last executing test programs: 1.548660725s ago: executing program 3 (id=270): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0xa08802, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRESHEX=0x0, @ANYRESOCT=r0], 0x1, 0x693, &(0x7f0000000ec0)="$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") listxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=""/20, 0x14) 1.519978117s ago: executing program 2 (id=271): r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[], 0x244}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.477346901s ago: executing program 2 (id=272): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256-generic\x00'}, 0x58) r1 = dup(0xffffffffffffffff) read$eventfd(r1, &(0x7f0000000140), 0x8) 1.476840221s ago: executing program 4 (id=273): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r2, 0x411, 0x70bd2c, 0x25dfdc00, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x9f}]}, 0x2c}}, 0x40004) 1.438037074s ago: executing program 2 (id=274): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xffffffe8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000001c0)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 1.437853604s ago: executing program 4 (id=275): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f00000002c0)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@usrjquota}, {@acl}, {@grpjquota}]}, 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000340)={'#! ', './mnt'}, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1.437353464s ago: executing program 2 (id=276): openat$binder_debug(0xffffffffffffff9c, 0x0, 0x11, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c0085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r0, r0, 0x0, 0x4) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, 0x0, 0x4040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x7, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.321518944s ago: executing program 3 (id=277): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x50, 0x0, 0x5, 0x2}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r1, &(0x7f0000000e40)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 927.902025ms ago: executing program 4 (id=278): fchmod(0xffffffffffffffff, 0x260) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 852.597022ms ago: executing program 3 (id=279): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x6c1, &(0x7f00000003c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x149442, 0x40) pwritev2(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0xe7b, 0x0, 0x1) 852.168341ms ago: executing program 4 (id=281): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}], 0x1}], 0x1, 0x0) recvmsg$unix(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000180)=""/2, 0x2}, {&(0x7f0000000280)=""/42, 0x2a}], 0x2}, 0x2142) 831.040813ms ago: executing program 4 (id=282): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a000a000500000000000072080003000500000000", 0x39}], 0x1) syz_mount_image$fuse(0x0, &(0x7f0000002200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x1000000, 0x1ff}}, 0x30) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@access_any}]}}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{0x77359400}, {0x0, 0x3fffffff}}, 0x0) 810.206655ms ago: executing program 3 (id=283): r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[], 0x244}, 0x1, 0x0, 0x0, 0x800}, 0x0) 777.322347ms ago: executing program 4 (id=286): r0 = socket$netlink(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000500), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61158800000000006113500000000000bfa000000000000007000000ee0016055e15010000000000160500000000000069163e0000000000bf07000000000000260507000fff07206706000020000000150600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000000240)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @private0, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000002900000036000000595527cead54aa44d47b1699fb863473000000000000001800000000000000290000000000000000001825be49895d44a270"], 0x30}}], 0x1, 0xc8800) 727.309211ms ago: executing program 3 (id=289): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f00000002c0)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@usrjquota}, {@acl}, {@grpjquota}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000340)={'#! ', './mnt'}, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 727.138402ms ago: executing program 3 (id=290): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f00000007c0)="$eJzs3b9rO2UYAPDn0jQJOiSCkwge6OD05dvv6pIiLRQzKRnUQYttQZogtFDwB8ZOri6Ori6C4OY/4eJ/ILgKbhYsnNzlrklqGpPatP74fJa+fe953nve69uWDvf03eeHxwdpHJ1/8lO0WknUutGNiyQ6UYvKZzGj+0UAAP9mF1kWv2Zjq+QlEdFaX1kAwBqt/Pv/u7WXBACs2RtvvvXadq+383qatmJ3+PlZP//LPv84vr59FO/HIA7jcbTjMiK7Mh7vZlk2qqe5Trw0HJ3188zhOz+U62//ElHkb0U7OsXUbP5eb2crHZvKH+V1PFXev5vnP4l2PDvn/nu9nSdz8qPfiJdfnKr/UbTjx/figxjEQVHEOD9qEZ9upemr2Ze/ffx2Xl6en4zO+s0ibiLbuOcvDQAAAAAAAAAAAAAAAAAAAAAA/2GPyt45zSj69+RTZf+djcv8k81IK53Z/jzj/KRa6Fp/oFEWX1X9eR6naZqVgZP8ejxXj/rD7BoAAAAAAAAAAAAAAAAAAAD+WU4//Oh4fzA4PLmTQdUNoHqt/7brdKdmXojFwc3JvWrlcMHKsVHFJBELy8g3sXTNv5dtD2736J65qeZvvl16na//eu/lYHOJmL85qE7X8X4y/xk2o5ppVYfk++mYRix5r8ZNl7KVjl9j7qX2yntvPF0MRgtiIllU2Cs/j59cOZNc30WjeKpz0zfLwVT6bExr+fOcf6f8SXLVrSO52x9CAAAAAAAAAAAAAAAAAABAYfLS75yL5wtTa1lzbWUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwL2a/P//FQajMnmJ4EacnD7wFgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgf+CMAAP//SfdjDw==") mremap(&(0x7f0000fff000/0x1000)=nil, 0x40000000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') r0 = socket$netlink(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x189) pwrite64(r3, &(0x7f00000003c0)='\x00\x00', 0xfffffe97, 0x1) 633.952729ms ago: executing program 0 (id=291): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f6870000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x50, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x842}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x81}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x50}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 210.938753ms ago: executing program 2 (id=292): fchmod(0xffffffffffffffff, 0x260) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 210.509133ms ago: executing program 1 (id=293): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}], 0x1}], 0x1, 0x0) recvmsg$unix(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000180)=""/2, 0x2}, {&(0x7f0000000280)=""/42, 0x2a}], 0x2}, 0x2142) 170.902826ms ago: executing program 2 (id=294): syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x232, &(0x7f0000000500)="$eJzslbFrFEEUxr+Z3du7BA1YaGFzKQJGMHu7G5U0FrEXhETU8jCTcLrJhcsVSUBIsBHEWvwD7KwtUlnYaWVtoYJgYUobBUdmdvZ2Nrt78bhgk/eDm/vmzbyZN7Nv34IgiFPL1y8/Pz+/ubB8BcAZzKBu7N+dbA635n966dSMfLcx9fjAGmqohgGQMjO6x+zvAXi76AB7ybJSZt6vzb9acxkcM6Z/BxyXjb4LBj+NVWbeAgz3jfnhphycpjthRCzYg268stqJRaCaUDXRaudVLRefiv9wn2HFHFDtwKzxrZ3dR+0Y6CUiFqmoyXSfwlAqkpMBJUM5Mez+dHyLHDesK1DP697TJ/uq7xt7YN1fCI7Q6HkwLBm9gDp832+argit8190s/Wd5LEl7FXHXRSNUSaPL87N5SzTUEJl+HD3iVio055YGH/kkDn1kRdkJqu8XAqOEeGz8U+q4hjdizeLXl5xnYY5qLaIY16Sf9idHbUwOyUuHB68L3p9+29Je/IC5gLtoRfqoj5OxvGtUq/zOct0xSvj4awuCZUpkdQP5gKXrPrkWl+FVn99s7W1szvXWW+viTWxEUXz14OrQXAtaunanLR2uTtS/xq6Pk1a69cqaqXHPGy3+/1euA30e+GgHyWtlUxLb7o/tA/X9Y9j9reU6edFv3jph5Ll92Dmx/W/UrNObgKvCI4gCIIgCIIgCIIgCIIgCKKUX5ZuguHD1KAry3Gj23r4bwAAAP//c8NPrw==") setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x0, 0x280, 0x280, 0x148, 0x280, 0x258, 0x365, 0x350, 0x258, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x248, 0x270, 0x0, {}, [@inet=@rpfilter={{}, {0x4}}, @common=@inet=@set4={{0x50}}]}, @common=@unspec=@AUDIT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xff], [], 'rose0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@CT1={0x0, 'CT\x00', 0x1, {0x0, 0xace2, 0x200, 0x7, 'netbios-ns\x00', 'syz1\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x49a) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2000077d, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x8c0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4) recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) 170.741487ms ago: executing program 0 (id=295): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x6c1, &(0x7f00000003c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x149442, 0x40) pwritev2(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0xe7b, 0x0, 0x1) 170.475736ms ago: executing program 1 (id=296): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000007a000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r1}, 0x40) syz_emit_ethernet(0xd81, &(0x7f0000001a40)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x2, 0x6, "b5cb30", 0xd4b, 0x6, 0x1, @mcast2, @dev={0xfe, 0x80, '\x00', 0x1a}, {[@hopopts={0x33, 0x186, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x5}, @generic={0x1, 0xc23, "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"}, @enc_lim={0x4, 0x1, 0x7}]}], {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x1, 0x5, 0x0, 