last executing test programs: 38.23286632s ago: executing program 2 (id=3): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000980), 0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x0, 0x11, 0x148, 0xf8, 0x0, 0x210, 0x2a8, 0x2a8, 0x210, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0x10, 0xa, 0x3}}, @common=@unspec=@cluster={{0x30}, {0x20, 0xfff, 0x2}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x2, 0x2}}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x2, 0x7f, 0xa, 'syz0\x00', {0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) set_mempolicy(0x4005, &(0x7f0000000000)=0x1, 0xa) unshare(0x22020600) r2 = mq_open(&(0x7f0000000080)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00\xf0\x8ew\xf4)S\xd6G\xe1\x1fl>\x7f\x14?V\x11\x88\n6\xb8d\xba\xb5\xcb{\xa5P\xce\x03\xfd\x00\xc3j\xa6\xb5\xe6h\xc9\xcf\xb5e\x82J\xf5\xca\x16\xbf\t\xce\xe9F\xf6\x95\xcd\x94\x93\n\x85\xe6X\x19\xf3\xff\xa0+\x94\xac\xce\x9d9I\xb8\x18\x12\xc0\t_\x19\n\x0f\xe0\x1eu\xc2J\xe3\xa9\xd8\x04k\xaa\x1fZ\x12\x1f\xee\x80\xac\xfd\xd3\x1b\xfbAS\xbcF\x89\xbb2\xe8>\x80\xe2\x0f\x95;yS\x908\xd0', 0x41, 0x0, 0x0) mq_timedreceive(r2, 0x0, 0xfffffffffffffee3, 0x1, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x401}, 0x1c) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) 36.954131709s ago: executing program 4 (id=5): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/net/veth0/queues/tx-0/xps_cpus\x00', 0x2, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000004c0), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8791a1996ddcfcb0c1f47fd1a4204014f7476e7e4b0060c6a349496362e4115153055c0b5d5d1b4813ac0196b996a33be2dc2178d2207c308555ec2833d40f6b0a526e3657b8a80303b4bd83caf813418dd5a96f2a696fabf193d8b6e3fe43a3b2600ba22e21772b28cab448a047cf14da130b155a20924966b27e69688722890c6c401cca07b45d64ee2dad2315a713efdf83ab37a033ea94ed16740be24639246eff25f8438e94bdcc794593396550b702cb19e155c204a7359990c573ed0d5406cfe56aecabf7570c5d8119c0cb98df96da12dcf91969a2c5abf11645ed"], 0xa) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000500)) socket$pppl2tp(0x18, 0x1, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000640)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0x13}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x2025cb}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000200)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r5, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000480), 0x1) setsockopt$inet6_int(r7, 0x29, 0x2, &(0x7f0000000380)=0x7, 0x4) getsockopt$inet6_buf(r7, 0x29, 0x6, 0x0, &(0x7f00000003c0)) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8a141, 0x59) pwrite64(r8, &(0x7f0000000140)="f6", 0x1, 0xe32d) r9 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x28) sendfile(r9, r9, 0x0, 0xe32e) 36.900973965s ago: executing program 2 (id=9): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file7\x00', 0x0, &(0x7f0000000080), 0x1, 0x507, &(0x7f0000000c00)="$eJzs3cFvI1cZAPBvJvEmzaabFCoVENClFBa0WjvxtlHVU7mAUFUJUXHikIbEG0Wx4yh2ShNWavI/IFGJA4ITZw5IHCr1xBHBDW69lANSgRVog8TBaOxJNpvYSdj12tr495NGM2/eZL731pr37G9lvwBG1vWI2IuIKxHxTkTM5OeTfIs3Olt23f17d5cP7t1dTqLVevsfSbs+OxfH/iZzNb/nZER8/zsRP0pOx220xtaXqtXKVl4uNWubpcbO7q212tJqZbWyUS4vzC/MvXb71XLf+vpi7TeffnvtzR98+LsvffKnvW/+JGvWdF53vB/91Ol64ShOZjwi3nwSwYZgLO/PlWE3hEeSRsRnIuKl9vM/E2PtV/NiujzWAMBToNWaidbM8TIAcNml7RxYkhbzXMB0pGmx2MnhPR9TabXeaN68U9/eWOnkymajkN5Zq1bm8lzhbBSSrDz/fnb8oFyOh8u3I+K5iPjpxDPtcnH54nkGAKC/rp6Y//890Zn/AYBLbvK8CxYH0w4AYHDOnf8BgEvH/A8Ao8f8DwCjx/wPAKPm6rAbAAAM3MeHn//Hht0SAGAgvvfWW9nWOsh//3rl3Z3t9fq7t1YqjfVibXu5uFzf2iyu1uur1UpxuV47737Ven1z/pXYfq/UrDSapcbO7mKtvr3RXGz/rvdipTCQXgEAZ3nuxY/+kkTE3uvPtLc4tpaDuRout3TYDQCGRs4fRpdf4YbR5TM+cN5anj2/IvTBIwRrvf8IfwT0243Py//DqJL/h9El/w+jS/4fRlerlfRa8z89uuSYa91OAgBPFTl+YKD//w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACXxHR7mz1WTtNiMeLZiJiNQnJnrVqZi4hrEfHnicJEVp4faosBgMeX/i3J1/+6MfPy9MnaK8l/Jtr7iPjxz9/+2XtLzeZW9gYg+efR+eYH+fnyMNoPAJzncJ4+msdz9+/dXT7cBtmeT7/VWVw0i3uQb52a8RjPdn+cjEJETP0r6ZRz2fuVsT7E39uPiM9163/Szo3M5iufnoyfxX52oPHTh+Kn7brOPvu3+OypO0/0jHneWq8wKj7Kxp83uj1/aVxv7ye7Ln482R6hHt/h+Hdwavw7fN4n22NNt/Hv+kVjvPL77/as24/4wni3+MlR/KRH/JcvGP/jL375pV51rV9G3IgT8dOHr8lilZq1zVJjZ/fWWm1ptbJa2SiXF+YX5l67/Wq51M5Rlw4z1af9/fWb13r2/9cRUyfj51Enz+n/187sdetoAP7Vf9/54Vd6xd+P+MZXu7/+z58RP5sTv35m/AeWpn7bc/nuLP5Kp//7/+/rf/OC8T/56+7KBS8FAAagsbO7vlStVrb6elCIPt/w2EHyhNrs4JIfZO/HH/c+L+Qps67X/OEXH76QVQ69p305GPLABDxxDx76YbcEAAAAAAAAAAAAAADo5cSXfpK+f50oHXYPAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuMz+FwAA//+EycLn") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000158000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x301, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000580)={0x27800000000, 0x0, 0x1, r2, 0x1}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./proc/net/afs/rootcell\x00', 0x2, 0x0) read$FUSE(r4, &(0x7f0000001500)={0x2020}, 0x2020) ioctl$FBIOPUT_CON2FBMAP(r3, 0x4610, &(0x7f0000000640)={0xc, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000005c0)={0x27800000000, 0x0, 0x1, r2, 0x5}) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000500)=0xa, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffda9}}, 0x20) ptrace(0x10, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000007c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000800)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000840)={0x3, 0x40, 0xfa00, {{0xa, 0xce24, 0x8, @mcast2, 0x5}, {0xa, 0x4e23, 0xff, @mcast2, 0x200}, r6, 0x9}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f0000000940)={0x16, 0x98, 0xfa00, {0x0, 0x4, r6, 0x10, 0x0, @in={0x2, 0x4621, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0xa0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xd) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cgroup.stat\x00', 0x275a, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0500000005000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT], 0x50) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000280)=0x1) readv(r7, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000200)=""/13, 0xd}], 0x2) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x13, r8, 0x59712000) 35.202417227s ago: executing program 4 (id=10): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000780)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000840)=""/195}, 0x48) timer_create(0x6, &(0x7f0000000280)={0x0, 0x4, 0x1, @thr={&(0x7f0000000140)="247b51aecc62eb22dbb3355616e5251b7f68da6893823519874eeaa884796802418675f6774e5372541dee8b5943da1a902452c2abc77cf6ce6d442b6f89d78b20c6728674bd22524a5ca3008205e0d1cbf5b2d3e4579b1640db91c08dfab4bbf3ed6385537c0d9732a76625c50ed7cc4e254b310c34159271c41385e7e76cb8aada315b88eac9c45c56049eca18ad0e1e3e55fdd2e7454ed51454aff5b539b9672c4dd816d8baef40bc1eb0c9fd240e2137c3db08cf94d78dae7484f98d2d", &(0x7f0000000200)="5d4d2c22073b060e05f6f4abc152f99650beb27826f8b50d662616e3f115937065b5588256baffdd6fdc5adb72"}}, &(0x7f00000002c0)=0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x15, 0x5, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000540)={0x42, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f00000007c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000940)={0x42, 0xffffffff}, 0x10) close(0x4) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)={0x34, 0x0, 0x7, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040080}, 0x14) timer_delete(r1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8014, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x80, 0xe0, 0x4, {0x8, 0xb, 0x1, 0x1, 0x1, 0xa}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2002, 0x9, 0x9, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x5, 0x4, 0x0, {0x8, 0x25, 0x1, 0x0, 0x9, 0x9, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x4, 0x10, {0x8, 0x25, 0x1, 0x83, 0x3f, 0xa, 0x2}}}}}}}}]}}, 0x0) write(r0, &(0x7f0000000980)="5413abeba231a8ebc2f6728750a0976fee2ec0c0535d9c15e3114f24b7edb2fc6882e5ab441862b6734a053b64ce7f36031b88dcfe7dfb629cf93708a1a1", 0x3e) recvmsg$can_bcm(r3, &(0x7f0000000c80)={&(0x7f00000009c0)=@qipcrtr, 0x80, &(0x7f0000000b40)=[{&(0x7f0000001000)=""/212, 0xfffffffffffffedb}], 0x1, &(0x7f0000000b80)=""/216, 0xd8}, 0x40002041) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000d00)={'syzkaller0\x00', 0x1}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000d40)={'syzkaller0\x00', 0x0}) r11 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f0000000d80)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r9, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x20000003, 0x6}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r8, &(0x7f0000000fc0)=ANY=[@ANYBLOB="000060034503003000640000ac01"], 0x34) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x9, 0xfff3}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc02, {0x0, 0x0, 0x0, 0x0, {}, {0x10, 0xb}, {0x4, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x240408a0}, 0x20004890) 34.702280117s ago: executing program 2 (id=11): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f00000002c0)=@udp=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[r1], 0x0, 0x0}, 0x94) r3 = syz_open_dev$dvb_frontend(&(0x7f00000000c0), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f00000005c0)=[{0x46, '\x00', @st={0x4, [{0x3, @svalue=0x1000000000009}, {0x2, @svalue=0x7}, {0x1, @uvalue=0x3ff}, {0x1, @uvalue=0x5}]}, 0x1}, {0x1a, '\x00', @st={0x4, [{0x1, @svalue=0x3}, {0x3, @svalue}, {0x3, @svalue}, {0x2, @uvalue=0xf}]}, 0x9}, {0x3d, '\x00', @buffer={"233b263a371067f509207d360700008d262565779b883426b1ec008cc77b2c69", 0x20}, 0xe6}]}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000006c0)=0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000900)={@random="e90c610faca2", @remote, @void, {@canfd={0xd, {{0x0, 0x1}, 0xe, 0x0, 0x0, 0x0, "defe27c3f783d3e552fe28cc1d1d04e2f378b1e395a6b2a52e25f016ed1f7f642a26395ee6b5452f33f8523463fdc226e2b31fc204278b2f0ba4e7dc8b561b4a"}}}}, 0x0) syz_emit_ethernet(0x2d, &(0x7f0000000180)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1f, 0x0, 0x2, 0x8, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xb, 0x0, @opaque="2bdbd5"}}}}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001780)=@newlink={0x58, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vti={{0x8}, {0x4d, 0x2, 0x0, 0x1, [@vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}, @IFLA_LINK={0x8}]}, 0x58}}, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000000700)={0x2, 0x2, 0x5, 0x1, r4}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) r7 = add_key$keyring(&(0x7f0000000880), &(0x7f00000008c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) add_key$user(&(0x7f0000000280), &(0x7f0000000740)={'syz', 0x0}, &(0x7f0000000780)="67607b304684988cfcf0019f1b3606c65153766121b79547d5415f0837688d1f4dab604525d153f7af344af4f6f200e655580409fd60e10c8a52aaf59c3aeb323edddd4d39a0bff5aa4e4061c63c9a918693cd6c3f8558038b8cfbfc19089730984a3ceee4884c9e841f1107d609b661af90ef96f7c36a764f6ba753a332efe26059da78a245c2f9924886275dba49935e1347fdb75235a3f3930fbcdbc28698c1ce368d5f00be197d1dce57ff4ae119da23bf7cf3807b45602f24972119be8e058d02b3", 0xc4, r7) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000004) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000980)=0x1, 0x4) connect$inet(r8, &(0x7f00000009c0)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000a00)=0xffffffffffffffff, 0x4) sendmmsg$inet(r8, &(0x7f0000000a40)=[{{0x0, 0x20, &(0x7f0000000b40)=[{&(0x7f0000000bc0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000000c00)="cf", 0x1}, {&(0x7f0000000c40)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000c80)="8a", 0x1}, {&(0x7f0000000cc0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000e00)="ce90bfdb", 0x68}, {&(0x7f0000000e40)="f2e659", 0x3}, {&(0x7f0000000e80)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000f40)="e1", 0x1}, {&(0x7f0000000f80)="fa", 0x1}, {&(0x7f0000000fc0)="d8", 0x1}, {&(0x7f0000001000)="f2964dd1", 0x4}, {&(0x7f0000001040)="b8a2f6", 0x3}, {&(0x7f0000001080)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000001140)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000011c0)="87", 0x1}, {&(0x7f0000001200)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) sendmsg$AUDIT_DEL_RULE(r8, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000012c0)={0x424, 0x3f4, 0x100, 0x70bd2b, 0x25dfdbfe, {0x0, 0x2, 0x19, [0x40, 0x3ac, 0x2, 0xc, 0x8, 0x240000, 0x3, 0x7, 0x5, 0x4, 0x8, 0x6, 0x3, 0x5, 0x4, 0x7, 0x7523, 0x7f, 0x1, 0x7, 0x9, 0x3ff, 0x4, 0x80, 0x80000001, 0x3, 0x2, 0x2, 0x7, 0x401, 0xe133, 0x4, 0x7, 0x76f0, 0x7, 0xd5, 0x4, 0x5d36e1d9, 0x7, 0x10000, 0x2, 0x1000, 0x1000, 0xfffffc00, 0x0, 0x4, 0x3, 0x0, 0x80, 0x0, 0x9, 0x2, 0x6, 0x1, 0x80000001, 0x0, 0x6, 0x1bba227, 0x101, 0x4, 0x441, 0x5, 0x7, 0x1], [0xbf, 0x80000000, 0x7, 0xabb, 0x8, 0x4, 0xf32, 0x0, 0xffff7fff, 0xe5e, 0x8, 0x4, 0xffffffff, 0x8, 0x7ff, 0x3, 0x0, 0x200, 0x1ff, 0x6, 0x6, 0xa, 0x400, 0x5, 0x6, 0x5, 0x3, 0xa, 0x6, 0x9, 0x8, 0xffffffff, 0x3, 0x7, 0x401, 0x2, 0x4, 0x2, 0x2, 0x18e3, 0x80, 0x2a844686, 0x9, 0x2, 0x7, 0x9, 0x3, 0x7fff, 0xde1, 0xff, 0x1000, 0x4, 0x296, 0xfffffff7, 0x3, 0x0, 0x3, 0x7, 0x4, 0x81, 0xc, 0x3, 0x2, 0x3], [0x81, 0x6, 0xed9fd148, 0x200, 0x78, 0xffffffff, 0x4, 0x7, 0x73000000, 0x1, 0x800, 0x9, 0xc072, 0x9, 0xcc9, 0x1, 0xe14b, 0x9, 0x200, 0x4, 0x9, 0x10, 0x9, 0x800, 0x9, 0x7, 0x81, 0x5, 0x4, 0x5, 0x5, 0x4, 0x6, 0x7, 0x80000000, 0x3, 0x0, 0xfffffff7, 0x6, 0x101, 0x91, 0x6, 0x5, 0x63552694, 0x5, 0x7, 0x5, 0x80000001, 0x354, 0x457, 0x4, 0x7f, 0x82, 0x9, 0x2, 0x737, 0x6, 0x3, 0x4, 0x5, 0x6, 0x1, 0x5, 0x2], [0x4, 0x0, 0x1, 0x232, 0xfff, 0x2, 0x3, 0x2, 0x3fe, 0x81, 0x62, 0x5, 0x7, 0x3, 0x1, 0x7ff, 0xae82, 0xc, 0x6, 0x4, 0x5b5d, 0x8, 0x83, 0x5, 0x1683, 0x8, 0x29e, 0x62d3, 0x2d80000, 0x7, 0x10001, 0x2, 0x8001, 0x7, 0x6, 0x800, 0x0, 0x8, 0x2, 0x5, 0x1, 0x6, 0x4, 0x9, 0x7fffffff, 0x9, 0x80000000, 0x3, 0x8001, 0x5, 0xffff8ba1, 0x6, 0x2, 0x10, 0x7, 0x3, 0x800, 0x3, 0x1, 0xffff, 0x4, 0x3, 0x8, 0xd6], 0x1, ['\x00']}}, 0x424}, 0x1, 0x0, 0x0, 0x1}, 0x2400c000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, &(0x7f0000000580)='\x00\x00\x00\x00\x00\x00\x00\x00\n', 0x0}, 0x50) 33.838822595s ago: executing program 2 (id=15): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000001c0), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000200), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000"], 0x50) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='ns\x00') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x5, '\x00', 0x0, r4, 0x2, 0x4, 0x2}, 0x50) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000480)=ANY=[], 0x8) connect$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000500)='bridge0\x00', 0x10) write(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000540)=' hash=', 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000580), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000005c0)) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000600)={'syz_tun\x00', &(0x7f0000000640)=@ethtool_cmd={0xe, 0x1, 0x7fff, 0x0, 0x3, 0x3, 0x41, 0x5, 0x8, 0x6, 0x9, 0x4, 0xfff3, 0x80, 0x84, 0x7f, [0x7fffffff, 0x4]}}) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x44, 0x1, 0x9, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x10044804}, 0xeca1372a5614bd30) 33.515039558s ago: executing program 32 (id=15): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000001c0), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000200), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000"], 0x50) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='ns\x00') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x5, '\x00', 0x0, r4, 0x2, 0x4, 0x2}, 0x50) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000480)=ANY=[], 0x8) connect$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000500)='bridge0\x00', 0x10) write(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000540)=' hash=', 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000580), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000005c0)) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000600)={'syz_tun\x00', &(0x7f0000000640)=@ethtool_cmd={0xe, 0x1, 0x7fff, 0x0, 0x3, 0x3, 0x41, 0x5, 0x8, 0x6, 0x9, 0x4, 0xfff3, 0x80, 0x84, 0x7f, [0x7fffffff, 0x4]}}) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x44, 0x1, 0x9, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x10044804}, 0xeca1372a5614bd30) 32.348611476s ago: executing program 4 (id=20): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = gettid() prlimit64(r1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000001cc0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000001d00)) timer_settime(0x0, 0x1, &(0x7f0000001d40)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$bt_sco(r0, &(0x7f0000000000), 0x8) mmap(&(0x7f0000685000/0x2000)=nil, 0x2000, 0x2, 0x8031, r0, 0x0) listen(r0, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000080)="330fbaedfa116f5c7402395a69875948914b7fc7fc1ca16b50561004d75e32fb38f33c9bc6ffa993a2576dcf90dd2b17c93c", 0x32) open_tree(r2, &(0x7f00000000c0)='./file0\x00', 0x9001) accept(r0, 0x0, 0x0) 31.832477428s ago: executing program 33 (id=20): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = gettid() prlimit64(r1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000001cc0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000001d00)) timer_settime(0x0, 0x1, &(0x7f0000001d40)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$bt_sco(r0, &(0x7f0000000000), 0x8) mmap(&(0x7f0000685000/0x2000)=nil, 0x2000, 0x2, 0x8031, r0, 0x0) listen(r0, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000080)="330fbaedfa116f5c7402395a69875948914b7fc7fc1ca16b50561004d75e32fb38f33c9bc6ffa993a2576dcf90dd2b17c93c", 0x32) open_tree(r2, &(0x7f00000000c0)='./file0\x00', 0x9001) accept(r0, 0x0, 0x0) 14.748231777s ago: executing program 1 (id=106): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x11, 0x8, 0x5, 0x2, 0x0, 0x70bd28, 0x25dfdbfc}, 0x10}}, 0x4000) 14.142709098s ago: executing program 1 (id=109): r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x2, 0x0, &(0x7f0000000180)) 13.902460263s ago: executing program 1 (id=111): syz_mount_image$erofs(&(0x7f000000a380), &(0x7f000000a3c0)='./file0\x00', 0x380c44f, &(0x7f000000a400)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESOCT, @ANYRESDEC], 0x8, 0x1e6, &(0x7f000000a480)="$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") connect$inet(0xffffffffffffffff, 0x0, 0x0) readlinkat(0xffffffffffffff9c, &(0x7f0000005fc0)='./file0/file0\x00', &(0x7f0000006000)=""/39, 0x27) 13.507895103s ago: executing program 1 (id=115): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2a0471a, &(0x7f0000000080)={[{@errors_remount}]}, 0x82, 0x48f, &(0x7f0000000140)="$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") mount$bind(&(0x7f0000001f40)='.