ 58.488433][ T4171] device veth1_vlan entered promiscuous mode [ 58.505077][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.517855][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.526019][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.534973][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.565577][ T4170] device veth0_macvtap entered promiscuous mode [ 58.576732][ T4170] device veth1_macvtap entered promiscuous mode [ 58.590117][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.599209][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.608772][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.618122][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.628070][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.637105][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.659345][ T4174] device veth0_macvtap entered promiscuous mode [ 58.669488][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.679612][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.697043][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.714038][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.723001][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.730444][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.738242][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.747583][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.760776][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.785067][ T4174] device veth1_macvtap entered promiscuous mode [ 58.793349][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.801316][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.810041][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.819125][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.828279][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.839355][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.860120][ T4171] device veth0_macvtap entered promiscuous mode [ 58.867981][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.880372][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.889515][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.898749][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.907320][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.916716][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.925309][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.938049][ T4168] device veth0_vlan entered promiscuous mode [ 58.947389][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.958132][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.970254][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.981847][ T4171] device veth1_macvtap entered promiscuous mode [ 58.991171][ T4170] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.000406][ T4170] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.009641][ T4170] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.018383][ T4170] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.033635][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.041540][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.050861][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.061869][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.074380][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.085494][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.106234][ T4168] device veth1_vlan entered promiscuous mode [ 59.120023][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.128351][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.139038][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.147739][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.156698][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.181385][ T4169] device veth0_vlan entered promiscuous mode [ 59.193991][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.202940][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.211549][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.219436][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.230550][ T4174] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.240089][ T4174] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.250316][ T4174] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.259153][ T4174] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.277004][ T4169] device veth1_vlan entered promiscuous mode [ 59.309934][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.320114][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.329442][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.338011][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.352729][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.365072][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.375388][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.386072][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.397467][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.419620][ T4168] device veth0_macvtap entered promiscuous mode [ 59.429038][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.437360][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.445996][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.479270][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.490384][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.501038][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.511610][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.526159][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.540934][ T4168] device veth1_macvtap entered promiscuous mode [ 59.551932][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.561653][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.574092][ T4171] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.583622][ T4171] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.592588][ T4171] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.601273][ T4171] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.624241][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.629701][ T4169] device veth0_macvtap entered promiscuous mode [ 59.650742][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.658860][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.667237][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.676012][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.684407][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.700734][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.711322][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.721826][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.732833][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.743677][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.754398][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.765947][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.799814][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.809152][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.820081][ T4169] device veth1_macvtap entered promiscuous mode [ 59.847538][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.861094][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.864113][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.880914][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.891736][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.902467][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.912531][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.923228][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.934576][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.944248][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.953618][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.961403][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.970436][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.979400][ T24] Bluetooth: hci0: command 0x040f tx timeout [ 59.985980][ T24] Bluetooth: hci2: command 0x040f tx timeout [ 59.992387][ T24] Bluetooth: hci3: command 0x040f tx timeout [ 59.999243][ T4168] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.008315][ T24] Bluetooth: hci4: command 0x040f tx timeout [ 60.009621][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.014753][ T4168] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.031742][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.036850][ T4168] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.048675][ T4245] Bluetooth: hci1: command 0x040f tx timeout [ 60.049036][ T4168] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.069007][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.080072][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.090235][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.100945][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.111161][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.121852][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.133553][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.144017][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.157059][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.168296][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.177748][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.186654][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.232419][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.237919][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.251760][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.252157][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.276532][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.293792][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.307425][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.320381][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.330920][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.341636][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.353329][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.370753][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.379825][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.390864][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.424204][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.435613][ T4287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 60.444959][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.446481][ T1436] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.465406][ T4169] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.489103][ T4169] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.503385][ T4169] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.515827][ T4169] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.664559][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.674047][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.746410][ T4289] loop1: detected capacity change from 0 to 128 [ 60.866986][ T4289] ======================================================= [ 60.866986][ T4289] WARNING: The mand mount option has been deprecated and [ 60.866986][ T4289] and is ignored by this kernel. Remove the mand [ 60.866986][ T4289] option from the mount to silence this warning. [ 60.866986][ T4289] ======================================================= [ 60.926188][ T4289] EXT4-fs (loop1): Test dummy encryption mode enabled [ 60.933937][ T4289] EXT4-fs (loop1): Test dummy encryption mode enabled [ 61.103987][ T4289] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 61.120199][ T4289] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 61.235334][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.244618][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.258886][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.393367][ T1436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.399473][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.401313][ T1436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.427299][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.459902][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.461565][ T4297] loop0: detected capacity change from 0 to 1024 [ 61.505160][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.537429][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.692442][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 61.714738][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 61.723862][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 61.732994][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 61.742125][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 61.752411][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 61.764880][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 61.774031][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 61.785706][ T4299] loop3: detected capacity change from 0 to 128 [ 61.792134][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 61.801746][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 61.805375][ T4297] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 61.898434][ T4297] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.043348][ T4292] Bluetooth: hci4: command 0x0419 tx timeout [ 62.052836][ T4292] Bluetooth: hci3: command 0x0419 tx timeout [ 62.095974][ T4292] Bluetooth: hci2: command 0x0419 tx timeout [ 62.153891][ T4292] Bluetooth: hci0: command 0x0419 tx timeout [ 62.209422][ T4292] Bluetooth: hci1: command 0x0419 tx timeout [ 62.314738][ T4297] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 62.419203][ T4297] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 62.454544][ T4297] EXT4-fs (loop0): This should not happen!! Data will be lost [ 62.454544][ T4297] [ 62.486238][ T4297] EXT4-fs (loop0): Total free blocks count 0 [ 62.508897][ T4297] EXT4-fs (loop0): Free/Dirty block details [ 62.538538][ T4297] EXT4-fs (loop0): free_blocks=4293918720 [ 62.571336][ T4297] EXT4-fs (loop0): dirty_blocks=64 [ 62.582703][ T4256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.594232][ T4256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.604951][ T4297] EXT4-fs (loop0): Block reservation details [ 62.610961][ T4297] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 62.629979][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.674186][ T4299] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,acl,,errors=continue. Quota mode: writeback. [ 62.686840][ T4299] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 63.259928][ T4315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'. [ 63.671758][ T4320] loop4: detected capacity change from 0 to 512 [ 64.778881][ T4324] loop1: detected capacity change from 0 to 1024 [ 65.289961][ T4320] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,data_err=abort,,errors=continue. Quota mode: writeback. [ 65.307463][ T4337] loop3: detected capacity change from 0 to 2048 [ 65.365128][ T4320] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.448293][ T4337] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 