0x4, {[@mss={0x2, 0x4, 0x1}]}}, {"ee70579f3576f676468381962670bc5e990500e6db55c50bc5d525e607fb6fb1dadb71b12e581c09a2177be610bc707b5dd571873be91799c0cebfcab416308cc829c1cd41914252de59cdc6d881cc04e384e23ad9de045bd50454b0366438009a1ea95e4571a744c8003edec0c2ce1d2ae62f8df805d5cf76f9d8d6cd8085586b9efe79a631d28f1de0aa50a15c0cae2c8f40c86f6e491e5ee9455bf84c8c98f2cb6dc27cb243673eefd73491c588f5c5628e5d25b4b84e35be3fe8c424b03c66eaf22695f70ca73b2f2cb364973d526bdc63f30dd0876c6c2a7d2f7e4239b796628453443a4f4a83724fbc91b5bf44cb03a5"}}}}}}}, 0x0) 132.01786ms ago: executing program 1 (id=297): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a000a000500000000000072080003000500000000", 0x39}], 0x1) syz_mount_image$fuse(0x0, &(0x7f0000002200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x1000000, 0x1ff}}, 0x30) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}]}}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{0x77359400}, {0x0, 0x3fffffff}}, 0x0) 112.545911ms ago: executing program 0 (id=298): mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0xd0060, &(0x7f0000000000)={[{@gid={'gid', 0x3d, r1}}]}) 97.811742ms ago: executing program 1 (id=299): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256-generic\x00'}, 0x58) r1 = dup(0xffffffffffffffff) read$eventfd(r1, &(0x7f0000000140), 0x8) 76.297824ms ago: executing program 0 (id=300): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[], 0x244}, 0x1, 0x0, 0x0, 0x800}, 0x0) 20.362109ms ago: executing program 1 (id=301): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000001c0)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 20.178639ms ago: executing program 0 (id=302): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f00000002c0)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@usrjquota}, {@acl}, {@grpjquota}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000340)={'#! ', './mnt'}, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 16.275069ms ago: executing program 0 (id=303): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 0s ago: executing program 1 (id=304): fchmod(0xffffffffffffffff, 0x260) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b000000", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.94' (ED25519) to the list of known hosts. syzkaller login: [ 31.640820][ T4031] cgroup: Unknown subsys name 'net' [ 31.889682][ T4031] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 32.159355][ T4031] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 32.997408][ T4049] chnl_net:caif_netlink_parms(): no params data found [ 33.029951][ T4046] chnl_net:caif_netlink_parms(): no params data found [ 33.040746][ T4041] chnl_net:caif_netlink_parms(): no params data found [ 33.048587][ T4042] chnl_net:caif_netlink_parms(): no params data found [ 33.072876][ T4056] chnl_net:caif_netlink_parms(): no params data found [ 33.084594][ T4049] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.085696][ T4049] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.087383][ T4049] device bridge_slave_0 entered promiscuous mode [ 33.104394][ T4049] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.105556][ T4049] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.107241][ T4049] device bridge_slave_1 entered promiscuous mode [ 33.114882][ T4041] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.116003][ T4041] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.120611][ T4041] device bridge_slave_0 entered promiscuous mode [ 33.126275][ T4041] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.127616][ T4041] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.129167][ T4041] device bridge_slave_1 entered promiscuous mode [ 33.144624][ T4046] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.145856][ T4046] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.147694][ T4046] device bridge_slave_0 entered promiscuous mode [ 33.150565][ T4046] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.151681][ T4046] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.153162][ T4046] device bridge_slave_1 entered promiscuous mode [ 33.155910][ T4049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.159205][ T4049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.180397][ T4042] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.181548][ T4042] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.183121][ T4042] device bridge_slave_0 entered promiscuous mode [ 33.185775][ T4041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.200698][ T4041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.204958][ T4042] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.206116][ T4042] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.207828][ T4042] device bridge_slave_1 entered promiscuous mode [ 33.209419][ T4056] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.210569][ T4056] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.212139][ T4056] device bridge_slave_0 entered promiscuous mode [ 33.214610][ T4046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.220001][ T4049] team0: Port device team_slave_0 added [ 33.224864][ T4041] team0: Port device team_slave_0 added [ 33.228710][ T4056] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.229925][ T4056] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.231474][ T4056] device bridge_slave_1 entered promiscuous mode [ 33.233735][ T4046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.235687][ T4049] team0: Port device team_slave_1 added [ 33.240828][ T4041] team0: Port device team_slave_1 added [ 33.264908][ T4042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.270212][ T4046] team0: Port device team_slave_0 added [ 33.271577][ T4041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.272652][ T4041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.279720][ T4041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.282738][ T4056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.284999][ T4042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.286859][ T4049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.287986][ T4049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.292000][ T4049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.297929][ T4046] team0: Port device team_slave_1 added [ 33.299184][ T4041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.300215][ T4041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.304159][ T4041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.309966][ T4056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.312364][ T4042] team0: Port device team_slave_0 added [ 33.313566][ T4049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.314664][ T4049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.318874][ T4049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.335481][ T4042] team0: Port device team_slave_1 added [ 33.347064][ T4046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.348142][ T4046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.352198][ T4046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.407851][ T4049] device hsr_slave_0 entered promiscuous mode [ 33.447031][ T4049] device hsr_slave_1 entered promiscuous mode [ 33.498885][ T4046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.500006][ T4046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.504351][ T4046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.506426][ T4042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.507856][ T4042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.511635][ T4042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.537834][ T4041] device hsr_slave_0 entered promiscuous mode [ 33.576942][ T4041] device hsr_slave_1 entered promiscuous mode [ 33.616789][ T4041] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.617981][ T4041] Cannot create hsr debugfs directory [ 33.619805][ T4056] team0: Port device team_slave_0 added [ 33.625305][ T4042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.626461][ T4042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.630747][ T4042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.633322][ T4056] team0: Port device team_slave_1 added [ 33.662137][ T4056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.663243][ T4056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.667446][ T4056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.682180][ T4056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.683225][ T4056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.687578][ T4056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.728021][ T4042] device hsr_slave_0 entered promiscuous mode [ 33.766945][ T4042] device hsr_slave_1 entered promiscuous mode [ 33.826794][ T4042] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.827991][ T4042] Cannot create hsr debugfs directory [ 33.877696][ T4046] device hsr_slave_0 entered promiscuous mode [ 33.956920][ T4046] device hsr_slave_1 entered promiscuous