\x00', &(0x7f0000001f80)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000001fc0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000002000)='./file0/../file0\x00', &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000002080)='./file0/../file0\x00', &(0x7f00000020c0)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000002100)='.\x00', 0x89901) move_mount(r0, &(0x7f0000002140)='.\x00', 0xffffffffffffff9c, &(0x7f0000002180)='./file0/../file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000021c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002200)={0x2020}, 0x2020) chdir(0x0) 12.798793595s ago: executing program 1 (id=119): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000004c0)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000500)="1c0000000700aaaaaaaaaa1101", 0xd) 11.75456914s ago: executing program 1 (id=127): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000340)) 11.423002414s ago: executing program 34 (id=127): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000340)) 4.755634629s ago: executing program 6 (id=170): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f00000001c0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000200)=0xc8, 0x4) recvmmsg(r0, &(0x7f0000000240), 0x3fffdf2, 0x45833af92e4b39ff, 0x0) 4.230415122s ago: executing program 5 (id=174): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x1000004, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/pci/devices/0000:00:07.0/remove\x00', 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000050a245d545000028000000000002907800000000ffffffff11e0c5780000000062ea00000000000000080000"], 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x884}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r2 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000900)=""/221) sched_setscheduler(r2, 0x1, &(0x7f0000000380)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000500), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000540), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x6) mkdirat(r0, 0x0, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)={0x10, 0x6a, 0x15, 0x8000000, 0xffffffff}, 0x10}], 0x1}, 0x8000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x13, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000008c0)={r6, 0x1}, 0xc) r7 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r7, 0x80045530, &(0x7f0000000640)=""/144) r8 = socket$inet(0x2, 0x1, 0x0) fgetxattr(r8, 0x0, &(0x7f0000000200)=""/7, 0x7) write(r0, &(0x7f00000004c0)='1', 0x1) 3.106622166s ago: executing program 5 (id=177): socketpair$unix(0x1, 0x5, 0x0, 0x0) fchdir(0xffffffffffffffff) write$ppp(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x18) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904080001020d0000052406000105240000000d241f0100000000030000000006241c"], 0x0) 2.56817925s ago: executing program 6 (id=181): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'ip_vti0\x00', {0x2, 0x0, @empty}}) 2.318539676s ago: executing program 6 (id=182): bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=@base={0x12, 0x10, 0x4, 0x7ff, 0x0, 0xffffffffffffffff, 0x1}, 0x50) 2.18090462s ago: executing program 6 (id=184): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000100)={&(0x7f0000000140)={0x2, 0x83, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 2.073525851s ago: executing program 6 (id=185): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x25a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1000, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) open(&(0x7f0000001bc0)='./file1\x00', 0x86442, 0x10) 1.830463245s ago: executing program 3 (id=187): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002080)={0x6, 0x3, &(0x7f0000002140)=ANY=[@ANYBLOB="180000000200000000000000000000009500000000000000"], &(0x7f0000002180)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000021c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002200)={r0, r2, 0x25, 0x4, @val=@netfilter={0x7, 0x0, 0x9}}, 0x20) syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaac4bc9cac968686dd60000000005411"], 0x0) 1.68610504s ago: executing program 3 (id=188): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x989680}, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8801}}], 0x1, 0x40051) unlink(0x0) uname(0x0) socket(0xa, 0x2, 0x0) inotify_init() socket(0x2, 0x80000, 0x0) 1.632443765s ago: executing program 0 (id=189): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x14, r1, 0x1, 0x70bd24, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20009005}, 0x24000084) 1.354512263s ago: executing program 0 (id=190): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./bus\x00', 0x3004000, &(0x7f0000000340), 0x2, 0x7ba, &(0x7f00000013c0)="$eJzs3c9rHFUcAPDvbHaT9GdSUbCKGvDQgpgmseAPFFLwKCKoJy8NybaUbn+QRLAhQovYk8eC4EUEwYs3xYsgpSdFvPQi/Q+kUqQIrdLDykwm6TbdTXeb3Uzjfj4w6Zt5s/PebPqdNz9e5gXQt8bSH6WI/RFxPokYyZcnEVHJUuWI6ZX1bt9cnv0nidkk6vV3/0qydW7dXJ6Nhs+kduUfG46Iq1eSeGzg/nIXzi2dnKnVqvP5/KHFU2cPLZxbevHEqZnj1ePV01NTU69OHZ58eWKqa/v6yTO/fnfn4tuffr732qU/r/6wN4np2J3nNe7HRsodlDcWY2vfyfptvNnBdh5lA/n+lBqWJeu/pOEtrhRtKzX8Dp+MkRho+B8+Ele+L7RyAEBP1NMJAOgzifYfAPrM6n2AWzeXZ1enYu9IAFvlxpGV57Np3N/Op5Wcckxn/w5n/QB2/p3c8+w7We07sEnpNr79oPJlOkUHz+GBzTt/IXvw36T9T7L4H807b6yP/4GI/PiwOeuPIeIfts5m4v+dLpQv/gEAAAAAAKB7Lh+JiFeaPf8rrfX/iSbP/4YiYqIL5T/4+V/peheKAZq4cSTi9fzdPvf2/1t7o8voQD63JyKeiEpy7EStOhF3st7DB6OSHiaqk803nx0y3r84+VOr8hv7/6VTWv5qX8C8HtfLQ/d+Zm5mcWaz+w1E3LgQ8VS5Wfwna+1/0qL/79E2y/hx+ZtnW+U9OP6BXql/FXGgaft/9811ycbv5zuUnQ+s/GxaxtLRNz5uVX5b8X/3z5SALkrb/50bx/9o0vi+zoXOy/js1sQXrfIe9vx/MHkve6voYL7so5nFxfnJiMHkrfuXN32FaH2o8z2B7W01HlbjJY3/g883v/7f6Py/EhFn2yzz658rv7fKG8si1fk/FCGN/7mO2v/OE//+9nTLQ0V77f/hrE0/mC9x/w821m6AFl1PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoplJE7I6kNL6WLpXGxyN2RcTjsbNUO7Ow+MKxMx+enkvzIkajUjp2oladiIiRlfkknZ/M0nfnp9bNvxQR+yLi0tCObH589kxtruidBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDcrhbj/6f+GGpYcbqoGgIAPTFcdAUAgC2n/QeA/qP9B4D+03H7/8ue3lQEANgyrv8BoP9o/wEAAAAAAAAAAAAAAAAAAAAAAACgp/Y9d/laEhHnX9uRTanBPK9SaM2AXisVXQGgMANFVwAoTLmdlZJk7ZoA+P9wjQ8kD8hvPUSIOwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPSPA/vbHf+/rZFCgW3E6H3Qv4z/D/3LWT30L+P/A70a/3/HQ9YHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeRQvnlk7O1GrVeYmuJeorifKjUp/q/EK9Xmg1hiKit0UMRzE7mMZQ0b/cPJF+yTHRtQ0WfWQCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGA7+C8AAP//2P4O5Q==") symlink(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') renameat2(0xffffffffffffff9c, &(0x7f0000001d80)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f00000012c0)='./file1\x00', 0x101042, 0x1d8) 1.326744946s ago: executing program 3 (id=191): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000005c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000000600)) 1.125335296s ago: executing program 3 (id=192): syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000080), 0x0}, 0x20) 930.253926ms ago: executing program 5 (id=193): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000340)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x24c00, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, 0x0) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x170, 0x138, 0x0, 0x0, 0x1, 0x0, 0x0, @by_dev={r1}, {0x0, @stats_create={'@stats_create ', '-', 0x20, '512', ' 1 histogram:10,100,1000'}}}) 922.407577ms ago: executing program 0 (id=194): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000680)={0x4, 0x0, 0x0, 0x168, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@error={0x0, 0x80, 0x0, 0x30}]}) ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, &(0x7f0000000800)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f0000001d00)={0x4, 0x0, 0x0, 0x168, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, {0x0, @mpath_path={'fail_path ', @ram_num={'1:', 0x0}}}}) 905.512729ms ago: executing program 3 (id=195): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file0\x00', 0x1010008, &(0x7f00000001c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES16=0x0, @ANYRESOCT=0x0], 0xfe, 0x1b2, &(0x7f0000000280)="$eJzs289qE1EUB+CT2Na0LpKFK3Ex4MZVaPoEBqkgBgQlCwVBsQ1IRwIWArow2bnwIfRx3OqTuCwiXEmmf5Iai5Q2A+n3bXKYub9w7pDkMIF5efvt3k5/v/ei9y1qlUpU76UUB5VoRDWOjAIAWCYHKcWXiEjXR7H+NdKvVCi7LwDg8ozn/8/xwD+c/yY/ACy/p8+eP2p3OttPsqwWkX8adAfd4rU43+7Fm8hjNzajHr8j0rGifvCws72ZTTTicz48zA8H3Wuz+VbUozE/3yry2Wx+NTam81tRj5vz81tz82tx985Uvhn1+PE6+pHHToyzJ/mPrSy7/7hzKn9jsg4AAACWQTM7Nvf+vdn81/ki36789/8Dp+6vV+LWSrl7B4Crav/9h71Xeb77bqHF2tSRiBidsfj7RtHo4jrMzhk/uqSLvpgXV6zHxb/zapS/r+Up+tXzx1NKw/Hn8+zFtYiYFOX9JgGLcfLtnzlcL60hAAAAAAAAAAAAAADgL4t4dKnsPQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABw9fwJAAD//xQYkLQ=") r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') pread64(r0, &(0x7f0000000f40)=""/4096, 0x1000, 0xd33) 638.001386ms ago: executing program 5 (id=196): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x8000) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000140)={0x9, 0xc34, 0x1, 0x4, '\x00', '\x00', '\x00', 0x9, 0x6, 0x10, 0x0, "c1c5b6fd10c2ca0bdb677bdb7557618f"}) 571.730132ms ago: executing program 0 (id=197): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@remote, 0x800, 0x0, 0x103, 0x9, 0x0, 0xffff}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00', 0x0}) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @dev={0xfe, 0x80, '\x00', 0x44}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}, r2}}}], 0x28}, 0x400c0c0) 502.130879ms ago: executing program 5 (id=198): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b52, &(0x7f0000000000)={0x0, 0x0}) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000000c0)={0x0, 0x0}) symlink(0x0, &(0x7f00000004c0)='./file0\x00') chmod(&(0x7f0000000500)='./file0\x00', 0x23f) lchown(&(0x7f0000000540)='./file0\x00', 0xee00, 0x0) syz_mount_image$vfat(&(0x7f0000000600), &(0x7f0000000640)='./file2\x00', 0x80420c, &(0x7f0000000680)=ANY=[], 0x7, 0x37b, &(0x7f0000000d40)="$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") creat(&(0x7f00000010c0)='./bus\x00', 0x44) mount(&(0x7f0000001100)=@loop={'/dev/loop', 0x0}, &(0x7f0000001140)='./bus\x00', 0x0, 0x301400, 0x0) r1 = open(&(0x7f0000001180)='./bus\x00', 0x64842, 0x47) bpf$PROG_LOAD(0x5, 0x0, 0x0) pwritev2(r1, &(0x7f0000000ac0)=[{&(0x7f0000001200)="e8", 0x1}], 0x1, 0x6, 0x0, 0x1f) 422.529698ms ago: executing program 0 (id=199): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@setlink={0x30, 0x13, 0xbaa23f3d13f2d1f5, 0x0, 0x800000, {0x0, 0x0, 0x0, r2}, [@IFLA_MTU={0x8, 0x4, 0x7f}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x835}, 0x40) 345.015646ms ago: executing program 6 (id=200): r0 = syz_mount_image$ext4(&(0x7f0000000c40)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x21081e, &(0x7f0000000cc0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f0000000d00)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") fdatasync(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000042c0)='./file1\x00', 0x101e42, 0x1) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000004300)=0x400) r2 = openat(0xffffffffffffff9c, &(0x7f0000004340)='./file1\x00', 0x42, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004380)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000043c0)='2', 0x1, 0x8080c61) pwrite64(r2, &(0x7f0000004400)='E', 0x1, 0x47ecf) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f0000004440)={0x17c04, 0xffffffffffffffff, 0x4f000, 0x100000001}) 121.327018ms ago: executing program 5 (id=201): fsopen(0x0, 0x0) syz_usb_connect$uac1(0x3, 0x81, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x2a39, 0x3fd3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0xa2, 0x0, 0x4d, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7ff, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x9, 0x7, 0xf9, {0x7, 0x25, 0x1, 0x4, 0x6, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x3, 0x4, 0x1}, @as_header={0x7, 0x24, 0x1, 0xa8, 0xfa, 0x1003}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xf0, 0x5, 0x5, {0x7, 0x25, 0x1, 0x0, 0x6, 0x2}}}}}}}}]}}, 0x0) 2.29678ms ago: executing program 3 (id=202): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x9, 0x105000) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) madvise(&(0x7f00009ca000/0x3000)=nil, 0x3000, 0x4) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./bus\x00', 0x2800088, &(0x7f00000002c0)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x95, 0x2b8, &(0x7f00000003c0)="$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") read(r2, &(0x7f0000000680)=""/153, 0x99) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x7405, 0x2, 0x0, 0x0, 0x6e21, 0x8}, 0x20) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000080)={'raw\x00', 0x7e, "1f14b1fede8ce69b81500aba0998a8182d29c1dfb5988fb264c9a69063c15bc0126e7cd4b46adcb3ca00ec808b6001daaf7c3a64d041322be84d870d673aa8da09e40254d38cb331d38cc370f6f682e157f6bfced4a837178abb0ad1dc7bcc8d8c49fc2edb146ed86d7e2f59f00dc54f9813cc55c0ee48770b4da75b2df5"}, &(0x7f0000000140)=0xa2) getsockopt$inet6_int(r0, 0x29, 0x33, 0x0, &(0x7f0000000000)) 0s ago: executing program 0 (id=203): r0 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e20, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000700000089070400000000001c00000000000000000000000800"], 0x38}}], 0x1, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.1' (ED25519) to the list of known hosts. [ 63.058408][ T4175] cgroup: Unknown subsys name 'net' [ 63.194895][ T4175] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.784817][ T4175] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 66.015868][ T4194] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.025684][ T4188] rdma_rxe: rxe_register_device failed with error -23 [ 66.034195][ T4188] rdma_rxe: failed to add rxe_eth0 [ 66.048250][ T4189] rdma_rxe: rxe_register_device failed with error -23 [ 66.055257][ T4189] rdma_rxe: failed to add rxe_eth0 [ 66.065591][ T4196] rdma_rxe: rxe_register_device failed with error -23 [ 66.080722][ T4194] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.088351][ T4196] rdma_rxe: failed to add rxe_eth0 [ 66.090091][ T4190] rdma_rxe: rxe_register_device failed with error -23 [ 66.112521][ T4190] rdma_rxe: failed to add rxe_eth0 [ 66.135976][ T4194] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.321461][ T4194] infiniband rxe0: set active [ 66.327305][ T4194] infiniband rxe0: added rxe_eth0 [ 66.337109][ T7] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.459014][ T4194] RDS/IB: rxe0: added [ 66.463943][ T4194] smc: adding ib device rxe0 with port count 1 [ 66.488179][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 66.501917][ T4194] smc: ib device rxe0 port 1 has pnetid [ 66.531201][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 66.564635][ T4200] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.589909][ T4194] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.666130][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 66.716458][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 66.765916][ T4194] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.839640][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.847009][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.857190][ T4188] device bridge_slave_0 entered promiscuous mode [ 66.874725][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.882985][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.891690][ T4196] device bridge_slave_0 entered promiscuous mode [ 66.914699][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.922438][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.930645][ T4188] device bridge_slave_1 entered promiscuous mode [ 66.942190][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.949449][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.957480][ T4196] device bridge_slave_1 entered promiscuous mode [ 66.969929][ T4194] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.052379][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.065076][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.074119][ T4190] device bridge_slave_0 entered promiscuous mode [ 67.089841][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.108453][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.125009][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.133533][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.142758][ T4189] device bridge_slave_0 entered promiscuous mode [ 67.150849][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.158496][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.166655][ T4190] device bridge_slave_1 entered promiscuous mode [ 67.175062][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.188405][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.199003][ T4194] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.214548][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.222328][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.235802][ T4189] device bridge_slave_1 entered promiscuous mode [ 67.307444][ T4188] team0: Port device team_slave_0 added [ 67.324724][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.341903][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.357563][ T4196] team0: Port device team_slave_0 added [ 67.365335][ T4188] team0: Port device team_slave_1 added [ 67.375915][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.413186][ T4196] team0: Port device team_slave_1 added [ 