last executing test programs: 20.956267518s ago: executing program 3 (id=133): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r0, 0x402, 0x40000002) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 20.91365675s ago: executing program 3 (id=134): syz_mount_image$hfsplus(&(0x7f0000000340), &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, &(0x7f0000000000)=ANY=[], 0x1, 0x6eb, &(0x7f0000001240)="$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") open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x108) mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, 0x1) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xcc48, 0x0) 20.574448211s ago: executing program 3 (id=136): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f00000001c0)={0xbe, 0x0, 0x1}) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x4b564d02}]}) 20.184178464s ago: executing program 3 (id=140): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80), 0xde, 0x558, &(0x7f0000000c00)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x101000, 0x80) 19.675446964s ago: executing program 3 (id=145): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x20000800) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0xc0, r1, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x5e, 0xe, {{{}, {}, @device_b, @device_b, @from_mac}, 0x40, @random=0x4, 0x562, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @val={0x3c, 0x4, {0x1, 0x7, 0x3c, 0x2}}, @val={0x2d, 0x1a, {0x800, 0x1, 0x4, 0x0, {0x6, 0xbaa, 0x0, 0x6, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x6, 0x3, 0x2}}, @void, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x2, 0xf0, 0x8}}, @void}}, @NL80211_ATTR_BEACON_TAIL={0x29, 0xf, [@ht={0x2d, 0x1a, {0x1000, 0x3, 0x7, 0x0, {0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x300, 0x6, 0x8}}, @tim={0x5, 0x3, {0xff, 0xac, 0x6c}}, @supported_rates={0x1, 0x2, [{0x48}, {0x12}]}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xc0}}, 0x0) 19.018706523s ago: executing program 3 (id=151): syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r0 = socket$inet(0x2, 0x6, 0x0) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000400), 0x6, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 18.269568857s ago: executing program 32 (id=151): syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r0 = socket$inet(0x2, 0x6, 0x0) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000400), 0x6, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 5.030890092s ago: executing program 1 (id=230): syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000180)='./file1\x00', 0x1004000, &(0x7f0000000500)={[{@lastblock}, {@undelete}, {@undelete}, {@longad}, {@unhide}, {@uid_forget}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uid_forget}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@dmode={'dmode', 0x3d, 0xffffffff80000001}}, {@nostrict}, {@session}, {@partition={'partition', 0x3d, 0x6}}]}, 0x1, 0xc34, &(0x7f0000001bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) openat(r0, &(0x7f00000000c0)='.\x00', 0x515401, 0x408) 4.539231151s ago: executing program 1 (id=233): syz_mount_image$romfs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00d0867e65d443152ee691a70d225b73c01164645c70ff689f607da7a169dbbfebbeb349b043f54d088bcd11a44f2074aa41532279b5718bc4d89fe5010d6bf465008743337cddaefbc0f0293d06483bec82e15366358709c5d5c0049ff9dcb7ea7e855e3c24bc3b4173720476fb379ce25c0ea42027ba6a7d"], 0x1, 0x13a, &(0x7f0000000280)="$eJzs2r9Kw1AUBvCjFoQ+glOhAauQ/1oHd0Fw8gkMbZIGb7wlEaSdiquD4nAdHV3dRDcfIbNPoC9xJW1q7b2zGvD7Lfej53J6s5zpmBlP3Sg3ibYmt8fvqxlPW11/rxe5UUAzh0TUKkMh5Z1FmpOveiEnlnah/VKdnVgcPUcJCz29BwAAAAAAAAAAAAAAAAAAAADAP9H+qEJzIPhDlLDQ/VbNR+PTgLEwy+e/GFTt6ND2Pd8v7/tL/ToNImO6v5OIg8uy7izVjXmnzYHgK+r/2efp0M5HYzNJgziMwzPP87vOjuPseva0l612NG6qN1Ehn4b6PpHxuNgnenP0fSJqzo7GRiKuL9Tui+9H+KlwRbV4hhrkWi2egVDPoM4P6q/77ddyflg9zvq/OD+0iQbwRz4DAAD//05cOC0=") munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents(r0, &(0x7f0000000040)=""/61, 0x3d) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 4.156688504s ago: executing program 2 (id=237): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 3.864230411s ago: executing program 1 (id=238): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x80000001, 0x4020, 0x6, 0x9, 0xf1, 0x6, 0x0, 0x0, 0x80, 0x4}}, 0x50) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"dc5d3b0169633d3eba3eabbc09167be55101d4af4b22a373236464d2dbfaa84399b77bd438a54364a7ebc5bdaab4f9decb7c044318cd59a0af8279bcab35dd7daf7a0ceb381df2c32eff45b13e2c8f40e1895355bf6f165200cb1ca41a155730ee2e9f83183f9fafe029d0401b0770618254a8b2dc87b630072b1e2de160d1afed51b74c14b71ec1b226a324482d14ad586b1a4ce80e458fe45244c01eddeddf3564af838d6d5324f8a77023d6eb7aa14397a0e1413ea1c3dfdf063a35b709e627f36fe403ee3117365be5017682f53595f28543062c740a94a794312f5cebc315044b8ea000a5d0f27812ab0ce149d11e6f6f7620c5f3e250bf67d13a1ca39dbb7b8b5a31e3d7ba7ebe5849a7a09b61fc9f2cfc54b89e9cd0105bca49483ce55e0187ce2ad692a18219d881057c838587b915337169ee054655f26a04df913a658fccbf4def6aad750ca4796b74d322c67e9d4ee6a530a22dcc35db850b424d6ec9f62495b9f9fd2b000feadd57d26dbd505798c208d91eb0aab0fd97537631b8bf81ce0e2241c4272be4ff69b390e4485d574146b76d1fdbf7fc5334906805534cdae1e47240af7761a18fc8bd0a694be47529da98bc0f98eb7db3fc4a74cbb6e486f4de90fbf2452e72c2e1dca44543ad9ad094b8bc861eef1e814662d0b350339e3a510d459c6f83aabd5fd3dcb38224056d761e7df9b482b9905f1e2135c1929be328ecdb69c007a3efd548502c83106f6df1ab1178fac499eda92ad4373155227ec2df150c919d322ecb3ea37e659285f18a3e2f79b59900ca438df3a1381380a12d3ad7678e0a8d3bdfb40651389b4ac8c66138d442d70eafdc2df8b080028006b124e4ebe0d9883ef100f1934e42794146382c1d628fd2ebe5859b6c243824903d056d800975675bb1913142adbc039a9c68c2f146a0e8903447313f5e5549905f397a9b1f21a93b80c4d04a8ea7a29a50fbc5407a9305bba420edf898ea678d6879489c39692c99bb6dacf61f5f97637b94c1031d635b5423b38b9196fafaaf87b2796eadc21466af5a10281e6a808748969d29efb444c99a4cb2111732a792dbca4376a125a68f7cdac065cc6173dc21caafba48c742d9a7df2f771ff2f5725b22c247d4e0c6106f9f5f6929b69929ab37e9a9b326ce618bb702b883b12026f1300f21f2c7440cac8c5f1210a78aa067211d2827f5dcc7578252c2ccc3f67bab9d1bb6939b21b550788ef550acfed4bf50c0b4fb3ca4d2872ee64f95d611a317d9daaf373a10d868680b2226396c95fa2b0ab4d6fce06c3b42cb97d17a7b5089061537fdeb1a53040869f7befca330358fdba86754fc2e46c2113e1484cb37534af8f0408a7ee313778dab49f08229964298f847ea66c4ec319f64b6a12da585bc59e82e0263c507b397d3efee3b4066f4d25566aa1549f6185f6375f84b65fa8945148b90430c86a5b6fdf58d5c812b98d9dc621fd9a3d9f1a577495356516d1cbcf5e8bb8923b54b247225b9c3892b18a9e137f3620c734052af9dc8f1ea36f0d4592d5ee32e35676a84dc891f97456f2ac3a4ab58a42bcdc221a4ac8bb28d428add2fcbe5b110a8afd5d23b31e827bd16167b2d88cae024afc04a722ac0b4d45c52512e6b6f102aac4be21bc89ce246539048370553665b0a4336a6db99d0d19399be6437bf21419304331b4342b2c1db580f0c9bf681fdb8e9fa3e025454197bbc82ef93ee2f385660818ec5127080675a8013766469afe3b1e36e81bf2f04c3a26eaf4517551e734d21ba3bc90e48aea0891792970c39f3f528397e9b7ae190f1760fe5960dc763ee0a17939c60bfcac0a8914be82c749e4fe85d1ac5fa733413468fb8941085e8c4d6e0b6d1e62e20da58440facd640ddbb6c1f694b3ca48757a34c5a11668368711a1d4f3a81d31ac30d71277d7ae77882b6841cfa6289e6cce84a3ad57eeb328f831888ac7d3cfcd3a472a48d903f20cec8c8ae8d0bea04ebf7413ef7693f8ed876e49bd5f89d7e1078208ff62712e330fc0341b9ccf26845578d44b1e0c