mode [ 33.996763][ T4046] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.997918][ T4046] Cannot create hsr debugfs directory [ 34.091984][ T4056] device hsr_slave_0 entered promiscuous mode [ 34.126959][ T4056] device hsr_slave_1 entered promiscuous mode [ 34.166801][ T4056] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.167987][ T4056] Cannot create hsr debugfs directory [ 34.250906][ T4049] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.308431][ T4049] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.359347][ T4049] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.408007][ T4049] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.468984][ T4041] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.518247][ T4041] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.559643][ T4041] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.608477][ T4041] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.648417][ T4042] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.698588][ T4042] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.748396][ T4042] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.792200][ T4042] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.866901][ T4046] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.887528][ T25] Bluetooth: hci0: command 0x0409 tx timeout [ 34.896906][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 34.897861][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 34.898788][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 34.918881][ T4046] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.966795][ T25] Bluetooth: hci1: command 0x0409 tx timeout [ 34.980195][ T4049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.983025][ T4046] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.029186][ T4046] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.070735][ T4056] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 35.118950][ T4056] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 35.177406][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.179180][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.181161][ T4056] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 35.229031][ T4049] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.230694][ T4056] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 35.291665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.293576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.295156][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.296254][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.298241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.303077][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.304776][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.306243][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.307375][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.323224][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.331344][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.341252][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.343039][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.344754][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.350944][ T4046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.359756][ T4042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.362911][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.364742][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.366246][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.368871][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.375715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.378042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.379543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.382216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.384874][ T4049] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.391585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.393005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.396610][ T4042] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.403039][ T4046] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.409251][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.411114][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.412594][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.413706][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.415260][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.420527][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.422213][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.423244][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.424676][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.429005][ T4041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.434227][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.435975][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.440802][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.442265][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.443803][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.445245][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.446370][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.455732][ T4056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.459536][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.461090][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.462696][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.464346][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.466459][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.468734][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.470407][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.471816][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.473347][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.476076][ T4041] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.482760][ T4056] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.491420][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.492869][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.494252][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.495763][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.497792][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.498815][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.500243][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.501759][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.503225][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.504264][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.505531][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.510237][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.511816][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.515648][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.517330][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.518866][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.519975][ T353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.521301][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.522821][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.524281][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.525404][ T353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.527562][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.529484][ T4046] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.533360][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.534852][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.543083][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.544691][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.546163][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.547367][ T353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.548733][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.550430][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.552163][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.553447][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.554614][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.556297][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.559498][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.565085][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.570712][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.572376][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.576448][ T4049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.578896][ T4087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.581998][ T4087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.583534][ T4087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.585617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.587722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.589308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.602058][ T915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.603749][ T915] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.605302][ T915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.607017][ T915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.608720][ T915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.610364][ T915] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.612032][ T915] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.624505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.626197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.632095][ T4056] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.633907][ T4056] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.638427][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.639925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.641605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.643149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.644605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.646155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.648153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.649632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.658745][ T915] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.660040][ T915] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.663440][ T4046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.670051][ T4087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.671612][ T4087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.679611][ T915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.681240][ T915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.682892][ T915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.684338][ T915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.686080][ T915] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.695715][ T915] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.701410][ T4049] device veth0_vlan entered promiscuous mode [ 35.707045][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.713813][ T4049] device veth1_vlan entered promiscuous mode [ 35.722922][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.724647][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.726401][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.743552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.745096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.746354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.752921][ T4056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.756224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.758239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.767759][ T4042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.776371][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.778635][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.780092][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.781550][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.783672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.785157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.789565][ T4049] device veth0_macvtap entered promiscuous mode [ 35.792434][ T4046] device veth0_vlan entered promiscuous mode [ 35.802871][ T4049] device veth1_macvtap entered promiscuous mode [ 35.809874][ T4046] device veth1_vlan entered promiscuous mode [ 35.824391][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.825918][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.828283][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.829889][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.831408][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.832969][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.834237][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.843235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.844816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.846298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.850262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.852363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.853877][ T4042] device veth0_vlan entered promiscuous mode [ 35.860166][ T4041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.864715][ T4049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.869201][ T4087] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.870796][ T4087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.873535][ T4049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.876518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.878294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.883234][ T4042] device veth1_vlan entered promiscuous mode [ 35.888586][ T4049] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.889949][ T4049] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.891292][ T4049] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.892628][ T4049] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.895956][ T4087] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.897519][ T4087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.899097][ T4087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.901902][ T4087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.903534][ T4087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.905629][ T4046] device veth0_macvtap entered promiscuous mode [ 35.909903][ T4087] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.911529][ T4087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.913204][ T4087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.920882][ T4046] device veth1_macvtap entered promiscuous mode [ 35.952695][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.954268][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.955765][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.957974][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.962834][ T4046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.964594][ T4046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.966635][ T4046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.971488][ T4087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.972956][ T4087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.974476][ T4087] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.976039][ T4087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.978334][ T4087] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.979719][ T4087] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.983356][ T4041] device veth0_vlan entered promiscuous mode [ 35.988791][ T4046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.990462][ T4046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.992603][ T4046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.994179][ T4056] device veth0_vlan entered promiscuous mode [ 35.995482][ T4087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.997095][ T4087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.998708][ T4087] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.000235][ T4087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.002025][ T4042] device veth0_macvtap entered promiscuous mode [ 36.005089][ T4041] device veth1_vlan entered promiscuous mode [ 36.013383][ T4087] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.014849][ T4087] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.016320][ T4087] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.020066][ T4087] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 36.023951][ T4042] device veth1_macvtap entered promiscuous mode [ 36.026468][ T353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.027988][ T353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.030316][ T4046] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.031669][ T4046] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.033025][ T4046] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.034327][ T4046] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.041618][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.043127][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.044553][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.053482][ T4056] device veth1_vlan entered promiscuous mode [ 36.062234][ T4042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.063942][ T4042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.065362][ T4042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.069349][ T4042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.071675][ T4042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.079324][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 36.080923][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.082437][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.083913][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.090419][ T353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.091671][ T353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.094784][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.096425][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.099235][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.106678][ T4042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.111948][ T4042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.113457][ T4042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.114921][ T4042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.117942][ T4042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.119863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.121491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.122969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.124503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.126370][ T4056] device veth0_macvtap entered promiscuous mode [ 36.129527][ T4041] device veth0_macvtap entered promiscuous mode [ 36.134600][ T4041] device veth1_macvtap entered promiscuous mode [ 36.142158][ T4042] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.143577][ T4042] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.144960][ T4042] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.146328][ T4042] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.155797][ T4041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.159901][ T4041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.162258][ T4041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.164306][ T4041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.165747][ T4041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.168678][ T4041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.171051][ T4041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.173630][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.174916][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.182298][ T4041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.184031][ T4041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.185821][ T4087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.187730][ T4087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.194707][ T4153] binder: 4152:4153 unknown command 0 [ 36.195606][ T4153] binder: 4152:4153 ioctl c0306201 20000080 returned -22 [ 36.197504][ T4041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.199246][ T4041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.200805][ T4041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.202022][ T4153] binder: 4152:4153 got transaction to invalid handle, 1 [ 36.202275][ T4041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.203478][ T4153] binder: 4152:4153 transaction failed 29201/-22, size 0-24 line 2917 [ 36.205581][ T4041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.210960][ T25] binder: undelivered TRANSACTION_ERROR: 29201 [ 36.212162][ T4056] device veth1_macvtap entered promiscuous mode [ 36.214938][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.216541][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.218269][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.219874][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.221272][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.222721][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.224230][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.231535][ T4155] udc-core: couldn't find an available UDC or it's busy [ 36.232715][ T4155] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 36.243273][ T4041] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.244740][ T4041] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.246182][ T4041] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.249689][ T4041] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.269895][ T4056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.271525][ T4056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.273065][ T4056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.280902][ T4056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.282479][ T4056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.284186][ T4056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.289225][ T4056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.290953][ T4056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.294844][ T4056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.300485][ T26] audit: type=1326 audit(36.280:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4157 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88fa20a8 code=0x7ffc0000 [ 36.303972][ T26] audit: type=1326 audit(36.280:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4157 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88fa20a8 code=0x7ffc0000 [ 36.310728][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.312391][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.314100][ T26] audit: type=1326 audit(36.280:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4157 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff88fa20a8 code=0x7ffc0000 [ 36.315150][ T4056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.324231][ T4056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.325864][ T4056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.330873][ T4056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.332415][ T4056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.334125][ T4056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.335905][ T4056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.338227][ T4056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.340447][ T4056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.342177][ T915] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.343938][ T915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.345451][ T26] audit: type=1326 audit(36.280:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4157 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88fa20a8 code=0x7ffc0000 [ 36.351236][ T26] audit: type=1326 audit(36.280:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4157 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88fa20a8 code=0x7ffc0000 [ 36.356590][ T26] audit: type=1326 audit(36.280:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4157 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff88fa20a8 code=0x7ffc0000 [ 36.361721][ T26] audit: type=1326 audit(36.280:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4157 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88fa20a8 code=0x7ffc0000 [ 36.367590][ T26] audit: type=1326 audit(36.280:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4157 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88fa20a8 code=0x7ffc0000 [ 36.368046][ T4056] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.371367][ T26] audit: type=1326 audit(36.280:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4157 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff88fa20a8 code=0x7ffc0000 [ 36.373222][ T4056] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.375783][ T26] audit: type=1326 audit(36.280:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4157 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88fa20a8 code=0x7ffc0000 [ 36.381224][ T4056] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.382601][ T4056] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.385683][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.393035][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.395683][ T915] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.400173][ T915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.401420][ T915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.403284][ T915] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.411837][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.413044][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.418603][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.432770][ T915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.434026][ T915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.438631][ T915] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.476610][ T915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.477937][ T915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.484723][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.495662][ T353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.497177][ T353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.499343][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.501948][ T4166] loop1: detected capacity change from 0 to 16 [ 36.510480][ T4166] erofs: (device loop1): mounted with root inode @ nid 36. [ 36.545769][ T4170] loop4: detected capacity change from 0 to 512 [ 36.563201][ T4170] EXT4-fs (loop4): orphan cleanup on readonly fs [ 36.565591][ T4170] EXT4-fs error (device loop4): ext4_acquire_dquot:6207: comm syz.4.5: Failed to acquire dquot type 0 [ 36.572119][ T4170] EXT4-fs error (device loop4): ext4_acquire_dquot:6207: comm syz.4.5: Failed to acquire dquot type 0 [ 36.578114][ T4170] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.5: bg 0: block 64: padding at end of block bitmap is not set [ 36.580963][ T4170] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 36.583028][ T4170] EXT4-fs error (device loop4): ext4_acquire_dquot:6207: comm syz.4.5: Failed to acquire dquot type 0 [ 36.589116][ T4170] EXT4-fs (loop4): 1 orphan inode deleted [ 36.604712][ T4174] loop3: detected capacity change from 0 to 128 [ 36.627761][ T4098] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 36.629545][ T4170] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000003,nolazytime,,errors=continue. Quota mode: writeback. [ 36.639116][ T4174] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 36.643833][ T4174] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 36.671012][ T915] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 36.724174][ T4178] binder: 4177:4178 unknown command 0 [ 36.725751][ T4178] binder: 4177:4178 ioctl c0306201 20000080 returned -22 [ 36.740645][ T4178] binder: tried to use weak ref as strong ref [ 36.741735][ T4178] binder: 4177:4178 Acquire 1 refcount change on invalid ref 0 ret -22 [ 36.743190][ T4178] binder: 4177:4178 got transaction to invalid handle, 1 [ 36.744311][ T4178] binder: 4177:4178 transaction failed 29201/-22, size 0-24 line 2917 [ 36.768811][ T4129] binder: undelivered TRANSACTION_ERROR: 29201 [ 36.772796][ T4183] loop2: detected capacity change from 0 to 512 [ 36.837679][ T4183] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.839736][ T4183] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 36.856478][ T4183] EXT4-fs (loop2): 1 truncate cleaned up [ 36.857510][ T4183] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,journal_dev=0x0000000000000003,block_validity,lazytime,nombcache,usrjquota=,,errors=continue. Quota mode: none. [ 36.859684][ T4194] loop4: detected capacity change from 0 to 1024 [ 36.914002][ T4202] loop3: detected capacity change from 0 to 1024 [ 36.965992][ T4202] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 36.967210][ T4111] Bluetooth: hci2: command 0x041b tx timeout [ 36.967283][ T4111] Bluetooth: hci3: command 0x041b tx timeout [ 36.967330][ T4111] Bluetooth: hci4: command 0x041b tx timeout [ 36.967395][ T4111] Bluetooth: hci0: command 0x041b tx timeout [ 36.975759][ T4202] hfsplus: xattr searching failed [ 37.011197][ T4213] binder: 4212:4213 unknown command 0 [ 37.012111][ T4213] binder: 4212:4213 ioctl c0306201 20000080 returned -22 [ 37.012989][ T4211] Illegal XDP return value 2636557348, expect packet loss! [ 37.014413][ T4213] binder: tried to use weak ref as strong ref [ 37.015479][ T4213] binder: 4212:4213 Acquire 1 refcount change on invalid ref 0 ret -22 [ 37.017249][ T4098] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 37.019110][ T4098] usb 1-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 37.020490][ T4098] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.024093][ T4098] usb 1-1: config 0 descriptor?? [ 37.025804][ T4213] binder: 4212:4213 got transaction to invalid handle, 1 [ 37.027211][ T4213] binder: 4212:4213 transaction failed 29201/-22, size 0-24 line 2917 [ 37.027351][ T353] hfsplus: b-tree write err: -5, ino 4 [ 37.028712][ T4156] binder: undelivered TRANSACTION_ERROR: 29201 [ 37.047149][ T4089] Bluetooth: hci1: command 0x041b tx timeout [ 37.151434][ T4229] loop3: detected capacity change from 0 to 512 [ 37.181052][ T4229] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 37.191899][ T4229] EXT4-fs (loop3): 1 truncate cleaned up [ 37.192876][ T4229] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,journal_dev=0x0000000000000003,block_validity,lazytime,nombcache,usrjquota=,,errors=continue. Quota mode: none. [ 37.231357][ T4239] binder: 4238:4239 unknown command 0 [ 37.232213][ T4239] binder: 4238:4239 ioctl c0306201 20000080 returned -22 [ 37.240603][ T4239] binder: 4238:4239 got transaction to invalid handle, 1 [ 37.241782][ T4239] binder: 4238:4239 transaction failed 29201/-22, size 0-24 line 2917 [ 37.252195][ T4243] loop4: detected capacity change from 0 to 1024 [ 37.254958][ T4129] binder: undelivered TRANSACTION_ERROR: 29201 [ 37.299579][ T136] hfsplus: b-tree write err: -5, ino 4 [ 37.405829][ T4267] loop4: detected capacity change from 0 to 512 [ 37.430128][ T4270] binder: 4268:4270 unknown command 0 [ 37.431073][ T4270] binder: 4268:4270 ioctl c0306201 20000080 returned -22 [ 37.443288][ T4270] binder: 4268:4270 got transaction to invalid handle, 1 [ 37.444482][ T4270] binder: 4268:4270 transaction failed 29201/-22, size 0-24 line 2917 [ 37.446094][ T4129] binder: undelivered TRANSACTION_ERROR: 29201 [ 37.458064][ T4267] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 37.461960][ T4275] loop1: detected capacity change from 0 to 1024 [ 37.465483][ T4278] loop2: detected capacity change from 0 to 16 [ 37.471704][ T4267] EXT4-fs (loop4): 1 truncate cleaned up [ 37.472655][ T4267] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,journal_dev=0x0000000000000003,block_validity,lazytime,nombcache,usrjquota=,,errors=continue. Quota mode: none. [ 37.494166][ T915] hfsplus: b-tree write err: -5, ino 4 [ 37.501467][ T4098] logitech 0003:046D:CA03.0001: unbalanced delimiter at end of report description [ 37.503228][ T4098] logitech 0003:046D:CA03.0001: parse failed [ 37.505759][ T4098] logitech: probe of 0003:046D:CA03.0001 failed with error -22 [ 37.507864][ T4278] erofs: (device loop2): mounted with root inode @ nid 36. [ 37.626571][ T4298] binder: 4297:4298 unknown command 0 [ 37.635211][ T4298] binder: 4297:4298 ioctl c0306201 20000080 returned -22 [ 37.635381][ T4301] loop3: detected capacity change from 0 to 512 [ 37.640517][ T4298] binder: 4297:4298 got transaction to invalid handle, 1 [ 37.641629][ T4298] binder: 4297:4298 transaction failed 29201/-22, size 0-24 line 2917 [ 37.652738][ T4098] binder: undelivered TRANSACTION_ERROR: 29201 [ 37.659888][ T4304] loop4: detected capacity change from 0 to 1024 [ 37.708650][ T4089] usb 1-1: USB disconnect, device number 2 [ 37.713850][ T136] hfsplus: b-tree write err: -5, ino 4 [ 37.740172][ T4301] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 37.752452][ T4301] EXT4-fs (loop3): 1 truncate cleaned up [ 37.753506][ T4301] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,journal_dev=0x0000000000000003,block_validity,lazytime,nombcache,usrjquota=,,errors=continue. Quota mode: none. [ 37.822998][ T4320] loop1: detected capacity change from 0 to 1024 [ 37.824843][ T4320] hfsplus: unable to parse mount options [ 37.919854][ T4333] binder: 4330:4333 unknown command 0 [ 37.920743][ T4333] binder: 4330:4333 ioctl c0306201 20000080 returned -22 [ 37.931517][ T4333] binder: 4330:4333 tried to acquire reference to desc 0, got 1 instead [ 37.935747][ T4333] binder: 4330:4333 got transaction with invalid data ptr [ 37.940991][ T4333] binder: 4330:4333 transaction failed 29201/-14, size 0-24 line 3186 [ 37.946294][ T4098] binder: undelivered TRANSACTION_ERROR: 29201 [ 38.038531][ T4349] loop3: detected capacity change from 0 to 1024 [ 38.080723][ T4349] hfsplus: unable to parse mount options [ 38.103269][ T4360] binder: 4359:4360 unknown command 0 [ 38.104303][ T4360] binder: 4359:4360 ioctl c0306201 20000080 returned -22 [ 38.107107][ T4360] binder: 4359:4360 tried to acquire reference to desc 0, got 1 instead [ 38.116041][ T4360] binder: 4359:4360 got transaction with invalid data ptr [ 38.125411][ T4360] binder: 4359:4360 transaction failed 29201/-14, size 0-24 line 3186 [ 38.131525][ T4098] binder: undelivered TRANSACTION_ERROR: 29201 [ 38.276660][ T4384] loop3: detected capacity change from 0 to 1024 [ 38.296053][ T4390] binder: 4389:4390 unknown command 0 [ 38.297109][ T4390] binder: 4389:4390 ioctl c0306201 20000080 returned -22 [ 38.299221][ T4390] binder: 4389:4390 tried to acquire reference to desc 0, got 1 instead [ 38.300704][ T4390] binder: 4389:4390 got transaction with invalid data ptr [ 38.301873][ T4390] binder: 4389:4390 transaction failed 29201/-14, size 0-24 line 3186 [ 38.304426][ T4111] binder: undelivered TRANSACTION_ERROR: 29201 [ 38.317795][ T4384] hfsplus: unable to parse mount options [ 38.397921][ T4408] ======================================================= [ 38.397921][ T4408] WARNING: The mand mount option has been deprecated and [ 38.397921][ T4408] and is ignored by this kernel. Remove the mand [ 38.397921][ T4408] option from the mount to silence this warning. [ 38.397921][ T4408] ======================================================= [ 38.441529][ T4418] loop0: detected capacity change from 0 to 16 [ 38.460389][ T4423] binder: 4422:4423 unknown command 0 [ 38.461374][ T4423] binder: 4422:4423 ioctl c0306201 20000080 returned -22 [ 38.475321][ T4423] binder: tried to use weak ref as strong ref [ 38.476266][ T4423] binder: 4422:4423 Acquire 1 refcount change on invalid ref 0 ret -22 [ 38.480442][ T4428] loop2: detected capacity change from 0 to 512 [ 38.488106][ T4418] erofs: (device