last executing test programs: 4.443317163s ago: executing program 0 (id=1): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x800000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$packet(r0, &(0x7f0000001100)={0x11, 0x3, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = dup2(r0, r0) setsockopt$packet_fanout(r7, 0x107, 0x12, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000008380), 0x400000000000174, 0x4008890) 3.517392178s ago: executing program 0 (id=6): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0x17) 3.430150715s ago: executing program 0 (id=7): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d0, &(0x7f0000001340)="$eJzs3cFvHFcdB/DvrNeOt1TBaRMaoSKsRCpIEYkTK4VwwSCEcqhQVQ49W4nTWN0kVeKitEKQAoITEof+AQXJNw4IiXtQuHApt159rITEJeIQ9bJoZmfXu/Y6Xif2OoHPJxrPe/Nm3vzmN29mvOusNsD/rctn0ryfIpfPvHG3rG+sL7Y31heP1M3tJGW5kTS7sxQ3k+JBslS2FwNTBubbfLx66a3PHm583q0166laf6q/3exYIY/Yx716ynzd3/zILafH6r/bVxVeXkxypZ4Pmxm3r6EVy6Sdrudw6Drb3NvL5jte78Czr/d0KrrPzW3mkhfqJ3P1O0F9d2hMLsKDsae7HAAAADynPr112BEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA86f+/v+inhr1PPMpet//P9NbVpefQUtjr3n/QOMAAAAAAAAAgMn4+qM8yt0c7dU7RfU3/1NV5Xi+6CRfyvu5k5XcztnczXLWspbbOZ9kbqCjmbvLa2u3z/e3LI3e8sLILS9M6ogBAAAAAAAA4H/SL9Pa/Ps/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8C4pkqjurpuP1PHNpNLPZlnvJP5PMHHa8e1CMWnh/8nEAAADAU5l9gm2+/CiPcjdHe/VOUb3m/0r1enk27+dm1rKatbSzkqv1a+jyVX9jY32xvbG+eKOcyvpwv9//957CmKl7mKpqo/Z8slqjlWtZrZaczZUqmKtpdPd9OjnZi2cgrgEflTEV36uNGVmzTmu5s9/v9C7Cvhh+K6LxmDVbm8El/Yws1LGVWx7rZqCo3qhJtmZi17PTHKrNVb1O9/d0Po3+Oz/HDyDnL9Tz8nh+c6A536t+JhqpMnGhN/rKa+bxmUi+8dc/vX29ffPd69funHl2DmkXUzss3zomFgcy8cpznYnmHtdfqDJxol+/nB/lJzmT+byZ21nNT7OctaykU7cv1+O5/Dn3+EwtDdXe3C2Smfq8dM/ZODHN54dVaTmnqm2PZjVFbuVqVvJ69e9CzufbuZiLuTRwhk/sGHd1bNVV39h61ffO9N9GBn/6m3WhvLv9dvMut/S4I95pdO6X7r2/zOuxgbx2R/3D/lrHBq6DhYEsvdTLzvTIzp/k3tj8al0o9/GrXZ4TkzVXZ6K8gHpPiV50L3cz0ayeRdvH+R865XZp3+x0ri+/t0P/97bUX6vn5bBa/9pua/eMPhX7qxwvL2W2vpMMj46y7eX+XWagrbM5lrttw0/ccrsTVVtR9K7UH+dWNQC2X6kz9e9w23u6ULW9MrJtsWo7OdA29PtWbqWdqxPIHwBP4h9v94tzeWGm9a/Wp61PWr9uXW+9MfuDI9858upMpv8+/d3mwtRrjVeLv+ST/Hzz9T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDk7nzw4bvL7fbK7dGFxs5NQ4VWti7Zqecjo/sp6i/0GWNfz0VhNsnQkup7jiYeRmtrGNsKnV8kE89P70sER6/zu7LQ3DaiRhWWhpb8eXuHH+0xwmK86+IAC41MdqdTGT0ADvGmBEzEubUb752788GH31q9sfzOyjsrN6cvXry0cOni64vnrq22Vxa6Pw87SuAgbD70DzsSAAAAAAAAAAAAYFyjPhhw6sXdPjQy1mc8/M9CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYF9cPpPm/RQ5v3B2oaxvrC+2y6lX3lyzmaTRSIqfJcWDZCndKXMD3RX544N0Ruzn49VLb332cOPzzb6a3fWTRj3f2eNbk9yrp8wnmarnT2GovytP3V/xn94xlAn7otPpLD1dfLA//hsAAP//P3v0tA==") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) symlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.15821314s ago: executing program 0 (id=8): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f00000002c0)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {@acl}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5e1, &(0x7f0000000bc0)="$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") lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x801e, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}, {@noquota}]}, 0x3, 0x440, &(0x7f0000000280)="$eJzs28tvG8UfAPDv2kn66+uXUJVHH0CgIMoradJSeuACAokDSEhwKMeQpFWo26AmSLSKICBUjqgSJy6IIxJ/ASe4IOCExBXuqFKFcmnhZLT2bmI7thunTlzqz0dad2Z33Jmvd8ee2ckG0LdG05ckYk9E/B4Rw9VsfYHR6j83V5am/15Zmk6iXH7zr6RS7sbK0nReNH/f7jwzEFH4NIlDTepduHT53FSpNHsxy48vnn9vfOHS5Wfnzk+dnT07e2Hy1KkTxyeePzn5XFfiTOO6cfDD+cMHXn376uvTp6++8/O3SR5/QxxdMtru4OPlcper6629NelkoIcNoSPFajeNwUr/H45irJ284Xjlk542DthS5XK5fF/rw8tl4C6WRK9bAPRG/kOfzn/zbZuGHneE6y9WJ0Bp3DezrXpkIApZmcGG+W03jUbE6eV/vkq32Jr7EAAAdb5Pxz/PNBv/FaL2vtD/szWUkYi4JyL2RcTJiNgfEfdGVMreHxEPdFh/4yLJ+vFP4dqmAtugdPz3Qra2VT/+y0d/MVLMcnsr8Q8mZ+ZKs8eyz+RoDO5I8xNt6vjh5d8+b3WsdvyXbmn9+Vgwa8e1gR3175mZWpy6nZhrXf844uBAs/iT1ZWAJCIORMTBTdYx99Q3h1sdu3X8bXRhnan8dcQT1fO/HA3x55L265Pj/4vS7LHx/KpY75dfr7zRqv7bir8L0vO/q+n1vxr/SFK7XrvQyf/+5ZPp65U/Pms5p9ns9T+UvFW374OpxcWLExFDyWvVRtfun2woN7lWPo3/6JHm/X9frH0ShyIivYgfjIiHIuLhrO2PRMSjEXGkzafw00uPvbv5+LdWGv9MR+d/LTEUjXuaJ4rnfvyurtKRTuJPz/+JSupotmcj338baVenVzMAAAD8VxUiYk8khbHVdKEwNlb9G/79satQml9YfPrM/PsXZqrPCIzEYCG/0zVccz90IpvW5/nJhvzx7L7xF8WdlfzY9HxpptfBQ5/b3aL/p/4s9rp1wJbzvBb0L/0f+pf+D/1L/4f+1aT/7+xFO4Dt1+z3/6MetAPYfg3937If9BHzf+hfm+n/vjPg7tC2Lw9tXzuAbbWwM279kLyExLpEFO6IZkhsUaLX30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADd8W8AAAD//58P56I=") r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8413, &(0x7f00000002c0)={[{@resuid}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@jqfmt_vfsv0}, {@noblock_validity}], [{@seclabel}, {@context={'context', 0x3d, 'unconfined_u'}, 0x22}, {@smackfsfloor={'smackfsfloor', 0x3d, '\xb6lt\xa7{\buY\xec(\xce\x9c:\xecv\xee_?\xb1\xc2\rBA\xd0\x90\x9f\x9c%\xef3\xc0\xf7\x0e\xd0\xd6\x8eRww/\xea\x14\x11\x1b\xe9\x94\xba\aJ\x82\xeb$\x8f\xe3b\xeb\x84\x06\x9f\xc5Je<\xd1'}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x65, 0x65, 0x37, 0x0, 0x39, 0x31, 0x38], 0x2d, [0x34, 0x38, 0x39, 0x35], 0x2d, [0x39, 0x38, 0x62, 0x65], 0x2d, [0x30, 0x31, 0x66, 0x38], 0x2d, [0x39, 0x62, 0x62, 0x64, 0x0, 0x62, 0x65, 0x39]}}}]}, 0x0, 0x54a, &(0x7f0000000540)="$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") chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 2.685928744s ago: executing program 3 (id=4): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, 0x0, 0x20000080) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) syz_mount_image$fuse(&(0x7f0000000180), 0x0, 0x1040008, &(0x7f0000000780)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}]}}, 0x0, 0x0, &(0x7f00000008c0)="252fa48021eb61b793e1a7a61fda77b123efc46df6b17d77ced0de629e3f0910006212b8f3ac876013253572fdc5e9f51eec7cbb6d7f11a53c7e583448b55a2c7821f9a8e7f84eae90a34b0d4db3379afdb0e34e7b6187b4eaeb6c297f22ed21310088b3b7dc395f2350625d05a8e93c229130904a04368863025cdffaaad0ebc2c1edec7baa058ecb126f19257842bbcc5cff5963235dccd80a01a9e17d3f2dee324035fa629a4c7309596c2078b7876cde7f9c912674b24348d56f8bfdcc528d39") bpf$BPF_BTF_LOAD(0x12, &(0x7f00000032c0)={&(0x7f0000003140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x9, [@enum={0x3, 0x2, 0x0, 0x6, 0x4, [{0x5, 0xffff}, {0x2}]}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e, 0x5f, 0x30, 0x61]}}, &(0x7f00000031c0)=""/226, 0x3d, 0xe2, 0x1}, 0x20) 2.416579308s ago: executing program 0 (id=9): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000000)={[{@auto_da_alloc}, {@minixdf}]}, 0x1, 0x569, &(0x7f0000000a00)="$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") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)="30573472b621739991c336124406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000480)=ANY=[@ANYBLOB="4500001c00000000ac"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0) socket$inet6(0xa, 0x3, 0x84) setxattr$trusted_overlay_upper(&(0x7f0000000340)='./file1\x00', &(0x7f0000000400), 0x0, 0x0, 0x2) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000440)=ANY=[], 0xfe37, 0x0) 