last executing test programs: 25.207784617s ago: executing program 4 (id=146): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x9, 0xa, 0x3}) mq_timedreceive(r0, 0x0, 0xfffffffffffffee3, 0x1, 0x0) mq_timedreceive(r0, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mq_timedreceive(r0, &(0x7f0000000640)=""/155, 0x9b, 0x1000, 0x0) 24.296607276s ago: executing program 4 (id=155): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x6, 0x4, 0xdd, 0xa}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x51a23}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @rand_addr=0x64010101}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 24.096718845s ago: executing program 4 (id=158): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1, 0x5, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000800018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 23.845553116s ago: executing program 4 (id=159): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xe) syz_open_dev$tty20(0xc, 0x4, 0x1) unshare(0x600) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 23.222755143s ago: executing program 4 (id=163): r0 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 22.625886779s ago: executing program 4 (id=169): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x474e, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e22, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0xfffffffc}], 0x1, 0x45833af92e4b39ff, 0x0) 22.36624149s ago: executing program 32 (id=169): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x474e, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e22, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0xfffffffc}], 0x1, 0x45833af92e4b39ff, 0x0) 12.568439025s ago: executing program 3 (id=213): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x2080) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0xc000) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) 12.086568246s ago: executing program 3 (id=216): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x10000, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x158) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000380)='./bus\x00', 0x63022, &(0x7f0000000140)=ANY=[], 0x1, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x21) setxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000b00)=ANY=[@ANYBLOB="0200000001000500000000000400040000000000100003000000000020"], 0x24, 0x2) 11.7815608s ago: executing program 3 (id=219): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r1, &(0x7f0000000a80)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x200, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r1], 0x108}}], 0x1, 0xc040) 11.492676232s ago: executing program 3 (id=222): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000240)='./file0/file0\x00', 0x72) 11.30208815s ago: executing program 3 (id=223): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0xba98000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x5000003a, r0, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', r2, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4) read$FUSE(r1, &(0x7f0000000f40)={0x2020}, 0x2020) 9.68304686s ago: executing program 3 (id=235): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/4080, 0xff0, 0x0, 0x0}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40) 9.403991203s ago: executing program 33 (id=235): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/4080, 0xff0, 0x0, 0x0}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40) 7.349010402s ago: executing program 2 (id=251): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x40, 0xa, 0x6, "6ef1989edd08"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="20131d00000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xb, 0x0, &(0x7f00000000c0)) socket$packet(0x11, 0x2, 0x300) ioctl$int_out(0xffffffffffffffff, 0x2, &(0x7f0000000040)) 5.197190625s ago: executing program 5 (id=261): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x20, 0x10, 0x1, 0x70fd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x40810, 0x8003}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @multicast1, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 4.884697568s ago: executing program 5 (id=262): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = getpgid(0x0) syz_pidfd_open(r1, 0x0) setns(0xffffffffffffffff, 0x66020000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x804d, {0xa, 0x14, 0x0, 0x0, 0xfe, 0x1, 0x0, 0x0, 0x2400}, [@RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x30}, 0x1, 0x11}, 0x20000080) 4.663133558s ago: executing program 5 (id=265): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000440)={0x40, 0x14, 0x5, "140eff6a25"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 4.517834535s ago: executing program 2 (id=266): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x0, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f0000001e00)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x100) truncate(&(0x7f0000000080)='./file0\x00', 0x3a6000) truncate(&(0x7f0000000000)='./file0\x00', 0x7) truncate(&(0x7f0000000080)='./file0\x00', 0x3a6800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 3.035216799s ago: executing program 0 (id=272): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x2c, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x12502}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0xc000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x4ffe6, 0x0) 3.01027349s ago: executing program 2 (id=273): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r2, 0x5) listen(r1, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a010000000000000080ff00fffeffe809000000fff5dd00000010000100060808004149014006040800", 0x58}], 0x1) 2.902708825s ago: executing program 1 (id=274): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/109, 0x6d}], 0x1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f00000004c0)="9266b709b6a124c788f903c38e5f6f0102c2de5d1cb867eb", 0x0, 0x18) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}}) 2.32538543s ago: executing program 2 (id=275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x40) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x586, &(0x7f0000000600)="$eJzs3U9sHFcZAPBvdx0ncd2mCY3UlIMDqUj/KLbblZwaDoQDHCjqpUioUjlYycYOXsfGdkVtLu6NE0UCBKiiasQBCSRiiQNwqChIHJAIEgIhLNRKIA78aQHhHigBjGZ31t54Z51Ftndbz+8nbfbNm7G/93bzvd19b9YTQG6dTv4pRAxGxI2IOFbfvPWA0/W775RXp66XV6cKsbHx5N8KteOulVenGoc2fu6OiFiJiHsj4seXIy4eao27sLQ8PVGtVubT7ZHFmbmRhaXlc1dmJiYrk5Wr5fJj42Nj4+fHRv+P3hR23PuJuddP/GbqicmXhv791PmZb/y1EBdq/Y5t/dhLWS3qK0Rc2I9gPVBK+hMRAx0ef7Ly/Mv73CQ69KUTayPJc3dPRNxfy/9jUao9mxEffPHpfxyLD9xs97M31l78UzfbCgDsnY3E4Z13AwdTMZLP/oXicETUy8Xi8HD9M/w9MVCszi4sPnx59pmrl+pzBHfHoeLlK9XKaDpXcHccKiTbj9TKW9uPbtsuR8TxiPhc6Whte/jibPVSV0c6oGEw4rXvfvpi/x3b8v+PpXr+AwdXkv+/+sn3f5iU3yz1ujVANyX5/603Zx4P+Q+5c/v8P9L1NgHd4fUf8kv+Q3615v/O584CB4fXf8gv+Q/5Jf8hv+Q/5Jf8h/xqzn/pD/l0fOiVtUJErLz/aO2W6E/3ZfzZHuAA2bjTt/whr7z3h/zq2yoe7WU7gO7zGR+43dn/bb8NPLf3bQG6o9jrBgA9c/aU9T/IK/P/kF99vW4A0DPe4wPm/yF/zP9Dfg22uf7XnU3X7hqNiLsi4melQ4cb1/oC3rkGI1574cb3no4o/rmQvv9PxoKJ11/9UfNx/YV/1pYI+iPiMy88+ZVnJxYX5x9J6v++Wb/41bT+0V71BuhEI08beQzk18LS8vREtVqZV1DYVoh4WzRDYR8LjXHgWnl1qnHr1tjz/EMRb3yofhJCEvd6eqvv7UvnJo/U1igH1gu3nKtQ2IO1y8+fi1h5LiLuzep/Ib3eeX3lY2C91BL/Xel9cjuVzp8kx5zsMH7prt3Fv68p/lBT/Hd3GH/t4x0euE+Of7u38V/67eayV1/W49+3y6/EnrjN/se/uatfv2t/+H1v498/1Nv4X56NeCUZf0az8q+YpOXmymfz+PPFL9TnSvp3Gf+zZ7fGv+st419xc/wrtRn/TncY56dPVT6ZVV/6ecQbz0Xclxm/Ee9ILdbAerEl/pmm8eeBHeL/5WO/nM6qv/BqxMa1iLORHb851sjizNzIwtLyuSszE5OVycrVcvmx8bGx8fNjoyO1OeqRxkx1qydunvxwVv2Zr9f7P9AmfqP/7R7/jR363Gz5a58afE9G/S9O1eM/cCb7+T+Rxq8//n0t8d+b3if/T/6TnsubHPNWRBxO6x+MiB+8fPyhrHZ99GY9/qU2/S/eEr+1/w932P/43X+fyap+9iOd/gIAYC+1nxrodcsAAIC91o2Vxl73Ecg2sN4fzcvAhZWmdYWVrXWFpP6tdH2htBLxr3SNIal/MF0lS8qZCw3A287J5ff9utdtAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMi7haXl6YlqtTK/0OuWAN32vwAAAP//mSj9Tw==") openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000400), 0x1, 0x55f, &(0x7f0000000580)="$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") creat(0x0, 0x90) unlink(&(0x7f0000000100)='./file0/file1\x00') 2.304822381s ago: executing program 1 (id=276): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x80, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xffed, r0, 0x0}]) io_getevents(r1, 0x1, 0x1, &(0x7f0000000200)=[{}], 0x0) shutdown(r0, 0x0) 1.810475552s ago: executing program 1 (id=277): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x40, 0x7800, 0x8, 0x71, {{0xa, 0x4, 0x1, 0x3, 0x28, 0x64, 0x0, 0xa, 0x29, 0x0, @empty, @loopback, {[@lsrr={0x83, 0x13, 0x45, [@private=0xa010100, @multicast2, @multicast1, @multicast1]}]}}}}}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x33, 0x2}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = semget$private(0x0, 0x7, 0x195) semtimedop(r0, &(0x7f0000000200)=[{0x4, 0x3, 0x1800}, {0x0, 0xffbf, 0x2000}], 0x2, 0x0) semop(r0, &(0x7f0000000100)=[{0x1, 0x3745}], 0x1) semop(r0, &(0x7f0000000180)=[{0x4, 0x4, 0x1000}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) 1.784943363s ago: executing program 0 (id=278): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000080), 0xfffffe13) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc04f01f56bb6e284f5fab5c66", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x800) splice(r0, 0x0, r3, 0x0, 0x1e8640, 0x0) 1.612408881s ago: executing program 0 (id=279): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 1.531351544s ago: executing program 2 (id=280): r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]}) socket$inet6_udp(0xa, 0x2, 0x0) close_range(r2, 0xffffffffffffffff, 0x600000000000000) 1.447768728s ago: executing program 1 (id=281): getsockopt(0xffffffffffffffff, 0x8, 0x2711, &(0x7f00000002c0)=""/4, &(0x7f0000000000)=0x4) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) shutdown(r0, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000040)={r2, @in={{0x2, 0x4e20, @empty}}, 0x3b, 0x9, 0x81, 0x4, 0x20, 0x7fffffff, 0xff}, &(0x7f0000000140)=0x9c) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000180)={r3, 0x4}, &(0x7f0000000240)=0x8) 1.234535847s ago: executing program 5 (id=282): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x200004}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}, 0x1}}, 0x10) bind$tipc(r0, 0x0, 0x0) 1.17200606s ago: executing program 0 (id=283): syz_open_dev$video(0x0, 0xfff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x8, 0x2, 0x200, &(0x7f0000000d80)="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"}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 1.135939861s ago: executing program 1 (id=284): socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1.116499552s ago: executing program 5 (id=285): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) recvfrom(r1, 0x0, 0x0, 0x2, 0x0, 0x0) 842.237964ms ago: executing program 1 (id=286): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) 770.019417ms ago: executing program 0 (id=287): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r1}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040), 0x2a, 0x0, 0xffffffffffffffff, 0x37}, 0x24) 481.84642ms ago: executing program 0 (id=288): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000001300)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x3, @loopback, 0x3}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000240)="dc", 0x1}], 0x1}}], 0x1, 0x3004c8d1) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)={0x0, 0x5, 0x1, [0x1]}, 0xa) 432.787862ms ago: executing program 2 (id=289): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r1 = syz_io_uring_setup(0xfc9, &(0x7f0000000140)={0x0, 0x3f4d, 0x0, 0x0, 0xfffffffa}, &(0x7f0000000240)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 0s ago: executing program 5 (id=290): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000080)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@clear_cache}, {@ssd_spread}, {@clear_cache}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nospace_cache}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") open(0x0, 0x101980, 0x108) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080)) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000140)={0x17c04, r0, 0x3052, 0x973f, 0x81, 0x1}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.168' (ED25519) to the list of known hosts. syzkaller login: [ 64.210542][ T4169] cgroup: Unknown subsys name 'net' [ 64.347965][ T4169] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.844627][ T4169] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 67.714279][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 67.847066][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.854454][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.863048][ T4190] device bridge_slave_0 entered promiscuous mode [ 67.890382][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.898308][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.906701][ T4190] device bridge_slave_1 entered promiscuous mode [ 67.953088][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 67.976154][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.988193][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.057780][ T4180] chnl_net:caif_netlink_parms(): no params data found [ 68.071314][ T4190] team0: Port device team_slave_0 added [ 68.089416][ T4190] team0: Port device team_slave_1 added [ 68.152046][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 68.165649][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.172915][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.180719][ T4186] device bridge_slave_0 entered promiscuous mode [ 68.189439][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.196599][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.204823][ T4186] device bridge_slave_1 entered promiscuous mode [ 68.222374][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.229357][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.255755][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.302920][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.309895][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.336189][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.379010][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.396796][ T4180] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.403979][ T4180] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.412442][ T4180] device bridge_slave_0 entered promiscuous mode [ 68.421726][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.430873][ T4180] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.437985][ T4180] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.448633][ T4180] device bridge_slave_1 entered promiscuous mode [ 68.508638][ T4179] chnl_net:caif_netlink_parms(): no params data found [ 68.522190][ T4190] device hsr_slave_0 entered promiscuous mode [ 68.528898][ T4190] device hsr_slave_1 entered promiscuous mode [ 68.563290][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.570389][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.578576][ T4181] device bridge_slave_0 entered promiscuous mode [ 68.588836][ T4186] team0: Port device team_slave_0 added [ 68.595140][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.602455][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.610265][ T4181] device bridge_slave_1 entered promiscuous mode [ 68.619093][ T4180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.643167][ T4186] team0: Port device team_slave_1 added [ 68.659608][ T4180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.728429][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.765871][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.774112][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.800482][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.813241][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.820243][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.846365][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.859317][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.870778][ T4180] team0: Port device team_slave_0 added [ 68.895580][ T4179] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.902840][ T4179] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.910750][ T4179] device bridge_slave_0 entered promiscuous mode [ 68.922310][ T4179] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.929417][ T4179] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.937803][ T4179] device bridge_slave_1 entered promiscuous mode [ 68.945852][ T4180] team0: Port device team_slave_1 added [ 68.989448][ T4181] team0: Port device team_slave_0 added [ 68.999592][ T4181] team0: Port device team_slave_1 added [ 69.017417][ T4186] device hsr_slave_0 entered promiscuous mode [ 69.024258][ T4186] device hsr_slave_1 entered promiscuous mode [ 69.030803][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.039270][ T4186] Cannot create hsr debugfs directory [ 69.064193][ T4180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.071952][ T4180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.098071][ T4180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.128080][ T4179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.150779][ T4180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.158055][ T4180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.184141][ T4180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.205250][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.212535][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.238793][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.251576][ T4179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.261025][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.268025][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.294158][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.382809][ T4179] team0: Port device team_slave_0 added [ 69.408474][ T4180] device hsr_slave_0 entered promiscuous mode [ 69.415946][ T4180] device hsr_slave_1 entered promiscuous mode [ 69.422640][ T4180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.430204][ T4180] Cannot create hsr debugfs directory [ 69.437106][ T4179] team0: Port device team_slave_1 added [ 69.454410][ T4181] device hsr_slave_0 entered promiscuous mode [ 69.461744][ T4181] device hsr_slave_1 entered promiscuous mode [ 69.468483][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.476176][ T4181] Cannot create hsr debugfs directory [ 69.492576][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 69.499244][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 69.506213][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 69.552164][ T4179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.559136][ T4179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.571512][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 69.585635][ T4179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.597753][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 69.628386][ T4179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.635629][ T4179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.661741][ T4179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.748998][ T4179] device hsr_slave_0 entered promiscuous mode [ 69.755997][ T4179] device hsr_slave_1 entered promiscuous mode [ 69.762736][ T4179] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.770305][ T4179] Cannot create hsr debugfs directory [ 69.855774][ T4190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.906283][ T4190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.927643][ T4190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.938180][ T4190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.990165][ T4186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.014380][ T4186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.027067][ T4186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.036203][ T4186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.124453][ T4181] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.145386][ T4181] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.175987][ T4181] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.188783][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.207044][ T4181] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.247585][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.257111][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.282438][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.315413][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.323639][ T4180] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.342083][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.354134][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.363299][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.370495][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.379994][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.389445][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.398174][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.405283][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.417825][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.427616][ T4180] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.457677][ T4179] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.470142][ T4179] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.487177][ T4180] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.498166][ T4180] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.507740][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.517197][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.530728][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.538767][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.550615][ T4179] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.562828][ T4179] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.575817][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.605616][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.616225][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.630032][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.640343][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.649898][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.659399][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.668048][ T4251] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.675225][ T4251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.683138][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.692566][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.701047][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.710425][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.719031][ T4251] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.726136][ T4251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.733944][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.742735][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.751801][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.760273][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.786723][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.794976][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.803537][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.812488][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.822239][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.904640][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.921906][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.930692][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.941534][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.950378][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.959814][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.979125][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.995056][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.017334][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.028891][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.057424][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.068749][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.098812][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.123754][ T4180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.130992][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.142379][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.189957][ T4180] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.213757][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.223536][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.234687][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.241822][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.251620][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.259437][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.268865][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.277754][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.286481][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.293609][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.301799][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.310516][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.319383][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.327868][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.334975][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.344270][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.354761][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.363668][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.408912][ T4179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.416792][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.424038][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.443031][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.454703][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.464745][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.475114][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.483910][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.493237][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.503380][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.513101][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.521781][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.529383][ T4273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.537912][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.547565][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.556544][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.573591][ T4181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.584346][ T4250] Bluetooth: hci3: command 0x041b tx timeout [ 71.584658][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 71.593271][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.603749][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 71.628292][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.637715][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.651573][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 71.654785][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.657959][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 71.665692][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.685957][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.699221][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.708198][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.717329][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.726029][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.755116][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.772509][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.789009][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.819195][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.829384][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.839959][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.848403][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.859425][ T4179] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.881798][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.889476][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.910576][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.928599][ T4180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.966546][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.976867][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.991677][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.000513][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.016807][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.024070][ T4273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.049417][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.075371][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.085388][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.095290][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.104885][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.114844][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.124848][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.132004][ T4273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.151532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.193348][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.205896][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.217589][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.226781][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.236525][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.246094][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.255419][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.265268][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.274255][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.283501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.292574][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.313184][ T4186] device veth0_vlan entered promiscuous mode [ 72.336138][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.345349][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.353791][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.361711][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.370006][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.380322][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.389355][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.398743][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.407493][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.415742][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.424129][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.432524][ T4181] device veth0_vlan entered promiscuous mode [ 72.442256][ T4179] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.453945][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.464869][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.480997][ T4180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.499975][ T4186] device veth1_vlan entered promiscuous mode [ 72.518968][ T4181] device veth1_vlan entered promiscuous mode [ 72.575033][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.589392][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.598520][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.613590][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.627536][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.636569][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.654631][ T4190] device veth0_vlan entered promiscuous mode [ 72.674190][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.683657][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.692290][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.701090][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.718052][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.726231][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.752416][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.762682][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.774227][ T4190] device veth1_vlan entered promiscuous mode [ 72.793642][ T4186] device veth0_macvtap entered promiscuous mode [ 72.806641][ T4179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.816115][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.825573][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.834278][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.846154][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.859182][ T4181] device veth0_macvtap entered promiscuous mode [ 72.869414][ T4186] device veth1_macvtap entered promiscuous mode [ 72.889010][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.897765][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.906616][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.915510][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.924865][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.940822][ T4181] device veth1_macvtap entered promiscuous mode [ 72.953608][ T4180] device veth0_vlan entered promiscuous mode [ 72.978851][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.988450][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.996720][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.006293][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.015402][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.024511][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.050869][ T4180] device veth1_vlan entered promiscuous mode [ 73.072829][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.087841][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.099585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.109302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.118625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.127422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.138081][ T4190] device veth0_macvtap entered promiscuous mode [ 73.146261][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.157257][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.168854][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.197315][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.207241][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.216388][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.226310][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.239742][ T4190] device veth1_macvtap entered promiscuous mode [ 73.247608][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.256310][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.264898][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.274014][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.283632][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.292839][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.304346][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.312702][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.321900][ T4179] device veth0_vlan entered promiscuous mode [ 73.328834][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.340468][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.352019][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.372296][ T4180] device veth0_macvtap entered promiscuous mode [ 73.391433][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.400333][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.409517][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.423156][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.433109][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.445642][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.456403][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.466646][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.485439][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.497350][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.508998][ T4180] device veth1_macvtap entered promiscuous mode [ 73.519245][ T4179] device veth1_vlan entered promiscuous mode [ 73.528569][ T4181] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.537638][ T4181] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.547706][ T4181] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.556740][ T4181] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.576452][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.585074][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.593469][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.602407][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.613704][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.625017][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.635260][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.646009][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.651452][ T4266] Bluetooth: hci4: command 0x040f tx timeout [ 73.659501][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.668810][ T4266] Bluetooth: hci1: command 0x040f tx timeout [ 73.675449][ T4266] Bluetooth: hci3: command 0x040f tx timeout [ 73.680766][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.692862][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.703021][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.713821][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.723976][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.731832][ T4266] Bluetooth: hci0: command 0x040f tx timeout [ 73.737184][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.740614][ T4266] Bluetooth: hci2: command 0x040f tx timeout [ 73.755609][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.779331][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.788377][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.798567][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.808700][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.818686][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.832443][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.841251][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.850063][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.860245][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.872945][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.884007][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.894340][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.905430][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.915505][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.926001][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.936999][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.977320][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.995733][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.005095][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.014283][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.026476][ T4180] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.035624][ T4180] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.044628][ T4180] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.055330][ T4180] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.095572][ T4179] device veth0_macvtap entered promiscuous mode [ 74.124542][ T4179] device veth1_macvtap entered promiscuous mode [ 74.185287][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.194555][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.234917][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.243755][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.256607][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.267611][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.277761][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.288528][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.298955][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.309883][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.319856][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.330645][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.343461][ T4179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.361529][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.369563][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.384442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.397040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.406486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.417594][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.428210][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.440907][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.452603][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.462933][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.473735][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.484232][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.494940][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.506776][ T4179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.526213][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.535590][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.547674][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.548384][ T4179] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.563291][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.567032][ T4179] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.581031][ T4179] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.589994][ T4179] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.616219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.646300][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.654931][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.681046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.700786][ T4251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.710238][ T4251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.730542][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.793738][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.814582][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.834434][ T4251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.852165][ T4251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.884209][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.898870][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.938501][ T4273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.948800][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.952732][ T4273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.978737][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.999453][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.020246][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.049654][ T4251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.087052][ T4251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.148559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.633581][ T4325] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.738438][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 