65.512572][ T4332] hfsplus: b-tree write err: -5, ino 4 [ 65.526611][ T4337] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 65.533170][ T4320] EXT4-fs error (device loop4): ext4_do_update_inode:5204: inode #2: comm syz.4.9: corrupted inode contents [ 65.700746][ T4320] EXT4-fs error (device loop4): ext4_dirty_inode:6040: inode #2: comm syz.4.9: mark_inode_dirty error [ 65.839792][ T4344] loop2: detected capacity change from 0 to 1024 [ 66.360339][ T4320] EXT4-fs error (device loop4): ext4_do_update_inode:5204: inode #2: comm syz.4.9: corrupted inode contents [ 66.452674][ T4320] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz.4.9: mark_inode_dirty error [ 67.312254][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 67.431767][ T4354] loop3: detected capacity change from 0 to 512 [ 67.489120][ T4352] loop2: detected capacity change from 0 to 128 [ 67.561985][ T4354] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 67.583201][ T4357] loop1: detected capacity change from 0 to 256 [ 67.623488][ T4354] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 67.647513][ T4354] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 67.827245][ T4357] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 67.827404][ T4354] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c11c, mo2=0002] [ 67.843124][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.890524][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.959905][ T21] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 67.976155][ T21] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 67.987034][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.021892][ T4354] System zones: 1-12 [ 68.069638][ T21] usb 1-1: config 0 descriptor?? [ 68.081467][ T4354] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2228: inode #15: comm syz.3.18: corrupted in-inode xattr [ 68.119852][ T4354] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.18: couldn't read orphan inode 15 (err -117) [ 68.468867][ T4354] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,grpid,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000009,debug,usrjquota=,nolazytime,mblk_io_submit,,errors=continue. Quota mode: none. [ 68.613636][ T4365] loop1: detected capacity change from 0 to 2048 [ 68.690533][ T21] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 68.743050][ T21] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 68.763062][ T4226] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 68.800080][ T4160] loop1: p1 < > p3 p4 < > [ 68.811320][ T4160] loop1: p3 start 4284289 is beyond EOD, truncated [ 69.255742][ T3546] ODEBUG: Out of memory. ODEBUG disabled [ 69.339052][ T4365] loop1: p1 < > p3 p4 < > [ 69.374241][ T4365] loop1: p3 start 4284289 is beyond EOD, truncated [ 69.452125][ T4226] usb 5-1: Using ep0 maxpacket: 16 [ 69.479435][ T1108] usb 1-1: USB disconnect, device number 2 [ 69.636369][ T4370] fido_id[4370]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 70.155469][ T4187] udevd[4187]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 70.304244][ T4226] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.315351][ T4226] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 70.345260][ T4160] udevd[4160]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 70.393789][ T4375] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.484244][ T4290] attempt to access beyond end of device [ 70.484244][ T4290] loop2: rw=1, want=1041, limit=128 [ 70.497688][ T4378] capability: warning: `syz.3.24' uses deprecated v2 capabilities in a way that may be insecure [ 70.508550][ T4226] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 70.523404][ T4226] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.531415][ T4226] usb 5-1: Product: syz [ 70.545426][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 70.548526][ T4160] udevd[4160]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 70.579568][ T4226] usb 5-1: Manufacturer: syz [ 70.592191][ T4226] usb 5-1: SerialNumber: syz [ 70.664665][ T4384] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 70.683375][ T4384] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 70.837092][ T21] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 70.857331][ T4361] loop4: detected capacity change from 0 to 16 [ 71.310025][ T4400] binder: 4389:4400 ioctl 400c620e 200000000000 returned -22 [ 71.386365][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.399660][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.442735][ T4361] erofs: (device loop4): mounted with root inode @ nid 36. [ 71.484139][ T26] audit: type=1800 audit(1751511206.667:2): pid=4361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.17" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 71.514156][ T4403] loop1: detected capacity change from 0 to 164 [ 71.535601][ T4403] ISOFS: Bad logical zone size 25856 [ 71.704897][ T4405] loop3: detected capacity change from 0 to 128 [ 71.742652][ T4226] usb 5-1: 0:2 : does not exist [ 71.808322][ T4226] usb 5-1: USB disconnect, device number 2 [ 71.822390][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.836163][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.841220][ T4407] loop2: detected capacity change from 0 to 256 [ 71.846253][ T21] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 71.865678][ T21] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 71.874953][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.913175][ T21] usb 1-1: config 0 descriptor?? [ 71.913898][ T4405] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,,errors=continue. Quota mode: none. [ 71.946929][ T4414] loop1: detected capacity change from 0 to 512 [ 71.959709][ T4405] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.981297][ T4405] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.32: No space for directory leaf checksum. Please run e2fsck -D. [ 71.997157][ T4405] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.32: checksumming directory block 0 [ 72.022454][ T4414] EXT4-fs (loop1): invalid first ino: 6 [ 72.033433][ T4407] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 255103877513218) [ 72.154070][ T4160] udevd[4160]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 72.198927][ T4418] loop2: detected capacity change from 0 to 512 [ 72.299483][ T4418] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 72.310765][ T4418] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.351923][ T4418] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 72.382201][ T4418] EXT4-fs error (device loop2): __ext4_new_inode:1351: inode #18: comm syz.2.37: mark_inode_dirty error [ 72.437422][ T4214] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 72.462701][ T4418] EXT4-fs error (device loop2) in __ext4_new_inode:1353: Corrupt filesystem [ 72.479475][ T4418] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 72.504460][ T4418] EXT4-fs error (device loop2): ext4_evict_inode:282: inode #18: comm syz.2.37: mark_inode_dirty error [ 72.528442][ T21] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 72.531273][ T4418] EXT4-fs warning (device loop2): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 72.712190][ T4214] usb 4-1: Using ep0 maxpacket: 16 [ 72.842540][ T4214] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 72.873355][ T4214] usb 4-1: config 1 has an invalid interface number: 4 but max is 0 [ 72.929452][ T4214] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 72.995407][ T4214] usb 4-1: config 1 has no interface number 0 [ 73.037953][ T4214] usb 4-1: config 1 has no interface number 1 [ 73.089601][ T4214] usb 4-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 73.140123][ T21] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 73.186631][ T21] usb 1-1: USB disconnect, device number 3 [ 73.238519][ T4214] usb 4-1: config 1 interface 4 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 73.249077][ T4214] usb 4-1: config 1 interface 4 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 73.289618][ T4214] usb 4-1: config 1 interface 105 has no altsetting 0 [ 73.312208][ T4214] usb 4-1: config 1 interface 4 has no altsetting 0 [ 73.365405][ T4431] loop4: detected capacity change from 0 to 128 [ 73.389821][ T4428] fido_id[4428]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 73.413512][ T4431] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 73.444436][ T4431] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 73.456131][ T4429] loop1: detected capacity change from 0 to 8192 [ 73.472443][ T4214] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 73.494606][ T4214] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.517062][ T4214] usb 4-1: Product: syz [ 73.521289][ T4214] usb 4-1: Manufacturer: syz [ 73.534151][ T4214] usb 4-1: SerialNumber: syz [ 74.012175][ T21] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 74.387137][ T4441] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 74.395733][ T4441] FAT-fs (loop1): Filesystem has been set read-only [ 74.494997][ T4214] aqc111: probe of 4-1:1.105 failed with error -22 [ 74.507100][ T4436] loop2: detected capacity change from 0 to 1024 [ 74.743935][ T4245] usb 4-1: USB disconnect, device number 2 [ 74.795988][ T21] usb 5-1: Using ep0 maxpacket: 8 [ 74.820515][ T4446] loop1: detected capacity change from 0 to 2048 [ 74.952409][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 202, changing to 11 [ 74.969665][ T4449] loop2: detected capacity change from 0 to 512 [ 74.982321][ T21] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 75.005905][ T21] usb 5-1: New USB device found, idVendor=056a, idProduct=0301, bcdDevice= 0.00 [ 75.007350][ T4290] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.021208][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.060820][ T21] usb 5-1: config 0 descriptor?? [ 75.075297][ T4449] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 75.146611][ T4290] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.146899][ T4449] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,stripe=0x00000000000000c4,usrjquota=,mblk_io_submit,nogrpid,usrjquota=,,errors=continue. Quota mode: none. [ 75.316426][ T4290] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.395353][ T4290] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.596265][ T21] wacom 0003:056A:0301.0003: Unknown device_type for 'HID 056a:0301'. Assuming pen. [ 75.641432][ T21] wacom 0003:056A:0301.0003: hidraw0: USB HID vff.ea Device [HID 056a:0301] on usb-dummy_hcd.4-1/input0 [ 76.633294][ T1111] cfg80211: failed to load regulatory.db [ 76.644273][ T21] input: Wacom Bamboo One M Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0301.0003/input/input6 [ 76.704234][ T4460] chnl_net:caif_netlink_parms(): no params data found [ 76.748667][ T21] usb 5-1: USB disconnect, device number 3 [ 76.911414][ T4487] loop1: detected capacity change from 0 to 1024 [ 76.965077][ T4487] EXT4-fs (loop1): Ignoring removed nobh option [ 76.991796][ T4487] EXT4-fs (loop1): Ignoring removed bh option [ 76.997361][ T4480] fido_id[4480]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 77.034186][ T4460] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.041268][ T4460] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.052996][ T4498] netlink: 60 bytes leftover after parsing attributes in process `syz.3.58'. [ 77.064512][ T4487] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,data_err=abort,barrier=0x0000000000000007,dioread_lock,data_err=ignore,max_dir_size_kb=0x0000000000000010,data_err=ignore,grpquota,nobh,user_xattr,bh,nojournal_checksum,. Quota mode: writeback. [ 77.129716][ T4460] device bridge_slave_0 entered promiscuous mode [ 77.136406][ T4245] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 77.321128][ T4460] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.333936][ T4460] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.362003][ T4460] device bridge_slave_1 entered promiscuous mode [ 77.402949][ T4506] loop3: detected capacity change from 0 to 2048 [ 77.488533][ T4325] Bluetooth: hci3: command 0x0409 tx timeout [ 77.494949][ T4460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.504554][ T4506] UDF-fs: bad mount option "" or missing value [ 77.573522][ T4506] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 77.583004][ T4245] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.600316][ T4245] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.610733][ T4245] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 77.630835][ T4245] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 77.640611][ T4245] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.679227][ T4245] usb 3-1: config 0 descriptor?? [ 77.768476][ T4460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.964618][ T4460] team0: Port device team_slave_0 added [ 77.978890][ T4519] loop1: detected capacity change from 0 to 1024 [ 77.986221][ T4515] netlink: 28 bytes leftover after parsing attributes in process `syz.4.63'. [ 78.005304][ T4515] netlink: 28 bytes leftover after parsing attributes in process `syz.4.63'. [ 78.047173][ T4515] Zero length message leads to an empty skb [ 78.057124][ T4460] team0: Port device team_slave_1 added [ 78.106610][ T4521] netlink: 12 bytes leftover after parsing attributes in process `syz.3.65'. [ 78.168990][ T4523] loop1: detected capacity change from 0 to 256 [ 78.184461][ T4245] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 79.278397][ T4460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.288778][ T4460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.316965][ T4245] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 79.320975][ T4460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.341585][ T4460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.350046][ T4460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.378543][ T4460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.444106][ T4245] usb 3-1: USB disconnect, device number 2 [ 79.505271][ T4534] fido_id[4534]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 79.545707][ T4523] kvm [4522]: vcpu0, guest rIP: 0x161 disabled perfctr wrmsr: 0xc2 data 0x400 [ 79.585162][ T4325] Bluetooth: hci3: command 0x041b tx timeout [ 79.660123][ T4460] device hsr_slave_0 entered promiscuous mode [ 79.725689][ T4460] device hsr_slave_1 entered promiscuous mode [ 79.742731][ T4460] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.750313][ T4460] Cannot create hsr debugfs directory [ 80.037740][ T1108] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 80.412423][ T1108] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 81.495742][ T1108] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.512128][ T1108] usb 4-1: config 0 interface 0 has no altsetting 0 [ 81.518913][ T1108] usb 4-1: New USB device found, idVendor=056a, idProduct=00d1, bcdDevice= 0.00 [ 81.528913][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.545862][ T4575] loop4: detected capacity change from 0 to 1024 [ 81.555333][ T1108] usb 4-1: config 0 descriptor?? [ 81.658311][ T1111] Bluetooth: hci3: command 0x040f tx timeout [ 81.737846][ T4290] device hsr_slave_0 left promiscuous mode [ 81.791390][ T4290] device hsr_slave_1 left promiscuous mode [ 81.800727][ T4290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.830291][ T4290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.902692][ T4290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.928505][ T4290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.949871][ T4290] device bridge_slave_1 left promiscuous mode [ 81.967988][ T4290] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.035583][ T1108] wacom 0003:056A:00D1.0005: Unknown device_type for 'HID 056a:00d1'. Assuming pen. [ 82.064866][ T4290] device bridge_slave_0 left promiscuous mode [ 82.077708][ T1108] wacom 0003:056A:00D1.0005: hidraw0: USB HID v0.00 Device [HID 056a:00d1] on usb-dummy_hcd.3-1/input0 [ 82.098915][ T4290] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.130236][ T1108] input: Wacom Bamboo 2FG 4x5 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00D1.0005/input/input9 [ 82.172315][ T4602] loop4: detected capacity change from 0 to 1024 [ 82.207474][ T4290] device veth1_macvtap left promiscuous mode [ 82.236143][ T4325] usb 4-1: USB disconnect, device number 3 [ 82.273940][ T4290] device veth0_macvtap left promiscuous mode [ 82.280048][ T4290] device veth1_vlan left promiscuous mode [ 82.332618][ T4290] device veth0_vlan left promiscuous mode [ 82.383150][ T4607] fido_id[4607]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 82.419023][ T4602] EXT4-fs (loop4): Test dummy encryption mode enabled [ 82.429702][ T4602] EXT4-fs (loop4): Test dummy encryption mode enabled [ 82.498272][ T4602] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,barrier=0x00000000000003ff,acl,stripe=0x0000000000000009,norecovery,test_dummy_encryption,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 83.371141][ T4635] loop1: detected capacity change from 0 to 512 [ 83.486013][ T4635] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 83.504596][ T4635] EXT4-fs (loop1): Unrecognized mount option "seclabel" or missing value [ 83.600188][ T4290] team0 (unregistering): Port device team_slave_1 removed [ 83.612378][ T4637] loop3: detected capacity change from 0 to 1024 [ 83.630094][ T4641] loop4: detected capacity change from 0 to 164 [ 83.713851][ T4290] team0 (unregistering): Port device team_slave_0 removed [ 83.722417][ T1111] Bluetooth: hci3: command 0x0419 tx timeout [ 83.746438][ T4290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.779887][ T4290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.479054][ T4290] bond0 (unregistering): Released all slaves [ 84.503954][ T4330] hfsplus: b-tree write err: -5, ino 4 [ 84.561412][ T4653] loop1: detected capacity change from 0 to 16 [ 84.596283][ T4653] erofs: (device loop1): mounted with root inode @ nid 36. [ 84.619307][ T26] audit: type=1800 audit(1751511219.797:3): pid=4653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.103" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 84.706605][ T4657] loop4: detected capacity change from 0 to 764 [ 84.788093][ T4662] loop2: detected capacity change from 0 to 512 [ 84.813920][ T4657] rock: directory entry would overflow storage [ 84.821407][ T4657] rock: sig=0x4654, size=5, remaining=4 [ 84.860489][ T4664] loop1: detected capacity change from 0 to 128 [ 84.885921][ T4662] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 84.968403][ T4662] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.106: invalid indirect mapped block 10 (level 1) [ 85.878740][ T4662] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.106: invalid indirect mapped block 8 (level 1) [ 85.923360][ T4662] EXT4-fs (loop2): 1 truncate cleaned up [ 85.942140][ T4662] EXT4-fs (loop2): mounted filesystem without journal. Opts: mblk_io_submit,resuid=0x000000000000ee00,,errors=continue. Quota mode: none. [ 85.948389][ T4460] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.200118][ T4460] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.403526][ T4460] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.476663][ T4668] process 'syz.4.108' launched './bus' with NULL argv: empty string added [ 86.496932][ T4460] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.620957][ T4685] loop3: detected capacity change from 0 to 1024 [ 87.522761][ T154] hfsplus: b-tree write err: -5, ino 4 [ 87.551723][ T4460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.649504][ T4706] loop4: detected capacity change from 0 to 764 [ 87.677803][ T4460] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.693286][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.708477][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.782311][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.803266][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.045400][ T4714] loop2: detected capacity change from 0 to 1024 [ 88.582519][ T4701] Symlink component flag not implemented [ 88.619374][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.626484][ T4332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.665319][ T4701] Symlink component flag not implemented (7) [ 88.745454][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.775056][ T4701] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 88.803061][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.819031][ T4714] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 88.834172][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.858704][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.865824][ T4332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.897447][ T4714] hfsplus: filesystem is marked journaled, leaving read-only. [ 88.912749][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.956136][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.029217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.064628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.097874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.165658][ T4732] loop2: detected capacity change from 0 to 256 [ 89.171731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.201887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.251181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.255325][ T4732] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 89.296376][ T4460] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.328307][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.362207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.370649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.422809][ T4730] loop4: detected capacity change from 0 to 8192 [ 89.453381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.232949][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.240458][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.347341][ T4460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.784283][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.801060][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.249895][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 92.262503][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.276758][ T4770] loop2: detected capacity change from 0 to 128 [ 92.305734][ T4460] device veth0_vlan entered promiscuous mode [ 92.324506][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.356320][ T4772] user requested TSC rate below hardware speed [ 92.372192][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.405952][ T4460] device veth1_vlan entered promiscuous mode [ 92.453732][ T4460] device veth0_macvtap entered promiscuous mode [ 92.498205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 92.503572][ T4780] loop1: detected capacity change from 0 to 512 [ 92.526100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 92.546818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.554058][ T4770] loop2: detected capacity change from 0 to 1764 [ 92.577906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.623735][ T4460] device veth1_macvtap entered promiscuous mode [ 92.636447][ T4780] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 92.699288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.725146][ T26] audit: type=1326 audit(1751511227.907:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4785 comm="syz.3.134" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7b2190a929 code=0x0 [ 92.733182][ T4780] EXT4-fs (loop1): orphan cleanup on readonly fs [ 92.758106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.794345][ T4460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.832746][ T4780] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.132: casefold flag without casefold feature [ 92.852880][ T4460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.863412][ T4460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.874468][ T4460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.893986][ T4460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.904803][ T4460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.915211][ T4460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.926248][ T4780] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.132: couldn't read orphan inode 15 (err -117) [ 92.938727][ T4460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.948778][ T4780] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 92.971816][ T4460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.003831][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.046743][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.100288][ T4460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.139637][ T4460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.174233][ T4460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.247692][ T4460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.277298][ T4460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.301771][ T4460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.357740][ T4460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.401293][ T4460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.438729][ T4460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.470057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.517276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.579270][ T4460] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.619290][ T4460] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.656741][ T4460] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.691522][ T4460] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.771108][ T4824] loop3: detected capacity change from 0 to 512 [ 93.840186][ T4325] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 94.408317][ T4824] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 94.532748][ T4824] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 94.682775][ T4325] usb 3-1: Using ep0 maxpacket: 16 [ 94.780079][ T4824] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 94.801171][ T4824] EXT4-fs (loop3): 1 truncate cleaned up [ 94.807301][ T4824] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,resgid=0x0000000000000000,mb_optimize_scan=0x0000000000000001,quota,. Quota mode: writeback. [ 94.941163][ T4160] udevd[4160]: incorrect jbd checksum on /dev/loop3 [ 94.952448][ T4325] usb 3-1: config 0 has an invalid interface number: 213 but max is 0 [ 94.960646][ T4325] usb 3-1: config 0 has no interface number 0 [ 94.969555][ T4824] EXT4-fs error (device loop3): __ext4_get_inode_loc:4321: comm syz.3.142: Invalid inode table block 0 in block_group 0 [ 94.969945][ T4298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.022182][ T4325] usb 3-1: config 0 interface 213 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 95.022491][ T4298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.049375][ T4824] EXT4-fs (loop3): Remounting filesystem read-only [ 95.064597][ T4325] usb 3-1: config 0 interface 213 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 95.096921][ T4159] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 95.113406][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 95.122684][ T4159] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 95.150214][ T4159] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 95.169658][ T4174] EXT4-fs warning (device loop3): ext4_dirblock_csum_set:427: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 95.198217][ T4159] hid-generic 0000:0004:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 95.223739][ T4174] EXT4-fs error (device loop3): __ext4_get_inode_loc:4321: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 95.235405][ T4256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.269789][ T4256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.312347][ T4325] usb 3-1: New USB device found, idVendor=0499, idProduct=105c, bcdDevice=c5.ad [ 95.321413][ T4325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.334586][ T4174] EXT4-fs (loop3): Remounting filesystem read-only [ 95.340431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.341290][ T4174] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 95.387087][ T4325] usb 3-1: Product: syz [ 95.397097][ T4325] usb 3-1: Manufacturer: syz [ 95.419362][ T4325] usb 3-1: SerialNumber: syz [ 95.430601][ T4174] EXT4-fs (loop3): Remounting filesystem read-only [ 95.442834][ T4325] usb 3-1: config 0 descriptor?? [ 95.452954][ T4174] EXT4-fs error (device loop3): __ext4_unlink:3327: inode #2: comm syz-executor: mark_inode_dirty error [ 95.466014][ T4808] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 95.471115][ T4838] fido_id[4838]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 95.498768][ T4174] EXT4-fs (loop3): Remounting filesystem read-only [ 95.746137][ T4325] snd-usb-audio: probe of 3-1:0.213 failed with error -2 [ 95.815333][ T4160] udevd[4160]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.213/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.817902][ T4325] usb 3-1: USB disconnect, device number 3 [ 96.014676][ T4290] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.106533][ T4290] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.201872][ T4290] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.343898][ T4290] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.026514][ T4878] loop1: detected capacity change from 0 to 512 [ 98.170120][ T4878] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 98.278896][ T4878] EXT4-fs (loop1): 1 truncate cleaned up [ 98.290479][ T4878] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,dioread_lock,quota,,errors=continue. Quota mode: writeback. [ 98.374101][ T4891] loop2: detected capacity change from 0 to 1024 [ 98.506054][ T4891] EXT4-fs (loop2): Ignoring removed nobh option [ 98.543380][ T4891] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 