2.416385408s ago: executing program 2 (id=3): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x18e) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0xe7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000d, 0x12, r3, 0x0) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xe) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) 2.28647521s ago: executing program 1 (id=2): r0 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x58) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) pipe2$watch_queue(&(0x7f0000000080), 0x80) fsopen(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1e3f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb4, 0x6a, 0x2c, 0x10, 0x7b4, 0x10a, 0x102, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd6, 0x2, 0x2, 0x2b, 0x57, 0x33, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x81, 0x2, 0x40, 0x0, 0x3d, 0x1}}]}}]}}]}}, 0x0) 1.134245116s ago: executing program 2 (id=10): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000001c0)={0x51, 0xffff, 0x560c, {0x803, 0x5d5}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x6d, 0x9ee, {0x2, 0xb, 0xfffb, 0xa}, 0x0, 0x0}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000001c0)={0x51, 0xffff, 0x560c, {0x803, 0x5d4}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x6d, 0x9ee, {0x2, 0xb, 0xfffb, 0xb}, 0x0, 0x0}}) 968.125351ms ago: executing program 4 (id=5): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_open_dev$loop(0x0, 0x4, 0x80000) openat$zero(0xffffffffffffff9c, 0x0, 0x2402, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c20000002059249b379086dd601081147308110000000000000000000000000000000000ff020000000000000000000000000001d314ead9000890"], 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd"], 0xfdef) 292.519523ms ago: executing program 4 (id=11): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$eJzs3T9oJFUcB/DvzO565m7RUxtB/AMiooFwdoLN2SgcyHGICCqciNgod8J5h11iZWOhtUoqmyB2RktJE2wUwSpqitgIGiwMFlqs7M4G8mc1ZnfdkcznA5OZybyZ3xt2vm+3ebsBGutskvNJWknmk3SSFHsb3FctZ4e7y3Prl5Ne7+lfi0G7ar+ye96ZJEtJHk2yVhZ5tZ3cWH1+6/eNJx9853rngY9Wn5ub6U0ObW9tPrXz4cW3P73wyI2vv/35YpHz6e67r+krRvyvXSS3/xfF/ieKdt094N+49OYn3/Vzf0eS+wf576RM9eK9e+2mtU4e/uDvzn3vl2/ummVfgenr9Tr998ClHtA4ZZJuinIhSbVdlgsL1Wf471uny9euXntj/pWr16+8XPdIBUxLN9l84vNTn505kP+fWlX+gZOrn/9nLq380N/eadXdG2Am7q5W/fzPv7j4UOQfGkf+obnkH5pL/qG55B+aS/6hueQfTrDOPx+Wf2gu+Yfmkn9orr35BwCapXdqnFnDt05/IjIwc3WPPwAAAAAAAAAAAAAAAAAAwGHLc+uXd5dxr1Ecs/2X7yfbjydpj6rfGvwecXLz4O/p34p+s3212uN2dOiFeye8wIQ+rnn29S0/1lv/q3vqrb94JVl6K8m5dvvw81cMn7/x3XbE8c5LExY4poP5fOzZ2dY/6M+Veutf2Ei+6I8/50aNP2XuHKxHjz/do79i+Uiv/zHhBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJiZvwIAAP//1rxsXQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) write$FUSE_BMAP(r0, &(0x7f0000000080)={0x18, 0xffffffffffffffda, 0x0, {0x2}}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x185641, 0x0) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r2, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x4c, 0x12, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4e22, 0xff0f}, 0xf0ffffff}}, 0x4c}}, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xff10, 0x8000c61) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000380), 0xfe, 0x57d, &(0x7f0000000980)="$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") chdir(&(0x7f00000001c0)='./file0\x00') 0s ago: executing program 3 (id=12): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0x0, 0x1ff0000aa}, @mcast2}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.227' (ED25519) to the list of known hosts. [ 48.050972][ T4172] cgroup: Unknown subsys name 'net' [ 48.198363][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.495428][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 51.297833][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 51.412396][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.421930][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.430215][ T4190] device bridge_slave_0 entered promiscuous mode [ 51.440610][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.447930][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.456582][ T4190] device bridge_slave_1 entered promiscuous mode [ 51.490196][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 51.529764][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.541106][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.623895][ T4190] team0: Port device team_slave_0 added [ 51.637570][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 51.650399][ T4190] team0: Port device team_slave_1 added [ 51.665707][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 51.694834][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.701785][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.727737][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.765880][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.772835][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.799041][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.812787][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 51.876723][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.883951][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.891493][ T4183] device bridge_slave_0 entered promiscuous mode [ 51.925993][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.933681][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.941311][ T4183] device bridge_slave_1 entered promiscuous mode [ 51.955163][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.962327][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.970683][ T4182] device bridge_slave_0 entered promiscuous mode [ 51.981116][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.988292][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.996008][ T4187] device bridge_slave_0 entered promiscuous mode [ 52.020718][ T4190] device hsr_slave_0 entered promiscuous mode [ 52.027707][ T4190] device hsr_slave_1 entered promiscuous mode [ 52.034914][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.041971][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.049807][ T4182] device bridge_slave_1 entered promiscuous mode [ 52.059654][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.066785][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.074844][ T4187] device bridge_slave_1 entered promiscuous mode [ 52.083245][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.121192][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.163169][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.174533][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.193084][ T4183] team0: Port device team_slave_0 added [ 52.200616][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.211166][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.228108][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.235265][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.242917][ T4193] device