75.745215][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 75.765764][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 75.813181][ T4225] Bluetooth: hci2: command 0x0419 tx timeout [ 75.831845][ T4225] Bluetooth: hci0: command 0x0419 tx timeout [ 76.017693][ T4303] loop3: detected capacity change from 0 to 32768 [ 76.066361][ T4303] ======================================================= [ 76.066361][ T4303] WARNING: The mand mount option has been deprecated and [ 76.066361][ T4303] and is ignored by this kernel. Remove the mand [ 76.066361][ T4303] option from the mount to silence this warning. [ 76.066361][ T4303] ======================================================= [ 76.102112][ T1110] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 76.238047][ T4303] XFS (loop3): Mounting V5 Filesystem [ 76.410704][ T4344] netlink: 'syz.4.17': attribute type 1 has an invalid length. [ 76.441882][ T4303] XFS (loop3): Ending clean mount [ 76.473086][ T4344] bridge0: port 3(geneve2) entered blocking state [ 76.474189][ T4303] XFS (loop3): Quotacheck needed: Please wait. [ 76.480183][ T4344] bridge0: port 3(geneve2) entered disabled state [ 76.495290][ T4344] device geneve2 entered promiscuous mode [ 76.511516][ T1110] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.528406][ T1110] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 76.561410][ T1110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.588949][ T1110] usb 3-1: config 0 descriptor?? [ 76.633402][ T4303] XFS (loop3): Quotacheck: Done. [ 76.675390][ T1110] pwc: Askey VC010 type 2 USB webcam detected. [ 76.689609][ T4352] Zero length message leads to an empty skb [ 76.767400][ T4354] netlink: 24 bytes leftover after parsing attributes in process `syz.1.21'. [ 76.985730][ T4186] XFS (loop3): Unmounting Filesystem [ 77.097710][ T1110] pwc: recv_control_msg error -32 req 02 val 2b00 [ 77.164298][ T1110] pwc: recv_control_msg error -32 req 02 val 2700 [ 77.221377][ T1110] pwc: recv_control_msg error -32 req 02 val 2c00 [ 77.281341][ T1110] pwc: recv_control_msg error -32 req 04 val 1000 [ 77.321420][ T1110] pwc: recv_control_msg error -32 req 04 val 1300 [ 77.581921][ T1110] pwc: recv_control_msg error -71 req 02 val 2000 [ 77.604002][ T1110] pwc: recv_control_msg error -71 req 02 val 2100 [ 77.631375][ T1110] pwc: recv_control_msg error -71 req 04 val 1500 [ 77.661793][ T1110] pwc: recv_control_msg error -71 req 02 val 2500 [ 77.701603][ T1110] pwc: recv_control_msg error -71 req 02 val 2400 [ 77.725119][ T1110] pwc: recv_control_msg error -71 req 02 val 2600 [ 77.761342][ T1110] pwc: recv_control_msg error -71 req 02 val 2900 [ 77.781918][ T1110] pwc: recv_control_msg error -71 req 02 val 2800 [ 77.813299][ T1110] pwc: recv_control_msg error -71 req 04 val 1100 [ 77.844157][ T1110] pwc: recv_control_msg error -71 req 04 val 1200 [ 77.864721][ T1110] pwc: Registered as video103. [ 77.888122][ T1110] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 77.963915][ T1110] usb 3-1: USB disconnect, device number 2 [ 78.057814][ T4369] loop0: detected capacity change from 0 to 40427 [ 78.117682][ T4369] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x1ffff [ 78.209773][ T4369] F2FS-fs (loop0): invalid crc value [ 78.263349][ T4369] F2FS-fs (loop0): Found nat_bits in checkpoint [ 78.426482][ T4369] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 78.789943][ T4420] loop1: detected capacity change from 0 to 1024 [ 78.800445][ T4181] attempt to access beyond end of device [ 78.800445][ T4181] loop0: rw=2049, want=45112, limit=40427 [ 78.833264][ T4420] EXT4-fs (loop1): Ignoring removed orlov option [ 78.915628][ T4420] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,data_err=ignore,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,nombcache,lazytime,,errors=continue. Quota mode: none. [ 79.017350][ T4420] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: none. [ 80.060916][ T4442] loop3: detected capacity change from 0 to 32768 [ 80.188207][ T4442] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.46 (4442) [ 80.802771][ T4444] loop1: detected capacity change from 0 to 131072 [ 80.823815][ T4442] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 80.833448][ T4442] BTRFS info (device loop3): using free space tree [ 80.840014][ T4442] BTRFS info (device loop3): has skinny extents [ 80.870921][ T4444] F2FS-fs (loop1): invalid crc value [ 81.024940][ T4444] F2FS-fs (loop1): Found nat_bits in checkpoint [ 81.075789][ T4444] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 81.111105][ T4444] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 81.181581][ T4475] capability: warning: `syz.2.53' uses deprecated v2 capabilities in a way that may be insecure [ 81.303655][ T4442] BTRFS info (device loop3): enabling ssd optimizations [ 81.796630][ T4493] syz.0.60 sent an empty control message without MSG_MORE. [ 82.114201][ T4502] loop0: detected capacity change from 0 to 512 [ 82.175721][ T4502] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.62: inode has both inline data and extents flags [ 82.202416][ T4502] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.62: couldn't read orphan inode 15 (err -117) [ 82.259797][ T4502] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,user_xattr,,errors=continue. Quota mode: writeback. [ 82.603974][ T4487] loop2: detected capacity change from 0 to 32768 [ 82.644906][ T4487] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.55 (4487) [ 82.757677][ T4487] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 82.831534][ T4487] BTRFS info (device loop2): enabling auto defrag [ 82.893396][ T4487] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 82.958645][ T4487] BTRFS info (device loop2): use zstd compression, level 3 [ 82.986758][ T4487] BTRFS info (device loop2): max_inline at 0 [ 83.007014][ T4487] BTRFS info (device loop2): force clearing of disk cache [ 83.029366][ T4487] BTRFS info (device loop2): turning on sync discard [ 83.069469][ T4487] BTRFS info (device loop2): turning off discard [ 83.112497][ T4487] BTRFS info (device loop2): disabling free space tree [ 83.126800][ T4518] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 83.171322][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 83.174802][ T4487] BTRFS info (device loop2): has skinny extents [ 83.374402][ T4534] loop3: detected capacity change from 0 to 128 [ 83.421295][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 83.459537][ T4534] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 83.530817][ T4534] System zones: 1-3, 19-19, 35-36 [ 83.605150][ T4487] BTRFS info (device loop2): enabling ssd optimizations [ 83.615759][ T4534] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 83.633259][ T4487] BTRFS info (device loop2): clearing free space tree [ 83.640689][ T4487] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 83.682471][ T4534] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 83.721633][ T4487] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 83.732146][ T7] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 83.754994][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.823023][ T7] usb 5-1: Product: syz [ 83.827336][ T7] usb 5-1: Manufacturer: syz [ 83.863682][ T7] usb 5-1: SerialNumber: syz [ 83.887056][ T7] usb 5-1: config 0 descriptor?? [ 83.912197][ T4554] netlink: 'syz.0.69': attribute type 12 has an invalid length. [ 83.963729][ T7] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 84.928488][ T4558] loop0: detected capacity change from 0 to 32768 [ 84.948268][ T4558] XFS: noikeep mount option is deprecated. [ 85.072978][ T4558] XFS (loop0): Mounting V5 Filesystem [ 85.260921][ T4570] loop1: detected capacity change from 0 to 32768 [ 85.308120][ T4558] XFS (loop0): Ending clean mount [ 85.369590][ T4558] XFS (loop0): Quotacheck needed: Please wait. [ 85.399992][ T4570] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.77 (4570) [ 85.511821][ T4558] XFS (loop0): Quotacheck: Done. [ 85.541918][ T4570] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 85.550696][ T4570] BTRFS info (device loop1): setting nodatacow, compression disabled [ 85.629694][ T4570] BTRFS info (device loop1): turning on flush-on-commit [ 85.666192][ T4570] BTRFS info (device loop1): using free space tree [ 85.680219][ T4570] BTRFS info (device loop1): has skinny extents [ 85.733725][ T4181] XFS (loop0): Unmounting Filesystem [ 85.744896][ T7] gspca_ov534_9: reg_r err -71 [ 86.014255][ T4570] BTRFS info (device loop1): enabling ssd optimizations [ 86.091247][ T7] gspca_ov534_9: Unknown sensor 0000 [ 86.091319][ T7] ov534_9: probe of 5-1:0.0 failed with error -22 [ 86.112951][ T7] usb 5-1: USB disconnect, device number 2 [ 86.214436][ T4619] APIC base relocation is unsupported by KVM [ 86.215187][ T4619] kvm: apic: phys broadcast and lowest prio [ 86.564014][ T4358] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 10 /dev/loop1 scanned by udevd (4358) [ 86.619601][ T4641] netlink: 'syz.4.89': attribute type 4 has an invalid length. [ 86.777166][ T21] cfg80211: failed to load regulatory.db [ 86.826172][ T4649] netlink: 'syz.4.89': attribute type 4 has an invalid length. [ 86.834559][ T4645] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 86.854694][ T4645] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 87.775250][ T4687] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 87.880612][ T4690] kvm: pic: non byte write [ 88.190594][ T4706] loop4: detected capacity change from 0 to 512 [ 88.358415][ T4706] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 88.378930][ T4706] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.427112][ T4713] 9pnet: p9_errstr2errno: server reported unknown error n$Ž[#¬ì [ 88.590737][ T4706] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm syz.4.111: Invalid inode table block 0 in block_group 0 [ 88.655612][ T4706] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5850: Corrupt filesystem [ 88.689489][ T4706] EXT4-fs error (device loop4): __ext4_unlink:3327: inode #2: comm syz.4.111: mark_inode_dirty error [ 88.799615][ T154] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 89.112506][ T4730] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.236193][ T4730] syz.4.120 (4730) used greatest stack depth: 20352 bytes left [ 89.710062][ T4758] loop3: detected capacity change from 0 to 64 [ 89.776942][ T4752] loop4: detected capacity change from 0 to 4096 [ 90.034421][ T4764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.136'. [ 90.072905][ T4764] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.082824][ T4764] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.091911][ T4764] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.100647][ T4764] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.213712][ T4764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.136'. [ 90.809577][ T4783] loop1: detected capacity change from 0 to 16 [ 90.900513][ T4783] erofs: (device loop1): mounted with root inode @ nid 36. [ 91.442537][ T4800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.150'. [ 91.460005][ T4800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.150'. [ 91.531262][ T4587] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 91.901655][ T4587] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 91.932919][ T4587] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 91.962257][ T4587] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 91.979688][ T4587] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 92.012815][ T4587] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 92.061652][ T4814] loop0: detected capacity change from 0 to 128 [ 92.105225][ T4814] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 92.142355][ T4587] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 92.162054][ T4814] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 92.201271][ T4587] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 92.230703][ T4587] usb 2-1: Product: syz [ 92.270293][ T4587] usb 2-1: Manufacturer: syz [ 92.333485][ T4587] cdc_wdm 2-1:1.0: skipping garbage [ 92.338822][ T4587] cdc_wdm 2-1:1.0: skipping garbage [ 92.382496][ T4587] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 92.397447][ T4587] cdc_wdm 2-1:1.0: Unknown control protocol [ 92.570724][ T4820] loop4: detected capacity change from 0 to 8192 [ 92.610836][ T4587] usb 2-1: USB disconnect, device number 2 [ 92.617065][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 92.617333][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 92.617355][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 93.382889][ T154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.541742][ T154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.663452][ T154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.768861][ T154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.984502][ T4850] loop1: detected capacity change from 0 to 1024 [ 94.601386][ T4580] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.841305][ T4580] usb 1-1: Using ep0 maxpacket: 8 [ 94.961703][ T4580] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.984173][ T4852] chnl_net:caif_netlink_parms(): no params data found [ 94.989254][ T4580] usb 1-1: config 0 has no interfaces? [ 95.172539][ T4580] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 95.185695][ T4580] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.194901][ T4580] usb 1-1: Product: syz [ 95.199194][ T4580] usb 1-1: Manufacturer: syz [ 95.205168][ T4580] usb 1-1: SerialNumber: syz [ 95.212302][ T4580] usb 1-1: config 0 descriptor?? [ 95.300124][ T4868] loop2: detected capacity change from 0 to 32768 [ 95.407513][ T4868] XFS (loop2): Mounting V5 Filesystem [ 95.449766][ T4852] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.468630][ T4585] usb 1-1: USB disconnect, device number 2 [ 95.505982][ T4852] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.521470][ T4852] device bridge_slave_0 entered promiscuous mode [ 95.585216][ T4868] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 95.616558][ T4852] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.641459][ T4852] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.687604][ T4852] device bridge_slave_1 entered promiscuous mode [ 95.739886][ T4868] XFS (loop2): Starting recovery (logdev: internal) [ 95.797701][ T4868] XFS (loop2): Ending recovery (logdev: internal) [ 95.897307][ T4852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.928707][ T4868] XFS (loop2): Metadata corruption detected at xfs_inobt_verify+0xc1/0x220, xfs_finobt block 0x8 [ 95.958670][ T4852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.973013][ T4868] XFS (loop2): Unmount and run xfs_repair [ 96.020507][ T4868] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 96.021799][ T4907] netlink: 156 bytes leftover after parsing attributes in process `syz.1.179'. [ 96.056887][ T4868] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 96.069271][ T4868] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 96.078987][ T4868] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 96.089261][ T4868] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02 ......1....N.... [ 96.098553][ T4868] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 96.115242][ T4868] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 96.117235][ T4852] team0: Port device team_slave_0 added [ 96.124732][ T4868] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 96.139684][ T4868] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 96.149447][ T4868] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x8 len 8 error 117 [ 96.211900][ T4852] team0: Port device team_slave_1 added [ 96.233219][ T154] device hsr_slave_0 left promiscuous mode [ 96.258950][ T154] device hsr_slave_1 left promiscuous mode [ 96.270707][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.291420][ T4585] Bluetooth: hci4: command 0x0409 tx timeout [ 96.304302][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.329337][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.342515][ T154] device geneve2 left promiscuous mode [ 96.350243][ T154] bridge0: port 3(geneve2) entered disabled state [ 96.418407][ T4868] XFS (loop2): Metadata corruption detected at xfs_btree_lookup_get_block+0x481/0x6a0, xfs_bnobt block 0x8 [ 96.434700][ T154] device bridge_slave_1 left promiscuous mode [ 96.440995][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.481519][ T4868] XFS (loop2): Unmount and run xfs_repair [ 96.483949][ T154] device bridge_slave_0 left promiscuous mode [ 96.521573][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.552609][ T4912] XFS (loop2): Internal error ltbno + ltlen > bno at line 1940 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_free_ag_extent+0xe41/0x1350 [ 96.631276][ T4912] CPU: 0 PID: 4912 Comm: syz.2.175 Not tainted syzkaller #0 [ 96.638637][ T4912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 96.648742][ T4912] Call Trace: [ 96.652047][ T4912] [ 96.654993][ T4912] dump_stack_lvl+0x168/0x230 [ 96.659695][ T4912] ? xfs_info+0x280/0x280 [ 96.664161][ T4912] ? show_regs_print_info+0x20/0x20 [ 96.669374][ T4912] ? xfs_btree_get_rec+0x158/0x230 [ 96.674505][ T4912] ? xfs_alloc_get_rec+0x34f/0x500 [ 96.679645][ T4912] ? kmem_cache_alloc+0x133/0x290 [ 96.684684][ T4912] xfs_corruption_error+0x117/0x170 [ 96.689916][ T4912] ? xfs_free_ag_extent+0xe41/0x1350 [ 96.695271][ T4912] xfs_free_ag_extent+0xe7b/0x1350 [ 96.700414][ T4912] ? xfs_free_ag_extent+0xe41/0x1350 [ 96.705723][ T4912] ? xfs_free_agfl_block+0x320/0x320 [ 96.711028][ T4912] ? xfs_perag_get+0x1dd/0x340 [ 96.715805][ T4912] __xfs_free_extent+0x2dd/0x4b0 [ 96.720770][ T4912] xfs_trans_free_extent+0x194/0x4a0 [ 96.726081][ T4912] xfs_extent_free_finish_item+0x83/0x110 [ 96.731820][ T4912] ? xfs_extent_free_create_done+0x128/0x150 [ 96.737819][ T4912] ? xfs_extent_free_create_done+0x150/0x150 [ 96.743810][ T4912] xfs_defer_finish_noroll+0xe58/0x1b60 [ 96.749375][ T4912] ? xfs_defer_finish+0x18/0x180 [ 96.754350][ T4912] ? xfs_da3_node_add+0xa70/0xa70 [ 96.759390][ T4912] ? __lock_acquire+0x7c60/0x7c60 [ 96.764421][ T4912] ? do_raw_spin_lock+0x11d/0x280 [ 96.769455][ T4912] ? __rwlock_init+0x140/0x140 [ 96.774314][ T4912] xfs_defer_finish+0x18/0x180 [ 96.779090][ T4912] xfs_itruncate_extents_flags+0x2b1/0x8b0 [ 96.784904][ T4912] ? _raw_spin_unlock+0x24/0x40 [ 96.789849][ T4912] ? xfs_iunlink_remove+0x6c0/0x6c0 [ 96.795054][ T4912] ? xfs_trans_ichgtime+0x160/0x160 [ 96.800271][ T4912] ? rcu_is_watching+0x11/0xa0 [ 96.805038][ T4912] ? xfs_trans_add_item+0x14c/0x2a0 [ 96.810248][ T4912] xfs_setattr_size+0x689/0xb50 [ 96.815110][ T4912] ? trace_xfs_setattr+0x1c0/0x1c0 [ 96.820231][ T4912] ? xfs_vn_setattr_size+0x153/0x170 [ 96.825528][ T4912] xfs_vn_setattr+0x257/0x300 [ 96.830213][ T4912] ? xfs_iflags_set+0x50/0x50 [ 96.835017][ T4912] ? __might_sleep+0xf0/0xf0 [ 96.839614][ T4912] ? preempt_count_add+0x8d/0x190 [ 96.844644][ T4912] ? bpf_lsm_inode_setattr+0x5/0x10 [ 96.849864][ T4912] ? try_break_deleg+0x79/0x120 [ 96.854736][ T4912] ? xfs_iflags_set+0x50/0x50 [ 96.859449][ T4912] notify_change+0xbcd/0xee0 [ 96.864199][ T4912] do_truncate+0x197/0x220 [ 96.868730][ T4912] ? rcu_lock_release+0x20/0x20 [ 96.873600][ T4912] ? rcu_read_lock_bh_held+0xe0/0xe0 [ 96.878909][ T4912] ? bpf_lsm_path_truncate+0x5/0x10 [ 96.884137][ T4912] do_sys_ftruncate+0x31b/0x3d0 [ 96.889021][ T4912] do_syscall_64+0x4c/0xa0 [ 96.893460][ T4912] ? clear_bhb_loop+0x30/0x80 [ 96.898150][ T4912] ? clear_bhb_loop+0x30/0x80 [ 96.902832][ T4912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.908745][ T4912] RIP: 0033:0x7f20b5f35749 [ 96.913171][ T4912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.932783][ T4912] RSP: 002b:00007f20b417b038 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 96.941209][ T4912] RAX: ffffffffffffffda RBX: 00007f20b618c090 RCX: 00007f20b5f35749 [ 96.949182][ T4912] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000004 [ 96.957192][ T4912] RBP: 00007f20b5fb9f91 R08: 0000000000000000 R09: 0000000000000000 [ 96.965165][ T4912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.973138][ T4912] R13: 00007f20b618c128 R14: 00007f20b618c090 R15: 00007ffdda2d7748 [ 96.981131][ T4912] [ 97.037397][ T154] device veth1_macvtap left promiscuous mode [ 97.050806][ T154] device veth0_macvtap left promiscuous mode [ 97.063606][ T154] device veth1_vlan left promiscuous mode [ 97.098133][ T154] device veth0_vlan left promiscuous mode [ 97.104144][ T4868] syz.2.175 (4868) used greatest stack depth: 20000 bytes left [ 97.137261][ T4912] XFS (loop2): Corruption detected. Unmount and run xfs_repair [ 97.171591][ T4912] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1556/0x1b60 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 97.194808][ T4912] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 97.267842][ T4180] XFS (loop2): Unmounting Filesystem [ 97.930681][ T154] team0 (unregistering): Port device team_slave_1 removed [ 97.954301][ T154] team0 (unregistering): Port device team_slave_0 removed [ 97.984728][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.015923][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.140093][ T4507] kernel write not supported for file bpf-prog (pid: 4507 comm: kworker/1:16) [ 98.269566][ T154] bond0 (unregistering): Released all slaves [ 98.330505][ T4949] ipt_CLUSTERIP: Please specify destination IP [ 98.371480][ T4580] Bluetooth: hci4: command 0x041b tx timeout [ 98.512794][ T4941] netlink: 'syz.0.188': attribute type 5 has an invalid length. [ 98.635651][ T4852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.656865][ T4852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.746980][ T4852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.826518][ T4852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.841302][ T4852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.957082][ T4852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.007817][ T4957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.193'. [ 99.031258][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888061837000: rx timeout, send abort [ 99.232537][ T4852] device hsr_slave_0 entered promiscuous mode [ 99.258762][ T4852] device hsr_slave_1 entered promiscuous mode [ 99.773214][ T4852] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 99.834491][ T4852] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 99.903524][ T4852] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 99.944375][ T4852] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 100.176775][ T5001] loop3: detected capacity change from 0 to 256 [ 100.302079][ T4852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.386582][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.405603][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.451321][ T4587] Bluetooth: hci4: command 0x040f tx timeout [ 100.455578][ T4852] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.495036][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.534287][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.569555][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.576735][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.621919][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.665417][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.699769][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.711246][ T5001] loop_set_status: loop3 () has still dirty pages (nrpages=1) [ 100.727493][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.734652][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.784282][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 100.843047][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 100.878281][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.934673][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 101.024109][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 101.073395][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 101.102219][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 101.147722][ T4852] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 101.224533][ T4852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.272260][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 101.331873][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.367090][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 101.392175][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.446161][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 101.934823][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.949225][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.997190][ T4852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.524894][ T5057] process 'syz.3.206' launched '/dev/fd/6' with NULL argv: empty string added [ 102.532055][ T4587] Bluetooth: hci4: command 0x0419 tx timeout [ 102.580586][ T5059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.207'. [ 102.858776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 102.882786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.966338][ T4852] device veth0_vlan entered promiscuous mode [ 103.034314][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 103.053041][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 103.054413][ T5032] loop0: detected capacity change from 0 to 40427 [ 103.096600][ T4852] device veth1_vlan entered promiscuous mode [ 103.127301][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 103.137505][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 103.150345][ T5032] F2FS-fs (loop0): invalid crc value [ 103.156144][ T5075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.210'. [ 103.196577][ T5032] F2FS-fs (loop0): Found nat_bits in checkpoint [ 103.235681][ T5076] IPVS: Scheduler module ip_vs_ not found [ 103.252729][ T5079] IPVS: length: 24 != 12792 [ 103.401121][ T5032] F2FS-fs (loop0): Start checkpoint disabled! [ 103.442203][ T4942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 103.465819][ T4942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 103.477589][ T5032] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 103.493044][ T4852] device veth0_macvtap entered promiscuous mode [ 103.522339][ T4852] device veth1_macvtap entered promiscuous mode [ 103.610333][ T4852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.623975][ T4638] kernel write not supported for file /input/mice (pid: 4638 comm: kworker/1:19) [ 103.685461][ T4852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.701227][ T4852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.741562][ T4852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.771249][ T4852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.788484][ T4852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.831216][ T4852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.864381][ T4852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.878908][ T4852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.901592][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 103.909874][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 103.992234][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 104.060287][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.103472][ T4852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.129307][ T4852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.218384][ T4852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.248516][ T5106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.218'. [ 104.253702][ T4852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.299960][ T4852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.313937][ T4852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.327484][ T4852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.340257][ T4852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.368028][ T4852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.431693][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 104.451464][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.491596][ T4852] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.507544][ T5117] loop1: detected capacity change from 0 to 256 [ 104.518220][ T4852] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.527654][ T4251] attempt to access beyond end of device [ 104.527654][ T4251] loop0: rw=2049, want=40968, limit=40427 [ 104.540697][ T4852] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.616574][ T4852] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.889098][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.922625][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.965482][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 105.065776][ T4251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.109339][ T4251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.126258][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 105.145574][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 105.156549][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 105.206313][ T5126] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 105.231861][ C0] Illegal XDP return value 16128, expect packet loss! [ 105.282673][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 105.316929][ T5130] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 105.406340][ T5130] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 105.457401][ T5130] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 105.644512][ T4425] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.926179][ T4425] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.046277][ T5159] loop1: detected capacity change from 0 to 1024 [ 106.103664][ T4425] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.142086][ T5159] EXT4-fs (loop1): Ignoring removed orlov option [ 106.186437][ T5159] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,data_err=ignore,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,nombcache,lazytime,,errors=continue. Quota mode: none. [ 106.301902][ T4507] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 106.310123][ T4425] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.481619][ T5172] netlink: 24 bytes leftover after parsing attributes in process `syz.0.234'. [ 106.571568][ T4507] usb 3-1: Using ep0 maxpacket: 16 [ 106.773760][ T4507] usb 3-1: unable to get BOS descriptor or descriptor too short [ 106.876176][ T4507] usb 3-1: config 13 has an invalid interface number: 50 but max is 0 [ 106.891518][ T4507] usb 3-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 106.958569][ T4507] usb 3-1: config 13 has no interface number 0 [ 106.991807][ T4507] usb 3-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 107.021510][ T4507] usb 3-1: config 13 interface 50 altsetting 167 endpoint 0x7 has invalid wMaxPacketSize 0 [ 107.041273][ T4507] usb 3-1: config 13 interface 50 altsetting 167 bulk endpoint 0x7 has invalid maxpacket 0 [ 107.074839][ T4507] usb 3-1: config 13 interface 50 has no altsetting 0 [ 107.311372][ T4507] usb 3-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 107.325066][ T4507] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.344344][ T4507] usb 3-1: Product: syz [ 107.354350][ T4507] usb 3-1: Manufacturer: syz [ 107.365022][ T4507] usb 3-1: SerialNumber: syz [ 107.421648][ T5157] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 107.715578][ T5193] chnl_net:caif_netlink_parms(): no params data found [ 107.931550][ T4507] usb 3-1: MIDIStreaming interface descriptor not found [ 108.022108][ T21] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 108.059464][ T5193] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.072273][ T5193] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.083866][ T5193] device bridge_slave_0 entered promiscuous mode [ 108.092445][ T4507] usb 3-1: USB disconnect, device number 3 [ 108.222900][ T4425] device hsr_slave_0 left promiscuous mode [ 108.236911][ T5240] loop5: detected capacity change from 0 to 512 [ 108.247311][ T4425] device hsr_slave_1 left promiscuous mode [ 108.260469][ T4425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.269986][ T4425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.285295][ T4425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.285400][ T4297] udevd[4297]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 108.300090][ T4425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.342184][ T4425] device bridge_slave_1 left promiscuous mode [ 108.348460][ T4425] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.356646][ T5240] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.248: inode has both inline data and extents flags [ 108.374814][ T4425] device bridge_slave_0 left promiscuous mode [ 108.381123][ T4425] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.393246][ T5240] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.248: couldn't read orphan inode 15 (err -117) [ 108.411872][ T5240] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 108.431459][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.441488][ T21] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 108.455405][ T21] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 108.464883][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.478419][ T21] usb 1-1: config 0 descriptor?? [ 108.486727][ T4425] device veth1_macvtap left promiscuous mode [ 108.495548][ T4425] device veth0_macvtap left promiscuous mode [ 108.512992][ T4425] device veth1_vlan left promiscuous mode [ 108.518867][ T4425] device veth0_vlan left promiscuous mode [ 108.971008][ T4425] team0 (unregistering): Port device team_slave_1 removed [ 108.995801][ T4425] team0 (unregistering): Port device team_slave_0 removed [ 109.001722][ T21] kovaplus 0003:1E7D:2D50.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 109.025241][ T4425] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.041521][ T4580] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 109.055136][ T4425] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.162154][ T4425] bond0 (unregistering): Released all slaves [ 109.171428][ T4585] Bluetooth: hci3: command 0x0409 tx timeout [ 109.209170][ T5193] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.216707][ T5193] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.225094][ T5193] device bridge_slave_1 entered promiscuous mode [ 109.248868][ T5249] netlink: 4 bytes leftover after parsing attributes in process `syz.5.250'. [ 109.275623][ T5193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.304235][ T5193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.359446][ T5193] team0: Port device team_slave_0 added [ 109.369380][ T5193] team0: Port device team_slave_1 added [ 109.397111][ T5193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.405112][ T4580] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 109.416280][ T5193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.452095][ T4580] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 109.469708][ T5193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.489873][ T5193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.516785][ T5193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.566514][ T5193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.655190][ T4580] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 109.670435][ T4580] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.697958][ T4580] usb 3-1: Product: syz [ 109.711475][ T4580] usb 3-1: Manufacturer: syz [ 109.716150][ T4580] usb 3-1: SerialNumber: syz [ 109.753623][ T4580] usb 3-1: config 0 descriptor?? [ 109.766197][ T5193] device hsr_slave_0 entered promiscuous mode [ 109.773453][ T5247] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 109.780551][ T5247] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 109.793824][ T5193] device hsr_slave_1 entered promiscuous mode [ 109.808821][ T5193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.841310][ T5193] Cannot create hsr debugfs directory [ 110.056752][ T5247] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 110.071647][ T21] kovaplus 0003:1E7D:2D50.0001: couldn't init struct kovaplus_device [ 110.080129][ T5247] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 110.095700][ T21] kovaplus 0003:1E7D:2D50.0001: couldn't install mouse [ 110.148472][ T21] kovaplus: probe of 0003:1E7D:2D50.0001 failed with error -71 [ 110.198752][ T21] usb 1-1: USB disconnect, device number 3 [ 110.375604][ T5296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.259'. [ 110.462466][ T5293] fido_id[5293]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 110.991564][ T4580] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 111.027948][ T4580] usb 3-1: USB disconnect, device number 4 [ 111.285033][ T4638] Bluetooth: hci3: command 0x041b tx timeout [ 111.355130][ T5193] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 111.439343][ T5193] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 111.477265][ T5193] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 111.531938][ T5193] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 111.791382][ T4507] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 111.829825][ T5350] loop2: detected capacity change from 0 to 8192 [ 111.951677][ T5193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.967343][ T5350] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 111.986737][ T5350] REISERFS (device loop2): using ordered data mode [ 112.007588][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 112.023571][ T5350] reiserfs: using flush barriers [ 112.040800][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 112.059812][ T5350] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 112.111372][ T4507] usb 6-1: Using ep0 maxpacket: 32 [ 112.157026][ T5193] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.172107][ T5350] REISERFS (device loop2): checking transaction log (loop2) [ 112.217817][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 112.237534][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 112.261518][ T4507] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.275431][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.283053][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.306391][ T4507] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.341375][ T4507] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 112.357178][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 112.382370][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 112.393949][ T4507] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.417224][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.424407][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.441411][ T4507] usb 6-1: config 0 descriptor?? [ 112.514123][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 112.535446][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 112.576801][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 112.598067][ T5350] REISERFS (device loop2): Using tea hash to sort names [ 112.611669][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.641751][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.655574][ T5350] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 112.675580][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.708494][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.795440][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 112.835898][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 112.860736][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 112.908239][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 112.937373][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 112.948973][ T5193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 112.989889][ T4507] ft260 0003:0403:6030.0002: unknown main item tag 0x7 [ 113.016854][ T4507] ft260 0003:0403:6030.0002: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 113.201727][ T4507] ft260 0003:0403:6030.0002: chip code: 6424 8183 [ 113.341637][ T4505] Bluetooth: hci3: command 0x040f tx timeout [ 113.488098][ T5193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.519716][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 113.551018][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.621688][ T4507] ft260 0003:0403:6030.0002: failed to retrieve status: -32 [ 113.867466][ T5405] loop2: detected capacity change from 0 to 512 [ 113.956520][ T5405] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 114.019992][ T5405] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.151971][ T5405] EXT4-fs error (device loop2): ext4_validate_inode_bitmap:106: comm syz.2.275: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 114.234756][ T4637] usb 6-1: reset high-speed USB device number 2 using dummy_hcd [ 114.338275][ T5405] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 114.404543][ T5319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 114.438330][ T5319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 114.529423][ T5321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 114.547949][ T5321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 114.570572][ T5321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 114.599494][ T5321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 114.625471][ T5193] device veth0_vlan entered promiscuous mode [ 114.648823][ T5428] netlink: 24 bytes leftover after parsing attributes in process `syz.0.279'. [ 114.800021][ T26] audit: type=1326 audit(1765081119.788:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5436 comm="syz.2.280" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f20b5f35749 code=0x0 [ 114.804748][ T5193] device veth1_vlan entered promiscuous mode [ 115.075217][ T5321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 115.132776][ T4505] usb 6-1: USB disconnect, device number 2 [ 115.147579][ T5321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 115.181841][ T5193] device veth0_macvtap entered promiscuous mode [ 115.215291][ T5193] device veth1_macvtap entered promiscuous mode [ 115.329718][ T5193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.373485][ T5193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.410937][ T5193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.431474][ T4638] Bluetooth: hci3: command 0x0419 tx timeout [ 115.443174][ T5193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.479592][ T5193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.512962][ T5193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.540908][ T5193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.569563][ T5193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.606841][ T5193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.657634][ T5193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.685825][ T5193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.710486][ T5193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.748185][ T5193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.768727][ T5193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.791341][ T5193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.802024][ T5193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.825541][ T5193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.839947][ T5193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.850009][ T5454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.286'. [ 115.876057][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 115.889678][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 115.900474][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 115.916469][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 115.926948][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 115.946863][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 115.967828][ T5193] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.985209][ T5193] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.008074][ T5193] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.017585][ T5193] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.147074][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.170948][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.196653][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 116.218585][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.229739][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.242089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 132.855277][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.861788][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 191.251334][ T1108] Bluetooth: hci1: command 0x0406 tx timeout [ 191.251673][ T4505] Bluetooth: hci2: command 0x0406 tx timeout [ 191.257492][ T1108] Bluetooth: hci0: command 0x0406 tx timeout [ 194.295903][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.302297][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 216.861862][ T4507] Bluetooth: hci4: command 0x0406 tx timeout [ 232.211388][ T7] Bluetooth: hci3: command 0x0406 tx timeout [ 255.735761][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.742205][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 268.531510][ T27] INFO: task udevd:3558 blocked for more than 143 seconds. [ 268.538770][ T27] Not tainted syzkaller #0 [ 268.550369][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 268.559162][ T27] task:udevd state:D stack:23840 pid: 3558 ppid: 1 flags:0x00004002 [ 268.569111][ T27] Call Trace: [ 268.572518][ T27] [ 268.575475][ T27] __schedule+0x11bb/0x4390 [ 268.580052][ T27] ? release_firmware_map_entry+0x190/0x190 [ 268.586264][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 268.592382][ T27] ? lock_chain_count+0x20/0x20 [ 268.597274][ T27] schedule+0x11b/0x1e0 [ 268.601554][ T27] percpu_rwsem_wait+0x2d8/0x310 [ 268.606535][ T27] ? __percpu_down_read+0x100/0x100 [ 268.611855][ T27] ? percpu_up_write+0x90/0x90 [ 268.616676][ T27] __percpu_down_read+0xc9/0x100 [ 268.621756][ T27] cgroup_can_fork+0xc94/0xda0 [ 268.626547][ T27] ? __raw_spin_lock_init+0x41/0x100 [ 268.632071][ T27] ? debug_mutex_init+0x34/0x70 [ 268.637009][ T27] copy_process+0x2290/0x3e00 [ 268.641864][ T27] ? __pidfd_prepare+0x140/0x140 [ 268.646853][ T27] kernel_clone+0x219/0x930 [ 268.651864][ T27] ? create_io_thread+0x130/0x130 [ 268.656975][ T27] ? __context_tracking_exit+0x4c/0x80 [ 268.662629][ T27] __x64_sys_clone+0x170/0x1c0 [ 268.667448][ T27] ? __ia32_sys_vfork+0xf0/0xf0 [ 268.673105][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 268.678378][ T27] do_syscall_64+0x4c/0xa0 [ 268.682949][ T27] ? clear_bhb_loop+0x30/0x80 [ 268.687664][ T27] ? clear_bhb_loop+0x30/0x80 [ 268.700015][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 268.706120][ T27] RIP: 0033:0x7fee320fe636 [ 268.710583][ T27] RSP: 002b:00007ffd16976460 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 268.719143][ T27] RAX: ffffffffffffffda RBX: 00007ffd16976468 RCX: 00007fee320fe636 [ 268.727247][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 268.735308][ T27] RBP: 00005652a4806910 R08: 0000000000000000 R09: 00005652a480e8e0 [ 268.743428][ T27] R10: 00007fee31fc6b50 R11: 0000000000000246 R12: 00007ffd16976820 [ 268.751494][ T27] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 268.760104][ T27] [ 268.763316][ T27] INFO: task udevd:4297 blocked for more than 143 seconds. [ 268.770552][ T27] Not tainted syzkaller #0 [ 268.776511][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 268.791758][ T27] task:udevd state:D stack:23840 pid: 4297 ppid: 3558 flags:0x00004002 [ 268.801039][ T27] Call Trace: [ 268.807850][ T27] [ 268.810829][ T27] __schedule+0x11bb/0x4390 [ 268.815447][ T27] ? release_firmware_map_entry+0x190/0x190 [ 268.821516][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 268.827759][ T27] ? lock_chain_count+0x20/0x20 [ 268.832797][ T27] schedule+0x11b/0x1e0 [ 268.836987][ T27] percpu_rwsem_wait+0x2d8/0x310 [ 268.841993][ T27] ? __percpu_down_read+0x100/0x100 [ 268.847442][ T27] ? percpu_up_write+0x90/0x90 [ 268.853228][ T27] __percpu_down_read+0xc9/0x100 [ 268.859399][ T27] exit_signals+0x3e5/0x510 [ 268.864000][ T27] do_exit+0x256/0x20a0 [ 268.868280][ T27] ? __lock_acquire+0x7c60/0x7c60 [ 268.876816][ T27] ? put_task_struct+0x80/0x80 [ 268.882438][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 268.888555][ T27] ? lock_chain_count+0x20/0x20 [ 268.893593][ T27] do_group_exit+0x12e/0x300 [ 268.898309][ T27] __x64_sys_exit_group+0x3b/0x40 [ 268.903636][ T27] do_syscall_64+0x4c/0xa0 [ 268.908209][ T27] ? clear_bhb_loop+0x30/0x80 [ 268.913190][ T27] ? clear_bhb_loop+0x30/0x80 [ 268.917907][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 268.924031][ T27] RIP: 0033:0x7fee320fe6c5 [ 268.928556][ T27] RSP: 002b:00007ffd16976588 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 268.937242][ T27] RAX: ffffffffffffffda RBX: 00005652a482ea40 RCX: 00007fee320fe6c5 [ 268.945430][ T27] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 268.953568][ T27] RBP: 00005652a4806910 R08: 0000000000000000 R09: 0000000000000000 [ 268.963659][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.972154][ T27] R13: 00007ffd169765d0 R14: 0000000000000000 R15: 0000000000000000 [ 268.980296][ T27] [ 268.986523][ T27] INFO: task udevd:4317 blocked for more than 143 seconds. [ 268.994724][ T27] Not tainted syzkaller #0 [ 268.999802][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 269.008700][ T27] task:udevd state:D stack:25288 pid: 4317 ppid: 3558 flags:0x00004002 [ 269.017974][ T27] Call Trace: [ 269.021301][ T27] [ 269.024255][ T27] __schedule+0x11bb/0x4390 [ 269.028812][ T27] ? release_firmware_map_entry+0x190/0x190 [ 269.034779][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 269.040800][ T27] ? lock_chain_count+0x20/0x20 [ 269.045741][ T27] schedule+0x11b/0x1e0 [ 269.049932][ T27] percpu_rwsem_wait+0x2d8/0x310 [ 269.054978][ T27] ? __percpu_down_read+0x100/0x100 [ 269.060967][ T27] ? percpu_up_write+0x90/0x90 [ 269.065841][ T27] __percpu_down_read+0xc9/0x100 [ 269.070813][ T27] exit_signals+0x3e5/0x510 [ 269.075389][ T27] do_exit+0x256/0x20a0 [ 269.079627][ T27] ? __lock_acquire+0x7c60/0x7c60 [ 269.084741][ T27] ? put_task_struct+0x80/0x80 [ 269.089540][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 269.100078][ T27] ? lock_chain_count+0x20/0x20 [ 269.107835][ T27] do_group_exit+0x12e/0x300 [ 269.115764][ T27] __x64_sys_exit_group+0x3b/0x40 [ 269.120842][ T27] do_syscall_64+0x4c/0xa0 [ 269.127545][ T27] ? clear_bhb_loop+0x30/0x80 [ 269.134719][ T27] ? clear_bhb_loop+0x30/0x80 [ 269.139452][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 269.146144][ T27] RIP: 0033:0x7fee320fe6c5 [ 269.150686][ T27] RSP: 002b:00007ffd16976588 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 269.159287][ T27] RAX: ffffffffffffffda RBX: 00005652a481afa0 RCX: 00007fee320fe6c5 [ 269.168093][ T27] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 269.184200][ T27] RBP: 00005652a4806910 R08: 0000000000000000 R09: 0000000000000000 [ 269.192369][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.200370][ T27] R13: 00007ffd169765d0 R14: 0000000000000000 R15: 0000000000000000 [ 269.212113][ T27] [ 269.215243][ T27] INFO: task udevd:4357 blocked for more than 144 seconds. [ 269.222658][ T27] Not tainted syzkaller #0 [ 269.227616][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 269.236407][ T27] task:udevd state:D stack:26576 pid: 4357 ppid: 3558 flags:0x00004002 [ 269.245780][ T27] Call Trace: [ 269.249167][ T27] [ 269.252219][ T27] __schedule+0x11bb/0x4390 [ 269.256785][ T27] ? release_firmware_map_entry+0x190/0x190 [ 269.262789][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 269.270007][ T27] ? lock_chain_count+0x20/0x20 [ 269.277287][ T27] schedule+0x11b/0x1e0 [ 269.282730][ T27] percpu_rwsem_wait+0x2d8/0x310 [ 269.287715][ T27] ? __percpu_down_read+0x100/0x100 [ 269.297070][ T27] ? percpu_up_write+0x90/0x90 [ 269.302446][ T27] __percpu_down_read+0xc9/0x100 [ 269.307433][ T27] exit_signals+0x3e5/0x510 [ 269.317778][ T27] do_exit+0x256/0x20a0 [ 269.323852][ T27] ? __lock_acquire+0x7c60/0x7c60 [ 269.328935][ T27] ? put_task_struct+0x80/0x80 [ 269.338109][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 269.344381][ T27] ? lock_chain_count+0x20/0x20 [ 269.349277][ T27] do_group_exit+0x12e/0x300 [ 269.354050][ T27] __x64_sys_exit_group+0x3b/0x40 [ 269.359132][ T27] do_syscall_64+0x4c/0xa0 [ 269.363689][ T27] ? clear_bhb_loop+0x30/0x80 [ 269.371037][ T27] ? clear_bhb_loop+0x30/0x80 [ 269.375820][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 269.381861][ T27] RIP: 0033:0x7fee320fe6c5 [ 269.386322][ T27] RSP: 002b:00007ffd16976588 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 269.394992][ T27] RAX: ffffffffffffffda RBX: 00005652a4828f30 RCX: 00007fee320fe6c5 [ 269.403194][ T27] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 269.411473][ T27] RBP: 00005652a4806910 R08: 0000000000000000 R09: 0000000000000000 [ 269.419488][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.430209][ T27] R13: 00007ffd169765d0 R14: 0000000000000000 R15: 0000000000000000 [ 269.439592][ T27] [ 269.442812][ T27] INFO: task udevd:4358 blocked for more than 144 seconds. [ 269.450031][ T27] Not tainted syzkaller #0 [ 269.455685][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 269.464475][ T27] task:udevd state:D stack:25376 pid: 4358 ppid: 3558 flags:0x00004002 [ 269.475027][ T27] Call Trace: [ 269.478450][ T27] [ 269.481507][ T27] __schedule+0x11bb/0x4390 [ 269.486082][ T27] ? release_firmware_map_entry+0x190/0x190 [ 269.492042][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 269.498095][ T27] ? lock_chain_count+0x20/0x20 [ 269.503143][ T27] schedule+0x11b/0x1e0 [ 269.507344][ T27] percpu_rwsem_wait+0x2d8/0x310 [ 269.512374][ T27] ? __percpu_down_read+0x100/0x100 [ 269.517613][ T27] ? percpu_up_write+0x90/0x90 [ 269.522524][ T27] __percpu_down_read+0xc9/0x100 [ 269.527496][ T27] exit_signals+0x3e5/0x510 [ 269.534595][ T27] do_exit+0x256/0x20a0 [ 269.538810][ T27] ? __lock_acquire+0x7c60/0x7c60 [ 269.545215][ T27] ? put_task_struct+0x80/0x80 [ 269.550047][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 269.556208][ T27] ? lock_chain_count+0x20/0x20 [ 269.561209][ T27] do_group_exit+0x12e/0x300 [ 269.565844][ T27] __x64_sys_exit_group+0x3b/0x40 [ 269.570899][ T27] do_syscall_64+0x4c/0xa0 [ 269.576588][ T27] ? clear_bhb_loop+0x30/0x80 [ 269.581413][ T27] ? clear_bhb_loop+0x30/0x80 [ 269.586138][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 269.597418][ T27] RIP: 0033:0x7fee320fe6c5 [ 269.602010][ T27] RSP: 002b:00007ffd16976588 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 269.610470][ T27] RAX: ffffffffffffffda RBX: 00005652a4819ad0 RCX: 00007fee320fe6c5 [ 269.618715][ T27] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 269.626848][ T27] RBP: 00005652a4806910 R08: 0000000000000000 R09: 0000000000000000 [ 269.635069][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.645791][ T27] R13: 00007ffd169765d0 R14: 0000000000000000 R15: 0000000000000000 [ 269.655258][ T27] [ 269.658380][ T27] INFO: task udevd:4362 blocked for more than 144 seconds. [ 269.665643][ T27] Not tainted syzkaller #0 [ 269.670597][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 269.680472][ T27] task:udevd state:D stack:25792 pid: 4362 ppid: 3558 flags:0x00004002 [ 269.689924][ T27] Call Trace: [ 269.693266][ T27] [ 269.696221][ T27] __schedule+0x11bb/0x4390 [ 269.700783][ T27] ? release_firmware_map_entry+0x190/0x190 [ 269.706845][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 269.712931][ T27] ? lock_chain_count+0x20/0x20 [ 269.717827][ T27] schedule+0x11b/0x1e0 [ 269.722126][ T27] percpu_rwsem_wait+0x2d8/0x310 [ 269.727110][ T27] ? __percpu_down_read+0x100/0x100 [ 269.732435][ T27] ? percpu_up_write+0x90/0x90 [ 269.737246][ T27] __percpu_down_read+0xc9/0x100 [ 269.742344][ T27] exit_signals+0x3e5/0x510 [ 269.746882][ T27] do_exit+0x256/0x20a0 [ 269.753688][ T27] ? __lock_acquire+0x7c60/0x7c60 [ 269.758847][ T27] ? put_task_struct+0x80/0x80 [ 269.765024][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 269.771067][ T27] ? lock_chain_count+0x20/0x20 [ 269.776025][ T27] do_group_exit+0x12e/0x300 [ 269.781521][ T27] __x64_sys_exit_group+0x3b/0x40 [ 269.786682][ T27] do_syscall_64+0x4c/0xa0 [ 269.791181][ T27] ? clear_bhb_loop+0x30/0x80 [ 269.795884][ T27] ? clear_bhb_loop+0x30/0x80 [ 269.800588][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 269.806614][ T27] RIP: 0033:0x7fee320fe6c5 [ 269.811062][ T27] RSP: 002b:00007ffd16976588 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 269.819545][ T27] RAX: ffffffffffffffda RBX: 00005652a483bc40 RCX: 00007fee320fe6c5 [ 269.827648][ T27] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 269.835713][ T27] RBP: 00005652a4806910 R08: 0000000000000000 R09: 0000000000000000 [ 269.843810][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.851862][ T27] R13: 00007ffd169765d0 R14: 0000000000000000 R15: 0000000000000000 [ 269.859894][ T27] [ 269.865730][ T27] INFO: task syz-executor:5193 blocked for more than 144 seconds. [ 269.874916][ T27] Not tainted syzkaller #0 [ 269.880590][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 269.889526][ T27] task:syz-executor state:D stack:20232 pid: 5193 ppid: 5178 flags:0x00004000 [ 269.899688][ T27] Call Trace: [ 269.903109][ T27] [ 269.906071][ T27] __schedule+0x11bb/0x4390 [ 269.910630][ T27] ? release_firmware_map_entry+0x190/0x190 [ 269.916600][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 269.922735][ T27] ? lock_chain_count+0x20/0x20 [ 269.927627][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 269.932735][ T27] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 269.938144][ T27] schedule+0x11b/0x1e0 [ 269.942753][ T27] rwsem_down_write_slowpath+0xc46/0x11f0 [ 269.948539][ T27] ? rwsem_write_trylock+0x1b0/0x1b0 [ 269.953924][ T27] ? rwsem_write_trylock+0x12f/0x1b0 [ 269.959275][ T27] ? __rwlock_init+0x140/0x140 [ 269.964186][ T27] mpol_rebind_mm+0x33/0x2c0 [ 269.968815][ T27] ? _raw_spin_unlock+0x24/0x40 [ 269.976234][ T27] cpuset_attach+0x330/0x5f0 [ 269.980892][ T27] ? cpuset_cancel_attach+0x290/0x290 [ 269.988431][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 269.995783][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 270.004327][ T27] cgroup_migrate_execute+0x7eb/0x1010 [ 270.009931][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 270.017419][ T27] ? _raw_spin_unlock_irq+0x2a/0x40 [ 270.025121][ T27] cgroup_attach_task+0x562/0x7e0 [ 270.030247][ T27] ? cgroup_migrate_execute+0x1010/0x1010 [ 270.036129][ T27] ? get_task_cred+0x2b6/0x330 [ 270.041114][ T27] __cgroup1_procs_write+0x2e5/0x3f0 [ 270.046449][ T27] ? cgroup_pidlist_destroy_work_fn+0x210/0x210 [ 270.052941][ T27] ? cgroup_pidlist_stop+0xf0/0xf0 [ 270.058213][ T27] cgroup_file_write+0x2f7/0x630 [ 270.063343][ T27] ? read_lock_is_recursive+0x10/0x10 [ 270.068762][ T27] ? cgroup_seqfile_stop+0xd0/0xd0 [ 270.074665][ T27] ? cgroup_seqfile_stop+0xd0/0xd0 [ 270.079931][ T27] kernfs_fop_write_iter+0x379/0x4c0 [ 270.086275][ T27] vfs_write+0x712/0xd00 [ 270.090668][ T27] ? file_end_write+0x250/0x250 [ 270.097863][ T27] ? __context_tracking_exit+0x4c/0x80 [ 270.106873][ T27] ? __fdget_pos+0x2c6/0x370 [ 270.114065][ T27] ksys_write+0x14d/0x250 [ 270.118634][ T27] ? __ia32_sys_read+0x80/0x80 [ 270.127009][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 270.135810][ T27] do_syscall_64+0x4c/0xa0 [ 270.140288][ T27] ? clear_bhb_loop+0x30/0x80 [ 270.148396][ T27] ? clear_bhb_loop+0x30/0x80 [ 270.155518][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 270.164769][ T27] RIP: 0033:0x7ff1ffd821ff [ 270.169319][ T27] RSP: 002b:00007ffdb5a2ab10 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 270.180179][ T27] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007ff1ffd821ff [ 270.195134][ T27] RDX: 0000000000000001 RSI: 00007ffdb5a2ab60 RDI: 0000000000000003 [ 270.205651][ T27] RBP: 00007ffdb5a2b0d0 R08: 0000000000000000 R09: 00007ffdb5a2a967 [ 270.220364][ T27] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 270.230758][ T27] R13: 00007ffdb5a2ab60 R14: 00007ffdb5a2b090 R15: 00007ffdb5a2b0d0 [ 270.244455][ T27] [ 270.247564][ T27] INFO: task udevd:5237 blocked for more than 145 seconds. [ 270.256112][ T27] Not tainted syzkaller #0 [ 270.265549][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 270.275422][ T27] task:udevd state:D stack:27040 pid: 5237 ppid: 3558 flags:0x00004002 [ 270.290169][ T27] Call Trace: [ 270.294669][ T27] [ 270.297642][ T27] __schedule+0x11bb/0x4390 [ 270.307298][ T27] ? release_firmware_map_entry+0x190/0x190 [ 270.314404][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 270.320428][ T27] ? lock_chain_count+0x20/0x20 [ 270.327719][ T27] schedule+0x11b/0x1e0 [ 270.331993][ T27] percpu_rwsem_wait+0x2d8/0x310 [ 270.336967][ T27] ? __percpu_down_read+0x100/0x100 [ 270.342284][ T27] ? percpu_up_write+0x90/0x90 [ 270.347190][ T27] __percpu_down_read+0xc9/0x100 [ 270.352217][ T27] exit_signals+0x3e5/0x510 [ 270.356756][ T27] do_exit+0x256/0x20a0 [ 270.360941][ T27] ? __lock_acquire+0x7c60/0x7c60 [ 270.366094][ T27] ? put_task_struct+0x80/0x80 [ 270.370908][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 270.376945][ T27] ? lock_chain_count+0x20/0x20 [ 270.381955][ T27] do_group_exit+0x12e/0x300 [ 270.386589][ T27] __x64_sys_exit_group+0x3b/0x40 [ 270.392513][ T27] do_syscall_64+0x4c/0xa0 [ 270.396974][ T27] ? clear_bhb_loop+0x30/0x80 [ 270.401764][ T27] ? clear_bhb_loop+0x30/0x80 [ 270.406474][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 270.414991][ T27] RIP: 0033:0x7fee320fe6c5 [ 270.419439][ T27] RSP: 002b:00007ffd16976588 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 270.428291][ T27] RAX: ffffffffffffffda RBX: 00005652a482ac10 RCX: 00007fee320fe6c5 [ 270.436529][ T27] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 270.444601][ T27] RBP: 00005652a4806910 R08: 0000000000000000 R09: 0000000000000000 [ 270.452856][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.460921][ T27] R13: 00007ffd169765d0 R14: 0000000000000000 R15: 0000000000000000 [ 270.469043][ T27] [ 270.472171][ T27] INFO: task udevd:5245 blocked for more than 145 seconds. [ 270.479383][ T27] Not tainted syzkaller #0 [ 270.484507][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 270.493290][ T27] task:udevd state:D stack:26240 pid: 5245 ppid: 3558 flags:0x00004002 [ 270.503328][ T27] Call Trace: [ 270.506643][ T27] [ 270.509721][ T27] __schedule+0x11bb/0x4390 [ 270.514366][ T27] ? release_firmware_map_entry+0x190/0x190 [ 270.520282][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 270.526673][ T27] ? lock_chain_count+0x20/0x20 [ 270.532496][ T27] schedule+0x11b/0x1e0 [ 270.536705][ T27] percpu_rwsem_wait+0x2d8/0x310 [ 270.541816][ T27] ? __percpu_down_read+0x100/0x100 [ 270.547046][ T27] ? percpu_up_write+0x90/0x90 [ 270.551908][ T27] __percpu_down_read+0xc9/0x100 [ 270.556873][ T27] exit_signals+0x3e5/0x510 [ 270.561453][ T27] do_exit+0x256/0x20a0 [ 270.565641][ T27] ? __lock_acquire+0x7c60/0x7c60 [ 270.570694][ T27] ? put_task_struct+0x80/0x80 [ 270.575576][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 270.581615][ T27] ? lock_chain_count+0x20/0x20 [ 270.586480][ T27] do_group_exit+0x12e/0x300 [ 270.591148][ T27] __x64_sys_exit_group+0x3b/0x40 [ 270.596982][ T27] do_syscall_64+0x4c/0xa0 [ 270.601579][ T27] ? clear_bhb_loop+0x30/0x80 [ 270.606299][ T27] ? clear_bhb_loop+0x30/0x80 [ 270.610992][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 270.616936][ T27] RIP: 0033:0x7fee320fe6c5 [ 270.621419][ T27] RSP: 002b:00007ffd16976588 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 270.629858][ T27] RAX: ffffffffffffffda RBX: 00005652a4836dd0 RCX: 00007fee320fe6c5 [ 270.638312][ T27] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 270.646720][ T27] RBP: 00005652a4806910 R08: 0000000000000000 R09: 0000000000000000 [ 270.654790][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.662813][ T27] R13: 00007ffd169765d0 R14: 0000000000000000 R15: 0000000000000000 [ 270.670798][ T27] [ 270.673923][ T27] INFO: task ext4lazyinit:5411 blocked for more than 145 seconds. [ 270.681792][ T27] Not tainted syzkaller #0 [ 270.686725][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 270.695467][ T27] task:ext4lazyinit state:D stack:29888 pid: 5411 ppid: 2 flags:0x00004000 [ 270.705521][ T27] Call Trace: [ 270.709099][ T27] [ 270.712116][ T27] __schedule+0x11bb/0x4390 [ 270.716661][ T27] ? release_firmware_map_entry+0x190/0x190 [ 270.722625][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 270.728641][ T27] ? lock_chain_count+0x20/0x20 [ 270.733701][ T27] schedule+0x11b/0x1e0 [ 270.737885][ T27] percpu_rwsem_wait+0x2d8/0x310 [ 270.743917][ T27] ? __percpu_down_read+0x100/0x100 [ 270.749160][ T27] ? percpu_up_write+0x90/0x90 [ 270.754242][ T27] __percpu_down_read+0xc9/0x100 [ 270.759224][ T27] exit_signals+0x3e5/0x510 [ 270.763805][ T27] do_exit+0x256/0x20a0 [ 270.768035][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 270.773304][ T27] ? put_task_struct+0x80/0x80 [ 270.778097][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 270.784090][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 270.789317][ T27] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 270.795296][ T27] ? __kthread_parkme+0x157/0x1b0 [ 270.800350][ T27] kthread_exit+0x11/0x20 [ 270.805398][ T27] kthread+0x454/0x520 [ 270.809510][ T27] ? rcu_lock_release+0x20/0x20 [ 270.814498][ T27] ? kthread_blkcg+0xd0/0xd0 [ 270.819113][ T27] ret_from_fork+0x1f/0x30 [ 270.823634][ T27] [ 270.826697][ T27] [ 270.826697][ T27] Showing all locks held in the system: [ 270.834577][ T27] 1 lock held by khungtaskd/27: [ 270.839444][ T27] #0: ffffffff8c11c720 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 270.848938][ T27] 1 lock held by udevd/3558: [ 270.856184][ T27] #0: ffffffff8c1421b0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: copy_process+0x2290/0x3e00 [ 270.866939][ T27] 2 locks held by getty/3943: [ 270.871900][ T27] #0: ffff88802ba58098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 270.881777][ T27] #1: ffffc900025ce2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5ba/0x1a30 [ 270.892120][ T27] 1 lock held by syz-executor/4175: [ 270.897343][ T27] #0: ffffffff8c1421b0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 270.907960][ T27] 2 locks held by syz-executor/4180: [ 270.913334][ T27] #0: ffffffff8c1a68b0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x21f/0x1380 [ 270.922193][ T27] #1: ffff888073b38128 (&mm->mmap_lock){++++}-{3:3}, at: copy_mm+0x238/0x1380 [ 270.932121][ T27] 2 locks held by syz-executor/4181: [ 270.937445][ T27] #0: ffffffff8c1a68b0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x21f/0x1380 [ 270.946450][ T27] #1: ffff88807ad67128 (&mm->mmap_lock){++++}-{3:3}, at: copy_mm+0x238/0x1380 [ 270.955512][ T27] 1 lock held by udevd/4297: [ 270.960124][ T27] #0: ffffffff8c1421b0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 270.970399][ T27] 1 lock held by udevd/4317: [ 270.975272][ T27] #0: ffffffff8c1421b0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 270.985476][ T27] 1 lock held by udevd/4357: [ 270.990098][ T27] #0: ffffffff8c1421b0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 271.000297][ T27] 1 lock held by udevd/4358: [ 271.005102][ T27] #0: ffffffff8c1421b0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 271.015724][ T27] 1 lock held by udevd/4362: [ 271.020340][ T27] #0: ffffffff8c1421b0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 271.030338][ T27] 2 locks held by syz-executor/4852: [ 271.035661][ T27] #0: ffffffff8c1a68b0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x21f/0x1380 [ 271.044665][ T27] #1: ffff88802b17ab28 (&mm->mmap_lock){++++}-{3:3}, at: copy_mm+0x238/0x1380 [ 271.053689][ T27] 7 locks held by syz-executor/5193: [ 271.058981][ T27] #0: ffff88802b1f6460 (sb_writers#11){.+.+}-{0:0}, at: vfs_write+0x28a/0xd00 [ 271.068013][ T27] #1: ffff88802b380c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e5/0x4c0 [ 271.079557][ T27] #2: ffffffff8c141fc8 (cgroup_mutex){+.+.}-{3:3}, at: cgroup_kn_lock_live+0xee/0x230 [ 271.089306][ T27] #3: ffffffff8bfbae90 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x17c/0x580 [ 271.100588][ T27] #4: ffffffff8c1421b0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: cgroup_procs_write_start+0x192/0x580 [ 271.112641][ T27] #5: ffffffff8c14fb08 (cpuset_mutex){+.+.}-{3:3}, at: cpuset_attach+0xac/0x5f0 [ 271.121963][ T27] #6: ffff88801d2b0128 (&mm->mmap_lock){++++}-{3:3}, at: mpol_rebind_mm+0x33/0x2c0 [ 271.131555][ T27] 1 lock held by udevd/5237: [ 271.136166][ T27] #0: ffffffff8c1421b0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 271.146099][ T27] 1 lock held by udevd/5245: [ 271.150703][ T27] #0: ffffffff8c1421b0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 271.160811][ T27] 1 lock held by ext4lazyinit/5411: [ 271.166151][ T27] #0: ffffffff8c1421b0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 271.176283][ T27] 1 lock held by syz.1.286/5453: [ 271.181372][ T27] #0: ffffffff8c1421b0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 271.191334][ T27] 1 lock held by syz.1.286/5454: [ 271.196294][ T27] #0: ffffffff8c1421b0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: do_exit+0x256/0x20a0 [ 271.206494][ T27] 1 lock held by rm/5455: [ 271.214297][ T27] #0: ffff88807b44a428 (&mm->mmap_lock){++++}-{3:3}, at: do_mprotect_pkey+0x173/0x910 [ 271.224159][ T27] [ 271.226633][ T27] ============================================= [ 271.226633][ T27] [ 271.235187][ T27] NMI backtrace for cpu 1 [ 271.239544][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 271.246743][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 271.256894][ T27] Call Trace: [ 271.260194][ T27] [ 271.263133][ T27] dump_stack_lvl+0x168/0x230 [ 271.267835][ T27] ? show_regs_print_info+0x20/0x20 [ 271.273042][ T27] ? load_image+0x3b0/0x3b0 [ 271.277567][ T27] ? nmi_cpu_backtrace+0x1b6/0x3d0 [ 271.282685][ T27] nmi_cpu_backtrace+0x397/0x3d0 [ 271.287628][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 271.293791][ T27] ? _printk+0xcc/0x110 [ 271.297967][ T27] ? load_image+0x3b0/0x3b0 [ 271.302484][ T27] ? load_image+0x3b0/0x3b0 [ 271.307021][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 271.313117][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 271.319135][ T27] watchdog+0xe0f/0xe50 [ 271.323318][ T27] kthread+0x436/0x520 [ 271.327391][ T27] ? hungtask_pm_notify+0x40/0x40 [ 271.332426][ T27] ? kthread_blkcg+0xd0/0xd0 [ 271.337139][ T27] ret_from_fork+0x1f/0x30 [ 271.341596][ T27] [ 271.345553][ T27] Sending NMI from CPU 1 to CPUs 0: [ 271.350926][ C0] NMI backtrace for cpu 0 skipped: idling at default_idle+0xb/0x10 [ 271.357289][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 271.365950][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 271.373172][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 271.383248][ T27] Call Trace: [ 271.386541][ T27] [ 271.389483][ T27] dump_stack_lvl+0x168/0x230 [ 271.394166][ T27] ? show_regs_print_info+0x20/0x20 [ 271.399365][ T27] ? load_image+0x3b0/0x3b0 [ 271.403892][ T27] panic+0x2c9/0x7f0 [ 271.407803][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 271.413446][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 271.418045][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 271.423612][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 271.429793][ T27] watchdog+0xe4e/0xe50 [ 271.433958][ T27] kthread+0x436/0x520 [ 271.438045][ T27] ? hungtask_pm_notify+0x40/0x40 [ 271.443086][ T27] ? kthread_blkcg+0xd0/0xd0 [ 271.447694][ T27] ret_from_fork+0x1f/0x30 [ 271.452144][ T27] [ 271.455515][ T27] Kernel Offset: disabled [ 271.459896][ T27] Rebooting in 86400 seconds..