last executing test programs: 1m15.57053526s ago: executing program 3 (id=298): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) 1m14.623867579s ago: executing program 3 (id=291): socket$inet6(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getrlimit(0x1, &(0x7f0000000400)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000000)=""/41, 0x29}], 0x2, &(0x7f0000000780)=[{&(0x7f0000000440)=""/82, 0x52}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) read$msr(r2, &(0x7f0000000580)=""/245, 0xf5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r3, &(0x7f0000000100)='reno\x00', 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) write$tcp_congestion(r3, &(0x7f0000000300)='reno\x00', 0x5) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) listen(r4, 0x1ff) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000d0c10000000000000000000", 0x58}], 0x1) 1m13.922836351s ago: executing program 3 (id=293): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24040084) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 1m13.028571069s ago: executing program 3 (id=295): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x836d9fb164f927b3) io_setup(0x3, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000000000)=[&(0x7f0000000080)={0x0, 0x0, 0x10, 0x7, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}]) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_getevents(r4, 0x2, 0x2, &(0x7f0000000480)=[{}, {}], 0x0) 1m11.901857424s ago: executing program 3 (id=299): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {}, {@nojournal_checksum}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@nodelalloc}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}]}, 0xfd, 0x574, &(0x7f0000000cc0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x20863, 0x0) 1m9.062710354s ago: executing program 3 (id=309): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x200041a, &(0x7f0000000300)=ANY=[@ANYBLOB="6465636f6d706f73652c6e6f626172726965722c6e6c733d69736f383835392d342c0000eb25ba11b788a23b6013ffe5be87fc27664d64fc0e4dd46a49567c77a44ad292e9ed9872dc027d083d66154fe9c6fa40cb8833ec287f8eb2ef9e4c9c6ae7b8da63b8266bd0f93bb7f4b826c2c59bdcfac9aa018a168337d4fddf10b9274d217f93c391ba0112113fee152a52ab91faf3e116456889a3b530bd345c1bed71f1f605c74ee209509d4275f16a8a4e18a5eca2dc8256559f25a39e59e97509fb488db249ecae8d5a2341f85ca194d28668ae031384066e9dc4190c4d9bdeeaeb6503303cac86f2c0b9f933ca805833"], 0x1, 0x5d6, &(0x7f0000001e00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) fsopen(0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) 53.24598071s ago: executing program 32 (id=309): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x200041a, &(0x7f0000000300)=ANY=[@ANYBLOB="6465636f6d706f73652c6e6f626172726965722c6e6c733d69736f383835392d342c0000eb25ba11b788a23b6013ffe5be87fc27664d64fc0e4dd46a49567c77a44ad292e9ed9872dc027d083d66154fe9c6fa40cb8833ec287f8eb2ef9e4c9c6ae7b8da63b8266bd0f93bb7f4b826c2c59bdcfac9aa018a168337d4fddf10b9274d217f93c391ba0112113fee152a52ab91faf3e116456889a3b530bd345c1bed71f1f605c74ee209509d4275f16a8a4e18a5eca2dc8256559f25a39e59e97509fb488db249ecae8d5a2341f85ca194d28668ae031384066e9dc4190c4d9bdeeaeb6503303cac86f2c0b9f933ca805833"], 0x1, 0x5d6, &(0x7f0000001e00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) fsopen(0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) 16.784690944s ago: executing program 2 (id=469): socketpair(0x22, 0x80803, 0x0, &(0x7f0000000400)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000240)={0x40, r3, 0x100, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x61, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) 15.218514823s ago: executing program 2 (id=472): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x1e0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 15.148569205s ago: executing program 5 (id=473): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a300000"], 0xe4}}, 0x20050840) r1 = syz_open_procfs(0x0, 0x0) pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) 14.286200242s ago: executing program 2 (id=474): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./control\x00', 0x480, &(0x7f0000000000), 0x1, 0x786, &(0x7f0000000f80)="$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") chdir(&(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8) 12.829443428s ago: executing program 2 (id=477): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x802, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x29, 0x33e, &(0x7f0000000480)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000001c0)='.\x00', 0x4000423) syz_open_dev$vcsa(&(0x7f0000000280), 0x8, 0x30d400) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2f, 0x2f, 0x0, @loopback, @broadcast}, "000086ddffff0000"}}}}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x25) 11.032694595s ago: executing program 4 (id=479): prlimit64(0x0, 0xe, 0x0, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x6, 0x6, 0x1000002, 0x87, 0xffffffff, 0x3fe}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.84874756s ago: executing program 1 (id=480): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000380)={'wlan1\x00', 0x8000}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000010000104000000000000000000480000", @ANYRES32=r8, @ANYBLOB="ae1e02000000000030103dc5f993a28b52fd6399c39b2d"], 0x20}}, 0x0) 9.635127148s ago: executing program 2 (id=481): socketpair$unix(0x1, 0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="00000000b99b5c65df4bb84674d78e", 0xf}], 0x1}}], 0x1, 0x20008000) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x800, 0x0) recvmsg(r5, 0x0, 0x123) 9.186588422s ago: executing program 0 (id=482): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8000) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x8a, 0x8, 0x6, 0x10, 0x39c1, 0x4, 0x5}, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000100)=ANY=[], 0xff, 0x234, &(0x7f0000000900)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000001880)='./file1\x00', 0x42442, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x8da6) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 8.808660184s ago: executing program 4 (id=483): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() ftruncate(0xffffffffffffffff, 0x6000000) r1 = inotify_init1(0x0) inotify_add_watch(r1, 0x0, 0xa4000160) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000004c0)=0x100, 0x9, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x6, @mcast2, 0x6}, 0x1c) sendto$inet6(r4, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) read(r4, &(0x7f0000001400)=""/4046, 0xffd8) 7.929986041s ago: executing program 4 (id=484): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0xd}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x4, 0x7, 0x3, 0x180, 0x2, 0x10, 0xf1, 0x100000001, 0x1, 0x5, 0x0, 0x800029, 0x0, 0x6, 0x0, 0xbd9], 0xffff1001, 0x43100}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000000)=0x3, 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x10, 0x0, 0x42, 0x5, 0x75, 0x3, 0x36, 0xfe, 0x2, 0x87}, {0xf000, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x8}, {0x1, 0xeeee0000, 0x19, 0x6, 0x5, 0x42, 0x0, 0xff, 0x0, 0x5, 0x6}, {0xc000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0xaa, 0x8, 0x9, 0x9, 0xfa, 0x97}, {0xeeefa000, 0xdddd0000, 0xd, 0xa0, 0x1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0xb000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xdddd0000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0x5, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0x8000000, 0x9}, 0x80000031, 0x0, 0x40000, 0x2024, 0x800000a, 0xc001, 0x100000, [0xe5b5, 0x4, 0x3, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.888374203s ago: executing program 5 (id=485): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x1e0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 7.012740921s ago: executing program 1 (id=486): mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x30) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4000, &(0x7f0000000080)={[{@subsystem='rdma'}]}) 7.005036281s ago: executing program 5 (id=487): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) 6.955572432s ago: executing program 2 (id=488): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 6.048702081s ago: executing program 1 (id=489): socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x1, 0x8000) ioctl$SNDRV_PCM_IOCTL_RESET(r0, 0x4141, 0x0) 6.048444301s ago: executing program 4 (id=490): r0 = socket(0x2b, 0x1, 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0xec776000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x1}, 0x1c) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xaf4, 0x0) shutdown(r2, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x4) 6.047040121s ago: executing program 4 (id=491): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x1001) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) gettid() r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r4) close(r4) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f0000001dc0)={0xf, 0x5}, 0x20) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "001b01", 0x10, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0x3, 0x1, 0xfffffff6}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.911496125s ago: executing program 5 (id=492): mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000080)) 5.879826086s ago: executing program 1 (id=493): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000540)={0x8001, 0x200401, 0xfffffff5, 0x3ff, 0x1, "000108010000000000000000000000010400", 0x240000, 0x1fd}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x1) 4.784625391s ago: executing program 5 (id=494): brk(0x5d555ede6000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000089}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff70) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)) 3.897788208s ago: executing program 4 (id=495): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x64, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x4, 0xfff3}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_FLOWER_KEY_CT_STATE={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0x0, 0xffffff00, 0x0, 0xffffff00]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 3.594992198s ago: executing program 0 (id=496): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 3.180684281s ago: executing program 1 (id=497): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000005580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWFLOWTABLE={0x60, 0x16, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0xd}, [@NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 2.615049808s ago: executing program 0 (id=498): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x1e0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 2.460840723s ago: executing program 1 (id=499): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000000100)={[], [{@fsuuid={'fsuuid', 0x3d, {[0x31, 0x3f, 0x66, 0x62, 0x37, 0x34, 0x63, 0x66], 0x2d, [0x34, 0x62, 0x30, 0x63], 0x2d, [0x64, 0x61, 0x0, 0x36], 0x2d, [0x65, 0x61, 0x66, 0x37], 0x2d, [0x62, 0x62, 0x37, 0x62, 0x30, 0x39, 0x33, 0x66]}}}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xad}, @exit], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x40}, 0x94) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) io_setup(0x6, &(0x7f0000000d80)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) msgrcv(0x0, 0x0, 0x0, 0x1, 0xc7e031e7f31e7165) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x4ce183, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r4, 0x40049421, 0x1) openat$random(0xffffffffffffff9c, &(0x7f0000000e40), 0x400, 0x0) ioprio_set$pid(0x3, 0x0, 0x6000) ioprio_get$pid(0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, &(0x7f0000000040)) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, 0x0) connect$can_j1939(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001600010300"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) 1.684867248s ago: executing program 0 (id=500): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r3 = openat(r2, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c1002, 0x50) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x7fffffff) 96.616388ms ago: executing program 0 (id=501): r0 = socket(0x2b, 0x1, 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0xec776000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x1}, 0x1c) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xaf4, 0x0) shutdown(r2, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x4) 93.514348ms ago: executing program 0 (id=502): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3", 0x2}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0xf0ff) 0s ago: executing program 5 (id=503): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010102}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x1, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0x10e, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.106' (ED25519) to the list of known hosts. [ 46.327878][ T4176] cgroup: Unknown subsys name 'net' [ 46.464706][ T4176] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 47.652114][ T4176] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 49.009645][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 49.064596][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 49.113461][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 49.174682][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 49.186645][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.194702][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.202634][ T4193] device bridge_slave_0 entered promiscuous mode [ 49.215048][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.222150][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.230570][ T4193] device bridge_slave_1 entered promiscuous mode [ 49.282480][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.291705][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 49.310943][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.318065][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.325940][ T4195] device bridge_slave_0 entered promiscuous mode [ 49.338319][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.347546][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.355114][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.362860][ T4195] device bridge_slave_1 entered promiscuous mode [ 49.418215][ T4193] team0: Port device team_slave_0 added [ 49.424159][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.431561][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.440138][ T4197] device bridge_slave_0 entered promiscuous mode [ 49.453819][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.474722][ T4193] team0: Port device team_slave_1 added [ 49.487174][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.494327][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.502414][ T4197] device bridge_slave_1 entered promiscuous mode [ 49.513351][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.522723][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.530502][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.538095][ T4190] device bridge_slave_0 entered promiscuous mode [ 49.572092][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.579422][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.587013][ T4190] device bridge_slave_1 entered promiscuous mode [ 49.601745][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.608693][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.634749][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.656791][ T4195] team0: Port device team_slave_0 added [ 49.671505][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.681006][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.687950][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.713935][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.732188][ T4195] team0: Port device team_slave_1 added [ 49.745910][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.757101][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.768060][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.794202][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.801544][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.809111][ T4189] device bridge_slave_0 entered promiscuous mode [ 49.841206][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.848280][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.856607][ T4189] device bridge_slave_1 entered promiscuous mode [ 49.865705][ T4190] team0: Port device team_slave_0 added [ 49.872252][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.879290][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.905214][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.925067][ T4197] team0: Port device team_slave_0 added [ 49.939793][ T4190] team0: Port device team_slave_1 added [ 49.945918][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.953115][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.979213][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.001794][ T4197] team0: Port device team_slave_1 added [ 50.011820][ T4193] device hsr_slave_0 entered promiscuous mode [ 50.018410][ T4193] device hsr_slave_1 entered promiscuous mode [ 50.051856][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.068837][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.090752][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.097707][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.123936][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.154456][ T4189] team0: Port device team_slave_0 added [ 50.161818][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.168757][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.194747][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.206147][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.213213][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.239740][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.261728][ T4189] team0: Port device team_slave_1 added [ 50.271330][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.278271][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.304654][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.318437][ T4195] device hsr_slave_0 entered promiscuous mode [ 50.325272][ T4195] device hsr_slave_1 entered promiscuous mode [ 50.332957][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.340824][ T4195] Cannot create hsr debugfs directory [ 50.384607][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.391879][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.417928][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.435773][ T4190] device hsr_slave_0 entered promiscuous mode [ 50.442653][ T4190] device hsr_slave_1 entered promiscuous mode [ 50.449104][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.456688][ T4190] Cannot create hsr debugfs directory [ 50.470008][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.476960][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.503016][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.577279][ T4197] device hsr_slave_0 entered promiscuous mode [ 50.584225][ T4197] device hsr_slave_1 entered promiscuous mode [ 50.591312][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.598849][ T4197] Cannot create hsr debugfs directory [ 50.645143][ T4189] device hsr_slave_0 entered promiscuous mode [ 50.651985][ T4189] device hsr_slave_1 entered promiscuous mode [ 50.658418][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.666154][ T4189] Cannot create hsr debugfs directory [ 50.749966][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 50.751119][ T4178] Bluetooth: hci1: command 0x0409 tx timeout [ 50.757235][ T1108] Bluetooth: hci3: command 0x0409 tx timeout [ 50.777614][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 50.829373][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 50.901245][ T4193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 50.912528][ T4193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 50.921433][ T4193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 50.930326][ T4193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 50.981888][ T4195] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 51.000964][ T4195] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 51.010568][ T4195] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 51.026511][ T4195] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 51.058066][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 51.067063][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 51.093041][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 51.110834][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 51.147207][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.185544][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.195667][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.207665][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.215661][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.225439][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.234416][ T1275] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.241593][ T1275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.250816][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.264923][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.279841][ T4190] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 51.288840][ T4190] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 51.299963][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.307606][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.319023][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.327795][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.336218][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.343280][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.358014][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.369833][ T4190] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 51.378875][ T4190] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 51.422369][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.431731][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.441460][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.448502][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.456653][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.466168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.475302][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.482389][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.490304][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.498702][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.507917][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.516872][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.525255][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.534256][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.543264][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.551736][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.559886][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.585643][ T4197] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 51.603553][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.612186][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.622757][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.631465][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.639708][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.648101][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.657221][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.667582][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.676392][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.684507][ T4197] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 51.695021][ T4197] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 51.721280][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.731635][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.740913][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.750983][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.759036][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.767429][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.775971][ T4197] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 51.802363][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.837775][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.862116][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.884214][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.895804][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.920151][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.930844][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.938499][ T876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.947440][ T876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.990368][ T876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.002099][ T876] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.011884][ T876] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.018951][ T876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.027175][ T876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.036467][ T876] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.045169][ T876] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.052245][ T876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.060517][ T876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.068967][ T876] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.077578][ T876] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.084646][ T876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.093492][ T876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.102384][ T876] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.111302][ T876] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.118339][ T876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.126469][ T876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.135258][ T876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.149435][ T876] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.157381][ T876] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.165596][ T876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.174424][ T876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.183181][ T876] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.196239][ T876] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.222969][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.245512][ T876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.254637][ T876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.264647][ T876] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.277118][ T876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.286692][ T876] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.295789][ T876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.304557][ T876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.313216][ T876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.322128][ T876] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.330603][ T876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.338748][ T876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.349718][ T876] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.358929][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.367719][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.384890][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.401944][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.410566][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.418678][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.426811][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.435410][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.444258][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.452791][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.459860][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.467584][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.478053][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.492911][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.516022][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.530666][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.538164][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.555422][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.564428][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.575563][ T1275] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.582661][ T1275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.591576][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.599045][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.606883][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.616037][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.630430][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.649328][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.670268][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.705980][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.720851][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.735784][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.746362][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.762305][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.790126][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.806419][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.816100][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.829566][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 52.835655][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 52.845557][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.854208][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 52.860786][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 52.874286][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.903067][ T4195] device veth0_vlan entered promiscuous mode [ 52.910290][ T4232] Bluetooth: hci4: command 0x041b tx timeout [ 