bridge_slave_0 entered promiscuous mode [ 52.258576][ T4183] team0: Port device team_slave_1 added [ 52.282506][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.289664][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.297473][ T4193] device bridge_slave_1 entered promiscuous mode [ 52.329740][ T4182] team0: Port device team_slave_0 added [ 52.364799][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.371754][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.398099][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.410576][ T4182] team0: Port device team_slave_1 added [ 52.418640][ T4187] team0: Port device team_slave_0 added [ 52.428930][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.438531][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.445674][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.471757][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.491315][ T4187] team0: Port device team_slave_1 added [ 52.501614][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.552319][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.559328][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.585490][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.598009][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.605048][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.631059][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.642701][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.649661][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.675779][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.703673][ T4193] team0: Port device team_slave_0 added [ 52.720624][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.727673][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.753962][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.769878][ T4193] team0: Port device team_slave_1 added [ 52.784594][ T4183] device hsr_slave_0 entered promiscuous mode [ 52.791165][ T4183] device hsr_slave_1 entered promiscuous mode [ 52.798099][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.805920][ T4183] Cannot create hsr debugfs directory [ 52.835373][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.842333][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.868559][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.908586][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.915654][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.941662][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.984768][ T4182] device hsr_slave_0 entered promiscuous mode [ 52.994308][ T4182] device hsr_slave_1 entered promiscuous mode [ 53.001070][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.008833][ T4182] Cannot create hsr debugfs directory [ 53.020420][ T4187] device hsr_slave_0 entered promiscuous mode [ 53.027384][ T4187] device hsr_slave_1 entered promiscuous mode [ 53.034136][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.041682][ T4187] Cannot create hsr debugfs directory [ 53.143984][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 53.151557][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 53.151767][ T1335] Bluetooth: hci0: command 0x0409 tx timeout [ 53.164331][ T1335] Bluetooth: hci3: command 0x0409 tx timeout [ 53.167517][ T4193] device hsr_slave_0 entered promiscuous mode [ 53.170421][ T1335] Bluetooth: hci2: command 0x0409 tx timeout [ 53.182765][ T4193] device hsr_slave_1 entered promiscuous mode [ 53.189999][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.197724][ T4193] Cannot create hsr debugfs directory [ 53.310778][ T4190] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.322920][ T4190] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.348516][ T4190] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.368647][ T4190] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.408678][ T4183] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.428027][ T4183] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.446590][ T4183] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.457069][ T4183] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.505748][ T4182] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.515244][ T4182] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.539290][ T4182] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.548938][ T4182] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.572941][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.593965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.604164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.615171][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.646076][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.656119][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.665890][ T892] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.673132][ T892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.682199][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.691243][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.700127][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.708551][ T892] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.715628][ T892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.725555][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.763996][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.774531][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.783759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.794616][ T4193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.805090][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.823877][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.832519][ T4193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.846046][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.855644][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.872465][ T4193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.882262][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.908343][ T4193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 