last executing test programs: 8.845284375s ago: executing program 3 (id=170): syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000001b80)=ANY=[@ANYBLOB='utf8,errors=continue,namecase=1,utf8,gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000077,umask=00000000000000000005676,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="2c000ca8768ddddc191573cbd33da79641936c9de64e264f331d1b50f4c4f54702f51dcbddb39c14c19175f07a639bb65ea608fbf6fadf5d8da30ace1281bed3e61b084526e10dbe921dad84fbcabc5791f52445cb76b789ed377aa0cd17309c4df04d525e8af05fb246b33836d90656cd2daa991b916be40df3bd607ae5672e1bb90730d0ff03000000000000c5f0cf287ea707c1fc66165f74e7d8a78c37a4b86907cec1df06da3611f616718d88770a2520ceb039bc06ef4d1183"], 0x1, 0x1503, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 6.926717605s ago: executing program 3 (id=175): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0) 6.183420646s ago: executing program 3 (id=180): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="400641000000410192"], 0x0, 0x0, 0x0, 0x0}, 0x0) 6.076729967s ago: executing program 2 (id=181): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000540)=ANY=[@ANYRES32=r0]) 5.471845834s ago: executing program 2 (id=184): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x21, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d40)={0x2c, &(0x7f0000000b00)={0x0, 0x21, 0x1a, {0x1a, 0xf, "9665f5747ad6f037670dfd8d227ce9ee2ad403af82465c33"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 5.360128064s ago: executing program 0 (id=185): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x20, 0x1, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe}}]}, 0x20}}, 0x0) 5.089209991s ago: executing program 4 (id=186): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'geneve0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000340)="05030006e8fe091c6202a0ffffff", 0xe, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.987637378s ago: executing program 1 (id=187): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000380)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@nouid32}]}, 0xfd, 0x269, &(0x7f0000000780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 4.503705049s ago: executing program 0 (id=188): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f00000002c0)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@utf8no}, {@utf8}, {@utf8no}, {@fat=@flush}, {@uni_xlateno}, {@uni_xlate}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@utf8no}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@numtail}]}, 0x1, 0x37c, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 4.165072646s ago: executing program 4 (id=189): syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000000)={{0x3}}) 3.406064512s ago: executing program 1 (id=190): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000280)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "028df7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x3a, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback={0x0, 0xffffac1414aa}, [], "1e2e000000000000"}}}}}}}, 0x0) 3.322429777s ago: executing program 4 (id=191): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2b) 2.904489369s ago: executing program 0 (id=192): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x550}}, 0x0) 2.83240203s ago: executing program 3 (id=193): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={r1, 0xe}, 0xc) 2.830004748s ago: executing program 2 (id=194): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x4, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x368badec, 0x1, 0x2, 0x0, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x4, {0x1, @win={{}, 0x0, 0x6, 0x0, 0x0, 0x0}}}) 2.600747089s ago: executing program 1 (id=195): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000001c0)={0x100, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.243753684s ago: executing program 4 (id=196): sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="000426bd7000fcdbdf250c0000003400098008ff08000100ffffff7f08000200d63c0000080001000400000008000100090000002c0101800d0001007564703a73797a3200000000380004001400010002004e23ac1e00010000000000000000200002000a004e227ffffffffc0000000000000000000000000000000100008008000300040a004e2000000009ff020000000000000000000000000001040000001400020002004e240000000000000000000000004c00028008000300ff0100000864907b1ed6f81fe0c24413a74f00040001040000080003000900000008000200f6000000080001001c0000000800020001000000080001"], 0x2d0}, 0x1, 0x0, 0x0, 0x2000c084}, 0x40) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) 2.082215177s ago: executing program 2 (id=197): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000580)='./file0\x00', 0x800802, &(0x7f0000001640)=ANY=[@ANYBLOB='codepage=iso8859-3,part=0x0000000000008000,part=0x0000000000000002,iocharset=cp860,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c00b845761781124380e0d42f077f4961a97de15431e21100000000"], 0x21, 0x306, &(0x7f0000000240)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x4, 0x4, 0x7ffffebd}]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 2.01663408s ago: executing program 3 (id=198): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10400, &(0x7f00000000c0)={[{@norecovery}, {@grpquota}, {@debug}, {@nombcache}]}, 0xee, 0x4b6, &(0x7f0000000980)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000dc0)=ANY=[@ANYBLOB="003e6ab70000004c90020008000000030001"]) 1.89833118s ago: executing program 0 (id=199): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005a0001"], 0x1c}}, 0x0) 1.878826042s ago: executing program 1 (id=200): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abff005597c8ef039a5be42200", 0x38}, 0x60) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, 0x0, 0x0) 1.671866761s ago: executing program 4 (id=201): r0 = getpgrp(0xffffffffffffffff) r1 = syz_open_procfs$pagemap(r0, &(0x7f0000000040)) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f00000000c0)={0xffffffffffffffff, r1, 0x1ff}) 1.291714852s ago: executing program 1 (id=202): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000140)=@req3={0x5, 0x7dbc, 0x3, 0x4, 0x9, 0x1, 0x1}, 0x1c) 1.092493665s ago: executing program 2 (id=203): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x84, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRES8], 0x8b, 0x2db, &(0x7f00000002c0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 1.037369782s ago: executing program 0 (id=204): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0x790b0cfe605734f7, 0x0, 0x0, {{}, {}, {0x3, 0x18, {0x0, @bearer=@udp='udp:syz0\x00'}}}}, 0x30}}, 0x0) 855.487381ms ago: executing program 4 (id=205): r0 = syz_open_dev$media(&(0x7f0000000000), 0x4, 0x121001) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000540)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_QUEUE(r1, 0x7c80, 0x0) 603.924242ms ago: executing program 1 (id=206): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x70bd27, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@private2, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x40000000000000}}, [@tmpl={0x84, 0x5, [{{@in6=@remote, 0x0, 0x33}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x7}, {{@in=@remote, 0x0, 0x3c}, 0xa, @in6=@private1, 0x0, 0x0, 0x0, 0x4}]}]}, 0x13c}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 485.851077ms ago: executing program 3 (id=207): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000280)={0x0, 0x3ff, 0xad}) 222.449981ms ago: executing program 0 (id=208): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{&(0x7f0000000140)=@phonet={0x23, 0x1, 0x6, 0x5}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4008000) 0s ago: executing program 2 (id=209): pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff}, 0x80) pipe2(&(0x7f0000003480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r1, &(0x7f0000003580)=0x200, r0, 0x0, 0x2, 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.98' (ED25519) to the list of known hosts. [ 198.144430][ T5772] cgroup: Unknown subsys name 'net' [ 198.292855][ T5772] cgroup: Unknown subsys name 'cpuset' [ 198.309784][ T5772] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 229.596576][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.603471][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 252.536637][ T5772] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 256.666703][ T5792] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 256.675010][ T5792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 256.685652][ T5792] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 256.694195][ T5792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 256.703439][ T5792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 256.716158][ T5796] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 256.725431][ T5796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 256.737332][ T5797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 256.746411][ T5797] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 256.757247][ T5797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 256.765575][ T5797] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 256.776335][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 256.787559][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 256.819900][ T5797] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 256.842599][ T5805] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 256.855700][ T5805] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 256.867774][ T5805] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 256.881263][ T5805] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 256.895642][ T5797] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 256.902118][ T5805] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 256.912581][ T5805] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 256.922108][ T5805] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 256.946597][ T5797] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 256.954931][ T5801] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 256.967665][ T5805] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 258.334224][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 258.523683][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 258.873556][ T5805] Bluetooth: hci0: command tx timeout [ 259.022275][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 259.035336][ T5805] Bluetooth: hci3: command tx timeout [ 259.041393][ T5796] Bluetooth: hci1: command tx timeout [ 259.047060][ T5796] Bluetooth: hci2: command tx timeout [ 259.090954][ T5796] Bluetooth: hci4: command tx timeout [ 259.246478][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.256408][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.264539][ T5790] bridge_slave_0: entered allmulticast mode [ 259.274504][ T5790] bridge_slave_0: entered promiscuous mode [ 259.304037][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.312140][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.319941][ T5790] bridge_slave_1: entered allmulticast mode [ 259.329787][ T5790] bridge_slave_1: entered promiscuous mode [ 259.429009][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 259.622852][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 259.664036][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.895321][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.906418][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.916350][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.924297][ T5788] bridge_slave_0: entered allmulticast mode [ 259.934010][ T5788] bridge_slave_0: entered promiscuous mode [ 260.016183][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.027924][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.035953][ T5788] bridge_slave_1: entered allmulticast mode [ 260.045688][ T5788] bridge_slave_1: entered promiscuous mode [ 260.118715][ T5790] team0: Port device team_slave_0 added [ 260.331206][ T5790] team0: Port device team_slave_1 added [ 260.408813][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.580983][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.693178][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.701334][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.709196][ T5800] bridge_slave_0: entered allmulticast mode [ 260.719153][ T5800] bridge_slave_0: entered promiscuous mode [ 260.772460][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.779676][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.807493][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.863778][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.871680][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.879485][ T5800] bridge_slave_1: entered allmulticast mode [ 260.889439][ T5800] bridge_slave_1: entered promiscuous mode [ 260.931247][ T5796] Bluetooth: hci0: command tx timeout [ 260.962293][ T5788] team0: Port device team_slave_0 added [ 260.972474][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.979684][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.006343][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.021194][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.028954][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.036958][ T5795] bridge_slave_0: entered allmulticast mode [ 261.046802][ T5795] bridge_slave_0: entered promiscuous mode [ 261.101447][ T5796] Bluetooth: hci2: command tx timeout [ 261.101558][ T5805] Bluetooth: hci3: command tx timeout [ 261.107116][ T5796] Bluetooth: hci1: command tx timeout [ 261.133273][ T5788] team0: Port device team_slave_1 added [ 261.181164][ T5805] Bluetooth: hci4: command tx timeout [ 261.245168][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.253090][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.260877][ T5795] bridge_slave_1: entered allmulticast mode [ 261.270055][ T5795] bridge_slave_1: entered promiscuous mode [ 261.370663][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.378012][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.404473][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.464628][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.486658][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.580666][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.588169][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.614858][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.739924][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.748080][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.756033][ T5799] bridge_slave_0: entered allmulticast mode [ 261.765052][ T5799] bridge_slave_0: entered promiscuous mode [ 261.796397][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.806974][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.815037][ T5799] bridge_slave_1: entered allmulticast mode [ 261.824571][ T5799] bridge_slave_1: entered promiscuous mode [ 261.847692][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.940023][ T5800] team0: Port device team_slave_0 added [ 261.964570][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.023919][ T5790] hsr_slave_0: entered promiscuous mode [ 262.033890][ T5790] hsr_slave_1: entered promiscuous mode [ 262.052103][ T5800] team0: Port device team_slave_1 added [ 262.111602][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.133709][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.393725][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.401192][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.427657][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.485378][ T5795] team0: Port device team_slave_0 added [ 262.584839][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.593134][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.619997][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.646137][ T5788] hsr_slave_0: entered promiscuous mode [ 262.655975][ T5788] hsr_slave_1: entered promiscuous mode [ 262.665046][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.673141][ T5788] Cannot create hsr debugfs directory [ 262.686747][ T5795] team0: Port device team_slave_1 added [ 262.717149][ T5799] team0: Port device team_slave_0 added [ 262.854119][ T5799] team0: Port device team_slave_1 added [ 262.953045][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.960243][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.986790][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.011694][ T5805] Bluetooth: hci0: command tx timeout [ 263.127168][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.134552][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.161092][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.171895][ T5805] Bluetooth: hci3: command tx timeout [ 263.172013][ T5805] Bluetooth: hci2: command tx timeout [ 263.172117][ T5805] Bluetooth: hci1: command tx timeout [ 263.221926][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.229133][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.251264][ T5805] Bluetooth: hci4: command tx timeout [ 263.255828][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.304705][ T5800] hsr_slave_0: entered promiscuous mode [ 263.315013][ T5800] hsr_slave_1: entered promiscuous mode [ 263.323790][ T5800] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.331879][ T5800] Cannot create hsr debugfs directory [ 263.416271][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.423672][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.450076][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.907741][ T5795] hsr_slave_0: entered promiscuous mode [ 263.917802][ T5795] hsr_slave_1: entered promiscuous mode [ 263.926783][ T5795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.934756][ T5795] Cannot create hsr debugfs directory [ 264.189156][ T5799] hsr_slave_0: entered promiscuous mode [ 264.199651][ T5799] hsr_slave_1: entered promiscuous mode [ 264.208837][ T5799] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.216868][ T5799] Cannot create hsr debugfs directory [ 264.885663][ T5790] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 264.909532][ T5790] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 265.003833][ T5790] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 265.092823][ T5790] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 265.093122][ T5805] Bluetooth: hci0: command tx timeout [ 265.251359][ T5805] Bluetooth: hci2: command tx timeout [ 265.257067][ T5805] Bluetooth: hci1: command tx timeout [ 265.262412][ T5797] Bluetooth: hci3: command tx timeout [ 265.302631][ T5788] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 265.331586][ T5796] Bluetooth: hci4: command tx timeout [ 265.408210][ T5788] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 265.434469][ T5788] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 265.529088][ T5788] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 265.820601][ T5800] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 265.853215][ T5795] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 265.921305][ T5800] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 265.953030][ T5800] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 266.023606][ T5795] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 266.066973][ T5800] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 266.109652][ T5795] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 266.142058][ T5799] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 266.170317][ T5795] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 266.200360][ T5799] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 266.304347][ T5799] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 266.422568][ T5799] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 266.813059][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.156795][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.299091][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.387672][ T4318] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.395522][ T4318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.429942][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.573341][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.596732][ T4318] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.604578][ T4318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.816618][ T4318] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.824487][ T4318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.868120][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.932111][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.954172][ T4318] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.961982][ T4318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.070250][ T5790] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 268.082648][ T5790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 268.208151][ T4318] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.215979][ T4318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.243984][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.280616][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.359130][ T3638] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.366963][ T3638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.463191][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.499494][ T3638] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.507342][ T3638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.546485][ T3638] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.554344][ T3638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.745862][ T5800] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 268.844248][ T3638] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.852096][ T3638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.927793][ T3638] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.935652][ T3638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.196029][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.753715][ T5790] veth0_vlan: entered promiscuous mode [ 270.915877][ T5790] veth1_vlan: entered promiscuous mode [ 271.034785][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.079490][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.157565][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.333833][ T5790] veth0_macvtap: entered promiscuous mode [ 271.358615][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.395722][ T5790] veth1_macvtap: entered promiscuous mode [ 271.611387][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.697309][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.805953][ T5795] veth0_vlan: entered promiscuous mode [ 271.900183][ T5790] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.909493][ T5790] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.918742][ T5790] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.927998][ T5790] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.017425][ T5795] veth1_vlan: entered promiscuous mode [ 272.132404][ T5788] veth0_vlan: entered promiscuous mode [ 272.163860][ T5799] veth0_vlan: entered promiscuous mode [ 272.256400][ T5788] veth1_vlan: entered promiscuous mode [ 272.314830][ T5799] veth1_vlan: entered promiscuous mode [ 272.588750][ T5795] veth0_macvtap: entered promiscuous mode [ 272.664158][ T5795] veth1_macvtap: entered promiscuous mode [ 272.718496][ T5799] veth0_macvtap: entered promiscuous mode [ 272.739780][ T5788] veth0_macvtap: entered promiscuous mode [ 272.843845][ T5788] veth1_macvtap: entered promiscuous mode [ 272.894844][ T5799] veth1_macvtap: entered promiscuous mode [ 272.962766][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.976123][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.992054][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.128661][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.139779][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.152326][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.163302][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.179144][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.214361][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.225492][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.241988][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.311146][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.322040][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.333911][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.345308][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.355534][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.366767][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.382498][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.419818][ T5795] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.431308][ T5795] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.440361][ T5795] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.450514][ T5795] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.500679][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.511785][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.522029][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.532850][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.547997][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.608119][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.620094][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.630343][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.641292][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.652913][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.664282][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.679301][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.712786][ T5799] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.723353][ T5799] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.733945][ T5799] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.743118][ T5799] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.850490][ T5788] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.859864][ T5788] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.869321][ T5788] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.881320][ T5788] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.220379][ T5800] veth0_vlan: entered promiscuous mode [ 274.348677][ T5800] veth1_vlan: entered promiscuous mode [ 274.752507][ T5800] veth0_macvtap: entered promiscuous mode [ 274.881772][ T5800] veth1_macvtap: entered promiscuous mode [ 275.118167][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.129147][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.139460][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.150378][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.160895][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.173964][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.184190][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.195135][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.210893][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.455558][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.468336][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.480013][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.491143][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.501720][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.512607][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.522827][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.533992][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.549690][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.842147][ T5800] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.851554][ T5800] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.860632][ T5800] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.869927][ T5800] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.297977][ T4109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.306946][ T4109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.671459][ T3638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.679609][ T3638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.487280][ T5790] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 280.576555][ T3609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.585754][ T3609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.845449][ T3609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.855123][ T3609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.083059][ T3609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.093438][ T3609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.226261][ T3609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.238354][ T3609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.444186][ T3609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.452450][ T3609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.593024][ T4109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.602380][ T4109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.800936][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 283.217441][ T4318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.226272][ T4318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.489403][ T5994] loop2: detected capacity change from 0 to 256 [ 283.577974][ T5996] loop0: detected capacity change from 0 to 256 [ 283.596603][ T5994] ======================================================= [ 283.596603][ T5994] WARNING: The mand mount option has been deprecated and [ 283.596603][ T5994] and is ignored by this kernel. Remove the mand [ 283.596603][ T5994] option from the mount to silence this warning. [ 283.596603][ T5994] ======================================================= [ 283.634356][ T5080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.643041][ T5080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.069380][ T5996] FAT-fs (loop0): Directory bread(block 64) failed [ 284.076390][ T5996] FAT-fs (loop0): Directory bread(block 65) failed [ 284.083748][ T5996] FAT-fs (loop0): Directory bread(block 66) failed [ 284.090575][ T5996] FAT-fs (loop0): Directory bread(block 67) failed [ 284.107164][ T5996] FAT-fs (loop0): Directory bread(block 68) failed [ 284.117377][ T5996] FAT-fs (loop0): Directory bread(block 69) failed [ 284.124501][ T5996] FAT-fs (loop0): Directory bread(block 70) failed [ 284.131483][ T5996] FAT-fs (loop0): Directory bread(block 71) failed [ 284.138449][ T5996] FAT-fs (loop0): Directory bread(block 72) failed [ 284.145556][ T5996] FAT-fs (loop0): Directory bread(block 73) failed [ 284.238261][ T5994] FAT-fs (loop2): Directory bread(block 64) failed [ 284.245393][ T5994] FAT-fs (loop2): Directory bread(block 65) failed [ 284.252601][ T5994] FAT-fs (loop2): Directory bread(block 66) failed [ 284.259426][ T5994] FAT-fs (loop2): Directory bread(block 67) failed [ 284.266570][ T5994] FAT-fs (loop2): Directory bread(block 68) failed [ 284.273618][ T5994] FAT-fs (loop2): Directory bread(block 69) failed [ 284.280605][ T5994] FAT-fs (loop2): Directory bread(block 70) failed [ 284.287727][ T5994] FAT-fs (loop2): Directory bread(block 71) failed [ 284.294977][ T5994] FAT-fs (loop2): Directory bread(block 72) failed [ 284.311486][ T5994] FAT-fs (loop2): Directory bread(block 73) failed [ 285.246637][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'. [ 285.307716][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'. [ 285.849002][ T6004] loop3: detected capacity change from 0 to 32768 [ 286.118970][ T6004] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io [ 286.143517][ T6004] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 286.164338][ T6004] bcachefs (loop3): Version upgrade required: [ 286.164338][ T6004] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 286.164338][ T6004] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 286.164338][ T6004] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 286.323318][ T6019] autofs: Bad value for 'fd' [ 286.339801][ T6004] bcachefs (loop3): dropping and reconstructing all alloc info [ 286.519891][ T6004] bcachefs (loop3): accounting_read... done [ 286.546843][ T6004] bcachefs (loop3): alloc_read... done [ 286.553156][ T6004] bcachefs (loop3): snapshots_read... done [ 286.569551][ T6004] bcachefs (loop3): check_allocations... [ 286.674375][ T6021] loop1: detected capacity change from 0 to 256 [ 286.734184][ T6004] done [ 286.746683][ T6004] bcachefs (loop3): going read-write [ 286.792446][ T6004] bcachefs (loop3): done starting filesystem [ 286.851033][ T6021] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 286.863166][ T6021] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 287.197057][ T6021] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 287.216388][ T5795] bcachefs (loop3): shutting down [ 287.224434][ T5795] bcachefs (loop3): going read-only [ 287.229922][ T5795] bcachefs (loop3): finished waiting for writes to stop [ 287.315991][ T6028] usb usb1: usbfs: process 6028 (syz.2.19) did not claim interface 0 before use [ 287.349045][ T5795] bcachefs (loop3): flushing journal and stopping allocators, journal seq 10 [ 287.353179][ T6032] usb usb1: usbfs: process 6032 (syz.2.19) did not claim interface 0 before use [ 287.377776][ T5795] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 10 [ 287.420558][ T30] audit: type=1326 audit(1744203551.660:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f596438d169 code=0x7ffc0000 [ 287.466505][ T5795] bcachefs (loop3): unclean shutdown complete, journal seq 11 [ 287.532962][ T5795] bcachefs (loop3): done going read-only, filesystem not clean [ 287.571400][ T30] audit: type=1326 audit(1744203551.710:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f596438d169 code=0x7ffc0000 [ 287.595667][ T30] audit: type=1326 audit(1744203551.710:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f596438d169 code=0x7ffc0000 [ 287.619438][ T30] audit: type=1326 audit(1744203551.720:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f596438d169 code=0x7ffc0000 [ 287.643060][ T30] audit: type=1326 audit(1744203551.720:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f596438d169 code=0x7ffc0000 [ 287.903240][ T5795] bcachefs (loop3): shutdown complete [ 288.440529][ T6035] loop0: detected capacity change from 0 to 1024 [ 290.059831][ T6048] loop2: detected capacity change from 0 to 2048 [ 290.211459][ T6048] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 290.587797][ T6053] trusted_key: encrypted_key: insufficient parameters specified [ 290.702601][ T5796] Bluetooth: hci4: command 0x0405 tx timeout [ 291.038589][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.045688][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 291.256840][ T6057] netlink: 96 bytes leftover after parsing attributes in process `syz.1.32'. [ 291.268438][ T6057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.32'. [ 291.297093][ T6057] vlan2: entered allmulticast mode [ 291.302734][ T6057] gretap0: entered allmulticast mode [ 292.790261][ T6073] loop0: detected capacity change from 0 to 512 [ 292.863758][ T6073] EXT4-fs: inline encryption not supported [ 292.923715][ T6073] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 292.938892][ T6073] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 293.062833][ T6073] EXT4-fs (loop0): 1 truncate cleaned up [ 293.149248][ T6073] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.425594][ T5797] Bluetooth: hci4: command 0x0405 tx timeout [ 294.184427][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.284373][ T6085] loop3: detected capacity change from 0 to 32768 [ 294.296192][ T6085] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.20 (6085) [ 294.321758][ T6085] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 294.326896][ T6087] loop4: detected capacity change from 0 to 512 [ 294.332367][ T6085] BTRFS info (device loop3): using sha256 (sha256-generic) checksum algorithm [ 294.428714][ T6087] EXT4-fs: Ignoring removed orlov option [ 294.521891][ T6087] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 294.673570][ T6087] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 294.697034][ T6085] BTRFS info (device loop3): rebuilding free space tree [ 294.743516][ T6087] System zones: 1-12 [ 294.782136][ T6085] BTRFS info (device loop3): disabling free space tree [ 294.789586][ T6085] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 294.799819][ T6085] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 294.835795][ T6087] EXT4-fs (loop4): 1 truncate cleaned up [ 294.844391][ T6087] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.023182][ T6087] EXT4-fs error (device loop4): ext4_search_dir:1476: inode #12: block 7: comm syz.4.43: bad entry in directory: inode out of bounds - offset=0, inode=16777215, rec_len=16, size=56 fake=0 [ 295.131727][ T6087] EXT4-fs (loop4): Remounting filesystem read-only [ 295.224990][ T5795] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 295.508008][ T5800] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.760510][ T6111] loop0: detected capacity change from 0 to 4096 [ 295.985829][ T6118] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 296.828955][ T6126] loop1: detected capacity change from 0 to 8 [ 297.068160][ T6128] loop4: detected capacity change from 0 to 1024 [ 297.175151][ T6128] EXT4-fs: Ignoring removed nobh option [ 297.182112][ T6128] EXT4-fs: inline encryption not supported [ 297.188245][ T6128] EXT4-fs: Ignoring removed bh option [ 297.382487][ T6128] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.699891][ T6135] loop1: detected capacity change from 0 to 128 [ 298.273438][ T5800] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.926787][ T6138] loop0: detected capacity change from 0 to 32768 [ 299.034136][ T6138] gfs2: fsid=meta: Trying to join cluster "lock_nolock", "meta" [ 299.042329][ T6138] gfs2: fsid=meta: Now mounting FS (format 1802)... [ 299.061525][ T6141] loop2: detected capacity change from 0 to 2048 [ 299.103818][ T6138] gfs2: fsid=meta.s: journal 0 mapped with 5 extents in 0ms [ 299.272795][ T6141] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 299.454556][ T6138] gfs2: fsid=meta.s: first mount done, others may mount [ 299.464759][ T6138] gfs2: fsid=meta.s: can't get resource index inode: -2 [ 300.412323][ T6154] netlink: 136 bytes leftover after parsing attributes in process `syz.1.63'. [ 300.421637][ T6154] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 300.931783][ T1875] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 301.188279][ T1875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.207630][ T1875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.220937][ T1875] usb 1-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 301.230328][ T1875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.348744][ T6167] loop4: detected capacity change from 0 to 64 [ 301.467839][ T1875] usb 1-1: config 0 descriptor?? [ 301.532721][ T30] audit: type=1800 audit(1744203565.780:7): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.69" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 301.567057][ T11] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 301.792686][ T11] usb 2-1: Using ep0 maxpacket: 16 [ 301.836902][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.848892][ T11] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 301.858683][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.075746][ T11] usb 2-1: config 0 descriptor?? [ 302.088462][ T1875] hid-led 0003:04D8:F372.0001: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.0-1/input0 [ 302.272079][ T1875] hid-led 0003:04D8:F372.0001: Greynut Luxafor initialized [ 302.621448][ T11] uclogic 0003:145F:0212.0002: interface is invalid, ignoring [ 302.654322][ T1875] usb 1-1: USB disconnect, device number 2 [ 302.696293][ T3012] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 302.797750][ T3012] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 302.825829][ T11] usb 2-1: USB disconnect, device number 2 [ 302.872166][ T3012] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 302.991050][ T5080] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 303.017064][ T4318] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 303.115287][ T3012] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 303.160667][ T3012] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 303.287792][ T4109] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 303.379427][ T4318] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 303.462810][ T3638] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 303.524569][ T3638] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 303.577868][ T3638] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 303.631021][ T3609] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 303.668888][ T4318] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 303.781163][ T3609] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 303.887963][ T3012] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 303.911134][ T6187] loop0: detected capacity change from 0 to 2048 [ 303.948012][ T3012] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 304.013989][ T4318] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 304.043657][ T6187] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 304.081184][ T6189] loop3: detected capacity change from 0 to 1024 [ 304.139965][ T6187] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 304.153698][ T6195] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 304.273984][ T6189] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.299171][ T6194] loop4: detected capacity change from 0 to 1024 [ 304.724781][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.979923][ T3638] hfsplus: b-tree write err: -5, ino 4 [ 305.711629][ T5852] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 305.933745][ T5852] usb 5-1: Using ep0 maxpacket: 16 [ 305.976082][ T5852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.987778][ T5852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.998082][ T5852] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 306.012696][ T5852] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 306.022477][ T5852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.233984][ T5852] usb 5-1: config 0 descriptor?? [ 306.841631][ T5852] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 306.841834][ T5852] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 307.045521][ T5852] microsoft 0003:045E:07DA.0003: No inputs registered, leaving [ 307.116490][ T5852] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 307.116689][ T5852] microsoft 0003:045E:07DA.0003: no inputs found [ 307.116792][ T5852] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 307.139549][ T5852] usb 5-1: USB disconnect, device number 2 [ 307.666290][ T1875] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 307.812372][ T1875] usb 4-1: Using ep0 maxpacket: 32 [ 307.839612][ T1875] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 307.839778][ T1875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.848109][ T1875] usb 4-1: config 0 descriptor?? [ 308.010143][ T6230] loop0: detected capacity change from 0 to 512 [ 308.110371][ T6230] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 308.124582][ T6230] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.271628][ T1875] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 308.359708][ T1875] usb 4-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 308.382572][ T1875] usb 4-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 308.534927][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 308.557657][ T6239] loop1: detected capacity change from 0 to 1024 [ 308.576609][ T6239] hfsplus: Bad value for 'umask' [ 308.607767][ T6239] No control pipe specified [ 309.226537][ T6248] can0: slcan on ttyS3. [ 309.373013][ T6251] loop3: detected capacity change from 0 to 8 [ 309.375890][ T6247] can0 (unregistered): slcan off ttyS3. [ 309.735748][ T5852] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 309.768278][ T6254] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 309.775152][ T6254] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 309.783550][ T6254] vhci_hcd vhci_hcd.0: Device attached [ 310.005253][ T5852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.017178][ T5852] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 310.027034][ T5852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.064566][ T6261] tipc: Started in network mode [ 310.069838][ T6261] tipc: Node identity aaaaaaaaaa4, cluster identity 4711 [ 310.079120][ T6261] tipc: Enabled bearer , priority 10 [ 310.097060][ T11] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 310.101096][ T5852] usb 5-1: config 0 descriptor?? [ 