66d1bebc14742baedfabb8e9a2c8f42730360c72997efe0ce786ff330c2eb6e0ff20896f813c2a515ce76f826c11a1c1588eb369231ddeb4a2f9f9591ecdecc74d20aeb50047beb3ab89a9e4e1b805a20b645c79d0bc5d0247fab8ba46a97a07630b1f1cb69b42b568af746733d2c581f057873d64fe6e659b00b4a26745f5fba1fe7406a86b007936c7cfdac53a4c5b0ea9f6604863c8e3f174eddbb09175f6e13cda9a860cf400ef9ed02b895502ac6e6de6a658249c3c6e8a653517eae2231e56e0f120547923c6549ebc1ed14c623637ce3d96af5c93a32e58e2d9659d8b5b145888b52d9a5b5cb3cdf594eb137bcef2ba068cfd2c6ccf7ab6e5b4ec55e9197bfb91c9b8729f7b50cf0b0326f7ea3e712c77674d48545ca2a86744c3c38f149d69cf811beacf7e5f49c7bfba20f1dcf3d7bc0b9c796016820a46495d244c9606a06fe2e14233eda78d69ae4523ad7b708b0c7ead44d7fd376fed60e3cc2ee25e9600adfbe87ac7c8fb8269aec9459602af0f420becda6120ce7d9626c65ae7f860639e8bf664eb4301ec18add0e436c0356c12ab6b4ca35da2b43c4a8c239fd0b59a2ce94843cdfa1667053165053633b062844dbb0d00070fde74fa3178eb5f1f5fd02e2088d8690379f39ab22c080cdcb29d700bac74fabd8a356fe99afe83a5d99aa5024e9158a299eda6c99b6701e64f1d68e7e2c0c6e88396bb535a02d0948f0a250a6e090041c96d9c9acd6134d44d516fd1010c39e572b86b05bb1326a2a4f23f11181186f9c2a01dc7b58c0129f4b851ca9b1e3dc35db7364e29ef646211796b1651511e041345abce427fa5d6e48b8fb078c8432061a4cc518a8f2a2caf709a5c1473a62112a6650afc64eec12f8f9c08cff1b6fbf7a1209fc8661f62303b7c5d49c1d0b32a9f37e81ed9ab6193816d40995ed49c10b9f5752e04d57535a3d16f06c65d32846c31ec9787ec4a965679eb804e86b45d007f38d8104550770dc6f313bc846e43a14a8c21d0628c744e3e83cb998d1b7acfe996541a8c03852dadf9326444c582b481cae844e4f3fe3d638903b38f24633b63adbad841ac6c4c1169d781a0e271e8a967b1c7e986fcb3a66168e86e3559a44fcfa92452260491da9397659af60453f4cd4be2d15439445ec2b4366a79d3283da912d9d499df1242bd174edc235848caa21d2c997aff0e95c7e5cc0803c90fab84e7be7b37909d0e2f3bc9974e3388acb6800baba183ecc8eea8c71c0d65d669e41f99ceae523b7a6b772f3b8ebba1d2127ccc3ddb7ddcb4ec73cbdc26fc87c3848e258a0b5484d3a13e40ec4e4a65dd92f09e9fe1e3e2f8b96c4e363aa3683860dee62dfcf8823ee4a3593a092e0bd9c4cedacf44a272faa164447b01f46a7795642a40c61b0034a37f0e9b792428a0ddcd144fe8263088eaac8016f8f1cd30b55ac90a8f10d785b7570dd9e639a4a068d3fe98a420b9f72e79de817f676c2a224300d749571ad43f49d1fbe838f4566bc7b5f104c384ad87189213152b644d9fcbdf98bafeee569d640ce9045779f1d90024c023a7480a358dee276fba139c14b4fdb12885240903d0e61dc161659a68f62c92b899007e0f2b65bf0a069e9e57c9b6ae50a3b30dd1003fb0eead73ae2f6010b3b356b4060579a4f29935e1f00c01d12e5f44e8e3163d81dfef7ca8560604240c7e96e4454c6971614df306c768121abb3f628e3f1d2d026f58d1087334c5bdb74d7c949b0ee66a4531ba4e9b922aee3d0f802ed034734507a5913c52966f1f8bd4577840de0253aabc23299dced2a299859c07af9fb0f9c29b6533b9d84d471390d59ab315f5ddb226f6b8dd7889295f0fb1f7bd1adafe4cc520a1e84bf2a59d5b9795aeafc8d6fd66a8228aba8653b98622617ddfeb5d6795c9bd2f35d4a0c386e862675a50e3314c3fbb17aca151c13c7fc8b1d1b72ed0a958537b5ddc9e74bddc2b9571ec3f2b7775b125338d4852a75a63941564c65bb36dfb6bea4aab1ae7a4f285c2177aa98406eb2cc10934aa92d5a9612d4455c84ad200841d289b5c2d5deab0d8e2459598ef183d3dc47f6bad0b9513710600cfa4d69fcd5763cdcc4f2c2b7cd7d4491fd52f4aec82ce846c0988f6f0123e21e900d39c61085e68c9badc350b44004f6c042d64b0d0cbf91ad0592b198f1eeea1e52200bc8e6d62848d6884b10bdde72466039da488be6b340c23148f666f2fe6e032c07dac43586df182aca9116f4600313fa8375c76337ba86bdc391dae6450218f58f047ced64befc6bb5c2a60024669630a6279fedf2fe45e7e19ce582ad96ae0d023eb9b39f5f1e666e73bb038ae38157275be5eb3e7cbc8b05adf53e817646bdc2cfce98e5d162bf7faaca787db8717ab8b27b9e35609c5fb9fe9def07f010df8b43cf5c96851eadfdeff0b7bc5826e7e15490ae9c3d14166ee81bef007070e7981235a673804ad89943ee6b51ac63364f7870e121e6ff23a0c7d179527cd58dd7a4ca37247c2bd9efc79b720bb1ee2d39862e98cb81e93cf5b48d5d02ee8ac737ab504c867a1c49e678300803c94fbe978dea918a1e71b9791ee1e4d30056e86c26a4675a8b090be2365c0b451a13ece52a89a7057fe2052e11c6666eb916d823ea66bf217c320acba3b714910734b2d27c2fa586bd7f7664b0d1422adabad2ce2afc10270057f11940fac1a51d023ce48bd04ea39b7f99381b239fd0ddeea0dce7863ec1f8f61775013b6414ecf86e686a340a3148f87a9d7d60a1f2da53436d16fc88d6a4e7c3d55e0dd004cbecc15a5558eb705d82aacb1862ddc251dd5d9cbf1d78f97900ce6e8dab0ea678cb823bd1e7bbd1e927841af08f5427878c19f4f322228f9b36287fc13e7c1293ea875ae73815e052d6c2ebc40df8f7b9d1f76e0b10e35aa160944983d8e6b790df0d9b13f3460657336d81f7d83c0350324b930ec9c7557ce12887f76372e126f504b0980fea27f31a780c05187b9b5353dafc6b101543b24332b96e15bc26b19062e52fa9f86d260ee3a3bc92a133e328407bb85357ee5c45cb87228f44888b14941b5911b050e9319fe88033f830a8490917a9c0572ebbc5492b4e1083a2e3d77215a34abef947b5b9a950e780662de18873e55899c92db3ad3d437e8407890afa6b0c04ef861b8bc85fbbe1bb67b3d9ef001409f84b8ec4f01d861cecc143a805b981ab5cf5b605057b63cb2c84ec358e510a69cd8c33a8a62fe4680d0c980145cc709157832bfaef261cb0466c237376ca2944ce9affffd4b1dc7cc9511da0b34bffb9ac216fb8cf7c6572d95627787720d1ba67c6512fcdb16f6329e9668681c404efebad559f81f05971b5efb6b4cca97ad0346753cc0a40a877242d8a808c602b03dc962cee38e646cb18abb079c70d357c30738a70f55cd3c5956a83a1bfcd6649dd765f16bfe968066345df7380bbc0c16b3b5af513d6458c791343952f33a051c5d711c1f35af1b47f3db9bbfb5c7c636b3a2b52805d606479879be0b404a28ade5649a3185e0f85a85fc15cd824671c2befdd0da509597c87d869f0bd7ad163ad93ca28fc0c4025eccaafe385ec3fc06c54ebcd7b07b6c7e0197c5b9ef886159a1585ae45248f865be760db6f5bc8f868fc6aefd04e34ecb51159e4cdcc2214b42b1ca9caec13ba3e1b2e7a3c736977b226213d265c2873195122a9b448088c8b50edd549be41c38ab176807b75e7267f86e4", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) 2.991730173s ago: executing program 1 (id=241): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x52}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x8}]}, 0x2c}}, 0x0) 2.794317264s ago: executing program 5 (id=153): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aaaa"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 2.793238775s ago: executing program 4 (id=242): connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e21, 0x9, @remote, 0x3}, 0x1c) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) 2.752895747s ago: executing program 1 (id=243): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "9c21ae2a"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000180)={0x20, 0x16, 0x4, "37d11131"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.548311219s ago: executing program 0 (id=244): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x45, &(0x7f00000003c0)=0x401, 0x4) 2.53442376s ago: executing program 5 (id=245): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r0, &(0x7f0000000780)}, 0x20) 2.350912161s ago: executing program 0 (id=246): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r1, 0x6, 0x20}, &(0x7f00000000c0)=0xc) 2.216174199s ago: executing program 5 (id=247): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1509, &(0x7f0000001c40)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x65) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) preadv2(r0, &(0x7f0000000d80)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x1, 0x0, 0x0, 0x1b) 2.134246613s ago: executing program 4 (id=248): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000500)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa00004, &(0x7f0000000040)={[{@gid_ignore}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@utf8}, {@uid}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@mode={'mode', 0x3d, 0x8}}, {@gid_ignore}, {@longad}, {@gid_ignore}, {@uid_ignore}, {@uid_forget}, {@uid}]}, 