53.926684][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.937802][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.949479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.959058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.969141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.977775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.987257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.995808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.021947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.036381][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.080566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.088816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.102473][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.113879][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.122883][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.132051][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.140900][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.148176][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.157220][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.181685][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.199088][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.207792][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.217965][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.228584][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.237549][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.244652][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.291287][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.298836][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.308500][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.322071][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.330535][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.337598][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.346108][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.354611][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.363149][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.371415][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.378493][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.386580][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.395410][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.403808][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.411195][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.419050][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.427521][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.440369][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.449698][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.472799][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.481524][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.490687][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.501125][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.510332][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.519769][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.532430][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.541349][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.555858][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.565703][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.595958][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.610248][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.619386][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.628123][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.639866][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.648287][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.657219][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.665786][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.673580][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.684970][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.696125][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.706236][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.717351][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.730153][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.738513][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.748345][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.757178][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.765705][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.773567][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.782547][ T4190] device veth0_vlan entered promiscuous mode [ 54.799518][ T4190] device veth1_vlan entered promiscuous mode [ 54.809882][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.819305][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.829600][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.842723][ T892] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.849829][ T892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.859240][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.867283][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.879304][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.895855][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.904420][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.914498][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.923045][ T892] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.930112][ T892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.945536][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.972677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.985683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.000550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.010086][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.017192][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.036770][ T4190] device veth0_macvtap entered promiscuous mode [ 55.055780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.067215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.076173][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.084987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.094095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.108566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.117319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.126171][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.133261][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.149966][ T4190] device veth1_macvtap entered promiscuous mode [ 55.172011][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.182810][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.197047][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.205404][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.214611][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.222885][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.223504][ T1108] Bluetooth: hci4: command 0x041b tx timeout [ 55.231415][ T4239] Bluetooth: hci2: command 0x041b tx timeout [ 55.241625][ T1108] Bluetooth: hci1: command 0x041b tx timeout [ 55.243312][ T4239] Bluetooth: hci3: command 0x041b tx timeout [ 55.250720][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.255207][ T4239] Bluetooth: hci0: command 0x041b tx timeout [ 