loop0): mounted with root inode @ nid 36. [ 38.492275][ T4423] binder: 4422:4423 got transaction to invalid handle, 1 [ 38.493477][ T4423] binder: 4422:4423 transaction failed 29201/-22, size 0-24 line 2917 [ 38.499837][ T4430] loop4: detected capacity change from 0 to 1024 [ 38.501742][ T4098] binder: undelivered TRANSACTION_ERROR: 29201 [ 38.543048][ T4438] loop3: detected capacity change from 0 to 1024 [ 38.559016][ T4428] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 38.560931][ T136] hfsplus: b-tree write err: -5, ino 4 [ 38.562665][ T4438] hfsplus: unable to parse mount options [ 38.569561][ T4428] EXT4-fs (loop2): 1 truncate cleaned up [ 38.570424][ T4428] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,journal_dev=0x0000000000000003,block_validity,lazytime,nombcache,usrjquota=,,errors=continue. Quota mode: none. [ 38.673015][ T4455] binder: 4454:4455 unknown command 0 [ 38.674028][ T4455] binder: 4454:4455 ioctl c0306201 20000080 returned -22 [ 38.690580][ T4455] binder: tried to use weak ref as strong ref [ 38.692052][ T4455] binder: 4454:4455 Acquire 1 refcount change on invalid ref 0 ret -22 [ 38.693918][ T4455] binder: 4454:4455 got transaction to invalid handle, 1 [ 38.722337][ T4465] loop1: detected capacity change from 0 to 1024 [ 38.731419][ T4469] loop4: detected capacity change from 0 to 512 [ 38.764344][ T4473] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.151'. [ 38.832966][ T4481] loop3: detected capacity change from 0 to 1024 [ 38.834363][ T9] hfsplus: b-tree write err: -5, ino 4 [ 38.838075][ T4469] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 38.849978][ T4469] EXT4-fs (loop4): 1 truncate cleaned up [ 38.850891][ T4469] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,journal_dev=0x0000000000000003,block_validity,lazytime,nombcache,usrjquota=,,errors=continue. Quota mode: none. [ 38.871549][ T4486] binder: 4485:4486 unknown command 0 [ 38.872446][ T4486] binder: 4485:4486 ioctl c0306201 20000080 returned -22 [ 38.874802][ T4486] binder: tried to use weak ref as strong ref [ 38.875724][ T4486] binder: 4485:4486 Acquire 1 refcount change on invalid ref 0 ret -22 [ 38.878534][ T4486] binder: 4485:4486 got transaction to invalid handle, 1 [ 38.898408][ T4481] hfsplus: unable to parse mount options [ 38.940505][ T4498] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.163'. [ 38.973215][ T4503] loop4: detected capacity change from 0 to 1024 [ 39.047238][ T4089] Bluetooth: hci0: command 0x040f tx timeout [ 39.048367][ T4089] Bluetooth: hci4: command 0x040f tx timeout [ 39.049339][ T4089] Bluetooth: hci3: command 0x040f tx timeout [ 39.050432][ T4089] Bluetooth: hci2: command 0x040f tx timeout [ 39.075398][ T915] hfsplus: b-tree write err: -5, ino 4 [ 39.089309][ T4511] loop1: detected capacity change from 0 to 512 [ 39.129189][ T4111] Bluetooth: hci1: command 0x040f tx timeout [ 39.160426][ T4513] No such timeout policy "syz1" [ 39.220874][ T4513] loop2: detected capacity change from 0 to 1024 [ 40.379070][ T4516] loop4: detected capacity change from 0 to 128 [ 40.382426][ T4514] binder: 4512:4514 unknown command 0 [ 40.383761][ T4514] binder: 4512:4514 ioctl c0306201 20000080 returned -22 [ 40.385990][ T4514] binder: 4512:4514 tried to acquire reference to desc 0, got 1 instead [ 40.388828][ T4513] hfsplus: unable to parse mount options [ 40.390569][ T4511] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 40.392667][ T4514] binder_alloc: 4512: binder_alloc_buf, no vma [ 40.401515][ T4511] EXT4-fs (loop1): 1 truncate cleaned up [ 40.402436][ T4511] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,journal_dev=0x0000000000000003,block_validity,lazytime,nombcache,usrjquota=,,errors=continue. Quota mode: none. [ 40.443181][ T4526] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.176'. [ 40.489147][ T4532] loop3: detected capacity change from 0 to 1024 [ 40.514178][ T4536] loop1: detected capacity change from 0 to 1024 [ 40.519521][ T4516] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 40.528229][ T4532] hfsplus: unable to parse mount options [ 40.568893][ T915] hfsplus: b-tree write err: -5, ino 4 [ 40.585741][ T4542] binder: 4541:4542 unknown command 0 [ 40.586635][ T4542] binder: 4541:4542 ioctl c0306201 20000080 returned -22 [ 40.592876][ T4542] binder: 4541:4542 tried to acquire reference to desc 0, got 1 instead [ 40.594328][ T4542] binder_alloc: 4541: binder_alloc_buf, no vma [ 40.621239][ T4545] loop0: detected capacity change from 0 to 512 [ 40.626343][ T4546] loop1: detected capacity change from 0 to 16 [ 40.658876][ T4546] erofs: (device loop1): mounted with root inode @ nid 36. [ 40.699895][ T4545] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 40.708391][ T4545] EXT4-fs (loop0): 1 truncate cleaned up [ 40.709335][ T4545] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,journal_dev=0x0000000000000003,block_validity,lazytime,nombcache,usrjquota=,,errors=continue. Quota mode: none. [ 40.710199][ T4563] loop4: detected capacity change from 0 to 1024 [ 40.793815][ T915] hfsplus: b-tree write err: -5, ino 4 [ 40.825356][ T4570] binder: 4569:4570 unknown command 0 [ 40.826330][ T4570] binder: 4569:4570 ioctl c0306201 20000080 returned -22 [ 40.828694][ T4570] binder: 4569:4570 tried to acquire reference to desc 0, got 1 instead [ 40.830215][ T4570] binder_alloc: 4569: binder_alloc_buf, no vma [ 40.939909][ T4577] loop4: detected capacity change from 0 to 1024 [ 40.957882][ T4577] hfsplus: unable to parse mount options [ 41.128150][ T4089] Bluetooth: hci2: command 0x0419 tx timeout [ 41.129740][ T4089] Bluetooth: hci3: command 0x0419 tx timeout [ 41.131144][ T4089] Bluetooth: hci4: command 0x0419 tx timeout [ 41.132552][ T4089] Bluetooth: hci0: command 0x0419 tx timeout [ 41.207932][ T4089] Bluetooth: hci1: command 0x0419 tx timeout [ 41.359894][ T4594] loop3: detected capacity change from 0 to 1024 [ 41.364079][ T4596] loop2: detected capacity change from 0 to 512 [ 41.416037][ T9] hfsplus: b-tree write err: -5, ino 4 [ 41.423577][ T4600] binder: 4599:4600 unknown command 0 [ 41.424594][ T4600] binder: 4599:4600 ioctl c0306201 20000080 returned -22 [ 41.426565][ T4600] binder: tried to use weak ref as strong ref [ 41.427852][ T4600] binder: 4599:4600 Acquire 1 refcount change on invalid ref 0 ret -22 [ 41.430635][ T4600] binder: 4599:4600 got transaction to invalid handle, 1 [ 41.431946][ T4600] binder_transaction: 5 callbacks suppressed [ 41.431956][ T4600] binder: 4599:4600 transaction failed 29201/-22, size 0-24 line 2917 [ 41.434584][ T4098] binder_release_work: 5 callbacks suppressed [ 41.434591][ T4098] binder: undelivered TRANSACTION_ERROR: 29201 [ 41.437040][ T4596] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 41.440875][ T4596] EXT4-fs (loop2): 1 truncate cleaned up [ 41.441805][ T4596] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,journal_dev=0x0000000000000003,block_validity,lazytime,nombcache,usrjquota=,,errors=continue. Quota mode: none. [ 41.619086][ T4619] loop1: detected capacity change from 0 to 1024 [ 41.633208][ T4623] loop3: detected capacity change from 0 to 1024 [ 41.643171][ T4625] binder: 4624:4625 unknown command 0 [ 41.644134][ T4625] binder: 4624:4625 ioctl c0306201 20000080 returned -22 [ 41.648833][ T4619] hfsplus: unable to parse mount options [ 41.650722][ T4625] binder: tried to use weak ref as strong ref [ 41.651816][ T4625] binder: 4624:4625 Acquire 1 refcount change on invalid ref 0 ret -22 [ 41.655359][ T4625] binder: 4624:4625 got transaction to invalid handle, 1 [ 41.656598][ T4625] binder: 4624:4625 transaction failed 29201/-22, size 0-24 line 2917 [ 41.658644][ T4111] binder: undelivered TRANSACTION_ERROR: 29201 [ 41.677262][ T9] hfsplus: b-tree write err: -5, ino 4 [ 41.679745][ T4629] loop2: detected capacity change from 0 to 512 [ 41.765752][ T4641] loop3: detected capacity change from 0 to 16 [ 41.788243][ T4629] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 41.791061][ T4641] erofs: (device loop3): mounted with root inode @ nid 36. [ 41.800793][ T4629] EXT4-fs (loop2): 1 truncate cleaned up [ 41.801692][ T4629] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,journal_dev=0x0000000000000003,block_validity,lazytime,nombcache,usrjquota=,,errors=continue. Quota mode: none. [ 41.844218][ T4653] binder: 4652:4653 unknown command 0 [ 41.845097][ T4653] binder: 4652:4653 ioctl c0306201 20000080 returned -22 [ 41.872582][ T4653] binder: tried to use weak ref as strong ref [ 41.879986][ T4653] binder: 4652:4653 Acquire 1 refcount change on invalid ref 0 ret -22 [ 41.886547][ T4655] loop4: detected capacity change from 0 to 1024 [ 41.887904][ T4653] binder: 4652:4653 got transaction to invalid handle, 1 [ 41.892589][ T4653] binder: 4652:4653 transaction failed 29201/-22, size 0-24 line 2917 [ 41.914107][ T4111] binder: undelivered TRANSACTION_ERROR: 29201 [ 41.950017][ T4661] loop0: detected capacity change from 0 to 128 [ 41.967735][ T915] hfsplus: b-tree write err: -5, ino 4 [ 