67.429595][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.440206][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.447228][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.474549][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.493885][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.501361][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.527661][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.551898][ T4194] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.569021][ T4190] team0: Port device team_slave_0 added [ 67.618972][ T4190] team0: Port device team_slave_1 added [ 67.640669][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.653239][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.685330][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.707029][ T4188] device hsr_slave_0 entered promiscuous mode [ 67.728832][ T4188] device hsr_slave_1 entered promiscuous mode [ 67.739282][ T4189] team0: Port device team_slave_0 added [ 67.761321][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.775146][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.806814][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.836763][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.843992][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.871114][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.884559][ T4189] team0: Port device team_slave_1 added [ 67.914378][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.921790][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.949889][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 67.957204][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 67.964298][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.026933][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.034503][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 68.041623][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 68.048135][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.074844][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 68.081509][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.104994][ T4190] device hsr_slave_0 entered promiscuous mode [ 68.113993][ T4190] device hsr_slave_1 entered promiscuous mode [ 68.121103][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.129627][ T4190] Cannot create hsr debugfs directory [ 68.151092][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.160346][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.187390][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.223050][ T4196] device hsr_slave_0 entered promiscuous mode [ 68.231075][ T4196] device hsr_slave_1 entered promiscuous mode [ 68.238314][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.246005][ T4196] Cannot create hsr debugfs directory [ 68.410962][ T4189] device hsr_slave_0 entered promiscuous mode [ 68.418835][ T4189] device hsr_slave_1 entered promiscuous mode [ 68.425727][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.433709][ T4189] Cannot create hsr debugfs directory [ 68.576287][ T3853] infiniband rxe0: set active [ 68.617333][ T4200] rxe_eth0 speed is unknown, defaulting to 1000 [ 68.690122][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 68.716534][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.752548][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.780558][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.824544][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.861620][ T4190] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.879900][ T4190] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.890484][ T4190] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.903712][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.911226][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.920446][ T4194] device bridge_slave_0 entered promiscuous mode [ 68.932331][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.940352][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.948789][ T4194] device bridge_slave_1 entered promiscuous mode [ 68.969664][ T4190] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.995172][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.009498][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.071676][ T4194] team0: Port device team_slave_0 added [ 69.080501][ T4194] team0: Port device team_slave_1 added [ 69.091784][ T4189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.125267][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.133182][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.163664][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.176523][ T4189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.192296][ T4189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.206700][ T4189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.218670][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.226103][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.253676][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.356350][ T4196] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.367464][ T4196] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.390607][ T4194] device hsr_slave_0 entered promiscuous mode [ 69.402941][ T4194] device hsr_slave_1 entered promiscuous mode [ 69.410102][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.418705][ T4194] Cannot create hsr debugfs directory [ 69.447850][ T4196] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.461818][ T4196] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.556120][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.599966][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.641258][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.655092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.665832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.680158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.689693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.711960][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.742556][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.752410][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.761068][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.770383][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.780704][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.799030][ T429] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.806374][ T429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.818823][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.846634][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.856060][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.866018][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.876756][ T429] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.884107][ T429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.892656][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.902257][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.911490][ T429] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.918937][ T429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.927306][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.944078][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.955086][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.965327][ T1423] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.972843][ T1423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.016293][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.026917][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.036476][ T1109] Bluetooth: hci0: command 0x041b tx timeout [ 70.044476][ T1109] Bluetooth: hci1: command 0x041b tx timeout [ 70.053271][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.063763][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.073632][ T1423] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.080791][ T1423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.089523][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.099058][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.108348][ T1109] Bluetooth: hci3: command 0x041b tx timeout [ 70.115520][ T1109] Bluetooth: hci2: command 0x041b tx timeout [ 70.117461][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.124405][ T1109] Bluetooth: hci4: command 0x041b tx timeout [ 70.141031][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.151612][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.162145][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.172259][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.181537][ T1423] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.189353][ T1423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.198230][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.218344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.228720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.242969][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.256593][ T4194] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.274349][ T4194] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.285113][ T4194] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.296156][ T4194] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.312037][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.322710][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.332519][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.342464][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.352040][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.365267][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.376333][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.388507][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.403740][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.416262][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.427549][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.445933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.455816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.465598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.475043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.485768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.544421][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.561252][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.571276][ T429] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.578745][ T429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.586889][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.598838][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.608380][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.617202][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.628207][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.637470][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.649249][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.659301][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.677529][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.686432][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.700790][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.714449][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.726500][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.739202][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.771124][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.785036][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.794603][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.803812][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.813924][ T429] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.821101][ T429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.858262][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.886258][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.927956][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.935657][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.945383][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.955920][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.980531][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.998564][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.012255][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.049533][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.059879][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.069562][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.079109][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.089493][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.131058][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.139859][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.151314][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.161686][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.190984][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.210251][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.224651][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.235012][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.241678][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.260404][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.269015][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.277153][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.286653][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.296564][ T4190] device veth0_vlan entered promiscuous mode [ 71.315420][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.325123][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.356591][ T4190] device veth1_vlan entered promiscuous mode [ 71.379930][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.389870][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.399688][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.410297][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.417408][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.425548][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.435626][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.444858][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.452033][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.460910][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.487920][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.509277][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.524563][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.537998][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.557026][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.566360][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.575182][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.589433][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.640415][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.651230][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.662556][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.672110][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.681576][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.692347][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.701721][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.725886][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.741768][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.756301][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.765924][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.781026][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.803736][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.818101][ T4190] device veth0_macvtap entered promiscuous mode [ 71.831599][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.842217][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.858079][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.890459][ T4190] device veth1_macvtap entered promiscuous mode [ 71.923175][ T4188] device veth0_vlan entered promiscuous mode [ 71.939741][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.950226][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.959850][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.969908][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.980005][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.025767][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.038908][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.047138][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.057156][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.070744][ T4188] device veth1_vlan entered promiscuous mode [ 72.082619][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.094493][ T4196] device veth0_vlan entered promiscuous mode [ 72.107090][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.117157][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.118776][ T1109] Bluetooth: hci1: command 0x040f tx timeout [ 72.137379][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.145475][ T1109] Bluetooth: hci0: command 0x040f tx timeout [ 72.157129][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.174243][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.188684][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 72.195736][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.198680][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 72.212761][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.226927][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.228292][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 72.246840][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.262782][ T4196] device veth1_vlan entered promiscuous mode [ 72.291297][ T4190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.309124][ T4190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.323145][ T4190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.333247][ T4190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.372848][ T4188] device veth0_macvtap entered promiscuous mode [ 72.398630][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.409278][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.418885][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.426547][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.434645][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.444044][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.453500][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.465389][ T4188] device veth1_macvtap entered promiscuous mode [ 72.480709][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.520486][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.533020][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.545388][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.555158][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.564971][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.574205][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.583461][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.593469][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.604352][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.613952][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.636922][ T4196] device veth0_macvtap entered promiscuous mode [ 72.649914][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.660874][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.674393][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.683603][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.692835][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.701930][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.710961][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.720660][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.733828][ T4189] device veth0_vlan entered promiscuous mode [ 72.745312][ T4196] device veth1_macvtap entered promiscuous mode [ 72.760486][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.771156][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.780761][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.790262][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.806940][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.815379][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.836166][ T4189] device veth1_vlan entered promiscuous mode [ 72.898945][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.907164][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.921568][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.932122][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.980138][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.989257][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.003331][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.013336][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.023161][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.032941][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.046779][ T4189] device veth0_macvtap entered promiscuous mode [ 73.056784][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.071867][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.084590][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.095586][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.107203][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.119597][ T4194] device veth0_vlan entered promiscuous mode [ 73.137830][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.161013][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.170354][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.184118][ T429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.186808][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.205874][ T429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.206581][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.225574][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.237300][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.249213][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.270812][ T4189] device veth1_macvtap entered promiscuous mode [ 73.288059][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.296597][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.314817][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.324973][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.337098][ T4196] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.346432][ T4196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.356210][ T4196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.367142][ T4196] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.397174][ T4194] device veth1_vlan entered promiscuous mode [ 73.473282][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.487381][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.500043][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.513530][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.528862][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.542715][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.558334][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.574927][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.595762][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.600379][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.618307][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.627530][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.637445][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.646972][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.673961][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.685204][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.696238][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.707104][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.720465][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.731819][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.743809][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.756053][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.767039][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.806201][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.816192][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.826455][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.836365][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.848317][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.859812][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.870239][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.880448][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.891408][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.908952][ T4194] device veth0_macvtap entered promiscuous mode [ 73.930980][ T429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.962157][ T429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.971403][ T4194] device veth1_macvtap entered promiscuous mode [ 73.990446][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.007523][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.017493][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.070015][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.092362][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.132768][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.153500][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.176760][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.187606][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.200283][ T4257] Bluetooth: hci0: command 0x0419 tx timeout [ 74.206604][ T4257] Bluetooth: hci1: command 0x0419 tx timeout [ 74.212759][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.222849][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.236292][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.244377][ T4301] loop0: detected capacity change from 0 to 512 [ 74.252978][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.263949][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.276225][ T4257] Bluetooth: hci3: command 0x0419 tx timeout [ 74.282844][ T4257] Bluetooth: hci2: command 0x0419 tx timeout [ 74.289855][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.300536][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.312728][ T4257] Bluetooth: hci4: command 0x0419 tx timeout [ 74.325773][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.342362][ T4301] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 74.353381][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.364956][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.377465][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.394362][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.410186][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.421323][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.439496][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.454480][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.465133][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.480026][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.500051][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.510666][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.520321][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.529974][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.561755][ T4194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.594205][ T4194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.638955][ T4194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.649229][ T4194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.751013][ T1423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.791836][ T1423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.913849][ T4313] loop0: detected capacity change from 0 to 8 [ 74.968017][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.006935][ T4316] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 75.062738][ T4313] SQUASHFS error: Unable to read inode 0x11f [ 75.157558][ T4321] loop1: detected capacity change from 0 to 8 [ 75.361154][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.600896][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.796094][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.870627][ T4302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.892636][ T4302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.975378][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.010042][ T4269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.058718][ T4269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.130103][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.192185][ T4326] loop4: detected capacity change from 0 to 128 [ 76.247356][ T4331] loop2: detected capacity change from 0 to 512 [ 76.255201][ T4326] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 76.278290][ T4326] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.530955][ T4331] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 76.685563][ T4331] ext4 filesystem being mounted at /1/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.712463][ T4338] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.917656][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 76.937652][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 76.957638][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 76.977661][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 76.987623][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 76.997628][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 77.007626][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 77.291354][ T26] audit: type=1800 audit(1793082778.022:2): pid=4342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5" name="file1" dev="loop4" ino=13 res=0 errno=0 [ 77.779716][ T4189] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 77.864136][ T4189] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /0/file1/lost+found: directory fails checksum at offset 0 [ 77.891985][ T4189] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /0/file1/lost+found: directory fails checksum at offset 1024 [ 77.925513][ T4189] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /0/file1/lost+found: directory fails checksum at offset 8192 [ 77.947861][ T4189] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /0/file1/lost+found: directory fails checksum at offset 11264 [ 77.971913][ T4189] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 77.990543][ T4189] EXT4-fs error (device loop4): ext4_empty_dir:3141: inode #11: comm syz-executor: Directory block failed checksum [ 78.008422][ T4347] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4196] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4347] [ 78.013049][ T4189] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 78.167947][ T4189] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /0/file1/lost+found: directory fails checksum at offset 0 [ 78.234180][ T4189] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /0/file1/lost+found: directory fails checksum at offset 1024 [ 78.359861][ T4196] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 78.380617][ T4189] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /0/file1/lost+found: directory fails checksum at offset 8192 [ 78.441328][ T4189] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /0/file1/lost+found: directory fails checksum at offset 11264 [ 78.481613][ T4196] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 78.542872][ T4189] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 78.614324][ T4189] EXT4-fs error (device loop4): ext4_empty_dir:3141: inode #11: comm syz-executor: Directory block failed checksum [ 78.655844][ T4189] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 78.688125][ T4189] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 78.713761][ T4189] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 78.733126][ T4189] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 78.761030][ T4189] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 78.784041][ T4189] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 78.994944][ T4352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12'. [ 79.050752][ T4353] loop3: detected capacity change from 0 to 256 [ 79.089002][ T145] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.189545][ T4354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12'. [ 79.202700][ T4353] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 79.258384][ T4314] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.351817][ T145] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.472121][ T145] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.596844][ T145] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.161412][ T4374] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.187781][ T4262] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 81.276767][ T4383] loop1: detected capacity change from 0 to 1024 [ 81.379534][ T4383] hfsplus: unable to parse mount options [ 81.447881][ T4262] usb 1-1: Using ep0 maxpacket: 8 [ 81.472332][ T4389] loop3: detected capacity change from 0 to 8 [ 81.545386][ T4389] SQUASHFS error: zlib decompression failed, data probably corrupt [ 81.567894][ T4262] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.602701][ T4389] SQUASHFS error: Failed to read block 0x9b: -5 [ 81.610083][ T4262] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.634250][ T4389] SQUASHFS error: Unable to read metadata cache entry [99] [ 81.642088][ T4262] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 81.660128][ T4389] SQUASHFS error: Unable to read inode 0x127 [ 81.666878][ T4262] usb 1-1: config 0 interface 0 has no altsetting 0 [ 81.681878][ T4262] usb 1-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 81.692527][ T4262] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.772808][ T4262] usb 1-1: config 0 descriptor?? [ 81.846378][ T4391] loop1: detected capacity change from 0 to 8192 [ 81.876491][ T4393] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.951014][ T4391] loop1: p3 < > p4 < > [ 82.020016][ T4374] chnl_net:caif_netlink_parms(): no params data found [ 82.099357][ T4396] loop3: detected capacity change from 0 to 4096 [ 82.122555][ T4396] ntfs3: Unknown parameter '/dev/video#' [ 82.208999][ T4391] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 82.365829][ T4389] netlink: 44 bytes leftover after parsing attributes in process `syz.3.24'. [ 82.388393][ T4262] input: HID 046d:c623 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:046D:C623.0001/input/input5 [ 82.547086][ T4375] loop0: detected capacity change from 0 to 1024 [ 82.625943][ T4375] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 82.696827][ T4375] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 82.705823][ T4375] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback. [ 82.782457][ T4418] loop1: detected capacity change from 0 to 1764 [ 82.790927][ T4262] logitech 0003:046D:C623.