55.268509][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.277422][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.286153][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.294752][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.302863][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.311082][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.325442][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.357395][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.367978][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.377943][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.386282][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.397580][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.406383][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.414138][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.421524][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.430635][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.445072][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.455379][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.475444][ T4190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.485343][ T4190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.494872][ T4190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.503806][ T4190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.516292][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.529941][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.539331][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.555352][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.568534][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.577563][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.586260][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.602838][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.613814][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.661362][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.670320][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.680616][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.690226][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.699424][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.707452][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.725724][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.741591][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.750196][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.765267][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.808829][ T4182] device veth0_vlan entered promiscuous mode [ 55.825085][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.839154][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.848552][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.857597][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.866846][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.875680][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.891708][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.900182][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.912321][ T4182] device veth1_vlan entered promiscuous mode [ 55.936388][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.954244][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.967009][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.975479][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.982924][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.991607][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.000271][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.008575][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.027680][ T4187] device veth0_vlan entered promiscuous mode [ 56.037821][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.057042][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.070293][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.104244][ T4182] device veth0_macvtap entered promiscuous mode [ 56.114740][ T4182] device veth1_macvtap entered promiscuous mode [ 56.139370][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.148589][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.156659][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.165369][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.175384][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.183457][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.192461][ T4183] device veth0_vlan entered promiscuous mode [ 56.205463][ T4187] device veth1_vlan entered promiscuous mode [ 56.244174][ T4183] device veth1_vlan entered promiscuous mode [ 56.255163][ T4282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.264752][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.275001][ T4282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.282392][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.295805][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.316323][ T4187] device veth0_macvtap entered promiscuous mode [ 56.333239][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.341257][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.351710][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.360051][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.369501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.377231][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.385883][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.394897][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.404871][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.414035][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.438279][ T4187] device veth1_macvtap entered promiscuous mode [ 56.446918][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.457718][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.468933][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.477486][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.485672][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.494546][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.512227][ T4183] device veth0_macvtap entered promiscuous mode [ 56.522411][ T4183] device veth1_macvtap entered promiscuous mode [ 56.541479][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.552219][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.562520][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.563779][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.575551][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.581474][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.599741][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.609197][ T4182] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.618043][ T4182] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.627542][ T4182] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.636478][ T4182] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.650146][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.659059][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.667969][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.676132][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.684059][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.692428][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.707221][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.721550][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.732185][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.743095][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.755924][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.769837][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.782096][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.791353][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.800635][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.809365][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.821057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.831149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.840169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.849691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.877232][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.888749][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.898917][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.912481][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.922460][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.933009][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.945446][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.970769][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.982653][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.030054][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.046039][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.057932][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.075467][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.090511][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.104748][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.122397][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.134834][ T4183] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.149504][ T4183] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.159283][ T4183] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.171765][ T4183] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.212336][ T4193] device veth0_vlan entered promiscuous mode [ 57.225174][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.238382][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.247350][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.445595][ T4208] Bluetooth: hci0: command 0x040f tx timeout [ 57.486624][ T4208] Bluetooth: hci3: command 0x040f tx timeout [ 57.498594][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.528712][ T4208] Bluetooth: hci1: command 0x040f tx timeout [ 57.558955][ T4208] Bluetooth: hci2: command 0x040f tx timeout [ 57.585840][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.609910][ T4208] Bluetooth: hci4: command 0x040f tx timeout [ 57.640303][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.768042][ T4193] device veth1_vlan entered promiscuous mode [ 57.938708][ T4193] device veth0_macvtap entered promiscuous mode [ 57.968529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.985286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.999936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.017175][ T4193] device veth1_macvtap entered promiscuous mode [ 58.032382][ T4282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.067386][ T4302] loop0: detected capacity change from 0 to 1024 [ 58.073671][ T4282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.087191][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.098249][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.137009][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.145194][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.150867][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.155918][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.170833][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.187812][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.199278][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.220493][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.254287][ T4302] hfsplus: xattr search failed [ 58.260375][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.279918][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.314004][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.326299][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.336917][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.346500][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.359672][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.368965][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.375113][ T4304] loop0: detected capacity change from 0 to 1024 [ 58.377868][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.394841][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.405951][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.419926][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.428323][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.428974][ T4304] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 58.440450][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.456812][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.469254][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.479966][ T4304] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 58.494864][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.505982][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.517761][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.521063][ T4304] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 58.529071][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.541562][ T4304] System zones: 0-1, 3-36 [ 58.568731][ T4304] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,acl,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 58.574500][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.611446][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.621616][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.633200][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.641905][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.651587][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.660611][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.696873][ T1583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.706510][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.730414][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.742487][ T1583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.798897][ T4304] EXT4-fs error (device loop0): __ext4_get_inode_loc:4327: comm syz.0.8: Invalid inode table block 10531113400182767616 in block_group 0 [ 58.798928][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.858626][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.988193][ T154] EXT4-fs error (device loop0): __ext4_get_inode_loc:4327: comm kworker/u4:2: Invalid inode table block 10531113400182767616 in block_group 0 [ 