98.701674][ T4891] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.157: bad orphan inode 32767 [ 98.714047][ T4891] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,lazytime,dioread_lock,dioread_lock,resgid=0x0000000000000000,jqfmt=vfsv0,dioread_nolock,nobh,user_xattr,mb_optimize_scan=0x0000000000000000,auto_da_alloc=0x0000000000000005,,errors=continue. Quota mode: none. [ 98.802601][ T4891] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: none. [ 98.894677][ T4290] device hsr_slave_0 left promiscuous mode [ 98.904826][ T4290] device hsr_slave_1 left promiscuous mode [ 98.916037][ T4290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.971907][ T4290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.031604][ T4290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.040068][ T4290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.051870][ T4290] device bridge_slave_1 left promiscuous mode [ 99.060075][ T4290] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.071298][ T4290] device bridge_slave_0 left promiscuous mode [ 99.114127][ T4290] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.211041][ T4290] device veth1_macvtap left promiscuous mode [ 99.243461][ T4290] device veth0_macvtap left promiscuous mode [ 99.262364][ T4290] device veth1_vlan left promiscuous mode [ 99.268179][ T4290] device veth0_vlan left promiscuous mode [ 100.446253][ T4230] Bluetooth: hci4: command 0x0409 tx timeout [ 100.691132][ T4948] loop1: detected capacity change from 0 to 1024 [ 100.889061][ T4948] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 100.920254][ T4945] xt_TPROXY: Can be used only with -p tcp or -p udp [ 100.995407][ T4290] team0 (unregistering): Port device team_slave_1 removed [ 101.009632][ T4290] team0 (unregistering): Port device team_slave_0 removed [ 101.021783][ T4290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.062500][ T4290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.196131][ T4290] bond0 (unregistering): Released all slaves [ 101.379295][ T4960] loop4: detected capacity change from 0 to 1024 [ 102.527518][ T4960] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 102.555218][ T4888] chnl_net:caif_netlink_parms(): no params data found [ 102.560835][ T4960] hfsplus: xattr searching failed [ 102.922301][ T4226] Bluetooth: hci4: command 0x041b tx timeout [ 102.981958][ T4888] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.036794][ T4888] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.055880][ T4991] loop4: detected capacity change from 0 to 512 [ 103.087074][ T4888] device bridge_slave_0 entered promiscuous mode [ 103.094061][ T4993] loop1: detected capacity change from 0 to 1024 [ 103.109475][ T4888] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.152738][ T4888] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.192929][ T4991] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 103.227288][ T4888] device bridge_slave_1 entered promiscuous mode [ 103.305735][ T4991] EXT4-fs (loop4): 1 truncate cleaned up [ 103.311414][ T4991] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 103.361651][ T4888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.399208][ T5001] loop2: detected capacity change from 0 to 128 [ 103.458995][ T4888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.460370][ T4991] ================================================================== [ 103.476447][ T4991] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x1390/0x3d30 [ 103.484274][ T4991] Read of size 18446744073709551540 at addr ffff888078944070 by task syz.4.180/4991 [ 103.493650][ T4991] [ 103.495979][ T4991] CPU: 0 PID: 4991 Comm: syz.4.180 Not tainted 5.15.186-syzkaller #0 [ 103.505237][ T4991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 103.505266][ T4991] Call Trace: [ 103.505273][ T4991] [ 103.521734][ T4991] dump_stack_lvl+0x168/0x230 [ 103.526456][ T4991] ? show_regs_print_info+0x20/0x20 [ 103.531667][ T4991] ? _printk+0xcc/0x110 [ 103.535836][ T4991] ? load_image+0x3b0/0x3b0 [ 103.540348][ T4991] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 103.545731][ T4991] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 103.551141][ T4991] print_address_description+0x60/0x2d0 [ 103.556702][ T4991] ? ext4_xattr_set_entry+0x1390/0x3d30 [ 103.562432][ T4991] kasan_report+0xdf/0x130 [ 103.566865][ T4991] ? ext4_xattr_set_entry+0x1390/0x3d30 [ 103.572422][ T4991] ? ext4_xattr_set_entry+0x1390/0x3d30 [ 103.577984][ T4991] kasan_check_range+0x27b/0x290 [ 103.582936][ T4991] memmove+0x25/0x60 [ 103.586836][ T4991] ext4_xattr_set_entry+0x1390/0x3d30 [ 103.592217][ T4991] ? setxattr+0x2da/0x300 [ 103.596550][ T4991] ? __x64_sys_lsetxattr+0xb4/0xd0 [ 103.601660][ T4991] ? do_syscall_64+0x4c/0xa0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 103.606255][ T4991] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.612350][ T4991] ? ext4_xattr_ibody_set+0x330/0x330 [ 103.617756][ T4991] ? memcpy+0x3c/0x60 [ 103.621748][ T4991] ext4_xattr_block_set+0x973/0x2d30 [ 103.623374][ T5004] loop1: detected capacity change from 0 to 512 [ 103.627057][ T4991] ? ext4_xattr_block_find+0x500/0x500 [ 103.638740][ T4991] ext4_xattr_set_handle+0xba5/0x12b0 [ 103.644138][ T4991] ? ext4_xattr_set_entry+0x3d30/0x3d30 [ 103.649699][ T4991] ? __ext4_journal_start_sb+0x1bd/0x360 [ 103.655349][ T4991] ext4_xattr_set+0x22a/0x320 [ 103.660057][ T4991] ? ext4_xattr_set_credits+0x290/0x290 [ 103.665615][ T4991] ? posix_xattr_acl+0x8f/0xb0 [ 103.670396][ T4991] ? evm_protect_xattr+0x33c/0x970 [ 103.675613][ T4991] ? ext4_xattr_trusted_get+0x40/0x40 [ 103.681000][ T4991] __vfs_setxattr+0x3e0/0x420 [ 103.685702][ T4991] __vfs_setxattr_noperm+0x129/0x5e0 [ 103.691008][ T4991] vfs_setxattr+0x168/0x2f0 [ 103.695540][ T4991] ? xattr_permission+0x500/0x500 [ 103.700596][ T4991] ? _copy_from_user+0x111/0x170 [ 103.705543][ T4991] ? setxattr+0x243/0x300 [ 103.709881][ T4991] setxattr+0x2da/0x300 [ 103.714043][ T4991] ? path_setxattr+0x280/0x280 [ 103.718839][ T4991] ? __mnt_want_write+0x1e2/0x260 [ 103.723879][ T4991] path_setxattr+0x142/0x280 [ 103.728478][ T4991] ? simple_xattr_list_add+0xf0/0xf0 [ 103.733778][ T4991] ? lock_chain_count+0x20/0x20 [ 103.738637][ T4991] ? vtime_user_exit+0x2dc/0x400 [ 103.743590][ T4991] __x64_sys_lsetxattr+0xb4/0xd0 [ 103.748536][ T4991] do_syscall_64+0x4c/0xa0 [ 103.752950][ T4991] ? clear_bhb_loop+0x30/0x80 [ 103.757623][ T4991] ? clear_bhb_loop+0x30/0x80 [ 103.762296][ T4991] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.768202][ T4991] RIP: 0033:0x7f18b7b2f929 [ 103.772620][ T4991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.792234][ T4991] RSP: 002b:00007f18b5997038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 103.800664][ T4991] RAX: ffffffffffffffda RBX: 00007f18b7d56fa0 RCX: 00007f18b7b2f929 [ 103.808647][ T4991] RDX: 0000200000000040 RSI: 0000200000000300 RDI: 0000200000000100 [ 103.816622][ T4991] RBP: 00007f18b7bb1b39 R08: 0000000000000000 R09: 0000000000000000 [ 103.824595][ T4991] R10: 000000000000fe37 R11: 0000000000000246 R12: 0000000000000000 [ 103.832572][ T4991] R13: 0000000000000000 R14: 00007f18b7d56fa0 R15: 00007fffd87f1df8 [ 103.840566][ T4991] [ 103.843579][ T4991] [ 103.845896][ T4991] Allocated by task 4991: [ 103.850211][ T4991] __kasan_kmalloc+0xb5/0xf0 [ 103.854807][ T4991] kmemdup+0x22/0x50 [ 103.858696][ T4991] ext4_xattr_block_set+0x883/0x2d30 [ 103.863984][ T4991] ext4_xattr_set_handle+0xba5/0x12b0 [ 103.869362][ T4991] ext4_xattr_set+0x22a/0x320 [ 103.874037][ T4991] __vfs_setxattr+0x3e0/0x420 [ 103.878708][ T4991] __vfs_setxattr_noperm+0x129/0x5e0 [ 103.883998][ T4991] vfs_setxattr+0x168/0x2f0 [ 103.888507][ T4991] setxattr+0x2da/0x300 [ 103.892659][ T4991] path_setxattr+0x142/0x280 [ 103.897243][ T4991] __x64_sys_lsetxattr+0xb4/0xd0 [ 103.902178][ T4991] do_syscall_64+0x4c/0xa0 [ 103.906591][ T4991] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.912479][ T4991] [ 103.914801][ T4991] The buggy address belongs to the object at ffff888078944000 [ 103.914801][ T4991] which belongs to the cache kmalloc-1k of size 1024 [ 103.928881][ T4991] The buggy address is located 112 bytes inside of [ 103.928881][ T4991] 1024-byte region [ffff888078944000, ffff888078944400) [ 103.942253][ T4991] The buggy address belongs to the page: [ 103.947891][ T4991] page:ffffea0001e25000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78940 [ 103.958046][ T4991] head:ffffea0001e25000 order:3 compound_mapcount:0 compound_pincount:0 [ 103.966366][ T4991] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 103.974361][ T4991] raw: 00fff00000010200 0000000000000000 0000000100000001 ffff888016841dc0 [ 103.983034][ T4991] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 103.991608][ T4991] page dumped because: kasan: bad access detected [ 103.998021][ T4991] page_owner tracks the page as allocated [ 104.003724][ T4991] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3868, ts 26894100253, free_ts 26827296818 [ 104.022823][ T4991] get_page_from_freelist+0x1b77/0x1c60 [ 104.028381][ T4991] __alloc_pages+0x1e1/0x470 [ 104.032975][ T4991] new_slab+0xc0/0x4b0 [ 104.037049][ T4991] ___slab_alloc+0x81e/0xdf0 [ 104.041648][ T4991] __kmalloc+0x1cd/0x330 [ 104.045983][ T4991] load_elf_binary+0x279/0x2890 [ 104.050843][ T4991] bprm_execve+0xa92/0x17d0 [ 104.055360][ T4991] do_execveat_common+0x51e/0x6d0 [ 104.060390][ T4991] __x64_sys_execve+0x8e/0xa0 [ 104.065067][ T4991] do_syscall_64+0x4c/0xa0 [ 104.069499][ T4991] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.075467][ T4991] page last free stack trace: [ 104.080136][ T4991] free_unref_page_prepare+0x637/0x6c0 [ 104.085602][ T4991] free_unref_page+0x94/0x280 [ 104.090286][ T4991] __unfreeze_partials+0x1a5/0x200 [ 104.095396][ T4991] put_cpu_partial+0x12d/0x190 [ 104.100167][ T4991] qlist_free_all+0x35/0x90 [ 104.104663][ T4991] kasan_quarantine_reduce+0x150/0x160 [ 104.110121][ T4991] __kasan_slab_alloc+0x2f/0xd0 [ 104.114970][ T4991] slab_post_alloc_hook+0x4c/0x380 [ 104.120082][ T4991] __kmalloc+0x127/0x330 [ 104.124324][ T4991] tomoyo_realpath_from_path+0x118/0x610 [ 104.129955][ T4991] tomoyo_path_perm+0x1cd/0x510 [ 104.134813][ T4991] security_inode_getattr+0xcf/0x120 [ 104.140183][ T4991] vfs_getattr+0x26/0x3a0 [ 104.144507][ T4991] __x64_sys_newfstat+0x104/0x1d0 [ 104.149712][ T4991] do_syscall_64+0x4c/0xa0 [ 104.154211][ T4991] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.160102][ T4991] [ 104.162419][ T4991] Memory state around the buggy address: [ 104.168047][ T4991] ffff888078943f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 104.176245][ T4991] ffff888078943f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 104.184322][ T4991] >ffff888078944000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 104.192388][ T4991] ^ [ 104.200103][ T4991] ffff888078944080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 104.208158][ T4991] ffff888078944100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 104.216211][ T4991] ================================================================== [ 104.224266][ T4991] Disabling lock debugging due to kernel taint [ 104.236629][ T4991] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 104.243854][ T4991] CPU: 0 PID: 4991 Comm: syz.4.180 Tainted: G B 5.15.186-syzkaller #0 [ 104.253312][ T4991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 104.263370][ T4991] Call Trace: [ 104.266648][ T4991] [ 104.269579][ T4991] dump_stack_lvl+0x168/0x230 [ 104.274261][ T4991] ? show_regs_print_info+0x20/0x20 [ 104.279549][ T4991] ? load_image+0x3b0/0x3b0 [ 104.284054][ T4991] panic+0x2c9/0x7f0 [ 104.287951][ T4991] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 104.294106][ T4991] ? bpf_jit_dump+0xd0/0xd0 [ 104.298617][ T4991] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 104.304516][ T4991] ? _raw_spin_unlock+0x40/0x40 [ 104.309378][ T4991] ? ext4_xattr_set_entry+0x1390/0x3d30 [ 104.314934][ T4991] check_panic_on_warn+0x80/0xa0 [ 104.319885][ T4991] ? ext4_xattr_set_entry+0x1390/0x3d30 [ 104.325437][ T4991] end_report+0x6d/0xf0 [ 104.329597][ T4991] kasan_report+0x102/0x130 [ 104.334109][ T4991] ? ext4_xattr_set_entry+0x1390/0x3d30 [ 104.339666][ T4991] ? ext4_xattr_set_entry+0x1390/0x3d30 [ 104.345223][ T4991] kasan_check_range+0x27b/0x290 [ 104.350176][ T4991] memmove+0x25/0x60 [ 104.354073][ T4991] ext4_xattr_set_entry+0x1390/0x3d30 [ 104.359452][ T4991] ? setxattr+0x2da/0x300 [ 104.363789][ T4991] ? __x64_sys_lsetxattr+0xb4/0xd0 [ 104.368894][ T4991] ? do_syscall_64+0x4c/0xa0 [ 104.373492][ T4991] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.379561][ T4991] ? ext4_xattr_ibody_set+0x330/0x330 [ 104.384948][ T4991] ? memcpy+0x3c/0x60 [ 104.388928][ T4991] ext4_xattr_block_set+0x973/0x2d30 [ 104.394225][ T4991] ? ext4_xattr_block_find+0x500/0x500 [ 104.399702][ T4991] ext4_xattr_set_handle+0xba5/0x12b0 [ 104.405085][ T4991] ? ext4_xattr_set_entry+0x3d30/0x3d30 [ 104.410641][ T4991] ? __ext4_journal_start_sb+0x1bd/0x360 [ 104.416260][ T4991] ext4_xattr_set+0x22a/0x320 [ 104.420916][ T4991] ? ext4_xattr_set_credits+0x290/0x290 [ 104.426431][ T4991] ? posix_xattr_acl+0x8f/0xb0 [ 104.431170][ T4991] ? evm_protect_xattr+0x33c/0x970 [ 104.436257][ T4991] ? ext4_xattr_trusted_get+0x40/0x40 [ 104.441607][ T4991] __vfs_setxattr+0x3e0/0x420 [ 104.446264][ T4991] __vfs_setxattr_noperm+0x129/0x5e0 [ 104.451651][ T4991] vfs_setxattr+0x168/0x2f0 [ 104.456146][ T4991] ? xattr_permission+0x500/0x500 [ 104.461157][ T4991] ? _copy_from_user+0x111/0x170 [ 104.466072][ T4991] ? setxattr+0x243/0x300 [ 104.470535][ T4991] setxattr+0x2da/0x300 [ 104.474690][ T4991] ? path_setxattr+0x280/0x280 [ 104.479439][ T4991] ? __mnt_want_write+0x1e2/0x260 [ 104.484447][ T4991] path_setxattr+0x142/0x280 [ 104.489015][ T4991] ? simple_xattr_list_add+0xf0/0xf0 [ 104.494280][ T4991] ? lock_chain_count+0x20/0x20 [ 104.499112][ T4991] ? vtime_user_exit+0x2dc/0x400 [ 104.504025][ T4991] __x64_sys_lsetxattr+0xb4/0xd0 [ 104.508941][ T4991] do_syscall_64+0x4c/0xa0 [ 104.513343][ T4991] ? clear_bhb_loop+0x30/0x80 [ 104.518003][ T4991] ? clear_bhb_loop+0x30/0x80 [ 104.522664][ T4991] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.528536][ T4991] RIP: 0033:0x7f18b7b2f929 [ 104.532933][ T4991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.552539][ T4991] RSP: 002b:00007f18b5997038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 104.560967][ T4991] RAX: ffffffffffffffda RBX: 00007f18b7d56fa0 RCX: 00007f18b7b2f929 [ 104.568917][ T4991] RDX: 0000200000000040 RSI: 0000200000000300 RDI: 0000200000000100 [ 104.576910][ T4991] RBP: 00007f18b7bb1b39 R08: 0000000000000000 R09: 0000000000000000 [ 104.585299][ T4991] R10: 000000000000fe37 R11: 0000000000000246 R12: 0000000000000000 [ 104.593258][ T4991] R13: 0000000000000000 R14: 00007f18b7d56fa0 R15: 00007fffd87f1df8 [ 104.601243][ T4991] [ 104.604437][ T4991] Kernel Offset: disabled [ 104.608752][ T4991] Rebooting in 86400 seconds..