52.921139][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.928573][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.959941][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.971306][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.986942][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.995311][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.018362][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.028696][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.039657][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.052156][ T4195] device veth1_vlan entered promiscuous mode [ 53.080567][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.089028][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.098011][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.109135][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.132106][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.143494][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.152858][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.161778][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.170652][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.179147][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.187034][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.195067][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.203091][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.213709][ T4193] device veth0_vlan entered promiscuous mode [ 53.241661][ T4193] device veth1_vlan entered promiscuous mode [ 53.255076][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.264263][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.280550][ T4195] device veth0_macvtap entered promiscuous mode [ 53.289008][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.303526][ T4189] device veth0_vlan entered promiscuous mode [ 53.311285][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.319715][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.327821][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.336458][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.345928][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.354655][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.363080][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.380006][ T4195] device veth1_macvtap entered promiscuous mode [ 53.394640][ T4189] device veth1_vlan entered promiscuous mode [ 53.424464][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.433533][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.441876][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.451494][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.460398][ T4193] device veth0_macvtap entered promiscuous mode [ 53.471704][ T4193] device veth1_macvtap entered promiscuous mode [ 53.485892][ T4190] device veth0_vlan entered promiscuous mode [ 53.496481][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.510570][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.519006][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.527293][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.535806][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.544809][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.553336][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.563324][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.572141][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.580677][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.596693][ T4190] device veth1_vlan entered promiscuous mode [ 53.614290][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.622719][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.632084][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.642572][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.652238][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.660796][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.686301][ T4195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.695290][ T4195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.704332][ T4195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.715532][ T4195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.729888][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.737893][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.746282][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.755267][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.764083][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.775054][ T4197] device veth0_vlan entered promiscuous mode [ 53.783667][ T4189] device veth0_macvtap entered promiscuous mode [ 53.793792][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.804552][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.815278][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.830030][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.837746][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.845754][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.854246][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.862741][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.875615][ T4189] device veth1_macvtap entered promiscuous mode [ 53.888258][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.899881][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.912037][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.923040][ T4197] device veth1_vlan entered promiscuous mode [ 53.944408][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.955381][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.966270][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.976939][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.988299][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.997039][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.006207][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.014872][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.023252][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.033354][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.042388][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.051506][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.063430][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.072498][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.082098][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.091012][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.113166][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.125342][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.135788][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.146467][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.157539][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.186525][ T4197] device veth0_macvtap entered promiscuous mode [ 54.201996][ T4197] device veth1_macvtap entered promiscuous mode [ 54.209736][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.218578][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.227321][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.239731][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.248007][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.256411][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.264957][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.273378][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.285380][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.294327][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.303241][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.312157][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.328536][ T4190] device veth0_macvtap entered promiscuous mode [ 54.394503][ T4190] device veth1_macvtap entered promiscuous mode [ 54.422506][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.434053][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.447039][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.458167][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.468130][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.478715][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.491080][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.518979][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.529980][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.538927][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.549079][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.560617][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.570654][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.582754][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.592973][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.603691][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.613666][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.624480][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.636852][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.652480][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.668623][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.685112][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.695758][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.705837][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.716468][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.728177][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.739374][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.747932][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.757983][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.766516][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.776535][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.787473][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.797569][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.808216][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.818243][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.828857][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.838875][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.851431][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.862609][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.880730][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.891431][ T4197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.900309][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.901981][ T4197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.918077][ T4232] Bluetooth: hci0: command 0x040f tx timeout [ 54.919783][ T4197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.924598][ T4232] Bluetooth: hci3: command 0x040f tx timeout [ 54.933632][ T4197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.944014][ T4232] Bluetooth: hci2: command 0x040f tx timeout [ 54.953725][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.954082][ T4232] Bluetooth: hci1: command 0x040f tx timeout [ 54.962569][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.977473][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.989882][ T4236] Bluetooth: hci4: command 0x040f tx timeout [ 54.996218][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.012773][ T4190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.016434][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.022239][ T4190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.039142][ T4190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.049153][ T4190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.083135][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.092792][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.101214][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.111719][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.125605][ T1275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.134495][ T1275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.170087][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.190257][ T3093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.199884][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.208111][ T3093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.220593][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.235933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.251451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.316787][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.349507][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.360694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.409436][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.417270][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.571769][ T4275] loop4: detected capacity change from 0 to 128 [ 55.682782][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.041371][ T4282] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 56.110977][ T876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.146718][ T4277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.166951][ T876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.192409][ T4277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.422159][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.442427][ T4275] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 56.559665][ T4237] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 56.569400][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.830030][ T4237] usb 2-1: Using ep0 maxpacket: 16 [ 56.959988][ T4237] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 57.053595][ T4237] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 57.269906][ T4237] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 57.289866][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 57.393788][ T4237] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 57.500494][ T4273] loop4: detected capacity change from 0 to 32768 [ 57.509122][ T4273] ======================================================= [ 57.509122][ T4273] WARNING: The mand mount option has been deprecated and [ 57.509122][ T4273] and is ignored by this kernel. Remove the mand [ 57.509122][ T4273] option from the mount to silence this warning. [ 57.509122][ T4273] ======================================================= [ 57.631846][ T4237] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 57.672813][ T4273] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 57.819899][ T4273] (syz.4.5,4273,1):ocfs2_remount:624 ERROR: Cannot change heartbeat mode on remount [ 58.003125][ T4237] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 58.169457][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 58.175530][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 58.181612][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 58.189936][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 58.347310][ T4300] loop0: detected capacity change from 0 to 128 [ 58.406418][ T4300] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 59.189529][ T4232] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 59.308631][ T4300] loop0: detected capacity change from 0 to 32768 [ 59.392865][ T4300] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 59.442734][ T4300] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 59.469726][ T4232] usb 4-1: Using ep0 