0x1, 0xc67, &(0x7f0000001dc0)="$eJzs3U9sHNd9B/DfG5LiSm5rJk4VJ42DTVuksmK5+hdTtgp3VdNsA8iyEIq5BeBKpNSFKZIgqUY23JbppYceAhRFDzkRaIUCKRoYTRH0yLQukFx8KHLqiWhhIyh6YIsAAVoEW8zsW3FFkZYskiIlfz429d2deW/mvZnxjCzozQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOJ3Xj13/ETaZEXfHjQGAHgoLox99fjJzZ7/AMBj69JW//8PAAAAAAAAAAAAAADsFymKeCpSzF1YSxPV947a+dbAjZvjI6ObVzuYqpp9Vfnyp3bi5KnTX35h+Ew3z7dmPqT+TvtsvD526Vz9ldnrc/NTCwtTk/XxmdaV2cmp+97CdutvdLQ6APXrb9yYvHp1oX7y+VN3rL459MHgE4eHzg4/e+yZbtnxkdHRsfUitd7y/Q/ckI6tRngciCKORYrnvvuT1IyIIrZ/LGoP99xvdLDqxNGqE+Mjo1VHplvNmcVy5cXugSgi6j2VGt1jtPm5iP6Bh9qHrTUilsrmlw0+WnZvbK4537w8PVW/2JxfbC22Zmcupk5ry/7Uo4gzKWI5IlYH797cQBTRHym+/eRaupzf+lEdhy9VA4O3bkexi328D2U76wMRy8UjcM72scEo4rVI8dN3j8SVfJ+p7jVfjHitzO9H3Crz5YhUXhinI97f5Dri0dQfRfxZef7PrqXJ6n7Qva+c/1r9KzNXZ3vKdu8rH/H5cNedYo+eDwc35MOxz+9NtSiiWd3x19KD/2YHAAAAAAAAAAAAAAAAgJ12MIr4TKR49V//oBpXHNW49CfPDv/u0C/2jhl/+h7bKcs+HxFLxf2NyT2QBwZeTBdT2uOxxB9ntSjiD/P4v2/udWMAAAAAAAAAAAAAAAAAAAA+1or4caR46b0jaTl65xRvzVyrX2penu7MCtud+7c7Z3q73W7XUycbOSdyLuVczrmSczVnFLl+zkbOiZxLOZdzruRczRl9uX7ORs6JnEs5l3Ou5FzNGf25fs5GzomcSzmXc67kXM0Z+2TuXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAx0kRRfw8UnzrG2spUkQ0IiaikyuDe906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA0mIr4XqSo/17j9rL+iEjVvx1Hyl9OR+NAmZ+MxnCZL0fjXM5mlf2Nb+5B+9megVTEjyLFYO2d2yc8n/+Bzrfbl0Hcenv922f7O9nXXTn0weATh588Ozz6+ae3+pw2a8DR862ZGzfr4yOjo2M9i/vz3j/Zs2wo77fYma4TEQtvvvVGc3p6av7BP5SXwANW757Jbez9YX5I/Y9MU33YiQ/Rvy+asTd9v0NtL25O7Lry+f9+pPjN9/6t+8DvPP9r8Qudb7ef8PGzP1p//r+0cUP3+fzv31gvP//LJ8Fmz/+nepa9lH83MtAfUVu8PjdwOKK28OZbx1rXm9emrk3NnD5+/MXh4RdPHR84EFG72pqe6vm0I4cLAAAAAAAAAAAAAAAA4OFJRfx2pGj+aC3VI+JmNV5r6Ozws8ee6Yu+arzVHeO2Xx+7dK7+yuz1ufmphYWpyfr4TOvK7OTU/e6uVg33Gh8Z3ZXO3NPBXW7/wdors3Nvzreu/f7ipusP1c5dXlicb17ZfHUcjCKi0bvkaNXg8ZHRqtHTreZMVfXipoPpP7qBVMS/R4orp+vpC3lZHv+/cYR/3Hr7xdvXwtLGDe3g+P/PH1of//eJnqLlPlMq4meR4jf+/On4QtXOQ3HXMcvl/jpSHD3zuVwuDpTlum3ovFegMzKwLPvfkeLvf35n2e54yKfWy574SAf3EVCe/ycjxff+9Dvxq3nZne9/6D3/68fv0MYN7dL7Hz7Vs+zQHe8r2HbXyef/WKR4+al34teqJf/7oe//6L6x4Uin8Pr7OXbp/P9yz7KhvN9f36nOAwAAAAAAAAAAPMIGUhF/Eyl+MNqfXsjL7ufv/01u3NAu/f2vT/csm9yZ+Yru+WHbBxUAAAAA9omBVMSPI8W1xXduj6G+c/x3z/jP31of/zmSNqyt/pzvl6r3Buzkn//1Gsr7ndh+twEAAAAAAAAAAAAAAAAAAGBfSamIF/J86hPVeP7JLedTX4kUr/7nc7lcOlyW684DP1T9WrswO3Ps3PT0bC0Wm5enp+pjc80rU2XdT0WKtb/6XK5bVPOrd+eb78zxvj4X+3ykGP3bbtnOXOzduck784HX2u2IE2XZT0SK//i7O8vmqanz3NHVdk+WZf8yUnz9Hzcve3i97Kmy7HcixQ+/Xu+WPVSW7b4f9dPrZZ+/MlvswlkBAAAAAAAAAAAAAAAAAADg42YgFfEnkeK/ri/fHsuf5/8f6PlaufV2z3z/G9ys5vkfqub/3+rzg8z/X71XYGmrvQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOMpRRFvRYq5C2tpZbD83lE735q5cXN8ZHTzagdTVbOvKl/+1E6cPHX6yy8Mn+nmh9ffaZ+J18cunau/Mnt9bn5qYWFqsj4+07oyOzl131vYbv2NjlYHoH79jRuTV68u1E8+f+qO1TeHPhh84vDQ2eFnjz3TLTs+Mjo61lOmf+CB936XtMXyA1HEX0SK5777k/SDwYgitn8s7nHt7LaDVSeOVp0YHxmtOjLdas4slisvdg9EEVHvqdToHqN7nov/a7fbD6srm2hELJXNLxt8tOze2Fxzvnl5eqp+sTm/2Fpszc5cTJ3Wlv2pRxFnUsRyRKwO3r25gSjijUjx7SfX0j8NRvR1j8OXLox99fjJrdtR7GIf70PZzvpAxHJxP+eMrQxGEf8QKX767pH458GI/uj8xBcjXivz+xG3onO+U3lhnI54f5PriEdTfxTxP+X5P7uW3h0s7wfd+8r5r9W/MnN1tqds976yzedDu93+4zL37vnwMO3ze1MtivhhdcdfS//iv2sAAAAAAAAAAAAAAACAfaSIX4kUL713JFXjg2+PKW7NXKtfal6e7gzr6479646Zbrfb7XrqZCPnRM6lnMs5V3Ku5owi18/ZKLPWbk/k70s5l3Ou5FzNGX25fl81XLHdyN8nci7lXM65knM1Z/Tn+jkbOSdyLuVczrmSczVn7JOxewAAAAAAAAAAAAAAAAAAwOOlqP5J8a1vrKX2YGd+6Yno5Ir5QB97/x8AAP//Jhb4VQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303030342c756e695f786c6174653d312c636f6465706167653d3933362c757466383d302c696f636861727365743d757466382c636865636b3d72656c617865642c6e6f6e756d7461696c3d302c757466383d302c757466383d302c696f636861727365743d63703835302c726f6469722c00f7589df4827903b797bd0d41cd1096622f6861b99e643ac4a56749057e9086753fe532edff5327468e2d93feca7e33d47dd56aa048d0856d41769b48b721da9b"], 0x2a, 0x354, &(0x7f00000002c0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000380)='./bus\x00') 2.095377666s ago: executing program 0 (id=249): r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r0, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x0) ftruncate(r0, 0x3) mprotect(&(0x7f0000407000/0x2000)=nil, 0x2000, 0x0) 1.612004005s ago: executing program 5 (id=250): r0 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x5092, 0x8, 0xfffffffe, 0xc}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509a9143c27c70ce6125797e7a869c6d70443c03e53b5abd92c5080e1b2d865abd50649c3be1410f3deb987a89456383ceba51ed71ebdf72a38bcdd6f0f71a7e9f729b0bf4366fa2d5005dd3fcc4a8a8982a888363352"], 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[], 0xffffff10) close_range(r0, 0xffffffffffffffff, 0x0) 1.465800123s ago: executing program 2 (id=251): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue0\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x3, 0x7, 0x6, 0x2}, 0x9}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r1, &(0x7f0000000080)=[{0x1e, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c) 1.239629676s ago: executing program 4 (id=252): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0xbc, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xffe0}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x2, 0x0, 0xf, 0xff, 0x0, 0x0, 0xb, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1], 0x1, [0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffd]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x30, 0xc, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1}]}]}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) 1.19226662s ago: executing program 2 (id=253): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000005c0)={r1, 0x200, 0x1}, 0x10) 1.038554688s ago: executing program 0 (id=254): prlimit64(0x0, 0x7, &(0x7f0000000140)={0x7, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0}) 957.113493ms ago: executing program 2 (id=255): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x5, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x8, 0x0, 0x5, 0x0, 0x1, "bf631e4b"}}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0xd, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, "a730ba01"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) 820.175091ms ago: executing program 4 (id=256): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = dup(r0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000dc0)={0xa8, 0x0, 0x0, [{{0x2, 0x220, 0x8, 0x101, 0x9, 0xfffffff7, {0x6, 0x1, 0x491, 0x7, 0xf3, 0x0, 0x6, 0x2c70, 0x25, 0x1000, 0x7fffffff, 0x0, 0x0, 0x10, 0x1}}, {0x0, 0x401, 0x0, 0xfffffffa}}]}, 0xa8) 719.890887ms ago: executing program 0 (id=257): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) 545.959057ms ago: executing program 4 (id=258): recvmmsg(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r0, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) 324.233081ms ago: executing program 0 (id=259): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000001500)={0x28, 0x4000, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000000)=0x3, 0x8) 249.926885ms ago: executing program 2 (id=260): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) 215.900597ms ago: executing program 1 (id=261): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)="30573472b621739991c336124406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000340)=0x4) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000300)=ANY=[], 0xfe37, 0x0) 72.218316ms