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 046d:c623] on usb-dummy_hcd.0-1/input0 [ 82.842097][ T4182] udevd[4182]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 82.861098][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 83.067830][ T4262] Bluetooth: hci1: command 0x0409 tx timeout [ 83.124310][ T4374] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.141448][ T4374] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.181860][ T4374] device bridge_slave_0 entered promiscuous mode [ 83.287813][ T4374] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.294982][ T4374] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.345697][ T4374] device bridge_slave_1 entered promiscuous mode [ 83.489737][ T4374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.554619][ T4374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.619876][ T4374] team0: Port device team_slave_0 added [ 83.663554][ T4374] team0: Port device team_slave_1 added [ 83.741345][ T4374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.757897][ T4374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.807986][ T4449] loop3: detected capacity change from 0 to 2048 [ 83.852740][ T4374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.883968][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 83.901233][ T4374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.910417][ T4374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.978624][ T4449] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 83.983885][ T4374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.036937][ T4374] device hsr_slave_0 entered promiscuous mode [ 84.102670][ T4464] netlink: 20 bytes leftover after parsing attributes in process `syz.0.36'. [ 84.146075][ T4374] device hsr_slave_1 entered promiscuous mode [ 84.164761][ T4374] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.184756][ T4374] Cannot create hsr debugfs directory [ 84.283835][ T4393] chnl_net:caif_netlink_parms(): no params data found [ 84.501695][ T4479] loop1: detected capacity change from 0 to 512 [ 84.528761][ T4479] EXT4-fs (loop1): Ignoring removed orlov option [ 84.535991][ T4479] EXT4-fs (loop1): Ignoring removed orlov option [ 84.548087][ T4479] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 84.579550][ T4479] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 84.604780][ T4483] loop0: detected capacity change from 0 to 512 [ 84.619013][ T4479] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #16: comm syz.1.41: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 84.651906][ T4479] EXT4-fs (loop1): Remounting filesystem read-only [ 84.661016][ T4479] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.41: couldn't read orphan inode 16 (err -117) [ 84.681819][ T4479] EXT4-fs (loop1): Remounting filesystem read-only [ 84.689011][ T4483] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 84.711583][ T4262] usb 1-1: USB disconnect, device number 2 [ 84.728854][ T4479] EXT4-fs (loop1): 1 orphan inode deleted [ 84.734892][ T4479] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,acl,orlov,errors=remount-ro,orlov,block_validity,. Quota mode: none. [ 84.756141][ T4483] EXT4-fs (loop0): Ignoring removed bh option [ 84.774921][ T4483] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 84.863041][ T4490] EXT4-fs error (device loop1): ext4_lookup:1860: inode #15: comm syz.1.41: iget: bad extra_isize 46 (inode size 256) [ 84.910566][ T4490] EXT4-fs (loop1): Remounting filesystem read-only [ 85.036185][ T4483] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.43: invalid indirect mapped block 4294967295 (level 0) [ 85.133069][ T4483] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.43: invalid indirect mapped block 4294967295 (level 1) [ 85.147316][ T4393] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.147357][ T4393] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.152181][ T4393] device bridge_slave_0 entered promiscuous mode [ 85.168033][ T4297] Bluetooth: hci1: command 0x041b tx timeout [ 85.212109][ T4498] loop3: detected capacity change from 0 to 256 [ 85.237379][ T4483] EXT4-fs (loop0): 1 orphan inode deleted [ 85.263115][ T4483] EXT4-fs (loop0): 1 truncate cleaned up [ 85.269055][ T4393] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.269094][ T4393] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.271926][ T4393] device bridge_slave_1 entered promiscuous mode [ 85.295913][ T4483] EXT4-fs (loop0): mounted filesystem without journal. Opts: mblk_io_submit,lazytime,block_validity,block_validity,block_validity,quota,bh,,errors=continue. Quota mode: writeback. [ 85.397734][ T145] device hsr_slave_0 left promiscuous mode [ 85.436652][ T145] device hsr_slave_1 left promiscuous mode [ 85.448995][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.457160][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.503297][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.536207][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.546603][ T145] device bridge_slave_1 left promiscuous mode [ 85.565383][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.660009][ T4508] usb usb5: usbfs: interface 0 claimed by hub while 'syz.3.47' sets config #2048 [ 85.681789][ T145] device bridge_slave_0 left promiscuous mode [ 85.697351][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.755666][ T4507] ======================================================= [ 85.755666][ T4507] WARNING: The mand mount option has been deprecated and [ 85.755666][ T4507] and is ignored by this kernel. Remove the mand [ 85.755666][ T4507] option from the mount to silence this warning. [ 85.755666][ T4507] ======================================================= [ 85.806406][ T4507] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 85.848333][ T145] device veth1_macvtap left promiscuous mode [ 85.855664][ T145] device veth0_macvtap left promiscuous mode [ 85.900347][ T145] device veth1_vlan left promiscuous mode [ 85.906649][ T145] device veth0_vlan left promiscuous mode [ 85.961004][ T4257] Bluetooth: hci3: command 0x041b tx timeout [ 86.024939][ T4513] SQUASHFS error: Unable to read directory block [629:26] [ 86.058338][ T4512] SQUASHFS error: Unable to read directory block [629:46] [ 86.190964][ T4515] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 86.721535][ T1326] cfg80211: failed to load regulatory.db [ 87.248068][ T4297] Bluetooth: hci1: command 0x040f tx timeout [ 87.371817][ T145] team0 (unregistering): Port device team_slave_1 removed [ 87.414515][ T145] team0 (unregistering): Port device team_slave_0 removed [ 87.436278][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.467402][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.599836][ T145] bond0 (unregistering): Released all slaves [ 87.726886][ T4393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.793767][ T4393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.922275][ T4526] set_capacity_and_notify: 3 callbacks suppressed [ 87.922289][ T4526] loop3: detected capacity change from 0 to 2048 [ 87.969218][ T4393] team0: Port device team_slave_0 added [ 88.018593][ T4393] team0: Port device team_slave_1 added [ 88.058637][ T4261] Bluetooth: hci3: command 0x040f tx timeout [ 88.137707][ T4526] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 88.164899][ T4393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.190187][ T4535] device-mapper: table: 248:0: striped: Target length not divisible by chunk size [ 88.192705][ T4533] loop0: detected capacity change from 0 to 2048 [ 88.205575][ T4535] device-mapper: ioctl: error adding target to table [ 88.231271][ T4393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.308295][ T4393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.347167][ T4393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.368236][ T4393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.402129][ T4393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.415414][ T4374] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 88.428320][ T4533] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.482276][ T4374] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 88.498629][ T26] audit: type=1804 audit(1793082789.222:3): pid=4533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.56" name="/newroot/13/file1/file1" dev="loop0" ino=15 res=1 errno=0 [ 88.624658][ T4374] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 88.717721][ T4261] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 88.773346][ T4374] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 88.898211][ T4393] device hsr_slave_0 entered promiscuous mode [ 88.920595][ T4393] device hsr_slave_1 entered promiscuous mode [ 88.943559][ T4393] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.961896][ T4393] Cannot create hsr debugfs directory [ 88.999167][ T4261] usb 2-1: Using ep0 maxpacket: 16 [ 89.011100][ T4559] loop3: detected capacity change from 0 to 128 [ 89.062276][ T4559] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 89.125680][ T4559] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 89.149379][ T4261] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 89.171077][ T4261] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 89.172838][ T4559] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 89.186804][ T4261] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 89.212534][ T4261] usb 2-1: config 0 interface 0 has no altsetting 0 [ 89.224787][ T4559] UDF-fs: Scanning with blocksize 512 failed [ 89.269923][ T4559] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 89.286324][ T4559] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 89.298350][ T4559] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 89.310616][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 89.317214][ T4559] UDF-fs: Scanning with blocksize 1024 failed [ 89.324726][ T4261] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice= 0.06 [ 89.347068][ T4559] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 89.367855][ T4261] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 89.396898][ T4261] usb 2-1: SerialNumber: syz [ 89.404594][ T4559] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 89.419859][ T4559] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 89.438401][ T4261] usb 2-1: config 0 descriptor?? [ 89.454804][ T4559] UDF-fs: Scanning with blocksize 2048 failed [ 89.490905][ T4559] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 89.525345][ T4559] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 89.558201][ T4374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.569822][ T4559] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 89.600602][ T4559] UDF-fs: Scanning with blocksize 4096 failed [ 89.607326][ T4559] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 89.624942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.636721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.652675][ T4374] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.719399][ T4261] input: USB Synaptics Device 06cb:0006 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input6 [ 89.743253][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.753669][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.786906][ T3545] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 89.827803][ T4322] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.835282][ T4322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.858857][ T3545] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 89.913194][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.933831][ T4261] usb 2-1: USB disconnect, device number 2 [ 89.940861][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.950293][ T3545] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 89.998734][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.025772][ T4322] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.038338][ T4322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.107927][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 90.142734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.169161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.203455][ T4393] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 90.246292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.267514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.280322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.299109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.320194][ T4393] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 90.375574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.405471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.444518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.476496][ T4393] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 90.523198][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.558994][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.584044][ T4393] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 90.626197][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.704711][ T4583] loop0: detected capacity change from 0 to 8 [ 90.758886][ T4583] squashfs: Unknown parameter '' [ 91.025051][ T4583] loop0: detected capacity change from 0 to 256 [ 91.034114][ T4393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.102802][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.135298][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.161958][ T4583] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 91.180362][ T4393] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.215700][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.241410][ T4598] loop1: detected capacity change from 0 to 256 [ 91.241421][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.245921][ T4343] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.265846][ T4343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.353026][ T4598] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d) [ 91.369425][ T4599] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 91.423406][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.443246][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.475035][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.515661][ T4343] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.523607][ T4343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.558071][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 91.591846][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 91.637363][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.658475][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.673170][ T4607] loop3: detected capacity change from 0 to 256 [ 91.687471][ T4374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.704368][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 91.731356][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.734253][ T26] audit: type=1800 audit(1793082792.472:4): pid=4583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.68" name="file1" dev="loop0" ino=1048635 res=0 errno=0 [ 91.773082][ T4607] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 91.811373][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 91.847700][ T4607] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 91.889874][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 91.910533][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.953965][ T4607] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d) [ 91.970904][ T4612] loop1: detected capacity change from 0 to 128 [ 91.987946][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 92.045627][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.125021][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 92.165030][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.223575][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 92.382681][ T4622] netlink: 'syz.3.76': attribute type 11 has an invalid length. [ 92.436318][ T4620] loop0: detected capacity change from 0 to 2048 [ 92.537295][ T4620] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 92.607809][ T4620] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 92.774008][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 92.816990][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.828861][ T4620] fs-verity (loop0, inode 18): Unknown hash algorithm number: 0 [ 92.903015][ T4635] kvm: vcpu 5: requested lapic timer restore with starting count register 0x390=2427867637 (2427867637 ns) > initial count (2067186124 ns). Using initial count to start timer. [ 92.911806][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 92.986437][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.039801][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.071498][ T1326] kernel write not supported for file [eventfd] (pid: 1326 comm: kworker/1:2) [ 93.084184][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.113556][ T4374] device veth0_vlan entered promiscuous mode [ 93.149291][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.180286][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.215156][ T4374] device veth1_vlan entered promiscuous mode [ 93.253861][ T4393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.347809][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 93.396989][ T4653] loop3: detected capacity change from 0 to 512 [ 93.411787][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 93.451856][ T4374] device veth0_macvtap entered promiscuous mode [ 93.486729][ T4374] device veth1_macvtap entered promiscuous mode [ 93.515829][ T4660] loop1: detected capacity change from 0 to 1024 [ 93.593301][ T4653] EXT4-fs (loop3): error: journal path ./file0 is not a block device [ 93.637068][ T4374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.679125][ T4374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.690900][ T4660] EXT4-fs (loop1): Ignoring removed oldalloc option [ 93.720796][ T4374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.744557][ T4666] loop0: detected capacity change from 0 to 512 [ 93.762748][ T4374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.778675][ T4660] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,nodioread_nolock,oldalloc,journal_dev=0x0000000000001000,block_validity,nogrpid,,errors=continue. Quota mode: none. [ 93.783422][ T4374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.809612][ T4374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.820280][ T4374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.831051][ T4374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.843968][ T4374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.852183][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 93.861657][ T4660] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.908761][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 93.937288][ T4660] EXT4-fs error (device loop1): ext4_map_blocks:741: inode #15: block 3: comm syz.1.84: lblock 3 mapped to illegal pblock 3 (length 3) [ 93.973101][ T4666] EXT4-fs (loop0): inline encryption not supported [ 94.002050][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 94.033243][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.056633][ T4666] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,delalloc,inlinecrypt,,errors=continue. Quota mode: writeback. [ 94.090615][ T4660] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 94.104600][ T4660] EXT4-fs (loop1): This should not happen!! Data will be lost [ 94.104600][ T4660] [ 94.104977][ T4374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.165405][ T4666] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.205993][ T4374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.216079][ T4374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.228754][ T4374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.246444][ T4374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.270876][ T4374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.297663][ T4374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.311020][ T4374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.322975][ T4374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.323828][ T1423] EXT4-fs error (device loop1): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:4: lblock 8 mapped to illegal pblock 8 (length 8) [ 94.347545][ T4374] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.361372][ T4374] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.385553][ T4374] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.397199][ T4374] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.412988][ T1423] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 94.429511][ T1423] EXT4-fs (loop1): This should not happen!! Data will be lost [ 94.429511][ T1423] [ 94.522686][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.595663][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.630021][ T4682] loop0: detected capacity change from 0 to 2048 [ 94.680031][ T4682] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 94.691054][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 94.702347][ T4684] loop1: detected capacity change from 0 to 1024 [ 94.731670][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 94.778289][ T4684] EXT4-fs (loop1): Ignoring removed bh option [ 94.786400][ T4682] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 94.812089][ T4682] netlink: 'syz.0.87': attribute type 3 has an invalid length. [ 94.850851][ T4393] device veth0_vlan entered promiscuous mode [ 94.877969][ T4684] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,bsddf,max_dir_size_kb=0x0000000000000071,stripe=0x0000000000000010,bh,init_itable,,errors=continue. Quota mode: none. [ 94.919643][ T4684] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 94.939479][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 94.976383][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.003202][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.011924][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.025702][ T4393] device veth1_vlan entered promiscuous mode [ 95.186820][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.225538][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.265771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 95.299189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 95.317889][ T4695] capability: warning: `syz.1.91' uses 32-bit capabilities (legacy support in use) [ 95.346165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 95.412207][ T4697] capability: warning: `syz.3.88' uses deprecated v2 capabilities in a way that may be insecure [ 95.437506][ T4343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.450434][ T4393] device veth0_macvtap entered promiscuous mode [ 95.468694][ T4343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.485776][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 95.496499][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.518392][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.551373][ T4393] device veth1_macvtap entered promiscuous mode [ 95.584632][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 95.603041][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 95.659197][ T4393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.689866][ T4393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.726185][ T4393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.760433][ T4393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.804470][ T4705] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16'. [ 95.814776][ T4393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.846027][ T4393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.887130][ T4393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.930963][ T4393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.967620][ T4393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.007637][ T4393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.036086][ T4393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.138562][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.184426][ T4723] loop5: detected capacity change from 0 to 512 [ 96.194324][ T4726] kvm: emulating exchange as write [ 96.211159][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 96.237163][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.279893][ T4393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.327608][ T4393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.387607][ T4393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.444703][ T4723] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 96.450407][ T4393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.557922][ T4393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.592188][ T4393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.643925][ T4393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.687614][ T4393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.709373][ T4393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.754622][ T4393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.795582][ T4393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.902553][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 96.912606][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 96.940819][ T4393] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.574490][ T4393] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.592574][ T4393] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.614140][ T4393] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.845966][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.900495][ T4741] rxe_eth0 speed is unknown, defaulting to 1000 [ 97.935197][ T4757] FAULT_INJECTION: forcing a failure. [ 97.935197][ T4757] name failslab, interval 1, probability 0, space 0, times 1 [ 97.949181][ T4757] CPU: 0 PID: 4757 Comm: syz.5.104 Not tainted syzkaller #0 [ 97.957245][ T4757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 97.968087][ T4757] Call Trace: [ 97.971516][ T4757] [ 97.974493][ T4757] dump_stack_lvl+0x188/0x250 [ 97.979336][ T4757] ? show_regs_print_info+0x20/0x20 [ 97.984975][ T4757] ? load_image+0x410/0x410 [ 97.989549][ T4757] ? verify_lock_unused+0x140/0x140 [ 97.995803][ T4757] should_fail+0x383/0x4b0 [ 98.000322][ T4757] should_failslab+0x5/0x20 [ 98.004961][ T4757] slab_pre_alloc_hook+0x51/0xc0 [ 98.009968][ T4757] __kmalloc+0x6b/0x340 [ 98.014656][ T4757] ? sk_prot_alloc+0xe7/0x210 [ 98.020228][ T4757] sk_prot_alloc+0xe7/0x210 [ 98.025253][ T4757] ? sk_alloc+0x1d/0x310 [ 98.029707][ T4757] sk_alloc+0x2f/0x310 [ 98.034250][ T4757] ? bt_sock_alloc+0x22/0x350 [ 98.039358][ T4757] bt_sock_alloc+0x37/0x350 [ 98.045457][ T4757] ? hidp_sock_create+0x58/0x150 [ 98.050823][ T4757] hidp_sock_create+0x7c/0x150 [ 98.055905][ T4757] bt_sock_create+0x155/0x220 [ 98.060639][ T4757] __sock_create+0x473/0x910 [ 98.065467][ T4757] __sys_socket+0xe2/0x170 [ 98.070200][ T4757] __x64_sys_socket+0x76/0x80 [ 98.075187][ T4757] do_syscall_64+0x4c/0xa0 [ 98.079652][ T4757] ? clear_bhb_loop+0x30/0x80 [ 98.084644][ T4757] ? clear_bhb_loop+0x30/0x80 [ 98.089347][ T4757] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.095790][ T4757] RIP: 0033:0x7f1b5a7f1559 [ 98.100421][ T4757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.120701][ T4757] RSP: 002b:00007f1b58a47fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 98.129539][ T4757] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f1b5a7f1559 [ 98.137736][ T4757] RDX: 0000000000000006 RSI: 0000000000000003 RDI: 000000000000001f [ 98.146721][ T4757] RBP: 00007f1b5a888b20 R08: 0000000000000000 R09: 0000000000000000 [ 98.155166][ T4757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.165959][ T4757] R13: 00007f1b5aa78038 R14: 00007f1b5aa77fa0 R15: 00007ffcda0f92b8 [ 98.174356][ T4757] [ 98.229746][ T4761] loop3: detected capacity change from 0 to 1024 [ 98.279540][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.324568][ T4761] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 98.341100][ T4761] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 98.379142][ T4761] EXT4-fs (loop3): mounted filesystem without journal. Opts: noquota,quota,delalloc,,errors=continue. Quota mode: writeback. [ 98.421448][ T4343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.432576][ T4761] EXT4-fs warning (device loop3): empty_inline_dir:1879: bad inline directory (dir #12) - no `..' [ 98.434802][ T4763] FAULT_INJECTION: forcing a failure. [ 98.434802][ T4763] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 98.458671][ T4763] CPU: 1 PID: 4763 Comm: syz.5.104 Not tainted syzkaller #0 [ 98.466514][ T4763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 98.476626][ T4763] Call Trace: [ 98.479957][ T4763] [ 98.483026][ T4763] dump_stack_lvl+0x188/0x250 [ 98.487778][ T4763] ? show_regs_print_info+0x20/0x20 [ 98.493038][ T4763] ? load_image+0x410/0x410 [ 98.497610][ T4763] ? uncharge_page+0x490/0x490 [ 98.502459][ T4763] should_fail+0x383/0x4b0 [ 98.507232][ T4763] prepare_alloc_pages+0x1e3/0x5b0 [ 98.507770][ T4343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.512864][ T4763] __alloc_pages+0x11b/0x480 [ 98.524969][ T4763] ? zone_statistics+0x170/0x170 [ 98.529982][ T4763] ? rcu_lock_acquire+0x30/0x30 [ 98.534973][ T4763] ? alloc_pages+0x452/0x560 [ 98.540128][ T4763] __get_free_pages+0x8/0x30 [ 98.544905][ T4763] __tlb_remove_page_size+0x1f2/0x3f0 [ 98.551347][ T4763] unmap_page_range+0xfcf/0x2410 [ 98.556847][ T4763] unmap_vmas+0x131/0x250 [ 98.561414][ T4763] ? unmap_page_range+0x2410/0x2410 [ 98.566916][ T4763] ? __mutex_lock_common+0x435/0x2400 [ 98.572707][ T4763] ? exit_mm_release+0x16/0x30 [ 98.577664][ T4763] exit_mmap+0x3b9/0x640 [ 98.582317][ T4763] ? vm_brk+0x20/0x20 [ 98.586360][ T4763] ? uprobe_clear_state+0x2f6/0x460 [ 98.592060][ T4763] __mmput+0x115/0x390 [ 98.596178][ T4763] exit_mm+0x632/0x7b0 [ 98.600381][ T4763] ? perf_pmu_migrate_context+0xb70/0xb70 [ 98.606330][ T4763] ? do_exit+0x2110/0x2110 [ 98.611252][ T4763] ? __ia32_sys_timer_delete+0x40/0x40 [ 98.617028][ T4763] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 98.622666][ T4763] ? tty_audit_exit+0x149/0x1f0 [ 98.629046][ T4763] do_exit+0x5b8/0x2110 [ 98.633377][ T4763] ? put_task_struct+0x80/0x80 [ 98.638304][ T4763] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 98.644438][ T4763] ? _raw_spin_lock_irq+0xb7/0xf0 [ 98.650683][ T4763] do_group_exit+0x12c/0x2f0 [ 98.655415][ T4763] ? lockdep_hardirqs_on+0x94/0x140 [ 98.660882][ T4763] get_signal+0x7eb/0x12e0 [ 98.665470][ T4763] arch_do_signal_or_restart+0xe6/0x12a0 [ 98.671352][ T4763] ? futex_exit_release+0x1c0/0x1c0 [ 98.677319][ T4763] ? get_sigframe_size+0x10/0x10 [ 98.682944][ T4763] ? __context_tracking_exit+0x4c/0x80 [ 98.688676][ T4763] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 98.694912][ T4763] ? exit_to_user_mode_loop+0x3b/0x130 [ 98.700422][ T4763] exit_to_user_mode_loop+0x9e/0x130 [ 98.705770][ T4763] exit_to_user_mode_prepare+0xee/0x180 [ 98.711370][ T4763] syscall_exit_to_user_mode+0x16/0x40 [ 98.716886][ T4763] do_syscall_64+0x58/0xa0 [ 98.721439][ T4763] ? clear_bhb_loop+0x30/0x80 [ 98.726163][ T4763] ? clear_bhb_loop+0x30/0x80 [ 98.731359][ T4763] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.737439][ T4763] RIP: 0033:0x7f1b5a7f1559 [ 98.742685][ T4763] Code: Unable to access opcode bytes at RIP 0x7f1b5a7f152f. [ 98.750205][ T4763] RSP: 002b:00007f1b58a270e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 98.758685][ T4763] RAX: fffffffffffffe00 RBX: 00007f1b5aa78098 RCX: 00007f1b5a7f1559 [ 98.766727][ T4763] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1b5aa78098 [ 98.775278][ T4763] RBP: 00007f1b5aa78090 R08: 0000000000000000 R09: 0000000000000000 [ 98.784060][ T4763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.792112][ T4763] R13: 00007f1b5aa78128 R14: 00007ffcda0f91d0 R15: 00007ffcda0f92b8 [ 98.800232][ T4763] [ 98.848292][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.897460][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 99.056955][ T4322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.088212][ T4322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.171206][ T4783] loop1: detected capacity change from 0 to 16 [ 99.191948][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 99.316953][ T4787] loop3: detected capacity change from 0 to 512 [ 99.324973][ T4790] Device name cannot be null; rc = [-22] [ 99.363505][ T4783] erofs: (device loop1): mounted with root inode @ nid 36. [ 99.417836][ T4257] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 99.488742][ T4795] loop5: detected capacity change from 0 to 512 [ 99.562124][ T4787] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 99.592887][ T4787] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 99.660989][ T4795] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 99.686376][ T4805] loop1: detected capacity change from 0 to 512 [ 99.698397][ T4787] EXT4-fs (loop3): orphan cleanup on readonly fs [ 99.719160][ T4795] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.736088][ T4793] mount: server 127. not responding, timed out [ 99.746655][ T4787] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3894: comm syz.3.112: Allocating blocks 41-42 which overlap fs metadata [ 99.820335][ T4257] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.839775][ T4257] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.853242][ T4257] usb 1-1: config 0 interface 0 has no altsetting 0 [ 99.860621][ T4257] usb 1-1: New USB device found, idVendor=045e, idProduct=0730, bcdDevice= 0.00 [ 99.872205][ T4257] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.883118][ T4805] EXT4-fs (loop1): 1 truncate cleaned up [ 99.890251][ T4257] usb 1-1: config 0 descriptor?? [ 99.899325][ T4787] Quota error (device loop3): write_blk: dquota write failed [ 99.909157][ T4787] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 99.924743][ T4805] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 99.942663][ T4257] usbhid 1-1:0.0: fixing wrong optional hid class descriptors count [ 99.954806][ T4787] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.112: Failed to acquire dquot type 0 [ 100.038971][ T4787] EXT4-fs error (device loop3): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 100.092842][ T4787] EXT4-fs (loop3): 1 truncate cleaned up [ 100.102243][ T4811] loop6: detected capacity change from 0 to 512 [ 100.126822][ T4787] EXT4-fs (loop3): pa ffff88805ee04380: logic 1, phys. 41, len 23 [ 100.135712][ T4787] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4904: group 0, free 22, pa_free 23 [ 100.203568][ T4787] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,noblock_validity,usrquota,grpjquota=,discard,nouid32,grpjquota=,jqfmt=vfsv0,max_dir_size_kb=0x00000000000004002,errors=continue. Quota mode: writeback. [ 100.237971][ T4811] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 100.257452][ T4188] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 100.366138][ T4188] EXT4-fs (loop1): Remounting filesystem read-only [ 100.380286][ T4188] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 100.402992][ T4257] microsoft 0003:045E:0730.0002: unbalanced collection at end of report description [ 100.415254][ T4188] EXT4-fs (loop1): Remounting filesystem read-only [ 100.422753][ T4257] microsoft 0003:045E:0730.0002: parse failed [ 100.437027][ T4188] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 100.461254][ T4257] microsoft: probe of 0003:045E:0730.0002 failed with error -22 [ 100.490369][ T4188] EXT4-fs (loop1): Remounting filesystem read-only [ 100.525034][ T4188] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 465: padding at end of block bitmap is not set [ 100.600912][ T4825] 9pnet: p9_fd_create_tcp (4825): problem connecting socket to 127.0.0.1 [ 100.609950][ T4188] EXT4-fs (loop1): Remounting filesystem read-only [ 100.631318][ T4188] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 100.667494][ T4828] loop5: detected capacity change from 0 to 1024 [ 100.695200][ T4188] EXT4-fs (loop1): Remounting filesystem read-only [ 100.711880][ T4177] usb 1-1: USB disconnect, device number 3 [ 100.719207][ T4188] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 234881024 (level 0) [ 100.745494][ T4188] EXT4-fs (loop1): Remounting filesystem read-only [ 100.748575][ T21] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 100.966662][ T4828] hfsplus: unknown catalog record type 0 [ 100.977067][ T4828] hfsplus: unknown catalog record type 0 [ 101.049359][ T145] hfsplus: unknown catalog record type 0 [ 101.056259][ T145] hfsplus: unknown catalog record type 0 [ 101.088037][ T21] usb 7-1: not running at top speed; connect to a high speed hub [ 101.184414][ T21] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.244778][ T4841] loop0: detected capacity change from 0 to 16 [ 101.337938][ T21] usb 7-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 101.360926][ T21] usb 7-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 101.391378][ T4841] erofs: (device loop0): mounted with root inode @ nid 36. [ 101.443998][ T21] usb 7-1: Product: syz [ 101.460435][ T21] usb 7-1: Manufacturer: syz [ 101.468898][ T4841] erofs: (device loop0): find_target_block_classic: corrupted dir block 8200 @ nid 36 [ 101.515950][ T4846] erofs: (device loop0): find_target_block_classic: corrupted dir block 8200 @ nid 36 [ 101.551672][ T21] usb 7-1: Found UVC 1.00 device syz (225a:e1d4) [ 101.569669][ T4841] erofs: (device loop0): find_target_block_classic: corrupted dir block 8200 @ nid 36 [ 101.605555][ T4841] erofs: (device loop0): find_target_block_classic: corrupted dir block 8200 @ nid 36 [ 101.637221][ T4841] erofs: (device loop0): find_target_block_classic: corrupted dir block 8200 @ nid 36 [ 101.669069][ T4841] erofs: (device