310.212052][ T5851] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 310.374885][ T5851] usb 2-1: Using ep0 maxpacket: 16 [ 310.563621][ T5851] usb 2-1: unable to get BOS descriptor or descriptor too short [ 310.572023][ T5851] usb 2-1: no configurations [ 310.577097][ T5851] usb 2-1: can't read configurations, error -22 [ 310.597960][ T5852] logitech-hidpp-device 0003:046D:C086.0004: unknown main item tag 0x1 [ 310.599304][ T6256] vhci_hcd: connection closed [ 310.608287][ T5852] logitech-hidpp-device 0003:046D:C086.0004: unknown main item tag 0x0 [ 310.654497][ T3609] vhci_hcd: stop threads [ 310.659099][ T3609] vhci_hcd: release socket [ 310.664935][ T3609] vhci_hcd: disconnect device [ 310.682839][ T5852] logitech-hidpp-device 0003:046D:C086.0004: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.4-1/input0 [ 310.711789][ T11] usb 35-1: device descriptor read/64, error -71 [ 310.797503][ T5852] usb 5-1: USB disconnect, device number 3 [ 310.901381][ T11] vhci_hcd: vhci_device speed not set [ 311.071078][ T9] tipc: Node number set to 15379114 [ 311.823092][ T6275] netlink: 60 bytes leftover after parsing attributes in process `syz.1.115'. [ 311.902584][ T6277] netlink: 60 bytes leftover after parsing attributes in process `syz.1.115'. [ 313.003215][ T30] audit: type=1326 audit(1744203577.210:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6284 comm="syz.1.118" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c04d8d169 code=0x0 [ 315.055211][ T5797] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 315.065630][ T5797] Bluetooth: hci0: Injecting HCI hardware error event [ 315.073924][ T5797] Bluetooth: hci0: hardware error 0x00 [ 316.357720][ T6314] loop3: detected capacity change from 0 to 32768 [ 316.440398][ T6314] OCFS2: ERROR (device loop3): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #77: signature = INODE0 [ 316.457468][ T6314] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 316.467803][ T6314] (syz.3.132,6314,1):ocfs2_read_locked_inode:535 ERROR: status = -30 [ 316.476592][ T6314] (syz.3.132,6314,1):_ocfs2_get_system_file_inode:144 ERROR: status = -30 [ 316.486863][ T6314] (syz.3.132,6314,1):ocfs2_init_local_system_inodes:496 ERROR: status=-30, sysfile=12, slot=0 [ 316.497833][ T6314] (syz.3.132,6314,1):ocfs2_init_local_system_inodes:505 ERROR: status = -30 [ 316.507099][ T6314] (syz.3.132,6314,1):ocfs2_mount_volume:1758 ERROR: status = -30 [ 316.519908][ T6314] (syz.3.132,6314,1):ocfs2_fill_super:1177 ERROR: status = -30 [ 316.606325][ T5851] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 316.851778][ T5851] usb 5-1: config 0 interface 0 has no altsetting 0 [ 316.858880][ T5851] usb 5-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=24.87 [ 316.869406][ T5851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.957508][ T5851] usb 5-1: config 0 descriptor?? [ 317.031214][ T5851] usb-storage 5-1:0.0: USB Mass Storage device detected [ 317.078444][ T5851] usb-storage 5-1:0.0: This device (090a,1200,2487 S 01 P 21) has an unneeded SubClass entry in unusual_devs.h (kernel 6.15.0-rc1-syzkaller-00060-ga24588245776) [ 317.078444][ T5851] Please send a copy of this message to and [ 317.181429][ T5797] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 317.279441][ T5851] usb 5-1: USB disconnect, device number 4 [ 317.574291][ T6327] capability: warning: `syz.2.136' uses deprecated v2 capabilities in a way that may be insecure [ 318.543407][ T6334] veth0_to_bond: entered allmulticast mode [ 319.080439][ T6340] loop3: detected capacity change from 0 to 128 [ 319.099741][ T6339] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 319.163438][ T6340] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 319.271929][ T6340] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 319.762043][ T5851] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 319.982053][ T5851] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 319.990940][ T5851] usb 3-1: config 179 has no interface number 0 [ 319.997622][ T5851] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 320.009331][ T5851] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 320.019792][ T5851] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 320.031653][ T5851] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 320.046428][ T5851] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 320.056294][ T5851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.339513][ T6344] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 320.378943][ T5851] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 320.418046][ T5851] xpad 3-1:179.65: probe with driver xpad failed with error -5 [ 320.491666][ T11] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 320.659033][ T5851] usb 3-1: USB disconnect, device number 2 [ 320.683761][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 320.695616][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.706016][ T11] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 320.715471][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.878147][ T11] usb 5-1: config 0 descriptor?? [ 321.433836][ T11] kone 0003:1E7D:2CED.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.4-1/input0 [ 321.623784][ T11] usb 5-1: USB disconnect, device number 5 [ 322.316796][ T6364] loop2: detected capacity change from 0 to 256 [ 322.414062][ T6364] exfat: Deprecated parameter 'namecase' [ 322.712108][ T6360] loop0: detected capacity change from 0 to 32768 [ 322.743881][ T6364] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 322.842066][ T6360] gfs2: fsid=meta: Trying to join cluster "lock_nolock", "meta" [ 322.850166][ T6360] gfs2: fsid=meta: Now mounting FS (format 0)... [ 322.882271][ T6360] gfs2: fsid=meta.s: journal 0 mapped with 5 extents in 0ms [ 323.140606][ T6360] gfs2: fsid=meta.s: first mount done, others may mount [ 324.246115][ T6383] loop1: detected capacity change from 0 to 64 [ 324.307989][ T6383] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 324.599275][ T6387] loop2: detected capacity change from 0 to 512 [ 324.643891][ T6387] EXT4-fs: Ignoring removed nomblk_io_submit option [ 324.660177][ T6387] EXT4-fs: Ignoring removed mblk_io_submit option [ 324.789165][ T6387] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 324.798952][ T6387] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 324.980488][ T6387] EXT4-fs (loop2): 1 truncate cleaned up [ 324.989288][ T6387] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.215207][ T6387] EXT4-fs error (device loop2): ext4_map_blocks:674: inode #2: block 4: comm syz.2.164: lblock 0 mapped to illegal pblock 4 (length 1) [ 325.307387][ T6387] EXT4-fs (loop2): Remounting filesystem read-only [ 325.748942][ T5799] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.033744][ T6397] loop4: detected capacity change from 0 to 1024 [ 326.234645][ T6401] loop3: detected capacity change from 0 to 256 [ 326.331306][ T6401] exfat: Deprecated parameter 'utf8' [ 326.337107][ T6401] exfat: Deprecated parameter 'namecase' [ 326.343352][ T6401] exfat: Deprecated parameter 'utf8' [ 326.644276][ T6401] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 326.847698][ T6401] exFAT-fs (loop3): start_clu is invalid cluster(0x0) [ 327.148657][ T6403] loop0: detected capacity change from 0 to 32768 [ 327.163600][ T6403] read_mapping_page failed! [ 327.168436][ T6403] jfs_mount: dbMount failed w/rc = -5 [ 327.176225][ T6403] Mount JFS Failure: -5 [ 327.180636][ T6403] jfs_mount