42.026359][ T4669] loop1: detected capacity change from 0 to 8 [ 42.030724][ T4661] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 42.034492][ T4669] SQUASHFS error: Failed to read block 0x62: -5 [ 42.035522][ T4669] squashfs image failed sanity check [ 42.541841][ T4694] binder: 4693:4694 unknown command 0 [ 42.545030][ T4694] binder: 4693:4694 ioctl c0306201 20000080 returned -22 [ 42.554731][ T4694] binder: BINDER_SET_CONTEXT_MGR already set [ 42.555983][ T4694] binder: 4693:4694 ioctl 4018620d 20000040 returned -16 [ 42.567300][ T4694] binder: 4693:4694 got transaction to invalid handle, 1 [ 42.569794][ T4694] binder: 4693:4694 transaction failed 29201/-22, size 0-24 line 2917 [ 42.571236][ T4696] loop0: detected capacity change from 0 to 1024 [ 42.572832][ T25] binder: undelivered TRANSACTION_ERROR: 29201 [ 42.602962][ T4087] hfsplus: b-tree write err: -5, ino 4 [ 42.618578][ T4698] loop1: detected capacity change from 0 to 512 [ 42.637945][ T4704] 9pnet: Insufficient options for proto=fd [ 42.651362][ T4702] loop3: detected capacity change from 0 to 1024 [ 42.673909][ T4698] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e00ee118, mo2=0000] [ 42.674384][ T4710] loop0: detected capacity change from 0 to 128 [ 42.675302][ T4698] System zones: 0-2, 34-35 [ 42.680652][ T4698] EXT4-fs (loop1): orphan cleanup on readonly fs [ 42.682215][ T4698] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #4: comm syz.1.251: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 42.687982][ T4698] EXT4-fs error (device loop1): ext4_quota_enable:6418: comm syz.1.251: Bad quota inode: 4, type: 1 [ 42.690600][ T4698] EXT4-fs warning (device loop1): ext4_enable_quotas:6459: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 42.693704][ T4698] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 42.695465][ T4698] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,debug,journal_dev=0x0000000000000005,nouid32,barrier=0x0000000000000081,norecovery,nodelalloc,,errors=continue. Quota mode: writeback. [ 42.697481][ T4702] hfsplus: unable to parse mount options [ 42.708361][ T4698] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 42.711653][ T4698] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e00ee118, mo2=0000] [ 42.721726][ T4698] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #4: comm syz.1.251: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 42.725047][ T4698] EXT4-fs error (device loop1): ext4_quota_enable:6418: comm syz.1.251: Bad quota inode: 4, type: 1 [ 42.727655][ T4698] EXT4-fs warning (device loop1): ext4_enable_quotas:6459: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 42.761715][ T4720] binder: 4719:4720 unknown command 0 [ 42.762671][ T4720] binder: 4719:4720 ioctl c0306201 20000080 returned -22 [ 42.765788][ T4720] binder: BINDER_SET_CONTEXT_MGR already set [ 42.767824][ T4720] binder: 4719:4720 ioctl 4018620d 20000040 returned -16 [ 42.768422][ T4721] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 42.772739][ T4721] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e00ee118, mo2=0000] [ 42.776538][ T4720] binder: 4719:4720 got transaction to invalid handle, 1 [ 42.788685][ T4710] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 42.794141][ T4720] binder: 4719:4720 transaction failed 29201/-22, size 0-24 line 2917 [ 42.800249][ T4721] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #4: comm syz.1.251: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 42.811643][ T4698] udc-core: couldn't find an available UDC or it's busy [ 42.811921][ T25] binder: undelivered TRANSACTION_ERROR: 29201 [ 42.815251][ T4721] EXT4-fs error (device loop1): ext4_quota_enable:6418: comm syz.1.251: Bad quota inode: 4, type: 1 [ 42.816344][ T4698] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 42.836176][ T4727] loop3: detected capacity change from 0 to 512 [ 42.849318][ T4721] EXT4-fs warning (device loop1): ext4_enable_quotas:6459: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 42.851966][ T4727] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 42.862825][ T4727] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 42.864599][ T4730] loop4: detected capacity change from 0 to 1024 [ 42.865544][ T4727] EXT4-fs (loop3): 1 truncate cleaned up [ 42.869352][ T4727] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,resgid=0x0000000000000000,nolazytime,jqfmt=vfsv0,. Quota mode: none. [ 42.891654][ T4732] loop0: detected capacity change from 0 to 16 [ 42.941620][ T4732] erofs: (device loop0): mounted with root inode @ nid 36. [ 42.974934][ T4738] 9pnet: Insufficient options for proto=fd [ 42.985741][ T4087] hfsplus: b-tree write err: -5, ino 4 [ 43.050739][ T4742] loop3: detected capacity change from 0 to 1024 [ 43.086363][ T4752] binder: 4751:4752 unknown command 0 [ 43.087289][ T4742] hfsplus: unable to parse mount options [ 43.088217][ T4752] binder: 4751:4752 ioctl c0306201 20000080 returned -22 [ 43.090010][ T4752] binder: BINDER_SET_CONTEXT_MGR already set [ 43.090989][ T4752] binder: 4751:4752 ioctl 4018620d 20000040 returned -16 [ 43.092534][ T4752] binder: 4751:4752 got transaction to invalid handle, 1 [ 43.093408][ T4754] loop4: detected capacity change from 0 to 128 [ 43.093785][ T4752] binder: 4751:4752 transaction failed 29201/-22, size 0-24 line 2917 [ 43.098112][ T13] binder: undelivered TRANSACTION_ERROR: 29201 [ 43.207339][ T4043] Bluetooth: hci0: command 0x0401 tx timeout [ 43.584139][ T4754] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 43.664856][ T4765] loop3: detected capacity change from 0 to 1024 [ 43.734996][ T915] hfsplus: b-tree write err: -5, ino 4 [ 43.742583][ T4773] 9pnet: Insufficient options for proto=fd [ 43.810242][ T4785] loop1: detected capacity change from 0 to 1024 [ 43.864722][ T4790] binder: 4788:4790 got transaction to invalid handle, 1 [ 43.866064][ T4790] binder: 4788:4790 transaction failed 29201/-22, size 0-24 line 2917 [ 43.867882][ T1968] binder: undelivered TRANSACTION_ERROR: 29201 [ 43.895898][ T4792] netlink: 28 bytes leftover after parsing attributes in process `syz.0.291'. [ 44.301812][ T4785] hfsplus: unable to parse mount options [ 44.367856][ T4800] loop2: detected capacity change from 0 to 16 [ 44.394783][ T4805] loop0: detected capacity change from 0 to 1024 [ 44.399173][ T4800] erofs: (device loop2): mounted with root inode @ nid 36. [ 44.429335][ T4761] hfsplus: b-tree write err: -5, ino 4 [ 44.518160][ T4818] binder: 4817:4818 got transaction to invalid handle, 1 [ 44.519504][ T4818] binder: 4817:4818 transaction failed 29201/-22, size 0-24 line 2917 [ 44.527710][ T13] binder: undelivered TRANSACTION_ERROR: 29201 [ 44.567172][ T4822] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.304'. [ 44.608471][ T4820] Internal error: Oops - BTI: 0000000036000001 [#1] PREEMPT SMP [ 44.609746][ T4820] Modules linked in: [ 44.610356][ T4820] CPU: 0 PID: 4820 Comm: syz.0.303 Not tainted 5.15.189-syzkaller #0 [ 44.611663][ T4820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 44.613230][ T4820] pstate: 42400405 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=jc) [ 44.614432][ T4820] pc : userfaultfd_ioctl+0x3464/0x46a0 [ 44.615345][ T4820] lr : userfaultfd_ioctl+0x3440/0x46a0 [ 44.616197][ T4820] sp : ffff80001ff27900 [ 44.616822][ T4820] x29: ffff80001ff27cd0 x28: 000000000017e000 x27: ffff700003fe4f34 [ 44.618158][ T4820] x26: 0000000000400000 x25: ffff0000d902cac0 x24: ffff0000d1934190 [ 44.619556][ T4820] x23: dfff800000000000 x22: 000000200000a000 x21: 00000000200000a0 [ 44.620847][ T4820] x20: 00000000fffffff2 x19: ffff0000d1934000 x18: 0000000000000000 [ 44.622169][ T4820] x17: 0000000000000002 x16: ffff800008a104ec x15: 0000000020309000 [ 44.623466][ T4820] x14: 0000000000000000 x13: 1ffff0000282e06b x12: 0000000000ff0100 [ 44.624762][ T4820] x11: 0000000000000000 x10: 00000000200000a0 x9 : 0000ffffffffffff [ 44.626170][ T4820] x8 : 00000000200000a0 x7 : ffff800008750ed4 x6 : 0000000000000000 [ 44.627471][ T4820] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000001 [ 44.628866][ T4820] x2 : 0000000000000008 x1 : 0000000000000001 x0 : 0000000000000000 [ 44.630268][ T4820] Call trace: [ 44.630831][ T4820] userfaultfd_ioctl+0x3464/0x46a0 [ 44.631716][ T4820] __arm64_sys_ioctl+0x14c/0x1c8 [ 44.632531][ T4820] invoke_syscall+0x98/0x2b8 [ 44.633283][ T4820] el0_svc_common+0x138/0x258 [ 44.634027][ T4820] do_el0_svc+0x58/0x14c [ 44.634719][ T4820] el0_svc+0x78/0x1e0 [ 44.635402][ T4820] el0t_64_sync_handler+0xcc/0xe4 [ 44.636284][ T4820] el0t_64_sync+0x1a0/0x1a4 [ 44.637051][ T4820] Code: d503229f 2a1f03f4 2a1f03e0 f800095c (2a1403e1) [ 44.638177][ T4820] ---[ end trace 68475be09f7be1ec ]--- [ 44.829657][ T4820] Kernel panic - not syncing: Oops - BTI: Fatal exception [ 44.830785][ T4820] SMP: stopping secondary CPUs [ 44.831530][ T4820] Kernel Offset: disabled [ 44.832190][ T4820] CPU features: 0x8,000003c1,7d33ffd9 [ 44.833103][ T4820] Memory Limit: none [ 45.022846][ T4820] Rebooting in 86400 seconds..