maxpacket: 16 [ 59.709219][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 59.719319][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 59.729215][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 59.739215][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 59.749215][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 59.759216][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 59.769215][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 59.779215][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 59.789216][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 59.799216][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 60.431320][ T4308] sctp: failed to load transform for md5: -2 [ 60.931410][ T4232] usb 4-1: unable to get BOS descriptor or descriptor too short [ 60.959679][ T4300] (syz.0.1,4300,1):ocfs2_remount:624 ERROR: Cannot change heartbeat mode on remount [ 60.979734][ T4237] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 60.987903][ T4237] usb 2-1: Manufacturer: syz [ 61.022659][ T4237] usb 2-1: config 0 descriptor?? [ 61.039566][ T4237] usb 2-1: can't set config #0, error -71 [ 61.039648][ T4232] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 61.058538][ T4237] usb 2-1: USB disconnect, device number 2 [ 61.069179][ T4193] ocfs2: Unmounting device (7,4) on (node local) [ 61.081245][ T4190] ocfs2: Unmounting device (7,0) on (node local) [ 61.299342][ T4232] usb 4-1: string descriptor 0 read error: -71 [ 61.310989][ T4232] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 61.344804][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.390003][ T4232] usb 4-1: can't set config #1, error -71 [ 61.423336][ T4232] usb 4-1: USB disconnect, device number 2 [ 62.187095][ T4237] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 62.296562][ T4326] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6'. [ 62.639343][ T4237] usb 2-1: device descriptor read/all, error -71 [ 64.281232][ T4386] loop0: detected capacity change from 0 to 1024 [ 65.485380][ T4386] EXT4-fs (loop0): Ignoring removed nobh option [ 65.554438][ T4386] EXT4-fs (loop0): Ignoring removed orlov option [ 65.847250][ T4386] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,grpquota,nobh,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 67.138616][ T4422] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23'. [ 67.582035][ T4428] syz.0.26 uses obsolete (PF_INET,SOCK_PACKET) [ 70.389196][ C1] sched: RT throttling activated [ 71.152892][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.159426][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.499523][ T4440] +: renamed from syzkaller0 [ 73.068564][ T4454] fuse: Unknown parameter '0x0000000000000006' [ 73.980501][ T4459] loop0: detected capacity change from 0 to 512 [ 74.043276][ T4459] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 74.064932][ T4459] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 74.136844][ T4461] loop4: detected capacity change from 0 to 512 [ 74.137956][ T4459] EXT4-fs (loop0): 1 truncate cleaned up [ 74.203562][ T4461] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 74.259876][ T4459] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 74.297963][ T4461] EXT4-fs (loop4): ea_inode feature is not supported for Hurd [ 75.304685][ T4473] loop3: detected capacity change from 0 to 256 [ 75.933619][ T4473] FAT-fs (loop3): Directory bread(block 64) failed [ 75.969324][ T4473] FAT-fs (loop3): Directory bread(block 65) failed [ 75.976018][ T4473] FAT-fs (loop3): Directory bread(block 66) failed [ 75.986722][ T4473] FAT-fs (loop3): Directory bread(block 67) failed [ 75.993556][ T4473] FAT-fs (loop3): Directory bread(block 68) failed [ 76.008033][ T4473] FAT-fs (loop3): Directory bread(block 69) failed [ 76.099837][ T4473] FAT-fs (loop3): Directory bread(block 70) failed [ 76.107612][ T4473] FAT-fs (loop3): Directory bread(block 71) failed [ 76.114404][ T4473] FAT-fs (loop3): Directory bread(block 72) failed [ 76.121609][ T4473] FAT-fs (loop3): Directory bread(block 73) failed [ 76.288890][ T21] cfg80211: failed to load regulatory.db [ 77.596399][ T4499] loop3: detected capacity change from 0 to 1024 [ 77.724060][ T4501] ODEBUG: Out of memory. ODEBUG disabled [ 77.795068][ T4499] EXT4-fs (loop3): Ignoring removed bh option [ 79.323829][ T4515] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 80.102359][ T4499] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,jqfmt=vfsv1,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,jqfmt=vfsv0,bh,init_itable,. Quota mode: none. [ 80.329297][ T4525] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.356628][ T25] audit: type=1800 audit(1780837586.882:2): pid=4499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.47" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 80.394204][ T4499] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 80.661418][ T4517] loop1: detected capacity change from 0 to 131072 [ 80.750465][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 80.796519][ T4517] F2FS-fs (loop1): Found nat_bits in checkpoint [ 80.847846][ T4517] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 80.920412][ T4517] F2FS-fs (loop1): inode (7) has corrupted xattr [ 81.918671][ T4547] loop2: detected capacity change from 0 to 40427 [ 81.964774][ T4547] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1ffff [ 81.974450][ T4547] F2FS-fs (loop2): invalid crc value [ 81.982645][ T4552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.62'. [ 82.008241][ T4547] F2FS-fs (loop2): Found nat_bits in checkpoint [ 82.285165][ T4547] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 82.290002][ T4555] loop0: detected capacity change from 0 to 40427 [ 82.349964][ T4555] F2FS-fs (loop0): invalid crc value [ 82.508537][ T4555] F2FS-fs (loop0): Found nat_bits in checkpoint [ 82.560305][ T4555] F2FS-fs (loop0): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 83.374030][ T4195] attempt to access beyond end of device [ 83.374030][ T4195] loop2: rw=2049, want=45104, limit=40427 [ 83.640292][ T4574] netlink: 'syz.4.66': attribute type 3 has an invalid length. [ 86.990372][ T4578] loop4: detected capacity change from 0 to 40427 [ 86.997177][ T4606] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 87.015740][ T4578] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 87.038747][ T4578] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 87.117153][ T4578] F2FS-fs (loop4): Found nat_bits in checkpoint [ 87.294414][ T4578] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 87.301003][ T4583] loop3: detected capacity change from 0 to 32768 [ 87.308252][ T4578] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 87.436500][ T4193] attempt to access beyond end of device [ 87.436500][ T4193] loop4: rw=2049, want=45104, limit=40427 [ 87.474705][ T4583] XFS (loop3): Mounting V5 Filesystem [ 87.553268][ T4583] XFS (loop3): log mount failed [ 88.831451][ T4638] loop4: detected capacity change from 0 to 64 [ 89.198665][ T4636] loop3: detected capacity change from 0 to 40427 [ 90.680658][ T4656] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 91.257544][ T4636] F2FS-fs (loop3): invalid crc value [ 91.289576][ T4267] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.356542][ T4636] F2FS-fs (loop3): Found nat_bits in checkpoint [ 91.514194][ T4636] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 91.541257][ T4636] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 91.542296][ T4668] loop1: detected capacity change from 0 to 1024 [ 91.555860][ T4267] usb 1-1: Using ep0 maxpacket: 32 [ 91.608332][ T4668] EXT4-fs (loop1): Ignoring removed bh option [ 91.655790][ T4668] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,jqfmt=vfsv1,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,jqfmt=vfsv0,bh,init_itable,. Quota mode: none. [ 91.699289][ T25] audit: type=1800 audit(1780837598.222:3): pid=4668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.90" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 91.710897][ T4636] attempt to access beyond end of device [ 91.710897][ T4636] loop3: rw=2049, want=40968, limit=40427 [ 91.719613][ T4267] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 91.739078][ T4267] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 91.750255][ T4267] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 91.761372][ T4267] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 91.774867][ T4267] usb 1-1: config 0 interface 0 has no altsetting 0 [ 91.949754][ T4267] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 91.958837][ T4267] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 91.993112][ T4267] usb 1-1: Product: syz [ 91.999515][ T4267] usb 1-1: Manufacturer: syz [ 92.004134][ T4267] usb 1-1: SerialNumber: syz [ 92.021727][ T4267] usb 1-1: config 0 descriptor?? [ 92.076434][ T4267] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 93.270259][ T4267] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 93.314132][ T4267] usb 1-1: USB disconnect, device number 2 [ 93.346843][ T4267] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 93.364434][ T4685] Zero length message leads to an empty skb [ 101.212122][ T4747] loop2: detected capacity change from 0 to 2048 [ 101.259403][ T21] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 101.270106][ T4747] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 101.636420][ T4757] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 101.652624][ T4757] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 101.665187][ T4757] EXT4-fs (loop2): This should not happen!! Data will be lost [ 101.665187][ T4757] [ 101.675056][ T4757] EXT4-fs (loop2): Total free blocks count 0 [ 101.681169][ T4757] EXT4-fs (loop2): Free/Dirty block details [ 101.687214][ T4757] EXT4-fs (loop2): free_blocks=2415919504 [ 101.693152][ T4757] EXT4-fs (loop2): dirty_blocks=48 [ 101.698358][ T4757] EXT4-fs (loop2): Block reservation details [ 101.704462][ T4757] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 102.159251][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 102.260387][ T4761] netlink: 'syz.4.107': attribute type 10 has an invalid length. [ 102.294690][ T4761] team0: Cannot enslave team device to itself [ 102.299410][ T21] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 102.310905][ T21] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 102.323082][ T21] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 102.349008][ T21] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 102.384991][ T21] usb 2-1: config 0 interface 0 has no altsetting 0 [ 102.639663][ T21] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 102.660604][ T21] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 102.713741][ T21] usb 2-1: Product: syz [ 102.726977][ T4778] loop3: detected capacity change from 0 to 24 [ 102.759383][ T21] usb 2-1: Manufacturer: syz [ 102.764183][ T21] usb 2-1: SerialNumber: syz [ 102.788194][ T21] usb 2-1: config 0 descriptor?? [ 102.881608][ T21] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 102.914651][ T21] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 103.609760][ T4234] usb 2-1: USB disconnect, device number 5 [ 103.635754][ T4234] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 103.651347][ T4782] loop4: detected capacity change from 0 to 128 [ 106.621693][ T4827] block nbd4: NBD_DISCONNECT [ 106.627206][ T4826] block nbd4: Disconnected due to user request. [ 106.649308][ T4826] block nbd4: shutting down sockets [ 106.699606][ T4267] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 106.811898][ T4810] loop0: detected capacity change from 0 to 32768 [ 106.877200][ T4810] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.118 (4810) [ 106.949322][ T4267] usb 4-1: Using ep0 maxpacket: 32 [ 106.979892][ T4810] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 107.039490][ T4810] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 107.069386][ T4267] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 107.089572][ T4810] BTRFS info (device loop0): use zstd compression, level 3 [ 107.097874][ T4267] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 107.134721][ T4810] BTRFS info (device loop0): force clearing of disk cache [ 107.152181][ T4267] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 107.169242][ T4810] BTRFS info (device loop0): enabling disk space caching [ 107.202166][ T4267] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 107.217350][ T4810] BTRFS info (device loop0): disk space caching is enabled [ 107.261877][ T4810] BTRFS info (device loop0): has skinny extents [ 107.287824][ T4267] usb 4-1: config 0 interface 0 has no altsetting 0 [ 107.469552][ T4267] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 107.500141][ T4267] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 107.508661][ T4810] BTRFS info (device loop0): enabling ssd optimizations [ 107.517958][ T4267] usb 4-1: Product: syz [ 107.549550][ T4267] usb 4-1: Manufacturer: syz [ 107.595058][ T4871] loop2: detected capacity change from 0 to 8 [ 107.596693][ T4810] BTRFS info (device loop0): clearing free space tree [ 107.608665][ T4267] usb 4-1: SerialNumber: syz [ 107.625901][ T4810] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 107.637118][ T4810] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 107.653035][ T4267] usb 4-1: config 0 descriptor?? [ 107.800879][ T4267] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 108.481514][ T4267] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 108.532898][ T4871] SQUASHFS error: Failed to read block 0x2d0: -5 [ 108.549325][ T4871] SQUASHFS error: Unable to read metadata cache entry [2ce] [ 108.594440][ T4871] SQUASHFS error: Unable to read directory block [247:26] [ 108.609447][ T1325] usb 4-1: USB disconnect, device number 3 [ 108.641093][ T1325] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 108.748136][ T4880] netlink: 'syz.4.132': attribute type 3 has an invalid length. [ 108.775207][ T4880] netlink: 40 bytes leftover after parsing attributes in process `syz.4.132'. [ 109.091155][ T4899] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 110.229437][ T4891] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 110.669489][ T4891] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 110.754833][ T4891] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 111.679352][ T4891] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 111.692535][ T4891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.719564][ T4910] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 111.860185][ T4932] device syzkaller0 entered promiscuous mode [ 112.111841][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 112.233099][ T4927] loop1: detected capacity change from 0 to 32768 [ 112.299312][ T4927] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.142 (4927) [ 112.326377][ T4927] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 112.343554][ T4927] BTRFS info (device loop1): using free space tree [ 112.357811][ T4927] BTRFS info (device loop1): has skinny extents [ 112.475999][ T4927] BTRFS info (device loop1): enabling ssd optimizations [ 112.492259][ T4891] usb 1-1: USB disconnect, device number 3 [ 114.489512][ T4985] netlink: 'syz.3.147': attribute type 2 has an invalid length. [ 114.497295][ T4985] netlink: 224 bytes leftover after parsing attributes in process `syz.3.147'. [ 114.962863][ T4992] 9pnet_virtio: no channels available for device 127.0.0.1 [ 115.072512][ T4993] loop4: detected capacity change from 0 to 1764 [ 115.949962][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 117.469510][ T5012] loop1: detected capacity change from 0 to 24 [ 117.996226][ T5015] loop3: detected capacity change from 0 to 164 [ 120.230167][ T5041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.164'. [ 120.299271][ T4235] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 120.637167][ T4235] usb 4-1: Using ep0 maxpacket: 16 [ 120.769413][ T4235] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.804967][ T4235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 120.836651][ T4235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 120.864774][ T4235] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 120.895226][ T4235] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.009587][ T4235] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 121.026279][ T4235] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 121.049990][ T4235] usb 4-1: Manufacturer: syz [ 121.078730][ T4235] usb 4-1: config 0 descriptor?? [ 121.569586][ T4235] rc_core: IR keymap rc-hauppauge not found [ 121.575963][ T4235] Registered IR keymap rc-empty [ 121.615170][ T4235] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 121.673270][ T4235] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 121.735920][ T4235] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 121.784200][ T4235] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 121.824553][ T4232] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 121.852590][ T4235] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 121.884730][ T5080] loop4: detected capacity change from 0 to 256 [ 121.905768][ T5080] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 121.924449][ T4235] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 121.950783][ T5080] FAT-fs (loop4): Directory bread(block 64) failed [ 121.957801][ T5080] FAT-fs (loop4): Directory bread(block 65) failed [ 121.969379][ T4235] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 121.970093][ T5080] FAT-fs (loop4): Directory bread(block 66) failed [ 121.987773][ T5080] FAT-fs (loop4): Directory bread(block 67) failed [ 121.995878][ T5080] FAT-fs (loop4): Directory bread(block 68) failed [ 122.007497][ T5080] FAT-fs (loop4): Directory bread(block 69) failed [ 122.009394][ T4235] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 122.015560][ T5080] FAT-fs (loop4): Directory bread(block 70) failed [ 122.028047][ T5080] FAT-fs (loop4): Directory bread(block 71) failed [ 122.042862][ T5080] FAT-fs (loop4): Directory bread(block 72) failed [ 122.049388][ T4235] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 122.059521][ T5080] FAT-fs (loop4): Directory bread(block 73) failed [ 122.069318][ T4232] usb 3-1: Using ep0 maxpacket: 8 [ 122.079311][ T4235] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 122.089481][ T4236] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 122.139286][ T4235] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 122.169485][ T4235] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 122.189470][ T4232] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 122.199357][ T4235] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 122.207860][ T4232] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 122.229477][ T4235] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 122.243264][ T4232] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 122.291637][ T4232] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 122.305319][ T4232] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.325371][ T4235] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 122.335348][ T4232] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 122.350795][ T4235] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 122.360560][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.449484][ T4236] usb 2-1: config 0 has an invalid interface number: 101 but max is 0 [ 122.523561][ T4236] usb 2-1: config 0 has no interface number 0 [ 122.698087][ T4236] usb 2-1: config 0 interface 101 has no altsetting 0 [ 122.929508][ T4232] usb 3-1: GET_CAPABILITIES returned 0 [ 122.935028][ T4232] usbtmc 3-1:16.0: can't read capabilities [ 122.961356][ T4236] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 122.986530][ T4236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.048269][ T4236] usb 2-1: Product: syz [ 123.062586][ T4236] usb 2-1: Manufacturer: syz [ 123.067362][ T4236] usb 2-1: SerialNumber: syz [ 123.083075][ T4236] usb 2-1: config 0 descriptor?? [ 123.097586][ T4232] usb 4-1: USB disconnect, device number 4 [ 123.194251][ T4267] usb 3-1: USB disconnect, device number 2 [ 124.195421][ T4236] usb 2-1: USB disconnect, device number 6 [ 124.483301][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.101/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.668327][ T5121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.189'. [ 126.397338][ T5129] loop2: detected capacity change from 0 to 164 [ 128.582589][ T5160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.203'. [ 128.751666][ T5160] device syz_tun entered promiscuous mode [ 128.857432][ T5160] device macvtap1 entered promiscuous mode [ 128.888358][ T5161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.203'. [ 128.901705][ T5161] device syz_tun left promiscuous mode [ 129.752531][ T5161] device macvtap1 left promiscuous mode [ 130.057814][ T5183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.210'. [ 130.131309][ T5185] loop2: detected capacity change from 0 to 2048 [ 130.151277][ T5180] loop1: detected capacity change from 0 to 8192 [ 130.233208][ T5180] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 130.247056][ T5180] REISERFS (device loop1): using ordered data mode [ 130.269032][ T5180] reiserfs: using flush barriers [ 130.323676][ T5185] EXT4-fs (loop2): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 130.408827][ T5180] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 130.458518][ T5200] loop3: detected capacity change from 0 to 32768 [ 130.467159][ T5180] REISERFS (device loop1): checking transaction log (loop1) [ 130.477644][ T5185] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 130.495294][ T5185] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 130.507737][ T5185] EXT4-fs (loop2): This should not happen!! Data will be lost [ 130.507737][ T5185] [ 130.526020][ T5185] EXT4-fs (loop2): Total free blocks count 0 [ 130.559955][ T5185] EXT4-fs (loop2): Free/Dirty block details [ 130.592474][ T5200] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.216 (5200) [ 130.635264][ T5205] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 130.664575][ T5185] EXT4-fs (loop2): free_blocks=2415919104 [ 130.725444][ T5185] EXT4-fs (loop2): dirty_blocks=64 [ 130.792127][ T5205] EXT4-fs (loop2): This should not happen!! Data will be lost [ 130.792127][ T5205] [ 130.819487][ T5185] EXT4-fs (loop2): Block reservation details [ 130.907951][ T5185] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 131.118987][ T5180] REISERFS (device loop1): Using r5 hash to sort names [ 131.141616][ T5200] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 131.150499][ T5200] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 131.159965][ T5200] BTRFS info (device loop3): use zstd compression, level 3 [ 131.167154][ T5200] BTRFS info (device loop3): force clearing of disk cache [ 131.174277][ T5200] BTRFS info (device loop3): enabling disk space caching [ 131.181320][ T5200] BTRFS info (device loop3): disk space caching is enabled [ 131.188508][ T5200] BTRFS info (device loop3): has skinny extents [ 131.258272][ T5180] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 131.761009][ T5220] xt_bpf: check failed: parse error [ 132.386067][ T5180] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 133.116922][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.123287][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.565533][ T5200] BTRFS error (device loop3): open_ctree failed: -12 [ 134.553636][ T5257] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.691905][ T5257] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.947288][ T5257] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.429386][ T5257] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.667255][ T5257] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.922812][ T5257] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.972488][ T5257] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.986133][ T5257] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.622117][ T5298] loop2: detected capacity change from 0 to 2048 [ 139.729685][ T5305] loop4: detected capacity change from 0 to 40427 [ 139.743959][ T5305] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 139.751793][ T5305] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 140.786226][ T5305] F2FS-fs (loop4): invalid crc value [ 140.819320][ T4519] loop2: p1 < > p4 < > [ 140.838695][ T5305] F2FS-fs (loop4): Found nat_bits in checkpoint [ 140.886874][ T5305] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 140.894022][ T5305] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 140.905869][ T5298] loop2: p1 < > p4 < > [ 143.235725][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 143.267999][ T4519] udevd[4519]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 143.492756][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 143.504691][ T4519] udevd[4519]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 143.604839][ T5336] device syzkaller0 entered promiscuous mode [ 143.687066][ T5339] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 143.694566][ T5339] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 143.712601][ T5339] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 144.584561][ T5343] loop1: detected capacity change from 0 to 1024 [ 144.634232][ T5343] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 144.696022][ T5343] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,errors=remount-ro,dioread_nolock,nojournal_checksum,lazytime,noauto_da_alloc,. Quota mode: writeback. [ 146.412460][ T5369] input: syz1 as /devices/virtual/input/input6 [ 149.318234][ T5397] genirq: Flags mismatch irq 31. 00000000 (comedi_parport) vs. 00000000 (virtio1-input.0) [ 151.377740][ T5242] Bluetooth: hci4: command 0x0405 tx timeout [ 153.036542][ T5432] loop2: detected capacity change from 0 to 128 [ 153.234807][ T5432] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 153.351001][ T5432] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 153.443087][ T5432] ext2 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.820999][ T5462] loop3: detected capacity change from 0 to 512 [ 154.962517][ T5462] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 155.127083][ T5424] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.135636][ T5424] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.180514][ T5462] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 155.581860][ T5473] loop1: detected capacity change from 0 to 512 [ 155.777485][ T5473] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,stripe=0x0000000000000005,journal_ioprio=0x0000000000000007,. Quota mode: writeback. [ 156.197334][ T5473] ext4 filesystem being mounted at /48/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.800711][ T5480] loop2: detected capacity change from 0 to 32768 [ 156.814207][ T5480] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.276 (5480) [ 156.888775][ T5424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.937253][ T5480] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 156.954937][ T5480] BTRFS info (device loop2): using free space tree [ 156.965025][ T5480] BTRFS info (device loop2): has skinny extents [ 156.987412][ T5424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.139922][ T5480] BTRFS info (device loop2): enabling ssd optimizations [ 157.240630][ T5482] Set syz1 is full, maxelem 6117 reached [ 157.882000][ T5514] input: syz1 as /devices/virtual/input/input7 [ 158.645335][ T5424] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.665929][ T5424] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.679511][ T5424] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.693079][ T5424] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.799007][ T5523] loop1: detected capacity change from 0 to 512 [ 158.870877][ T5523] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 160.863955][ T5550] loop4: detected capacity change from 0 to 512 [ 161.610949][ T5550] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 161.699948][ T5550] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 161.739365][ T5560] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5562] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5560] [ 164.892782][ T5586] loop3: detected capacity change from 0 to 1024 [ 164.943599][ T5586] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 165.067459][ T5586] EXT4-fs (loop3): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000001,bsddf,nojournal_checksum,norecovery,debug_want_extra_isize=0x0000000000000080,dioread_nolock,nodelalloc,acl,auto_da_alloc=0x0000000000000343,,errors=continue. Quota mode: none. [ 166.183305][ T5601] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #11: comm syz.3.299: missing EA_INODE flag [ 166.237991][ T5603] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 166.327591][ T5601] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.299: error while reading EA inode 11 err=-117 [ 166.709764][ T5586] loop_set_status: loop3 () has still dirty pages (nrpages=5) [ 166.732058][ T5608] loop2: detected capacity change from 0 to 2048 [ 166.773047][ T5612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.307'. [ 166.926357][ T4374] Bluetooth: (null): Invalid header checksum [ 166.975668][ T4374] Bluetooth: (null): Invalid header checksum [ 167.096200][ T4374] Bluetooth: (null): Invalid header checksum [ 169.410486][ T4197] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 169.427505][ C0] vkms_vblank_simulate: vblank timer overrun [ 169.533740][ T5608] NILFS (loop2): error -4 creating segctord thread [ 169.544725][ T4197] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 169.710352][ T4197] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 169.767515][ T4197] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 169.812702][ T5629] ufs: You didn't specify the type of your ufs filesystem [ 169.812702][ T5629] [ 169.812702][ T5629] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 169.812702][ T5629] [ 169.812702][ T5629] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 169.843649][ T5629] ufs: ufstype=old is supported read-only [ 169.857686][ T5629] ufs: ufs_fill_super(): bad magic number [ 170.373350][ T5630] netlink: 24 bytes leftover after parsing attributes in process `syz.1.311'. [ 170.728067][ T4197] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 171.118693][ T4197] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 171.763125][ T4197] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 173.794596][ T4197] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 173.899132][ T5651] IPVS: sed: FWM 3 0x00000003 - no destination available [ 173.928848][ T4197] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 175.180101][ T4197] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 175.588936][ T4197] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 175.789277][ T5245] Bluetooth: hci2: command 0x0406 tx timeout [ 176.064027][ T5245] Bluetooth: hci3: command 0x0406 tx timeout [ 176.070195][ T5245] Bluetooth: hci0: command 0x0406 tx timeout [ 176.076292][ T5245] Bluetooth: hci4: command 0x0406 tx timeout [ 176.082462][ T5245] Bluetooth: hci1: command 0x0406 tx timeout [ 176.104476][ T4197] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 176.216459][ T4197] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 176.304495][ T4197] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 176.322071][ T4194] Bluetooth: hci0: unexpected event for opcode 0x0c6d [ 177.023104][ T4197] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 177.529088][ T4197] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 178.583319][ T4197] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 178.683031][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 179.514985][ T4197] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 179.589964][ T4197] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 179.646853][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.673679][ T4197] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 179.887284][ T4197] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 180.682436][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.742748][ T4197] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 180.840732][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.958802][ T5729] loop4: detected capacity change from 0 to 512 [ 180.975210][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.025917][ T5729] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 181.035892][ T4197] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 181.293293][ T5738] mmap: syz.0.349 (5738) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 182.051558][ T4197] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 182.118534][ T5729] EXT4-fs (loop4): 1 truncate cleaned up [ 182.124267][ T5729] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none. [ 182.177870][ T4197] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 183.193277][ T5751] loop1: detected capacity change from 0 to 512 [ 183.422776][ T5751] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 183.499576][ T5751] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 183.522628][ T5751] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 183.540171][ T5751] EXT4-fs (loop1): orphan cleanup on readonly fs [ 183.552986][ T5751] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.353: bg 0: block 361: padding at end of block bitmap is not set [ 183.652874][ T5751] EXT4-fs (loop1): Remounting filesystem read-only [ 183.659773][ T5751] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 183.670545][ T5751] EXT4-fs (loop1): Remounting filesystem read-only [ 183.677406][ T5751] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.353: attempt to clear invalid blocks 33619980 len 1 [ 183.751873][ T5751] EXT4-fs (loop1): Remounting filesystem read-only [ 183.778794][ T5751] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.353: invalid indirect mapped block 1811939328 (level 0) [ 183.839947][ T5751] EXT4-fs (loop1): Remounting filesystem read-only [ 183.857978][ T5751] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.353: invalid indirect mapped block 2185560079 (level 1) [ 183.927023][ T5751] EXT4-fs (loop1): Remounting filesystem read-only [ 183.957628][ T5751] EXT4-fs (loop1): 1 truncate cleaned up [ 183.963835][ T5751] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,noblock_validity,discard,errors=remount-ro,mblk_io_submit. Quota mode: none. [ 184.146797][ T5740] chnl_net:caif_netlink_parms(): no params data found [ 184.284040][ T5785] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.353: dx entry: limit 0 != root limit 125 [ 184.295970][ T5785] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.353: Corrupt directory, running e2fsck is recommended [ 184.607914][ T5769] ubi16: attaching mtd0 [ 184.612747][ T5769] ubi16 error: ubi_attach_mtd_dev: bad VID header (655360) or data offsets (655424) [ 184.645946][ T5778] loop4: detected capacity change from 0 to 8192 [ 184.689702][ T5778] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 184.708269][ T5778] REISERFS (device loop4): using ordered data mode [ 184.712454][ T5753] chnl_net:caif_netlink_parms(): no params data found [ 184.715188][ T5778] reiserfs: using flush barriers [ 184.741655][ T5778] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 184.952742][ T5778] REISERFS (device loop4): checking transaction log (loop4) [ 184.973852][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.981711][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.989312][ T5245] Bluetooth: hci4: command 0x0409 tx timeout [ 184.997213][ T5740] device bridge_slave_0 entered promiscuous mode [ 185.048715][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.059427][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.091014][ T5740] device bridge_slave_1 entered promiscuous mode [ 185.156037][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.221557][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.270289][ T5778] REISERFS (device loop4): Using tea hash to sort names [ 185.328365][ T5778] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 185.368811][ T5740] team0: Port device team_slave_0 added [ 185.398877][ T5753] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.465984][ T5753] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.479323][ T5507] Bluetooth: hci5: command 0x0409 tx timeout [ 185.516224][ T5753] device bridge_slave_0 entered promiscuous mode [ 185.573992][ T5740] team0: Port device team_slave_1 added [ 185.667565][ T5753] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.685671][ T5753] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.738551][ T5753] device bridge_slave_1 entered promiscuous mode [ 185.766849][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.775647][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.829366][ T1325] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 185.870064][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.941378][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.949078][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.051140][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.073426][ T5753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.107148][ T5753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.207018][ T9] device hsr_slave_0 left promiscuous mode [ 186.213304][ T1325] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 186.229243][ T1325] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 186.240830][ T9] device hsr_slave_1 left promiscuous mode [ 186.247042][ T1325] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 186.267215][ T1325] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 186.278673][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.300118][ T1325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 186.316715][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.336771][ T1325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 186.346795][ T1325] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 186.372266][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.386677][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.395513][ T9] device bridge_slave_1 left promiscuous mode [ 186.410388][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.438570][ T9] device bridge_slave_0 left promiscuous mode [ 186.457520][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.520075][ T9] device veth1_macvtap left promiscuous mode [ 186.527919][ T9] device veth0_macvtap left promiscuous mode [ 186.535260][ T9] device veth1_vlan left promiscuous mode [ 186.542115][ T9] device veth0_vlan left promiscuous mode [ 186.649305][ T1325] usb 1-1: string descriptor 0 read error: -22 [ 186.656569][ T1325] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 186.676469][ T1325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.697430][ T1325] usb 1-1: config 0 descriptor?? [ 186.740322][ T1325] hub 1-1:0.0: bad descriptor, ignoring hub [ 186.746366][ T1325] hub: probe of 1-1:0.0 failed with error -5 [ 186.784678][ T1325] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input8 [ 186.974531][ T9] team0 (unregistering): Port device team_slave_1 removed [ 186.983509][ T5245] usb 1-1: USB disconnect, device number 4 [ 187.027393][ T9] team0 (unregistering): Port device team_slave_0 removed [ 187.045867][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.067992][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.088000][ T5507] Bluetooth: hci4: command 0x041b tx timeout [ 187.166727][ T5835] loop4: detected capacity change from 0 to 256 [ 187.267347][ T9] bond0 (unregistering): Released all slaves [ 188.110416][ T5753] team0: Port device team_slave_0 added [ 188.145960][ T5740] device hsr_slave_0 entered promiscuous mode [ 188.155523][ T5507] Bluetooth: hci5: command 0x041b tx timeout [ 188.299789][ T5740] device hsr_slave_1 entered promiscuous mode [ 188.360113][ T5740] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.469444][ T5740] Cannot create hsr debugfs directory [ 188.492926][ T5753] team0: Port device team_slave_1 added [ 188.794623][ T5850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.369'. [ 189.111051][ T5753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.118111][ T5753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.149861][ T5245] Bluetooth: hci4: command 0x040f tx timeout [ 189.277385][ T5753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.639464][ T5867] tipc: Started in network mode [ 189.644592][ T5867] tipc: Node identity 4, cluster identity 4711 [ 189.650886][ T5867] tipc: Node number set to 4 [ 189.705312][ T5753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.189304][ T5507] Bluetooth: hci5: command 0x040f tx timeout [ 190.589270][ T5753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.618163][ T5753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.231858][ T5243] Bluetooth: hci4: command 0x0419 tx timeout [ 191.252964][ T5753] device hsr_slave_0 entered promiscuous mode [ 191.297453][ T5753] device hsr_slave_1 entered promiscuous mode [ 191.298832][ T5889] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.376'. [ 191.360118][ T5753] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.425504][ T5753] Cannot create hsr debugfs directory [ 192.506262][ T5507] Bluetooth: hci5: command 0x0419 tx timeout [ 192.771707][ T5908] loop4: detected capacity change from 0 to 128 [ 192.836418][ T5908] ADFS-fs (loop4): error: can't find an ADFS filesystem on dev loop4. [ 193.039419][ T5240] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 193.172912][ T5753] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 193.193427][ T5753] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 193.264743][ T5753] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 193.312807][ T5740] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 193.334868][ T5753] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 193.436393][ T5740] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 193.479458][ T5240] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 193.484537][ T5740] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 194.110152][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.120485][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.121043][ T5240] usb 1-1: config 0 has no interface number 0 [ 194.133085][ T5240] usb 1-1: config 0 interface 120 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 194.146925][ T5240] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 194.156283][ T5240] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.250435][ T5240] usb 1-1: config 0 descriptor?? [ 194.291486][ T5740] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 194.958159][ T5753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.994602][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.013055][ T5940] loop4: detected capacity change from 0 to 64 [ 195.062101][ T5753] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.163334][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 195.196073][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 195.720160][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 195.768519][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 195.833407][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 195.896291][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.952901][ T4374] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.959984][ T4374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.035208][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.092440][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 196.127254][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 196.146038][ T4892] usb 1-1: USB disconnect, device number 5 [ 196.270152][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 196.536967][ T4374] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.544079][ T4374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.012783][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 197.021912][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 197.030770][ T4374] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.037842][ T4374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.053676][ T5956] loop4: detected capacity change from 0 to 64 [ 197.084511][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 197.106509][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 197.275260][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 197.356425][ T4374] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.363532][ T4374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.988060][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.018570][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.078024][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 198.110550][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 198.169595][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 198.211723][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 199.260721][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 199.330718][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 199.408466][ T5753] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 199.530913][ T5753] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 199.611902][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 199.633465][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 199.709678][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 199.911623][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 200.637851][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.686489][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 200.716277][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 200.765306][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 200.777162][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 200.788710][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 200.806455][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 200.818465][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 200.857723][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 200.898058][ T5740] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 200.945857][ T5740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 200.977078][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 200.996738][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 201.035427][ T6004] tipc: Started in network mode [ 201.040916][ T6004] tipc: Node identity 8664631d0caa, cluster identity 4711 [ 201.065830][ T6004] tipc: Enabled bearer , priority 0 [ 201.108400][ T5999] device syzkaller0 entered promiscuous mode [ 201.970577][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.245551][ T5999] tipc: Resetting bearer [ 202.297330][ T5998] tipc: Resetting bearer [ 202.325454][ T5998] tipc: Disabling bearer [ 202.348641][ T5240] tipc: Node number set to 2328781597 [ 202.414419][ T5753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.428320][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 202.441744][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 202.588166][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 202.626223][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 202.659348][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.404'. [ 202.712089][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.816124][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 203.870351][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 204.026508][ T5740] device veth0_vlan entered promiscuous mode [ 204.480058][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 204.499710][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 204.605728][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 204.624029][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 204.691335][ T5740] device veth1_vlan entered promiscuous mode [ 204.760122][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 204.768924][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 204.799657][ T5740] device veth0_macvtap entered promiscuous mode [ 204.820793][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 204.829852][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 204.842178][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 204.977172][ T5740] device veth1_macvtap entered promiscuous mode [ 205.083295][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.528420][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 205.633176][ T5740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.681372][ T5740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.705693][ T5740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.716400][ T5740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.734074][ T5740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.081158][ T5740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.191038][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.232865][ T6067] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 206.257509][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.286715][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 206.298679][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 206.319953][ T5740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.339331][ T5740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.350638][ T5740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.361126][ T5740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.370959][ T5740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.381405][ T5740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.392477][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.402790][ T5740] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.426046][ T5740] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.435309][ T5740] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.444262][ T5740] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.458288][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 206.471296][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 206.479977][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 206.488706][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 206.499940][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 206.514492][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 206.629156][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.662102][ T5753] device veth0_vlan entered promiscuous mode [ 206.947122][ T5753] device veth1_vlan entered promiscuous mode [ 207.346333][ T5753] device veth0_macvtap entered promiscuous mode [ 207.399584][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 207.430430][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 207.461310][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 207.531730][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.567491][ T5753] device veth1_macvtap entered promiscuous mode [ 207.579459][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 207.789448][ T5753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.915765][ T5753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.089093][ T5753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.230568][ T5753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.327670][ T5753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.355083][ T5753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.373197][ T5753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.383800][ T5753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.394798][ T5753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.490580][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 208.516604][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 208.541906][ T5753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.595717][ T5753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.612073][ T5753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.622627][ T5753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.632565][ T5753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.643212][ T5753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.653077][ T5753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.663561][ T5753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.678708][ T5753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.781255][ T4376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.859995][ T4376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.888273][ T5753] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.974012][ T5753] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.023696][ T5753] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.067629][ T5753] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.267975][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 209.277876][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 209.290378][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 209.365720][ T4893] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 209.448220][ T4374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.469091][ T4374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.647323][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 209.724526][ T4287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.760354][ T4893] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 209.874199][ T4893] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 169, setting to 64 [ 209.885440][ T4893] usb 1-1: config 0 interface 0 has no altsetting 0 [ 210.114874][ T4287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.133788][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 210.172145][ T6126] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input9 [ 210.220060][ T4893] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 210.251892][ T4893] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 210.297390][ T4893] usb 1-1: Product: syz [ 210.331541][ T4893] usb 1-1: Manufacturer: syz [ 210.357085][ T6141] loop2: detected capacity change from 0 to 128 [ 210.357750][ T4893] usb 1-1: SerialNumber: syz [ 210.407799][ T4893] usb 1-1: config 0 descriptor?? [ 210.416251][ T3093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.438193][ T3093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.442378][ T6141] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 210.446644][ T6101] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 210.477700][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 210.485998][ T6141] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 210.568699][ T4893] usb 1-1: selecting invalid altsetting 0 [ 210.659571][ T5243] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 210.726877][ T6153] loop5: detected capacity change from 0 to 512 [ 210.806904][ T6153] EXT4-fs (loop5): Ignoring removed oldalloc option [ 211.528171][ T6101] usb 1-1: selecting invalid altsetting 0 [ 211.557502][ T6153] EXT4-fs (loop5): mounted filesystem without journal. Opts: oldalloc,minixdf,quota,,errors=continue. Quota mode: writeback. [ 211.569424][ T5243] usb 5-1: Using ep0 maxpacket: 32 [ 211.571324][ T6153] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.587623][ T6101] usb 1-1: 0:0: usb_set_interface failed (-22) [ 211.614702][ T6153] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #2: comm syz.5.351: corrupted inode contents [ 211.642920][ T25] audit: type=1326 audit(1780837718.172:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6160 comm="syz.1.435" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc316068e59 code=0x7ffc0000 [ 211.643078][ T6101] usb 1-1: selecting invalid altsetting 0 [ 211.688963][ T6101] usb 1-1: 0:0: usb_set_interface failed (-22) [ 211.700237][ T4884] usb 1-1: USB disconnect, device number 6 [ 211.758969][ T6153] EXT4-fs error (device loop5): ext4_dirty_inode:6077: inode #2: comm syz.5.351: mark_inode_dirty error [ 211.839562][ T25] audit: type=1326 audit(1780837718.172:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6160 comm="syz.1.435" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc316068e59 code=0x7ffc0000 [ 211.844861][ T6153] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #2: comm syz.5.351: corrupted inode contents [ 211.863429][ C1] vkms_vblank_simulate: vblank timer overrun [ 211.882341][ T5243] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 211.916169][ T6153] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #2: comm syz.5.351: mark_inode_dirty error [ 211.922191][ T5243] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.968488][ T5243] usb 5-1: Product: syz [ 211.979277][ T5243] usb 5-1: Manufacturer: syz [ 211.983743][ T6177] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.989469][ T5243] usb 5-1: SerialNumber: syz [ 211.992860][ T6177] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.124918][ T6153] EXT4-fs error (device loop5): ext4_lookup:1855: inode #19: comm syz.5.351: 'file1' linked to parent dir [ 212.160356][ T5243] usb 5-1: config 0 descriptor?? [ 213.273802][ T5243] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 213.286776][ T5243] dvb-usb: bulk message failed: -22 (4/0) [ 213.336251][ T5243] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 213.372965][ T5243] dvb-usb: bulk message failed: -22 (5/0) [ 213.378712][ T5243] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 213.514326][ T5243] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 213.559600][ T5243] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 213.574753][ T5243] usb 5-1: media controller created [ 213.717025][ T6206] loop5: detected capacity change from 0 to 256 [ 213.763504][ T5243] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 213.853865][ T5243] usb 5-1: selecting invalid altsetting 3 [ 213.918080][ T5243] ttusb2: set interface to alts=3 failed [ 214.808784][ T5243] DVB: Unable to find symbol tda10086_attach() [ 214.819604][ T5243] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 214.919433][ T5243] dvb-usb: bulk message failed: -22 (4/0) [ 214.925187][ T5243] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 215.009378][ T5243] dvb-usb: bulk message failed: -22 (5/0) [ 215.015142][ T5243] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 215.096093][ T5243] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 215.176518][ T5243] usb 5-1: USB disconnect, device number 2 [ 215.208947][ T6197] loop4: detected capacity change from 0 to 32768 [ 215.325977][ T5243] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 215.399064][ T9] device hsr_slave_0 left promiscuous mode [ 215.409688][ T25] audit: type=1800 audit(1780837721.942:6): pid=6197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.442" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 215.438947][ T9] device hsr_slave_1 left promiscuous mode [ 215.492528][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.513142][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.524518][ T6228] loop2: detected capacity change from 0 to 512 [ 215.564936][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.576907][ T6231] loop5: detected capacity change from 0 to 1024 [ 215.601804][ T6228] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 215.610657][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.677900][ T9] device bridge_slave_1 left promiscuous mode [ 215.706982][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.764232][ T9] device bridge_slave_0 left promiscuous mode [ 215.771828][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.796768][ T9] device veth1_macvtap left promiscuous mode [ 215.829318][ T9] device veth0_macvtap left promiscuous mode [ 215.835403][ T9] device veth1_vlan left promiscuous mode [ 215.854036][ T9] device veth0_vlan left promiscuous mode [ 216.206464][ T6247] loop4: detected capacity change from 0 to 512 [ 216.401376][ T6247] loop4: detected capacity change from 0 to 128 [ 216.473480][ T6247] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 216.485681][ T6247] hpfs: filesystem error: improperly stopped [ 216.491847][ T6247] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 216.500011][ T6247] hpfs: You really don't want any checks? You are crazy... [ 216.507327][ T6247] hpfs: Code page index out of array [ 216.512806][ T6247] hpfs: code page support is disabled [ 216.522221][ T6247] hpfs: hpfs_map_4sectors(): unaligned read [ 216.530779][ T6247] hpfs: hpfs_map_4sectors(): unaligned read [ 216.536723][ T6247] hpfs: filesystem error: unable to find root dir [ 218.030248][ T9] team0 (unregistering): Port device team_slave_1 removed [ 218.051908][ T9] team0 (unregistering): Port device team_slave_0 removed [ 218.092077][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.131906][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.205080][ T9] bond0 (unregistering): Released all slaves [ 219.569251][ T5243] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 219.749268][ T5242] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 219.949444][ T5243] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 221.028789][ T5243] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.039861][ T5243] usb 5-1: config 0 has no interface number 0 [ 221.045988][ T5243] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 221.056233][ T5243] usb 5-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 221.069585][ T5242] usb 2-1: Using ep0 maxpacket: 8 [ 221.954027][ T5242] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 221.972428][ T5242] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.021495][ T5242] pvrusb2: Hardware description: Terratec Grabster AV400 [ 222.029105][ T5242] pvrusb2: ********** [ 222.049529][ T5243] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 222.078365][ T5242] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 222.093567][ T5243] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.134976][ T6306] loop2: detected capacity change from 0 to 2048 [ 222.144752][ T5243] usb 5-1: Product: syz [ 222.163199][ T5242] pvrusb2: Important functionality might not be entirely working. [ 222.725665][ T6306] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 223.770925][ T5243] usb 5-1: config 0 descriptor?? [ 224.078488][ T5242] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 224.842063][ T5243] usb 5-1: can't set config #0, error -71 [ 225.110010][ T5243] usb 5-1: USB disconnect, device number 3 [ 225.117257][ T5242] pvrusb2: ********** [ 225.142585][ T2421] pvrusb2: Invalid write control endpoint [ 225.150190][ T5242] usb 2-1: USB disconnect, device number 7 [ 225.238213][ T6329] loop2: detected capacity change from 0 to 256 [ 225.288776][ T6327] capability: warning: `syz.4.479' uses deprecated v2 capabilities in a way that may be insecure [ 225.323857][ T6329] FAT-fs (loop2): Directory bread(block 64) failed [ 225.330562][ T6329] FAT-fs (loop2): Directory bread(block 65) failed [ 225.337171][ T6329] FAT-fs (loop2): Directory bread(block 66) failed [ 225.343757][ T6329] FAT-fs (loop2): Directory bread(block 67) failed [ 225.350360][ T6329] FAT-fs (loop2): Directory bread(block 68) failed [ 225.356887][ T6329] FAT-fs (loop2): Directory bread(block 69) failed [ 225.363490][ T6329] FAT-fs (loop2): Directory bread(block 70) failed [ 225.370053][ T6329] FAT-fs (loop2): Directory bread(block 71) failed [ 225.376592][ T6329] FAT-fs (loop2): Directory bread(block 72) failed [ 225.383138][ T6329] FAT-fs (loop2): Directory bread(block 73) failed [ 225.492536][ T2421] pvrusb2: Invalid write control endpoint [ 225.498422][ T2421] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 225.509817][ T2421] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 225.518183][ T2421] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 225.706203][ T2421] pvrusb2: Device being rendered inoperable [ 225.765521][ T2421] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 225.786990][ T2421] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 227.081780][ T2421] pvrusb2: Attached sub-driver cx25840 [ 227.087510][ T2421] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 227.246773][ T6347] netlink: 'syz.1.480': attribute type 10 has an invalid length. [ 227.257006][ T2421] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 228.252689][ T6347] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 230.466186][ T6391] overlayfs: failed to resolve './file0': -2 [ 234.675202][ T25] audit: type=1804 audit(1780837741.202:7): pid=6425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.500" name="bus" dev="ramfs" ino=40386 res=1 errno=0 [ 235.993686][ T6426] loop1: detected capacity change from 0 to 512 [ 236.015918][ T25] audit: type=1804 audit(1780837741.232:8): pid=6425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.500" name="bus" dev="ramfs" ino=40386 res=1 errno=0 [ 236.172133][ T6426] EXT4-fs (loop1): Unrecognized mount option "fsuuid=1?fb74cf-4b0c-da" or missing value [ 236.308125][ T6437] [ 236.335506][ T6437] ============================= [ 236.362091][ T6437] WARNING: suspicious RCU usage [ 236.389343][ T6437] syzkaller #0 Not tainted [ 236.415414][ T6437] ----------------------------- [ 236.466409][ T6437] include/linux/rhashtable.h:594 suspicious rcu_dereference_check() usage! [ 236.611592][ T6437] [ 236.611592][ T6437] other info that might help us debug this: [ 236.611592][ T6437] [ 237.028342][ T6437] [ 237.028342][ T6437] rcu_scheduler_active = 2, debug_locks = 1 [ 237.052590][ T6437] 1 lock held by syz.5.503/6437: [ 237.068379][ T6437] #0: ffffffff8d43e4c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250 [ 237.108293][ T6437] [ 237.108293][ T6437] stack backtrace: [ 237.136086][ T6437] CPU: 0 PID: 6437 Comm: syz.5.503 Not tainted syzkaller #0 [ 237.143405][ T6437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 237.153476][ T6437] Call Trace: [ 237.156759][ T6437] [ 237.159704][ T6437] dump_stack_lvl+0x188/0x250 [ 237.164390][ T6437] ? load_image+0x400/0x400 [ 237.168905][ T6437] ? show_regs_print_info+0x20/0x20 [ 237.174122][ T6437] ? lockdep_rcu_suspicious+0x110/0x180 [ 237.179674][ T6437] ? local_bh_enable+0x20/0x20 [ 237.184463][ T6437] rhltable_lookup+0x7a9/0x7c0 [ 237.189244][ T6437] ? local_bh_enable+0x20/0x20 [ 237.194017][ T6437] ? mr_mfc_find_parent+0x190/0x190 [ 237.199204][ T6437] ? mark_lock+0x94/0x320 [ 237.203524][ T6437] ? local_bh_enable+0x20/0x20 [ 237.208273][ T6437] ? mark_lock+0x94/0x320 [ 237.212596][ T6437] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 237.218560][ T6437] ? lock_chain_count+0x20/0x20 [ 237.223396][ T6437] mr_mfc_find_any_parent+0xb6/0x1e0 [ 237.228668][ T6437] ? local_bh_enable+0x20/0x20 [ 237.233415][ T6437] ip_mr_forward+0x24c/0xf90 [ 237.237992][ T6437] ipmr_mfc_add+0x23cc/0x2d40 [ 237.242705][ T6437] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 237.247628][ T6437] ? __lock_acquire+0x7d10/0x7d10 [ 237.252644][ T6437] ip_mroute_setsockopt+0xeaf/0x1250 [ 237.257917][ T6437] ? ipmr_rule_default+0x70/0x70 [ 237.262842][ T6437] ? __might_sleep+0xf0/0xf0 [ 237.267414][ T6437] ip_setsockopt+0x568/0x3130 [ 237.272076][ T6437] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 237.277428][ T6437] ? aa_sk_perm+0x7dc/0x910 [ 237.281914][ T6437] ? aa_af_perm+0x340/0x340 [ 237.286416][ T6437] ? __fget_files+0x40f/0x480 [ 237.291078][ T6437] ? aa_sock_opt_perm+0x74/0x100 [ 237.296012][ T6437] ? sock_common_setsockopt+0x32/0xb0 [ 237.301365][ T6437] ? raw_setsockopt+0xc5/0x180 [ 237.306107][ T6437] ? sock_common_recvmsg+0x1c0/0x1c0 [ 237.311371][ T6437] __sys_setsockopt+0x2bf/0x3d0 [ 237.316206][ T6437] __x64_sys_setsockopt+0xb1/0xc0 [ 237.321210][ T6437] do_syscall_64+0x4c/0xa0 [ 237.325603][ T6437] ? clear_bhb_loop+0x30/0x80 [ 237.330259][ T6437] ? clear_bhb_loop+0x30/0x80 [ 237.334916][ T6437] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 237.340799][ T6437] RIP: 0033:0x7f527343fe59 [ 237.345206][ T6437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.364796][ T6437] RSP: 002b:00007f5271699028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 237.373190][ T6437] RAX: ffffffffffffffda RBX: 00007f52736b8fa0 RCX: 00007f527343fe59 [ 237.381141][ T6437] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 237.389094][ T6437] RBP: 00007f52734d5d6f R08: 000000000000003c R09: 0000000000000000 [ 237.397057][ T6437] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 237.405009][ T6437] R13: 00007f52736b9038 R14: 00007f52736b8fa0 R15: 00007ffd0b420368 [ 237.412984][ T6437] [ 238.287154][ T6437] [ 238.295151][ T6437] ============================= [ 238.302673][ T6437] WARNING: suspicious RCU usage [ 238.314976][ T6437] syzkaller #0 Not tainted [ 238.320696][ T6437] ----------------------------- [ 238.333482][ T6437] include/linux/rhashtable.h:369 suspicious rcu_dereference_check() usage! [ 238.349309][ T6437] [ 238.349309][ T6437] other info that might help us debug this: [ 238.349309][ T6437] [ 238.359649][ T6437] [ 238.359649][ T6437] rcu_scheduler_active = 2, debug_locks = 1 [ 238.368867][ T6437] 1 lock held by syz.5.503/6437: [ 238.375288][ T6437] #0: ffffffff8d43e4c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250 [ 238.389445][ T6437] [ 238.389445][ T6437] stack backtrace: [ 238.396359][ T6437] CPU: 1 PID: 6437 Comm: syz.5.503 Not tainted syzkaller #0 [ 238.403654][ T6437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 238.413714][ T6437] Call Trace: [ 238.416994][ T6437] [ 238.419930][ T6437] dump_stack_lvl+0x188/0x250 [ 238.424616][ T6437] ? load_image+0x400/0x400 [ 238.429129][ T6437] ? show_regs_print_info+0x20/0x20 [ 238.434347][ T6437] ? lockdep_rcu_suspicious+0x110/0x180 [ 238.439907][ T6437] ? local_bh_enable+0x20/0x20 [ 238.444683][ T6437] rhltable_lookup+0x52a/0x7c0 [ 238.449458][ T6437] ? local_bh_enable+0x20/0x20 [ 238.454234][ T6437] ? mr_mfc_find_parent+0x190/0x190 [ 238.459444][ T6437] ? mark_lock+0x94/0x320 [ 238.463780][ T6437] ? local_bh_enable+0x20/0x20 [ 238.468555][ T6437] ? mark_lock+0x94/0x320 [ 238.472890][ T6437] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 238.478881][ T6437] ? lock_chain_count+0x20/0x20 [ 238.483750][ T6437] mr_mfc_find_any_parent+0xb6/0x1e0 [ 238.489060][ T6437] ? local_bh_enable+0x20/0x20 [ 238.493837][ T6437] ip_mr_forward+0x24c/0xf90 [ 238.498452][ T6437] ipmr_mfc_add+0x23cc/0x2d40 [ 238.503174][ T6437] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 238.508119][ T6437] ? __lock_acquire+0x7d10/0x7d10 [ 238.513176][ T6437] ip_mroute_setsockopt+0xeaf/0x1250 [ 238.518472][ T6437] ? ipmr_rule_default+0x70/0x70 [ 238.523403][ T6437] ? __might_sleep+0xf0/0xf0 [ 238.527979][ T6437] ip_setsockopt+0x568/0x3130 [ 238.532670][ T6437] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 238.538027][ T6437] ? aa_sk_perm+0x7dc/0x910 [ 238.542524][ T6437] ? aa_af_perm+0x340/0x340 [ 238.547005][ T6437] ? __fget_files+0x40f/0x480 [ 238.551667][ T6437] ? aa_sock_opt_perm+0x74/0x100 [ 238.556588][ T6437] ? sock_common_setsockopt+0x32/0xb0 [ 238.561943][ T6437] ? raw_setsockopt+0xc5/0x180 [ 238.566693][ T6437] ? sock_common_recvmsg+0x1c0/0x1c0 [ 238.571994][ T6437] __sys_setsockopt+0x2bf/0x3d0 [ 238.576852][ T6437] __x64_sys_setsockopt+0xb1/0xc0 [ 238.581897][ T6437] do_syscall_64+0x4c/0xa0 [ 238.586336][ T6437] ? clear_bhb_loop+0x30/0x80 [ 238.591013][ T6437] ? clear_bhb_loop+0x30/0x80 [ 238.595674][ T6437] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 238.601550][ T6437] RIP: 0033:0x7f527343fe59 [ 238.605945][ T6437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.625532][ T6437] RSP: 002b:00007f5271699028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 238.633926][ T6437] RAX: ffffffffffffffda RBX: 00007f52736b8fa0 RCX: 00007f527343fe59 [ 238.641879][ T6437] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 238.649861][ T6437] RBP: 00007f52734d5d6f R08: 000000000000003c R09: 0000000000000000 [ 238.657829][ T6437] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 238.665830][ T6437] R13: 00007f52736b9038 R14: 00007f52736b8fa0 R15: 00007ffd0b420368 [ 238.673810][ T6437] [ 238.680779][ T6437] [ 238.684079][ T6437] ============================= [ 238.688934][ T6437] WARNING: suspicious RCU usage [ 238.695141][ T6437] syzkaller #0 Not tainted [ 238.700280][ T6437] ----------------------------- [ 238.706162][ T6437] include/linux/rhashtable.h:614 suspicious rcu_dereference_check() usage! [ 238.717021][ T6437] [ 238.717021][ T6437] other info that might help us debug this: [ 238.717021][ T6437] [ 238.730341][ T6437] [ 238.730341][ T6437] rcu_scheduler_active = 2, debug_locks = 1 [ 238.738873][ T6437] 1 lock held by syz.5.503/6437: [ 238.746700][ T6437] #0: ffffffff8d43e4c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250 [ 238.763296][ T6437] [ 238.763296][ T6437] stack backtrace: [ 238.771049][ T6437] CPU: 1 PID: 6437 Comm: syz.5.503 Not tainted syzkaller #0 [ 238.778354][ T6437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 238.788432][ T6437] Call Trace: [ 238.791710][ T6437] [ 238.794648][ T6437] dump_stack_lvl+0x188/0x250 [ 238.799342][ T6437] ? load_image+0x400/0x400 [ 238.803847][ T6437] ? show_regs_print_info+0x20/0x20 [ 238.809058][ T6437] ? lockdep_rcu_suspicious+0x110/0x180 [ 238.814609][ T6437] ? local_bh_enable+0x20/0x20 [ 238.819394][ T6437] rhltable_lookup+0x61e/0x7c0 [ 238.824161][ T6437] ? local_bh_enable+0x20/0x20 [ 238.828922][ T6437] ? mr_mfc_find_parent+0x190/0x190 [ 238.834102][ T6437] ? mark_lock+0x94/0x320 [ 238.838420][ T6437] ? local_bh_enable+0x20/0x20 [ 238.843182][ T6437] ? mark_lock+0x94/0x320 [ 238.847519][ T6437] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 238.853511][ T6437] ? lock_chain_count+0x20/0x20 [ 238.858347][ T6437] mr_mfc_find_any_parent+0xb6/0x1e0 [ 238.863622][ T6437] ? local_bh_enable+0x20/0x20 [ 238.868369][ T6437] ip_mr_forward+0x24c/0xf90 [ 238.872946][ T6437] ipmr_mfc_add+0x23cc/0x2d40 [ 238.877615][ T6437] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 238.882535][ T6437] ? __lock_acquire+0x7d10/0x7d10 [ 238.887551][ T6437] ip_mroute_setsockopt+0xeaf/0x1250 [ 238.892827][ T6437] ? ipmr_rule_default+0x70/0x70 [ 238.897755][ T6437] ? __might_sleep+0xf0/0xf0 [ 238.902341][ T6437] ip_setsockopt+0x568/0x3130 [ 238.907009][ T6437] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 238.912361][ T6437] ? aa_sk_perm+0x7dc/0x910 [ 238.916859][ T6437] ? aa_af_perm+0x340/0x340 [ 238.921351][ T6437] ? __fget_files+0x40f/0x480 [ 238.926013][ T6437] ? aa_sock_opt_perm+0x74/0x100 [ 238.930961][ T6437] ? sock_common_setsockopt+0x32/0xb0 [ 238.936315][ T6437] ? raw_setsockopt+0xc5/0x180 [ 238.941059][ T6437] ? sock_common_recvmsg+0x1c0/0x1c0 [ 238.946325][ T6437] __sys_setsockopt+0x2bf/0x3d0 [ 238.951166][ T6437] __x64_sys_setsockopt+0xb1/0xc0 [ 238.956177][ T6437] do_syscall_64+0x4c/0xa0 [ 238.960574][ T6437] ? clear_bhb_loop+0x30/0x80 [ 238.965235][ T6437] ? clear_bhb_loop+0x30/0x80 [ 238.969897][ T6437] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 238.975800][ T6437] RIP: 0033:0x7f527343fe59 [ 238.980216][ T6437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.999809][ T6437] RSP: 002b:00007f5271699028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 239.008212][ T6437] RAX: ffffffffffffffda RBX: 00007f52736b8fa0 RCX: 00007f527343fe59 [ 239.016168][ T6437] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 239.024131][ T6437] RBP: 00007f52734d5d6f R08: 000000000000003c R09: 0000000000000000 [ 239.032099][ T6437] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 239.040060][ T6437] R13: 00007f52736b9038 R14: 00007f52736b8fa0 R15: 00007ffd0b420368 [ 239.048080][ T6437]