failed w/return code = -5 [ 329.390232][ T6429] loop1: detected capacity change from 0 to 2048 [ 329.679353][ T6434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.185'. [ 329.781982][ T11] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 330.001901][ T11] usb 3-1: Using ep0 maxpacket: 16 [ 330.051996][ T11] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 330.065614][ T11] usb 3-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.00 [ 330.083435][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.158917][ T6438] loop1: detected capacity change from 0 to 128 [ 330.327341][ T11] usb 3-1: config 0 descriptor?? [ 330.391855][ T6438] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 330.452737][ T6442] loop0: detected capacity change from 0 to 256 [ 330.534060][ T6438] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 330.883139][ T6442] FAT-fs (loop0): Directory bread(block 64) failed [ 330.890417][ T6442] FAT-fs (loop0): Directory bread(block 65) failed [ 330.899196][ T6442] FAT-fs (loop0): Directory bread(block 66) failed [ 330.906538][ T6442] FAT-fs (loop0): Directory bread(block 67) failed [ 330.913731][ T6442] FAT-fs (loop0): Directory bread(block 68) failed [ 330.913706][ T11] saitek 0003:06A3:0CD0.0006: hidraw0: USB HID v0.00 Device [HID 06a3:0cd0] on usb-dummy_hcd.2-1/input0 [ 330.932230][ T6442] FAT-fs (loop0): Directory bread(block 69) failed [ 330.941864][ T6442] FAT-fs (loop0): Directory bread(block 70) failed [ 330.948691][ T6442] FAT-fs (loop0): Directory bread(block 71) failed [ 330.955896][ T6442] FAT-fs (loop0): Directory bread(block 72) failed [ 330.962946][ T6442] FAT-fs (loop0): Directory bread(block 73) failed [ 331.029237][ T5851] usb 3-1: USB disconnect, device number 3 [ 331.320276][ T5790] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 332.455094][ T6456] netlink: 60 bytes leftover after parsing attributes in process `syz.0.192'. [ 333.017889][ T6462] loop2: detected capacity change from 0 to 64 [ 333.106756][ T6463] loop3: detected capacity change from 0 to 512 [ 333.170385][ T6463] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 333.202267][ T6463] EXT4-fs (loop3): invalid journal inode [ 333.208471][ T6463] EXT4-fs (loop3): can't get journal size [ 333.219352][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.199'. [ 333.365016][ T6463] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a056c119, mo2=0002] [ 333.402258][ T6463] System zones: 1-12, 13-13 [ 333.463717][ T6463] EXT4-fs error (device loop3): ext4_iget_extra_inode:4692: inode #15: comm syz.3.198: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 333.552038][ T6463] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.198: couldn't read orphan inode 15 (err -117) [ 333.628656][ T6463] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.027760][ T6475] loop2: detected capacity change from 0 to 64 [ 334.145071][ T6475] hfs: keylen 94 too large [ 334.249505][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.649276][ T4229] hfs: keylen 94 too large [ 334.654461][ T4229] ===================================================== [ 334.661962][ T4229] BUG: KMSAN: uninit-value in hfs_brec_find+0x65e/0x980 [ 334.669136][ T4229] hfs_brec_find+0x65e/0x980 [ 334.674050][ T4229] hfs_write_inode+0x582/0xc40 [ 334.679080][ T4229] __writeback_single_inode+0x8da/0x1290 [ 334.694313][ T4229] writeback_sb_inodes+0xac4/0x1c90 [ 334.699810][ T4229] wb_writeback+0x4df/0xcb0 [ 334.707404][ T4229] wb_workfn+0x40b/0x1970 [ 334.712153][ T4229] process_scheduled_works+0xc1d/0x1e80 [ 334.717979][ T4229] worker_thread+0xea3/0x1500 [ 334.723033][ T4229] kthread+0x6ce/0xf10 [ 334.727305][ T4229] ret_from_fork+0x6d/0x90 [ 334.732077][ T4229] ret_from_fork_asm+0x1a/0x30 [ 334.737110][ T4229] [ 334.739561][ T4229] Local variable fd created at: [ 334.744881][ T4229] hfs_write_inode+0x3d/0xc40 [ 334.749819][ T4229] __writeback_single_inode+0x8da/0x1290 [ 334.755881][ T4229] [ 334.758369][ T4229] CPU: 0 UID: 0 PID: 4229 Comm: kworker/u8:23 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(undef) [ 334.771066][ T4229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 334.781506][ T4229] Workqueue: writeback wb_workfn (flush-7:2) [ 334.797022][ T4229] ===================================================== [ 334.806944][ T4229] Disabling lock debugging due to kernel taint [ 334.813545][ T4229] Kernel panic - not syncing: kmsan.panic set ... [ 334.820168][ T4229] CPU: 0 UID: 0 PID: 4229 Comm: kworker/u8:23 Tainted: G B 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(undef) [ 334.834306][ T4229] Tainted: [B]=BAD_PAGE [ 334.838587][ T4229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 334.848828][ T4229] Workqueue: writeback wb_workfn (flush-7:2) [ 334.855140][ T4229] Call Trace: [ 334.858554][ T4229] [ 334.861613][ T4229] dump_stack_lvl+0x216/0x2d0 [ 334.866510][ T4229] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 334.872561][ T4229] dump_stack+0x1e/0x24 [ 334.876932][ T4229] panic+0x4e5/0xcf0 [ 334.881065][ T4229] ? kmsan_internal_poison_memory+0x80/0x90 [ 334.887238][ T4229] kmsan_report+0x2ca/0x2d0 [ 334.892003][ T4229] ? vprintk_default+0x3e/0x50 [ 334.897049][ T4229] ? __msan_warning+0x95/0x120 [ 334.902019][ T4229] ? hfs_brec_find+0x65e/0x980 [ 334.906981][ T4229] ? hfs_write_inode+0x582/0xc40 [ 334.912147][ T4229] ? __writeback_single_inode+0x8da/0x1290 [ 334.918161][ T4229] ? writeback_sb_inodes+0xac4/0x1c90 [ 334.923736][ T4229] ? wb_writeback+0x4df/0xcb0 [ 334.928606][ T4229] ? wb_workfn+0x40b/0x1970 [ 334.933341][ T4229] ? process_scheduled_works+0xc1d/0x1e80 [ 334.939277][ T4229] ? worker_thread+0xea3/0x1500 [ 334.944346][ T4229] ? kthread+0x6ce/0xf10 [ 334.948761][ T4229] ? ret_from_fork+0x6d/0x90 [ 334.953601][ T4229] ? ret_from_fork_asm+0x1a/0x30 [ 334.958804][ T4229] ? kmsan_get_metadata+0x13e/0x1c0 [ 334.964244][ T4229] ? hfs_brec_keylen+0x398/0x610 [ 334.969398][ T4229] ? hfs_brec_keylen+0x58f/0x610 [ 334.974575][ T4229] ? __hfs_brec_find+0x426/0x830 [ 334.979720][ T4229] ? __pfx_hfs_cat_keycmp+0x10/0x10 [ 334.985140][ T4229] ? kmsan_get_metadata+0x13e/0x1c0 [ 334.990565][ T4229] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 334.996643][ T4229] __msan_warning+0x95/0x120 [ 335.001459][ T4229] hfs_brec_find+0x65e/0x980 [ 335.006295][ T4229] hfs_write_inode+0x582/0xc40 [ 335.011294][ T4229] ? stack_depot_save_flags+0x37/0x7e0 [ 335.016969][ T4229] ? kmsan_get_metadata+0x13e/0x1c0 [ 335.022399][ T4229] ? kmsan_get_metadata+0x13e/0x1c0 [ 335.027834][ T4229] ? __pfx_hfs_write_inode+0x10/0x10 [ 335.033360][ T4229] __writeback_single_inode+0x8da/0x1290 [ 335.039237][ T4229] writeback_sb_inodes+0xac4/0x1c90 [ 335.044787][ T4229] wb_writeback+0x4df/0xcb0 [ 335.049506][ T4229] ? queue_io+0x411/0x780 [ 335.054071][ T4229] wb_workfn+0x40b/0x1970 [ 335.058641][ T4229] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 335.064712][ T4229] ? kmsan_get_metadata+0x13e/0x1c0 [ 335.070172][ T4229] ? __pfx_wb_workfn+0x10/0x10 [ 335.075173][ T4229] process_scheduled_works+0xc1d/0x1e80 [ 335.081016][ T4229] worker_thread+0xea3/0x1500 [ 335.085963][ T4229] kthread+0x6ce/0xf10 [ 335.090205][ T4229] ? __pfx_worker_thread+0x10/0x10 [ 335.095570][ T4229] ? __pfx_kthread+0x10/0x10 [ 335.100347][ T4229] ret_from_fork+0x6d/0x90 [ 335.104997][ T4229] ? __pfx_kthread+0x10/0x10 [ 335.109772][ T4229] ret_from_fork_asm+0x1a/0x30 [ 335.114806][ T4229] [ 335.118269][ T4229] Kernel Offset: disabled [ 335.122730][ T4229] Rebooting in 86400 seconds..