loop0): find_target_block_classic: corrupted dir block 8200 @ nid 36 [ 101.719741][ T9] device hsr_slave_0 left promiscuous mode [ 101.731917][ T9] device hsr_slave_1 left promiscuous mode [ 101.758181][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.777811][ T21] usb 7-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 101.787394][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.830294][ T4855] loop0: detected capacity change from 0 to 128 [ 101.833671][ T21] uvcvideo 7-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 101.857068][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.877781][ T21] uvcvideo 7-1:1.1: Failed to initialize the device (-5). [ 101.895431][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.945018][ T21] usb 7-1: USB disconnect, device number 2 [ 102.029273][ T9] device bridge_slave_1 left promiscuous mode [ 102.058194][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.102108][ T9] device bridge_slave_0 left promiscuous mode [ 102.138149][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.231596][ T9] device veth1_macvtap left promiscuous mode [ 102.238226][ T9] device veth0_macvtap left promiscuous mode [ 102.244361][ T9] device veth1_vlan left promiscuous mode [ 102.321528][ T9] device veth0_vlan left promiscuous mode [ 102.453662][ T4877] loop0: detected capacity change from 0 to 1024 [ 102.905065][ T9] team0 (unregistering): Port device team_slave_1 removed [ 102.914927][ T4670] EXT4-fs error (device loop6): ext4_validate_block_bitmap:420: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 102.934203][ T9] team0 (unregistering): Port device team_slave_0 removed [ 102.951382][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.972442][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.064498][ T9] bond0 (unregistering): Released all slaves [ 103.097870][ T1109] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 103.187531][ T4869] rxe_eth0 speed is unknown, defaulting to 1000 [ 103.216317][ T4886] loop0: detected capacity change from 0 to 256 [ 103.498198][ T1109] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.521021][ T1109] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.557964][ T1109] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.602002][ T1109] usb 6-1: New USB device found, idVendor=056a, idProduct=00d2, bcdDevice= 0.00 [ 103.624941][ T1109] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.674583][ T1109] usb 6-1: config 0 descriptor?? [ 103.740969][ T4900] FAULT_INJECTION: forcing a failure. [ 103.740969][ T4900] name failslab, interval 1, probability 0, space 0, times 0 [ 103.753835][ T4900] CPU: 0 PID: 4900 Comm: syz.6.143 Not tainted syzkaller #0 [ 103.761179][ T4900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 103.771425][ T4900] Call Trace: [ 103.774751][ T4900] [ 103.777709][ T4900] dump_stack_lvl+0x188/0x250 [ 103.782441][ T4900] ? show_regs_print_info+0x20/0x20 [ 103.787707][ T4900] ? load_image+0x410/0x410 [ 103.792269][ T4900] ? rcu_lock_release+0x5/0x20 [ 103.797109][ T4900] should_fail+0x383/0x4b0 [ 103.801579][ T4900] should_failslab+0x5/0x20 [ 103.806127][ T4900] slab_pre_alloc_hook+0x51/0xc0 [ 103.811117][ T4900] ? __nf_conntrack_alloc+0x93/0x370 [ 103.816450][ T4900] kmem_cache_alloc+0x3d/0x280 [ 103.821275][ T4900] __nf_conntrack_alloc+0x93/0x370 [ 103.826443][ T4900] init_conntrack+0x2fd/0x1530 [ 103.831259][ T4900] ? get_l4proto+0x670/0x670 [ 103.835905][ T4900] ? early_drop+0x800/0x800 [ 103.840575][ T4900] ? nf_conntrack_find_get+0x640/0x640 [ 103.846099][ T4900] ? __siphash_unaligned+0x286/0x3d0 [ 103.851543][ T4900] nf_conntrack_in+0xd76/0x17b0 [ 103.856485][ T4900] ? nf_ct_pernet+0x240/0x240 [ 103.861249][ T4900] ? __netif_receive_skb_core+0x2f97/0x3670 [ 103.867199][ T4900] ? ipv4_conntrack_defrag+0x284/0x590 [ 103.872720][ T4900] ? ip_sabotage_in+0x53/0x280 [ 103.877539][ T4900] ? rcu_lock_release+0x20/0x20 [ 103.882526][ T4900] nf_hook_slow+0xb9/0x200 [ 103.887193][ T4900] ? ip_rcv_core+0xb30/0xb30 [ 103.891884][ T4900] NF_HOOK+0x1f2/0x390 [ 103.896023][ T4900] ? ip_rcv_core+0xb30/0xb30 [ 103.900710][ T4900] ? ip_local_deliver+0x180/0x180 [ 103.905792][ T4900] ? sock_wfree+0x18c/0x1f0 [ 103.910805][ T4900] ? ip_rcv_core+0xb30/0xb30 [ 103.915624][ T4900] ? ip_rcv_core+0x6a0/0xb30 [ 103.920444][ T4900] ? ip_local_deliver_finish+0x320/0x320 [ 103.926528][ T4900] ? ip_local_deliver_finish+0x320/0x320 [ 103.932346][ T4900] __netif_receive_skb+0xcc/0x290 [ 103.937443][ T4900] ? ktime_get_with_offset+0x2d7/0x320 [ 103.943321][ T4900] netif_receive_skb+0x19e/0x700 [ 103.948524][ T4900] ? __bpf_trace_softirq+0x10/0x10 [ 103.953867][ T4900] ? netif_receive_skb_core+0x210/0x210 [ 103.959495][ T4900] tun_rx_batched+0x606/0x760 [ 103.964235][ T4900] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 103.970446][ T4900] ? local_bh_enable+0x20/0x20 [ 103.975564][ T4900] ? __local_bh_enable_ip+0x136/0x1c0 [ 103.980992][ T4900] ? read_lock_is_recursive+0x10/0x10 [ 103.986429][ T4900] ? __local_bh_enable_ip+0x136/0x1c0 [ 103.991979][ T4900] ? _local_bh_enable+0xa0/0xa0 [ 103.996888][ T4900] ? skb_set_owner_w+0x213/0x340 [ 104.001927][ T4900] tun_get_user+0x2bf4/0x3b10 [ 104.007130][ T4900] ? tun_ring_recv+0xc90/0xc90 [ 104.012094][ T4900] ? rcu_lock_release+0x5/0x20 [ 104.017137][ T4900] ? __lock_acquire+0x7d40/0x7d40 [ 104.022253][ T4900] tun_chr_write_iter+0x112/0x1e0 [ 104.027334][ T4900] vfs_write+0x748/0xd70 [ 104.031648][ T4900] ? file_end_write+0x250/0x250 [ 104.036736][ T4900] ? __fget_files+0x402/0x470 [ 104.041468][ T4900] ? __fdget_pos+0x1e2/0x370 [ 104.046223][ T4900] ? ksys_write+0x70/0x260 [ 104.050910][ T4900] ksys_write+0x153/0x260 [ 104.055691][ T4900] ? __ia32_sys_read+0x80/0x80 [ 104.060651][ T4900] ? lockdep_hardirqs_on+0x94/0x140 [ 104.066024][ T4900] do_syscall_64+0x4c/0xa0 [ 104.070723][ T4900] ? clear_bhb_loop+0x30/0x80 [ 104.075546][ T4900] ? clear_bhb_loop+0x30/0x80 [ 104.080279][ T4900] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.086314][ T4900] RIP: 0033:0x7f010f014d8e [ 104.090784][ T4900] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 104.110634][ T4900] RSP: 002b:00007f010d2aafb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 104.119119][ T4900] RAX: ffffffffffffffda RBX: 00007f010d2ab6c0 RCX: 00007f010f014d8e [ 104.127142][ T4900] RDX: 000000000000002a RSI: 0000200000000200 RDI: 00000000000000c8 [ 104.135552][ T4900] RBP: 00007f010f0ebb20 R08: 0000000000000000 R09: 0000000000000000 [ 104.143698][ T4900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.151959][ T4900] R13: 00007f010f2db038 R14: 00007f010f2dafa0 R15: 00007fff4f6e1218 [ 104.160088][ T4900] [ 104.349444][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 105.181024][ T1109] wacom 0003:056A:00D2.0003: Unknown device_type for 'HID 056a:00d2'. Assuming pen. [ 105.221382][ T1109] wacom 0003:056A:00D2.0003: hidraw0: USB HID v0.00 Device [HID 056a:00d2] on usb-dummy_hcd.5-1/input0 [ 105.235846][ T1109] input: Wacom Bamboo Craft Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:00D2.0003/input/input8 [ 105.275527][ T4869] chnl_net:caif_netlink_parms(): no params data found [ 105.283440][ T4924] netlink: 'syz.6.148': attribute type 30 has an invalid length. [ 105.345092][ T1109] usb 6-1: USB disconnect, device number 2 [ 105.523624][ T4928] fido_id[4928]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 105.650996][ T4869] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.709133][ T4869] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.769837][ T4869] device bridge_slave_0 entered promiscuous mode [ 105.812616][ T4869] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.832962][ T4869] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.896665][ T4869] device bridge_slave_1 entered promiscuous mode [ 105.953951][ T4947] loop3: detected capacity change from 0 to 1024 [ 106.044985][ T4869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.104826][ T4869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.154890][ T4947] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #3: block 1: comm syz.3.155: lblock 1 mapped to illegal pblock 1 (length 1) [ 106.229888][ T4869] team0: Port device team_slave_0 added [ 106.249469][ T4869] team0: Port device team_slave_1 added [ 106.283441][ T4947] Quota error (device loop3): write_blk: dquota write failed [ 106.297710][ T4947] Quota error (device loop3): find_free_dqentry: Can't write quota data block 1 [ 106.341427][ T4947] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 106.354815][ T4869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.375303][ T4869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.413427][ T4947] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.155: Failed to acquire dquot type 0 [ 106.429836][ T4262] Bluetooth: hci0: command 0x041b tx timeout [ 106.468838][ T4947] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 1: comm syz.3.155: lblock 1 mapped to illegal pblock 1 (length 1) [ 106.500116][ T4869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.519534][ T4947] Quota error (device loop3): do_insert_tree: Can't read tree quota block 1 [ 106.559592][ T4947] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 106.573092][ T4869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.587946][ T4869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.632440][ T4947] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.155: Failed to acquire dquot type 0 [ 106.655461][ T4947] EXT4-fs error (device loop3): ext4_free_blocks:6231: comm syz.3.155: Freeing blocks not in datazone - block = 0, count = 4096 [ 106.677624][ T4869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.558323][ T4947] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 1: comm syz.3.155: lblock 1 mapped to illegal pblock 1 (length 1) [ 107.590010][ T4977] loop6: detected capacity change from 0 to 256 [ 107.610293][ T4947] Quota error (device loop3): do_insert_tree: Can't read tree quota block 1 [ 107.675375][ T4947] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 107.694680][ T4977] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 107.718902][ T4947] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.155: Failed to acquire dquot type 0 [ 107.734478][ T4977] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 107.744353][ T4869] device hsr_slave_0 entered promiscuous mode [ 107.756871][ T4977] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 107.774087][ T4947] EXT4-fs (loop3): 1 orphan inode deleted [ 107.802191][ T4869] device hsr_slave_1 entered promiscuous mode [ 107.809680][ T4977] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 107.825190][ T4869] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.831978][ T4947] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 107.847766][ T4977] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 107.856535][ T4977] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 107.871347][ T4869] Cannot create hsr debugfs directory [ 107.926648][ T4947] netlink: 56 bytes leftover after parsing attributes in process `syz.3.155'. [ 107.937864][ T4977] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 107.960635][ T4947] netlink: 56 bytes leftover after parsing attributes in process `syz.3.155'. [ 107.979361][ T4977] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 108.005974][ T4977] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 108.030820][ T4977] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 108.071508][ T26] audit: type=1800 audit(1793082808.812:5): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.163" name="file1" dev="loop6" ino=1048661 res=0 errno=0 [ 108.122816][ T4977] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 108.126087][ T4993] loop0: detected capacity change from 0 to 1024 [ 108.235963][ T4993] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 108.307728][ T4993] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 108.333364][ T4992] netlink: 8 bytes leftover after parsing attributes in process `syz.5.168'. [ 108.351424][ T4993] EXT4-fs (loop0): invalid journal inode [ 108.354354][ T4994] netlink: 12 bytes leftover after parsing attributes in process `syz.5.168'. [ 108.357267][ T4993] EXT4-fs (loop0): can't get journal size [ 108.430566][ T4994] netlink: 8 bytes leftover after parsing attributes in process `syz.5.168'. [ 108.463946][ T4993] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 17104912: comm syz.0.167: lblock 2 mapped to illegal pblock 17104912 (length 1) [ 108.472165][ T4994] netlink: 8 bytes leftover after parsing attributes in process `syz.5.168'. [ 108.515526][ T4298] Bluetooth: hci0: command 0x040f tx timeout [ 108.535929][ T4993] EXT4-fs (loop0): failed to initialize system zone (-117) [ 108.543833][ T4993] EXT4-fs (loop0): mount failed [ 108.653537][ T4869] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 108.677475][ T4993] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.765674][ T4869] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 108.784632][ T4993] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32 [ 108.798459][ T4869] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 108.835990][ T4869] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 109.156188][ T5021] loop3: detected capacity change from 0 to 2048 [ 110.026940][ T4869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.120920][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.137266][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.169723][ T4869] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.212842][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 110.242377][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.302839][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.310049][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.337823][ T4177] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 110.392731][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 110.476097][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 110.490568][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.529896][ T4339] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.537882][ T4339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.577167][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 110.587803][ T4261] Bluetooth: hci0: command 0x0419 tx timeout [ 110.606196][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 110.641096][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 110.676560][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 110.697896][ T4177] usb 6-1: config 1 has an invalid interface number: 8 but max is 1 [ 110.708405][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 110.714821][ T4177] usb 6-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 110.755575][ T4177] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 110.781204][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 110.802948][ T4177] usb 6-1: config 1 has no interface number 0 [ 110.823785][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 110.858220][ T4177] usb 6-1: config 1 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 110.885390][ T5053] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input11 [ 110.903758][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 110.926350][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 110.955344][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 110.988606][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 111.033102][ T4869] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 111.088128][ T4177] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 111.107643][ T4177] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.161351][ T4177] usb 6-1: Product: syz [ 111.167882][ T4177] usb 6-1: Manufacturer: syz [ 111.172654][ T4177] usb 6-1: SerialNumber: syz [ 111.270002][ T4177] cdc_ncm 6-1:1.8: skipping garbage [ 111.275278][ T4177] cdc_ncm 6-1:1.8: CDC Union missing and no IAD found [ 111.294487][ T5069] loop0: detected capacity change from 0 to 16 [ 111.304384][ T4177] cdc_ncm 6-1:1.8: bind() failure [ 111.327961][ T5069] erofs: (device loop0): mounted with root inode @ nid 36. [ 111.337663][ T4261] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 111.478389][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 111.486138][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 111.518519][ T4869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.529584][ T4200] usb 6-1: USB disconnect, device number 3 [ 111.638789][ T4261] usb 7-1: Using ep0 maxpacket: 16 [ 111.767962][ T4261] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.792839][ T5084] loop0: detected capacity change from 0 to 2048 [ 111.800410][ T4261] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.856248][ T4261] usb 7-1: config 0 interface 0 has no altsetting 0 [ 111.866306][ T5084] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 111.877882][ T4261] usb 7-1: New USB device found, idVendor=05ac, idProduct=025a, bcdDevice= 0.00 [ 111.877915][ T4261] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.900900][ T4261] usb 7-1: config 0 descriptor?? [ 111.960624][ T4261] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input12 [ 112.167993][ T3545] bcm5974 7-1:0.0: could not read from device [ 112.183788][ T4261] usb 7-1: USB disconnect, device number 3 [ 112.190897][ T3545] bcm5974 7-1:0.0: could not read from device [ 112.251127][ T5108] loop3: detected capacity change from 0 to 128 [ 112.375894][ T5108] FAT-fs (loop3): Directory bread(block 32) failed [ 112.413969][ T5108] FAT-fs (loop3): Directory bread(block 33) failed [ 112.454202][ T5108] FAT-fs (loop3): Directory bread(block 34) failed [ 112.471381][ T5108] FAT-fs (loop3): Directory bread(block 35) failed [ 112.504342][ T5108] FAT-fs (loop3): Directory bread(block 36) failed [ 112.523241][ T5108] FAT-fs (loop3): Directory bread(block 37) failed [ 112.551394][ T5108] FAT-fs (loop3): Directory bread(block 38) failed [ 112.559097][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 112.570899][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 112.592690][ T5108] FAT-fs (loop3): Directory bread(block 39) failed [ 112.614735][ T5108] FAT-fs (loop3): Directory bread(block 40) failed [ 112.635402][ T5108] FAT-fs (loop3): Directory bread(block 41) failed [ 112.645708][ T5120] loop5: detected capacity change from 0 to 128 [ 112.659931][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 112.677955][ T4297] Bluetooth: hci0: command 0x0405 tx timeout [ 112.694092][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 112.752291][ T5121] device bridge_slave_0 left promiscuous mode [ 112.762442][ T5123] loop6: detected capacity change from 0 to 512 [ 112.791267][ T5121] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.865113][ T5121] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 112.879750][ T5123] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 112.901926][ T4869] device veth0_vlan entered promiscuous mode [ 112.917873][ T5123] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.932645][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 112.951876][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 112.973712][ T4374] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 113.034462][ T4869] device veth1_vlan entered promiscuous mode [ 113.042326][ T4374] FAT-fs (loop5): Filesystem has been set read-only [ 113.080106][ T5123] [ 113.082866][ T5123] ====================================================== [ 113.089972][ T5123] WARNING: possible circular locking dependency detected [ 113.097140][ T5123] syzkaller #0 Not tainted [ 113.101594][ T5123] ------------------------------------------------------ [ 113.108688][ T5123] syz.6.200/5123 is trying to acquire lock: [ 113.114738][ T5123] ffff88805ecfe428 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 113.123906][ T5123] [ 113.123906][ T5123] but task is already holding lock: [ 113.131413][ T5123] ffff8880627bd238 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x994/0x1190 [ 113.141217][ T5123] [ 113.141217][ T5123] which lock already depends on the new lock. [ 113.141217][ T5123] [ 113.151646][ T5123] [ 113.151646][ T5123] the existing dependency chain (in reverse order) is: [ 113.159746][ T4869] device veth0_macvtap entered promiscuous mode [ 113.161101][ T5123] [ 113.161101][ T5123] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 113.175232][ T5123] down_read+0x44/0x2e0 [ 113.180173][ T5123] ext4_map_blocks+0x350/0x1a50 [ 113.185734][ T5123] ext4_getblk+0x176/0x670 [ 113.191253][ T5123] ext4_bread+0x26/0x180 [ 113.196248][ T5123] ext4_quota_read+0x1ac/0x390 [ 113.201752][ T5123] find_tree_dqentry+0x187/0xb30 [ 113.204928][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 113.207376][ T5123] find_tree_dqentry+0x3e8/0xb30 [ 113.221257][ T5123] qtree_read_dquot+0x122/0x690 [ 113.226747][ T5123] v2_read_dquot+0xc0/0x110 [ 113.231814][ T5123] dquot_acquire+0x152/0x520 [ 113.237217][ T5123] ext4_acquire_dquot+0x2e3/0x4a0 [ 113.243220][ T5123] dqget+0x713/0xbb0 [ 113.247658][ T5123] __dquot_initialize+0x3a9/0xd00 [ 113.253223][ T5123] ext4_process_orphan+0x4c/0x2e0 [ 113.258789][ T5123] ext4_orphan_cleanup+0xc96/0x14f0 [ 113.264526][ T5123] ext4_fill_super+0x8c65/0x93f0 [ 113.270001][ T5123] mount_bdev+0x28a/0x3c0 [ 113.274872][ T5123] legacy_get_tree+0xe6/0x180 [ 113.280116][ T5123] vfs_get_tree+0x88/0x270 [ 113.285073][ T5123] do_new_mount+0x247/0xa40 [ 113.290119][ T5123] __se_sys_mount+0x2e3/0x3d0 [ 113.295339][ T5123] do_syscall_64+0x4c/0xa0 [ 113.300482][ T5123] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 113.306911][ T5123] [ 113.306911][ T5123] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 113.318067][ T5123] down_read+0x44/0x2e0 [ 113.322816][ T5123] v2_read_dquot+0x4a/0x110 [ 113.327986][ T5123] dquot_acquire+0x152/0x520 [ 113.333599][ T5123] ext4_acquire_dquot+0x2e3/0x4a0 [ 113.339292][ T5123] dqget+0x713/0xbb0 [ 113.343741][ T5123] __dquot_initialize+0x3a9/0xd00 [ 113.349424][ T5123] ext4_mkdir+0x198/0xc90 [ 113.354315][ T5123] vfs_mkdir+0x386/0x570 [ 113.359136][ T5123] do_mkdirat+0x1dd/0x5c0 [ 113.364116][ T5123] __x64_sys_mkdirat+0x85/0x90 [ 113.369705][ T5123] do_syscall_64+0x4c/0xa0 [ 113.375597][ T5123] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 113.382131][ T5123] [ 113.382131][ T5123] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 113.389988][ T5123] __lock_acquire+0x38f7/0x7d40 [ 113.395581][ T5123] lock_acquire+0x19f/0x400 [ 113.401838][ T5123] __mutex_lock_common+0x1e5/0x2400 [ 113.407968][ T5123] mutex_lock_nested+0x17/0x20 [ 113.413286][ T5123] dquot_commit+0x5a/0x410 [ 113.418426][ T5123] ext4_write_dquot+0x1f0/0x360 [ 113.424256][ T5123] mark_all_dquot_dirty+0xf9/0x400 [ 113.430041][ T5123] __dquot_free_space+0x7c3/0xb80 [ 113.436132][ T5123] ext4_free_blocks+0x1b1b/0x24c0 [ 113.441701][ T5123] ext4_ext_remove_space+0x2106/0x41a0 [ 113.447819][ T5123] ext4_ext_truncate+0x182/0x230 [ 113.453699][ T5123] ext4_truncate+0xa41/0x1190 [ 113.458938][ T5123] ext4_setattr+0x117c/0x1b70 [ 113.464313][ T5123] notify_change+0xbc6/0xee0 [ 113.469789][ T5123] do_truncate+0x1ac/0x240 [ 113.474754][ T5123] path_openat+0x293b/0x2fb0 [ 113.479971][ T5123] do_filp_open+0x1df/0x400 [ 113.485013][ T5123] do_sys_openat2+0x14b/0x500 [ 113.490227][ T5123] __x64_sys_openat+0x135/0x160 [ 113.495970][ T5123] do_syscall_64+0x4c/0xa0 [ 113.501008][ T5123] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 113.507802][ T5123] [ 113.507802][ T5123] other info that might help us debug this: [ 113.507802][ T5123] [ 113.518045][ T5123] Chain exists of: [ 113.518045][ T5123] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 113.518045][ T5123] [ 113.531713][ T5123] Possible unsafe locking scenario: [ 113.531713][ T5123] [ 113.539190][ T5123] CPU0 CPU1 [ 113.544746][ T5123] ---- ---- [ 113.550121][ T5123] lock(&ei->i_data_sem/2); [ 113.554942][ T5123] lock(&s->s_dquot.dqio_sem); [ 113.562368][ T5123] lock(&ei->i_data_sem/2); [ 113.569496][ T5123] lock(&dquot->dq_lock); [ 113.573924][ T5123] [ 113.573924][ T5123] *** DEADLOCK *** [ 113.573924][ T5123] [ 113.582080][ T5123] 5 locks held by syz.6.200/5123: [ 113.587117][ T5123] #0: ffff8880299f0460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 113.596303][ T5123] #1: ffff8880627bd3b0 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: do_truncate+0x198/0x240 [ 113.606681][ T5123] #2: ffff8880627bd550 (mapping.invalidate_lock){++++}-{3:3}, at: ext4_setattr+0xf40/0x1b70 [ 113.617527][ T5123] #3: ffff8880627bd238 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x994/0x1190 [ 113.627505][ T5123] #4: ffffffff8d2416f8 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30 [ 113.636780][ T5123] [ 113.636780][ T5123] stack backtrace: [ 113.643521][ T5123] CPU: 1 PID: 5123 Comm: syz.6.200 Not tainted syzkaller #0 [ 113.651553][ T5123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 113.661625][ T5123] Call Trace: [ 113.665036][ T5123] [ 113.668006][ T5123] dump_stack_lvl+0x188/0x250 [ 113.672814][ T5123] ? load_image+0x410/0x410 [ 113.677641][ T5123] ? show_regs_print_info+0x20/0x20 [ 113.682893][ T5123] ? print_circular_bug+0x12b/0x1a0 [ 113.688129][ T5123] check_noncircular+0x2f8/0x400 [ 113.693305][ T5123] ? __bfs+0x27a/0x560 [ 113.697426][ T5123] ? print_deadlock_bug+0x5d0/0x5d0 [ 113.702963][ T5123] ? lockdep_lock+0xf1/0x1f0 [ 113.707646][ T5123] ? mark_lock+0x94/0x320 [ 113.711997][ T5123] ? _find_first_zero_bit+0xd1/0xf0 [ 113.717339][ T5123] __lock_acquire+0x38f7/0x7d40 [ 113.723785][ T5123] ? hlock_conflict+0x59/0x1f0 [ 113.728592][ T5123] ? check_path+0x40/0x40 [ 113.732946][ T5123] ? verify_lock_unused+0x140/0x140 [ 113.738263][ T5123] ? check_noncircular+0x186/0x400 [ 113.743420][ T5123] ? print_deadlock_bug+0x5d0/0x5d0 [ 113.748743][ T5123] ? lockdep_lock+0xf1/0x1f0 [ 113.753383][ T5123] ? lockdep_unlock+0x143/0x2e0 [ 113.758290][ T5123] lock_acquire+0x19f/0x400 [ 113.763130][ T5123] ? dquot_commit+0x5a/0x410 [ 113.767947][ T5123] ? __might_sleep+0xf0/0xf0 [ 113.772557][ T5123] ? read_lock_is_recursive+0x10/0x10 [ 113.777963][ T5123] __mutex_lock_common+0x1e5/0x2400 [ 113.783197][ T5123] ? dquot_commit+0x5a/0x410 [ 113.787964][ T5123] ? dquot_commit+0x5a/0x410 [ 113.792719][ T5123] ? __might_sleep+0xf0/0xf0 [ 113.797515][ T5123] ? mutex_lock_io_nested+0x60/0x60 [ 113.802764][ T5123] mutex_lock_nested+0x17/0x20 [ 113.807842][ T5123] dquot_commit+0x5a/0x410 [ 113.812532][ T5123] ext4_write_dquot+0x1f0/0x360 [ 113.817501][ T5123] mark_all_dquot_dirty+0xf9/0x400 [ 113.822662][ T5123] __dquot_free_space+0x7c3/0xb80 [ 113.827737][ T5123] ext4_free_blocks+0x1b1b/0x24c0 [ 113.832802][ T5123] ? ext4_mb_discard_preallocations_should_retry+0x690/0x690 [ 113.840218][ T5123] ? __ext4_journal_ensure_credits+0x2c/0x450 [ 113.846341][ T5123] ? ext4_inode_journal_mode+0x189/0x460 [ 113.852384][ T5123] ? ext4_ext_remove_space+0x2001/0x41a0 [ 113.858063][ T5123] ext4_ext_remove_space+0x2106/0x41a0 [ 113.863828][ T5123] ? ext4_ext_index_trans_blocks+0xf0/0xf0 [ 113.869663][ T5123] ? ext4_es_remove_extent+0x29f/0x430 [ 113.875156][ T5123] ext4_ext_truncate+0x182/0x230 [ 113.880115][ T5123] ext4_truncate+0xa41/0x1190 [ 113.884836][ T5123] ? up_write+0x1b6/0x410 [ 113.889298][ T5123] ? __ext4_mark_inode_dirty+0x6c0/0x6c0 [ 113.895043][ T5123] ext4_setattr+0x117c/0x1b70 [ 113.899740][ T5123] ? ext4_write_inode+0x5e0/0x5e0 [ 113.904798][ T5123] notify_change+0xbc6/0xee0 [ 113.909441][ T5123] do_truncate+0x1ac/0x240 [ 113.913885][ T5123] ? rcu_lock_release+0x20/0x20 [ 113.918755][ T5123] ? ima_bprm_check+0x200/0x200 [ 113.923666][ T5123] ? vfs_open+0x2b/0x80 [ 113.928019][ T5123] ? bpf_lsm_path_truncate+0x5/0x10 [ 113.933267][ T5123] path_openat+0x293b/0x2fb0 [ 113.937998][ T5123] ? do_filp_open+0x400/0x400 [ 113.943532][ T5123] do_filp_open+0x1df/0x400 [ 113.948174][ T5123] ? vfs_tmpfile+0x300/0x300 [ 113.952893][ T5123] ? _raw_spin_unlock+0x24/0x40 [ 113.957785][ T5123] ? alloc_fd+0x59e/0x650 [ 113.962312][ T5123] do_sys_openat2+0x14b/0x500 [ 113.967294][ T5123] ? __lock_acquire+0x7d40/0x7d40 [ 113.972471][ T5123] ? do_sys_open+0xe0/0xe0 [ 113.977005][ T5123] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 113.983188][ T5123] ? lock_chain_count+0x20/0x20 [ 113.988066][ T5123] __x64_sys_openat+0x135/0x160 [ 113.992962][ T5123] do_syscall_64+0x4c/0xa0 [ 113.997410][ T5123] ? clear_bhb_loop+0x30/0x80 [ 114.002123][ T5123] ? clear_bhb_loop+0x30/0x80 [ 114.007154][ T5123] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 114.013198][ T5123] RIP: 0033:0x7f010f054559 [ 114.017730][ T5123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.037527][ T5123] RSP: 002b:00007f010d2ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 114.046082][ T5123] RAX: ffffffffffffffda RBX: 00007f010f2dafa0 RCX: 00007f010f054559 [ 114.054103][ T5123] RDX: 0000000000101e42 RSI: 00002000000042c0 RDI: ffffffffffffff9c [ 114.062362][ T5123] RBP: 00007f010f0ebb20 R08: 0000000000000000 R09: 0000000000000000 [ 114.070584][ T5123] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 114.078589][ T5123] R13: 00007f010f2db038 R14: 00007f010f2dafa0 R15: 00007fff4f6e1218 [ 114.086860][ T5123] [ 114.115764][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 114.179641][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 114.212480][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 114.240776][ T4869] device veth1_macvtap entered promiscuous mode [ 114.257290][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 114.288758][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 115.903391][ T9] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.942121][ T9] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.982417][ T9] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.038208][ T9] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.135237][ T9] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.183363][ T9] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.230831][ T9] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.283720][ T9] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.386028][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.434267][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.504729][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.545641][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.673246][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.735456][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.792277][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.831948][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.527045][ T9] device hsr_slave_0 left promiscuous mode [ 118.533871][ T9] device hsr_slave_1 left promiscuous mode [ 118.540633][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.550986][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.558930][ T9] device bridge_slave_1 left promiscuous mode [ 118.565182][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.576515][ T9] device bridge_slave_0 left promiscuous mode [ 118.583035][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.598836][ T9] device hsr_slave_0 left promiscuous mode [ 118.605158][ T9] device hsr_slave_1 left promiscuous mode [ 118.612151][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.621319][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.631702][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.640043][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.648625][ T9] device bridge_slave_1 left promiscuous mode [ 118.654872][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.663888][ T9] device bridge_slave_0 left promiscuous mode [ 118.670561][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.682050][ T9] device hsr_slave_0 left promiscuous mode [ 118.689271][ T9] device hsr_slave_1 left promiscuous mode [ 118.695740][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.703723][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.711907][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.719787][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.727500][ T9] device bridge_slave_1 left promiscuous mode [ 118.734973][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.746403][ T9] device bridge_slave_0 left promiscuous mode [ 118.755498][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.767063][ T9] device hsr_slave_0 left promiscuous mode [ 118.776138][ T9] device hsr_slave_1 left promiscuous mode [ 118.782880][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.794127][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.802255][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.812682][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.820959][ T9] device bridge_slave_1 left promiscuous mode [ 118.827214][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.841794][ T9] device hsr_slave_0 left promiscuous mode [ 118.850593][ T9] device hsr_slave_1 left promiscuous mode [ 118.857026][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.864906][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.873065][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.880959][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.888886][ T9] device bridge_slave_1 left promiscuous mode [ 118.895184][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.903802][ T9] device bridge_slave_0 left promiscuous mode [ 118.910732][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.928746][ T9] device veth1_macvtap left promiscuous mode [ 118.934855][ T9] device veth0_macvtap left promiscuous mode [ 118.941585][ T9] device veth1_vlan left promiscuous mode [ 118.950145][ T9] device veth0_vlan left promiscuous mode [ 118.956574][ T9] device veth1_macvtap left promiscuous mode [ 118.964493][ T9] device veth0_macvtap left promiscuous mode [ 118.973406][ T9] device veth1_vlan left promiscuous mode [ 118.979774][ T9] device veth0_vlan left promiscuous mode [ 118.986567][ T9] device veth1_macvtap left promiscuous mode [ 118.995581][ T9] device veth0_macvtap left promiscuous mode [ 119.001947][ T9] device veth1_vlan left promiscuous mode [ 119.009490][ T9] device veth0_vlan left promiscuous mode [ 119.016143][ T9] device veth1_macvtap left promiscuous mode [ 119.022301][ T9] device veth0_macvtap left promiscuous mode [ 119.029302][ T9] device veth1_vlan left promiscuous mode [ 119.035258][ T9] device veth0_vlan left promiscuous mode [ 119.042070][ T9] device veth1_macvtap left promiscuous mode [ 119.048363][ T9] device veth0_macvtap left promiscuous mode [ 119.054520][ T9] device veth1_vlan left promiscuous mode [ 119.060832][ T9] device veth0_vlan left promiscuous mode [ 119.397186][ T9] team0 (unregistering): Port device team_slave_1 removed [ 119.411572][ T9] team0 (unregistering): Port device team_slave_0 removed [ 119.426023][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.438711][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.485995][ T9] bond0 (unregistering): Released all slaves [ 119.549607][ T9] team0 (unregistering): Port device team_slave_1 removed [ 119.561208][ T9] team0 (unregistering): Port device team_slave_0 removed [ 119.572850][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.587415][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.638678][ T9] bond0 (unregistering): Released all slaves [ 119.700730][ T9] team0 (unregistering): Port device team_slave_1 removed [ 119.712406][ T9] team0 (unregistering): Port device team_slave_0 removed [ 119.727022][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.741190][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.793860][ T9] bond0 (unregistering): Released all slaves [ 119.854321][ T9] team0 (unregistering): Port device team_slave_1 removed [ 119.866362][ T9] team0 (unregistering): Port device team_slave_0 removed [ 119.878332][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.894357][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.940584][ T9] bond0 (unregistering): Released all slaves [ 120.004770][ T9] team0 (unregistering): Port device team_slave_1 removed [ 120.017846][ T9] team0 (unregistering): Port device team_slave_0 removed [ 120.031837][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.044660][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.099821][ T9] bond0 (unregistering): Released all slaves