59.067139][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.067775][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.080852][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.107173][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.173177][ T4315] syz.3.4[4315] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.173779][ T4315] syz.3.4[4315] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.584743][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.345956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.747543][ T4297] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 60.826374][ T4248] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 60.973004][ C0] sched: RT throttling activated [ 60.993179][ T4297] usb 2-1: Using ep0 maxpacket: 16 [ 60.994144][ T4263] Bluetooth: hci3: command 0x0419 tx timeout [ 61.004401][ T4263] Bluetooth: hci0: command 0x0419 tx timeout [ 61.010440][ T4263] Bluetooth: hci2: command 0x0419 tx timeout [ 61.016677][ T4263] Bluetooth: hci1: command 0x0419 tx timeout [ 61.094418][ T4248] usb 3-1: Using ep0 maxpacket: 8 [ 61.162304][ T4297] usb 2-1: config 1 has an invalid interface number: 214 but max is 0 [ 61.202599][ T4297] usb 2-1: config 1 has no interface number 0 [ 61.213403][ T4248] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 61.221664][ T4248] usb 3-1: config 179 has no interface number 0 [ 61.247879][ T4327] loop0: detected capacity change from 0 to 1024 [ 61.256348][ T4297] usb 2-1: config 1 interface 214 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 61.276843][ T4248] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 61.290593][ T4329] loop4: detected capacity change from 0 to 128 [ 61.302498][ T4297] usb 2-1: config 1 interface 214 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 61.323933][ T4327] ======================================================= [ 61.323933][ T4327] WARNING: The mand mount option has been deprecated and [ 61.323933][ T4327] and is ignored by this kernel. Remove the mand [ 61.323933][ T4327] option from the mount to silence this warning. [ 61.323933][ T4327] ======================================================= [ 61.367633][ T4248] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 61.429816][ T4263] Bluetooth: hci4: command 0x0419 tx timeout [ 61.454099][ T4329] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 61.479915][ T4297] usb 2-1: config 1 interface 214 has no altsetting 0 [ 61.493902][ T4248] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 61.496808][ T4329] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.505315][ T4248] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 61.527106][ T4248] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 61.541005][ T4248] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 61.551851][ T4248] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.593742][ T4321] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 61.605701][ T4327] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc,minixdf,,errors=continue. Quota mode: none. [ 61.663342][ T4297] usb 2-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 61.672398][ T4297] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.688806][ T4327] ================================================================== [ 61.697097][ T4327] BUG: KASAN: use-after-free in ext4_xattr_set_entry+0x1c28/0x3d30 [ 61.705018][ T4327] Read of size 6176 at addr ffff88805e4917e0 by task syz.0.9/4327 [ 61.712831][ T4327] [ 61.715170][ T4327] CPU: 1 PID: 4327 Comm: syz.0.9 Not tainted syzkaller #0 [ 61.722281][ T4327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 61.732355][ T4327] Call Trace: [ 61.735636][ T4327] [ 61.738567][ T4327] dump_stack_lvl+0x168/0x230 [ 61.743269][ T4327] ? show_regs_print_info+0x20/0x20 [ 61.748563][ T4327] ? _printk+0xcc/0x110 [ 61.752749][ T4327] ? load_image+0x3b0/0x3b0 [ 61.757254][ T4327] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 61.762654][ T4327] print_address_description+0x60/0x2d0 [ 61.768207][ T4327] ? ext4_xattr_set_entry+0x1c28/0x3d30 [ 61.773765][ T4327] kasan_report+0xdf/0x130 [ 61.778189][ T4327] ? ext4_xattr_set_entry+0x1c28/0x3d30 [ 61.783745][ T4327] ? ext4_xattr_set_entry+0x1c28/0x3d30 [ 61.789312][ T4327] kasan_check_range+0x27b/0x290 [ 61.794268][ T4327] memmove+0x25/0x60 [ 61.798258][ T4327] ext4_xattr_set_entry+0x1c28/0x3d30 [ 61.803669][ T4327] ? ext4_xattr_ibody_set+0x330/0x330 [ 61.809055][ T4327] ? rcu_is_watching+0x11/0xa0 [ 61.813824][ T4327] ? kmem_cache_free+0x14c/0x210 [ 61.818776][ T4327] ? mb_cache_entry_delete_or_get+0x1bd/0x1e0 [ 61.824853][ T4327] ext4_xattr_block_set+0x4f7/0x2d30 [ 61.824916][ T4340] loop3: detected capacity change from 0 to 512 [ 61.830169][ T4327] ? __ext4_xattr_check_block+0x25a/0x8d0 [ 61.842129][ T4327] ? ext4_xattr_block_find+0x500/0x500 [ 61.847614][ T4327] ext4_xattr_set_handle+0xbd5/0x12b0 [ 61.853018][ T4327] ? ext4_xattr_set_entry+0x3d30/0x3d30 [ 61.858579][ T4327] ? __ext4_journal_start_sb+0x1bd/0x360 [ 61.864211][ T4327] ext4_xattr_set+0x22a/0x320 [ 61.868896][ T4327] ? ext4_xattr_set_credits+0x290/0x290 [ 61.874439][ T4327] ? posix_xattr_acl+0x8f/0xb0 [ 61.879212][ T4327] ? evm_protect_xattr+0x33c/0x970 [ 61.884329][ T4327] ? ext4_xattr_trusted_get+0x40/0x40 [ 61.889715][ T4327] __vfs_setxattr+0x3e0/0x420 [ 61.894404][ T4327] __vfs_setxattr_noperm+0x129/0x5e0 [ 61.899702][ T4327] vfs_setxattr+0x168/0x2f0 [ 61.904205][ T4327] ? xattr_permission+0x500/0x500 [ 61.909224][ T4327] ? _copy_from_user+0x111/0x170 [ 61.914154][ T4327] ? setxattr+0x243/0x300 [ 61.918476][ T4327] setxattr+0x2da/0x300 [ 61.922624][ T4327] ? path_setxattr+0x280/0x280 [ 61.927393][ T4327] ? __mnt_want_write+0x1e2/0x260 [ 61.932409][ T4327] path_setxattr+0x142/0x280 [ 61.936987][ T4327] ? simple_xattr_list_add+0xf0/0xf0 [ 61.942276][ T4327] ? lock_chain_count+0x20/0x20 [ 61.947127][ T4327] ? vtime_user_exit+0x2dc/0x400 [ 61.952061][ T4327] __x64_sys_lsetxattr+0xb4/0xd0 [ 61.956992][ T4327] do_syscall_64+0x4c/0xa0 [ 61.961395][ T4327] ? clear_bhb_loop+0x30/0x80 [ 61.966063][ T4327] ? clear_bhb_loop+0x30/0x80 [ 61.970730][ T4327] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 61.976618][ T4327] RIP: 0033:0x7f2344791749 [ 61.981021][ T4327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.000615][ T4327] RSP: 002b:00007f23429f8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 62.009019][ T4327] RAX: ffffffffffffffda RBX: 00007f23449e7fa0 RCX: 00007f2344791749 [ 62.016975][ T4327] RDX: 0000200000000440 RSI: 00002000000000c0 RDI: 0000200000000100 [ 62.024934][ T4327] RBP: 00007f2344815f91 R08: 0000000000000000 R09: 0000000000000000 [ 62.032891][ T4327] R10: 000000000000fe37 R11: 0000000000000246 R12: 0000000000000000 [ 62.040856][ T4327] R13: 00007f23449e8038 R14: 00007f23449e7fa0 R15: 00007ffe903886a8 [ 62.048827][ T4327] [ 62.051829][ T4327] [ 62.054130][ T4327] The buggy address belongs to the page: [ 62.059745][ T4327] page:ffffea0001792440 refcount:2 mapcount:0 mapping:ffff888016c95af0 index:0x1c pfn:0x5e491 [ 62.069963][ T4327] memcg:ffff888021030000 [ 62.074184][ T4327] aops:def_blk_aops ino:700000 [ 62.078931][ T4327] flags: 0xfff0000000203a(referenced|dirty|lru|active|private|node=0|zone=1|lastcpupid=0x7ff) [ 62.089162][ T4327] raw: 00fff0000000203a ffffea0000929148 ffffea0001754188 ffff888016c95af0 [ 62.097815][ T4327] raw: 000000000000001c ffff88802a8a5bc8 00000002ffffffff ffff888021030000 [ 62.106375][ T4327] page dumped because: kasan: bad access detected [ 62.112770][ T4327] page_owner tracks the page as allocated [ 62.118462][ T4327] page last allocated via order 0, migratetype Movable, gfp_mask 0x108c48(GFP_NOFS|__GFP_NOFAIL|__GFP_HARDWALL|__GFP_MOVABLE), pid 4327, ts 61658830201, free_ts 61656253267 [ 62.135549][ T4327] get_page_from_freelist+0x1b77/0x1c60 [ 62.141092][ T4327] __alloc_pages+0x1e1/0x470 [ 62.145665][ T4327] __page_cache_alloc+0xd2/0x3f0 [ 62.150595][ T4327] pagecache_get_page+0x986/0xef0 [ 62.155602][ T4327] __getblk_gfp+0x249/0xb70 [ 62.160083][ T4327] ext4_xattr_block_set+0x1d85/0x2d30 [ 62.165525][ T4327] ext4_xattr_set_handle+0xbd5/0x12b0 [ 62.170879][ T4327] ext4_xattr_set+0x22a/0x320 [ 62.175542][ T4327] __vfs_setxattr+0x3e0/0x420 [ 62.180200][ T4327] __vfs_setxattr_noperm+0x129/0x5e0 [ 62.185467][ T4327] vfs_setxattr+0x168/0x2f0 [ 62.189953][ T4327] setxattr+0x2da/0x300 [ 62.194088][ T4327] path_setxattr+0x142/0x280 [ 62.198775][ T4327] __x64_sys_setxattr+0xb7/0xd0 [ 62.203624][ T4327] do_syscall_64+0x4c/0xa0 [ 62.208035][ T4327] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 62.213928][ T4327] page last free stack trace: [ 62.218581][ T4327] free_unref_page_prepare+0x637/0x6c0 [ 62.224025][ T4327] free_unref_page_list+0x122/0x7e0 [ 62.229211][ T4327] release_pages+0x184b/0x1bb0 [ 62.233957][ T4327] tlb_finish_mmu+0x164/0x2e0 [ 62.238620][ T4327] exit_mmap+0x3a6/0x5f0 [ 62.242848][ T4327] __mmput+0x115/0x3b0 [ 62.246904][ T4327] exit_mm+0x567/0x6c0 [ 62.250961][ T4327] do_exit+0x5a1/0x20a0 [ 62.255099][ T4327] do_group_exit+0x12e/0x300 [ 62.259690][ T4327] get_signal+0x6ca/0x12c0 [ 62.264090][ T4327] arch_do_signal_or_restart+0xc1/0x1300 [ 62.269706][ T4327] exit_to_user_mode_loop+0x9e/0x130 [ 62.274977][ T4327] exit_to_user_mode_prepare+0xee/0x180 [ 62.280518][ T4327] syscall_exit_to_user_mode+0x16/0x40 [ 62.285975][ T4327] do_syscall_64+0x58/0xa0 [ 62.290375][ T4327] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 62.296257][ T4327] [ 62.298565][ T4327] Memory state around the buggy address: [ 62.304176][ T4327] ffff88805e491f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 62.312229][ T4327] ffff88805e491f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 62.320274][ T4327] >ffff88805e492000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 62.328313][ T4327] ^ [ 62.332361][ T4327] ffff88805e492080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 62.340412][ T4327] ffff88805e492100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 62.348467][ T4327] ================================================================== [ 62.356507][ T4327] Disabling lock debugging due to kernel taint [ 62.371239][ T4327] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 62.378455][ T4327] CPU: 0 PID: 4327 Comm: syz.0.9 Tainted: G B syzkaller #0 [ 62.386951][ T4327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 62.396988][ T4327] Call Trace: [ 62.400248][ T4327] [ 62.403159][ T4327] dump_stack_lvl+0x168/0x230 [ 62.407824][ T4327] ? show_regs_print_info+0x20/0x20 [ 62.413009][ T4327] ? load_image+0x3b0/0x3b0 [ 62.417504][ T4327] panic+0x2c9/0x7f0 [ 62.421377][ T4327] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 62.427514][ T4327] ? bpf_jit_dump+0xd0/0xd0 [ 62.432000][ T4327] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 62.437873][ T4327] ? _raw_spin_unlock+0x40/0x40 [ 62.442704][ T4327] ? ext4_xattr_set_entry+0x1c28/0x3d30 [ 62.448232][ T4327] check_panic_on_warn+0x80/0xa0 [ 62.453153][ T4327] ? ext4_xattr_set_entry+0x1c28/0x3d30 [ 62.458682][ T4327] end_report+0x6d/0xf0 [ 62.462819][ T4327] kasan_report+0x102/0x130 [ 62.467304][ T4327] ? ext4_xattr_set_entry+0x1c28/0x3d30 [ 62.472835][ T4327] ? ext4_xattr_set_entry+0x1c28/0x3d30 [ 62.478363][ T4327] kasan_check_range+0x27b/0x290 [ 62.483292][ T4327] memmove+0x25/0x60 [ 62.487169][ T4327] ext4_xattr_set_entry+0x1c28/0x3d30 [ 62.492534][ T4327] ? ext4_xattr_ibody_set+0x330/0x330 [ 62.497889][ T4327] ? rcu_is_watching+0x11/0xa0 [ 62.502633][ T4327] ? kmem_cache_free+0x14c/0x210 [ 62.507551][ T4327] ? mb_cache_entry_delete_or_get+0x1bd/0x1e0 [ 62.513603][ T4327] ext4_xattr_block_set+0x4f7/0x2d30 [ 62.518891][ T4327] ? __ext4_xattr_check_block+0x25a/0x8d0 [ 62.524594][ T4327] ? ext4_xattr_block_find+0x500/0x500 [ 62.530060][ T4327] ext4_xattr_set_handle+0xbd5/0x12b0 [ 62.535419][ T4327] ? ext4_xattr_set_entry+0x3d30/0x3d30 [ 62.540948][ T4327] ? __ext4_journal_start_sb+0x1bd/0x360 [ 62.546568][ T4327] ext4_xattr_set+0x22a/0x320 [ 62.551233][ T4327] ? ext4_xattr_set_credits+0x290/0x290 [ 62.556762][ T4327] ? posix_xattr_acl+0x8f/0xb0 [ 62.561505][ T4327] ? evm_protect_xattr+0x33c/0x970 [ 62.566611][ T4327] ? ext4_xattr_trusted_get+0x40/0x40 [ 62.571969][ T4327] __vfs_setxattr+0x3e0/0x420 [ 62.576636][ T4327] __vfs_setxattr_noperm+0x129/0x5e0 [ 62.581905][ T4327] vfs_setxattr+0x168/0x2f0 [ 62.586392][ T4327] ? xattr_permission+0x500/0x500 [ 62.591405][ T4327] ? _copy_from_user+0x111/0x170 [ 62.596324][ T4327] ? setxattr+0x243/0x300 [ 62.600633][ T4327] setxattr+0x2da/0x300 [ 62.604768][ T4327] ? path_setxattr+0x280/0x280 [ 62.609518][ T4327] ? __mnt_want_write+0x1e2/0x260 [ 62.614523][ T4327] path_setxattr+0x142/0x280 [ 62.619095][ T4327] ? simple_xattr_list_add+0xf0/0xf0 [ 62.624362][ T4327] ? lock_chain_count+0x20/0x20 [ 62.629193][ T4327] ? vtime_user_exit+0x2dc/0x400 [ 62.634113][ T4327] __x64_sys_lsetxattr+0xb4/0xd0 [ 62.639037][ T4327] do_syscall_64+0x4c/0xa0 [ 62.643445][ T4327] ? clear_bhb_loop+0x30/0x80 [ 62.648102][ T4327] ? clear_bhb_loop+0x30/0x80 [ 62.652762][ T4327] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 62.658639][ T4327] RIP: 0033:0x7f2344791749 [ 62.663036][ T4327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.682623][ T4327] RSP: 002b:00007f23429f8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 62.691017][ T4327] RAX: ffffffffffffffda RBX: 00007f23449e7fa0 RCX: 00007f2344791749 [ 62.698972][ T4327] RDX: 0000200000000440 RSI: 00002000000000c0 RDI: 0000200000000100 [ 62.706923][ T4327] RBP: 00007f2344815f91 R08: 0000000000000000 R09: 0000000000000000 [ 62.714872][ T4327] R10: 000000000000fe37 R11: 0000000000000246 R12: 0000000000000000 [ 62.722827][ T4327] R13: 00007f23449e8038 R14: 00007f23449e7fa0 R15: 00007ffe903886a8 [ 62.730784][ T4327] [ 62.734059][ T4327] Kernel Offset: disabled [ 62.738377][ T4327] Rebooting in 86400 seconds..