ago: executing program 4 (id=262): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x41000, 0x8, 0x80, 0x1, 0x5, 0x42, 0x29, 0x0, 0x2e, 0x19, 0xfc}, {0x8080000, 0x2000, 0xc, 0x4, 0x40, 0xd, 0x7d, 0x8, 0x6, 0x3, 0x3, 0x21}, {0xe000, 0x3000, 0xe, 0x9, 0x3, 0x7, 0xfe, 0x9, 0x4, 0xae, 0x5, 0x81}, {0x3000, 0x26000, 0xb, 0x5d, 0x0, 0x5, 0x9, 0xff, 0x6, 0x10, 0xe}, {0x0, 0x9000, 0xb, 0x3, 0x4, 0x7, 0xa7, 0x7f, 0x9e, 0x83, 0xf7, 0x83}, {0x1000, 0x70000, 0xd, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x7f, 0xf, 0x1, 0xfd}, {0x50000, 0x2, 0x0, 0x5, 0x7, 0x2, 0xb, 0x9, 0x5, 0x81, 0xff, 0x70}, {0xd000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0x4000, 0x30}, {0x10000, 0x81}, 0x80018031, 0x0, 0x25000, 0x242120, 0xb, 0x0, 0xf000, [0x5, 0x4, 0x5a, 0x100]}) 0s ago: executing program 2 (id=263): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000800)=ANY=[@ANYBLOB="00020201"], 0x18) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x18) sendmmsg$inet6(r0, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000300)='Y', 0x1}], 0x1}}], 0x1, 0x40) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 47.788800][ T3933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.821233][ T3933] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.148' (ED25519) to the list of known hosts. syzkaller login: [ 66.612558][ T4253] cgroup: Unknown subsys name 'net' [ 66.746036][ T4253] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.286702][ T4253] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 70.093778][ T4274] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.101837][ T4274] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.109906][ T4274] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.117376][ T4274] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.125223][ T4275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.132440][ T4275] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.143583][ T4274] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.150790][ T4274] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.158664][ T4274] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.165974][ T4274] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.173655][ T4274] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.190167][ T4271] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.209935][ T4271] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.217486][ T4271] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.217496][ T4277] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.226795][ T4271] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.239284][ T4271] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.246467][ T4277] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.249687][ T4271] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.270012][ T4271] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.297799][ T4279] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.307328][ T4279] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.314977][ T4279] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.323887][ T4279] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.341039][ T4275] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.352031][ T4275] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.359839][ T4275] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.367825][ T4275] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.375668][ T4275] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 70.383335][ T4275] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.725194][ T4280] chnl_net:caif_netlink_parms(): no params data found [ 70.815663][ T4267] chnl_net:caif_netlink_parms(): no params data found [ 70.858852][ T4268] chnl_net:caif_netlink_parms(): no params data found [ 70.959529][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 70.976492][ T4280] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.984761][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.994282][ T4280] device bridge_slave_0 entered promiscuous mode [ 71.006708][ T4283] chnl_net:caif_netlink_parms(): no params data found [ 71.027834][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.035569][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.043453][ T4280] device bridge_slave_1 entered promiscuous mode [ 71.078938][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.086223][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.094194][ T4267] device bridge_slave_0 entered promiscuous mode [ 71.109264][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.117357][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.127890][ T4267] device bridge_slave_1 entered promiscuous mode [ 71.190418][ T4280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.214145][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.221332][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.221659][ T4268] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.234817][ T4268] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.243193][ T4268] device bridge_slave_0 entered promiscuous mode [ 71.269506][ T4280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.281453][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.296583][ T4268] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.303982][ T4268] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.312200][ T4268] device bridge_slave_1 entered promiscuous mode [ 71.333224][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.342635][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.349980][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.357871][ T4276] device bridge_slave_0 entered promiscuous mode [ 71.379828][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.386940][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.398371][ T4283] device bridge_slave_0 entered promiscuous mode [ 71.411955][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.419137][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.428616][ T4283] device bridge_slave_1 entered promiscuous mode [ 71.435795][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.446438][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.454509][ T4276] device bridge_slave_1 entered promiscuous mode [ 71.474028][ T4280] team0: Port device team_slave_0 added [ 71.482194][ T4280] team0: Port device team_slave_1 added [ 71.508883][ T4267] team0: Port device team_slave_0 added [ 71.530857][ T4268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.549121][ T4268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.569073][ T4267] team0: Port device team_slave_1 added [ 71.576691][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.589041][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.608583][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.615860][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.641919][ T4280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.655533][ T4283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.695316][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.702539][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.729267][ T4280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.746874][ T4283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.766248][ T4276] team0: Port device team_slave_0 added [ 71.784576][ T4268] team0: Port device team_slave_0 added [ 71.792834][ T4268] team0: Port device team_slave_1 added [ 71.822506][ T4276] team0: Port device team_slave_1 added [ 71.828648][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.836004][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.862352][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.874612][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.883067][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.909039][ T4268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.934303][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.941336][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.967338][ T4268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.984586][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.991692][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.017681][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.031420][ T4283] team0: Port device team_slave_0 added [ 72.062834][ T4283] team0: Port device team_slave_1 added [ 72.070172][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.077130][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.103422][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.135147][ T4280] device hsr_slave_0 entered promiscuous mode [ 72.141949][ T4280] device hsr_slave_1 entered promiscuous mode [ 72.155175][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.162461][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.188439][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.203920][ T4267] device hsr_slave_0 entered promiscuous mode [ 72.210832][ T4267] device hsr_slave_1 entered promiscuous mode [ 72.217308][ T4267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.225172][ T4267] Cannot create hsr debugfs directory [ 72.250455][ T4275] Bluetooth: hci1: command 0x0409 tx timeout [ 72.277388][ T4268] device hsr_slave_0 entered promiscuous mode [ 72.284064][ T4268] device hsr_slave_1 entered promiscuous mode [ 72.290822][ T4268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.298565][ T4268] Cannot create hsr debugfs directory [ 72.304635][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.311773][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.330269][ T4275] Bluetooth: hci3: command 0x0409 tx timeout [ 72.337894][ T4279] Bluetooth: hci0: command 0x0409 tx timeout [ 72.350511][ T4283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.384842][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.392111][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.410705][ T4279] Bluetooth: hci2: command 0x0409 tx timeout [ 72.424243][ T4283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.476452][ T4276] device hsr_slave_0 entered promiscuous mode [ 72.483418][ T4276] device hsr_slave_1 entered promiscuous mode [ 72.490602][ T4279] Bluetooth: hci4: command 0x0409 tx timeout [ 72.498020][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.505851][ T4276] Cannot create hsr debugfs directory [ 72.587045][ T4283] device hsr_slave_0 entered promiscuous mode [ 72.594721][ T4283] device hsr_slave_1 entered promiscuous mode [ 72.601449][ T4283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.609011][ T4283] Cannot create hsr debugfs directory [ 72.881455][ T4267] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.893595][ T4267] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.903404][ T4267] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.914426][ T4267] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.978199][ T4268] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.005052][ T4268] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.026030][ T4268] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.036023][ T4268] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.087027][ T4276] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.106747][ T4276] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.146580][ T4276] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.172221][ T4283] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.182056][ T4283] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.193171][ T4276] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.222345][ T4283] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.236187][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.257277][ T4283] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.285508][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.297919][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.328599][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.347538][ T4280] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.379409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.388668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.398263][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.405644][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.414879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.424180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.433457][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.440623][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.448384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.457369][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.466484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.477166][ T4280] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.489549][ T4280] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.525789][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.537850][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.552376][ T4268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.559374][ T4280] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.583423][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.592002][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.601909][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.611126][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.619599][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.665771][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.676368][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.685443][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.694398][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.704313][ T4268] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.719017][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.740256][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.749720][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.759469][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.766605][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.786353][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.817162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.842069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.854419][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.861587][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.883158][ T4283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.893245][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.904116][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.955787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.967162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.978519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.994364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.013843][ T4283] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.026870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.041094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.053986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.072532][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.080323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.088709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.099533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.111706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.120550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.141724][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.154283][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.163336][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.170567][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.179521][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.188560][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.197164][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.204294][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.215012][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.224822][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.234493][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.243588][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.252673][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.261576][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.274283][ T4268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.286013][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.324969][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.330503][ T4279] Bluetooth: hci1: command 0x041b tx timeout [ 74.340788][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.360950][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.391034][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.399660][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.406888][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.415289][ T4279] Bluetooth: hci3: command 0x041b tx timeout [ 74.421207][ T4275] Bluetooth: hci0: command 0x041b tx timeout [ 74.424980][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.438253][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.447223][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.456046][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.464662][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.473819][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.482597][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.490633][ T4279] Bluetooth: hci2: command 0x041b tx timeout [ 74.502674][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.522705][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.545446][ T4351] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.552622][ T4351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.570506][ T4279] Bluetooth: hci4: command 0x041b tx timeout [ 74.584611][ T4280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.610490][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.646226][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.667738][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.677823][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.693598][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.705657][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.716188][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.728653][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.745380][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.755735][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.771950][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.784639][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.829027][ T4280] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.852922][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.874880][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.896843][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.915882][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.937123][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.956244][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.967662][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.990595][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.006043][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.013220][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.027112][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.086752][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.115110][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.137039][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.162168][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.182988][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.217114][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.224303][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.244274][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.253842][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.268521][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.278765][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.294714][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.304878][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.315858][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.354597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.371274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.393867][ T4267] device veth0_vlan entered promiscuous mode [ 75.428331][ T4280] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.442001][ T4280] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.457362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.466496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.475907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.484865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.493078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.505138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.514529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.523535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.533289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.542524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.553031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.561377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.569366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.609593][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.624717][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.638303][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.654594][ T4267] device veth1_vlan entered promiscuous mode [ 75.674919][ T4268] device veth0_vlan entered promiscuous mode [ 75.689630][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.704348][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.714425][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.755035][ T4268] device veth1_vlan entered promiscuous mode [ 75.786870][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.801115][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.810739][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.819453][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.834585][ T4267] device veth0_macvtap entered promiscuous mode [ 75.876081][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.891138][ T4267] device veth1_macvtap entered promiscuous mode [ 75.911742][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.920707][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.929113][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.951324][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.958800][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.017428][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.044164][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.053022][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.091958][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.120934][ T4268] device veth0_macvtap entered promiscuous mode [ 76.141020][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.150412][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.171613][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.191431][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.205855][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.221048][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.237187][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.264260][ T4267] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.278720][ T4267] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.289127][ T4267] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.298439][ T4267] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.315734][ T4268] device veth1_macvtap entered promiscuous mode [ 76.361894][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.375552][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.386763][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.410259][ T4279] Bluetooth: hci1: command 0x040f tx timeout [ 76.428231][ T4276] device veth0_vlan entered promiscuous mode [ 76.443516][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.451589][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.473673][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.490671][ T4279] Bluetooth: hci0: command 0x040f tx timeout [ 76.490680][ T4275] Bluetooth: hci3: command 0x040f tx timeout [ 76.496452][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.516894][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.528314][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.539143][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.551380][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.569853][ T4275] Bluetooth: hci2: command 0x040f tx timeout [ 76.587827][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.603559][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.617296][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.628032][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.643026][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.650802][ T4275] Bluetooth: hci4: command 0x040f tx timeout [ 76.662534][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.674677][ T4276] device veth1_vlan entered promiscuous mode [ 76.690563][ T4268] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.699315][ T4268] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.716620][ T4268] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.727483][ T4268] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.757164][ T4280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.811830][ T4351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.820613][ T4351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.863859][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.870615][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.881607][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.892823][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.901249][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.909179][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.918291][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.930839][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.972672][ T4276] device veth0_macvtap entered promiscuous mode [ 76.989622][ T4276] device veth1_macvtap entered promiscuous mode [ 76.999005][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.008093][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.017486][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.026336][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.035827][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.048594][ T4283] device veth0_vlan entered promiscuous mode [ 77.080220][ T4283] device veth1_vlan entered promiscuous mode [ 77.087248][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.095628][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.110625][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.119240][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.134001][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.151806][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.212300][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.274150][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.292170][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.300987][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.312351][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.323261][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.335288][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.350423][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.361937][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.372636][ T4378] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.375605][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.399899][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.414774][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.429571][ T4280] device veth0_vlan entered promiscuous mode [ 77.446769][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.466711][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.475758][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.491503][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.501754][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.511319][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.522263][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.533044][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.542309][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.551146][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.564269][ T4283] device veth0_macvtap entered promiscuous mode [ 77.583181][ T4276] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.592442][ T4276] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.601323][ T4276] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.611379][ T4276] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.625590][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.635517][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.651021][ T4283] device veth1_macvtap entered promiscuous mode [ 77.670394][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.678399][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.699390][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.704424][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.726388][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.740790][ T4280] device veth1_vlan entered promiscuous mode [ 77.759021][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.770188][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.793018][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.808753][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.824777][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.835508][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.853929][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.861924][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.881510][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.890965][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.926258][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.944560][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.956793][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.974923][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.985450][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.002689][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.037451][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.055350][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.064494][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.074198][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.117293][ T4283] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.170859][ T4283] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.180833][ T4283] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.189566][ T4283] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.228132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.241472][ T4389] loop2: detected capacity change from 0 to 8 [ 78.270668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.309266][ T4280] device veth0_macvtap entered promiscuous mode [ 78.392538][ T4280] device veth1_macvtap entered promiscuous mode [ 78.419945][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.427931][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.474247][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.490053][ T4275] Bluetooth: hci1: command 0x0419 tx timeout [ 78.500852][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.519325][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.571999][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.590017][ T4275] Bluetooth: hci0: command 0x0419 tx timeout [ 78.596099][ T4275] Bluetooth: hci3: command 0x0419 tx timeout [ 78.624947][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.650337][ T4275] Bluetooth: hci2: command 0x0419 tx timeout [ 78.662594][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.702824][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.731514][ T4275] Bluetooth: hci4: command 0x0419 tx timeout [ 78.870085][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.916552][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.939899][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.976326][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.007743][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.086433][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.106020][ T4351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.151028][ T4351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.159008][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.228058][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.245760][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.689754][ C1] sched: RT throttling activated [ 79.695386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.736611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.764272][ T4402] loop3: detected capacity change from 0 to 256 [ 79.783619][ T4397] loop2: detected capacity change from 0 to 131072 [ 79.795054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.803308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.811361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.819067][ T4397] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 79.827461][ T4397] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 79.838196][ T4397] F2FS-fs (loop2): invalid crc value [ 79.847265][ T4402] ======================================================= [ 79.847265][ T4402] WARNING: The mand mount option has been deprecated and [ 79.847265][ T4402] and is ignored by this kernel. Remove the mand [ 79.847265][ T4402] option from the mount to silence this warning. [ 79.847265][ T4402] ======================================================= [ 79.848941][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.902789][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.913684][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.925319][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.936247][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.948189][ T4397] F2FS-fs (loop2): Found nat_bits in checkpoint [ 79.999609][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.012583][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.023881][ T4397] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 80.026916][ T4402] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb45ad1ca, utbl_chksum : 0xe619d30d) [ 80.031058][ T4397] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 80.056622][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.068167][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.097633][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.115606][ T4402] fuse: Invalid user_id [ 80.118271][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.154387][ T4280] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.180258][ T4280] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.207747][ T4280] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.236070][ T4280] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.495583][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.513885][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.582144][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.630421][ T4415] syz.4.5 uses obsolete (PF_INET,SOCK_PACKET) [ 80.693319][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.759859][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.033712][ T4420] loop1: detected capacity change from 0 to 32768 [ 81.051800][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.171066][ T4420] XFS (loop1): Mounting V5 Filesystem [ 81.221663][ T4420] XFS (loop1): Ending clean mount [ 81.232853][ T4420] XFS (loop1): Quotacheck needed: Please wait. [ 81.289330][ T4420] XFS (loop1): Quotacheck: Done. [ 81.645928][ T4441] netlink: 'syz.4.18': attribute type 39 has an invalid length. [ 81.684875][ T4276] XFS (loop1): Unmounting Filesystem [ 82.041863][ T4422] loop3: detected capacity change from 0 to 32768 [ 82.199308][ T4422] XFS (loop3): Mounting V5 Filesystem [ 82.415149][ T4422] XFS (loop3): Starting recovery (logdev: internal) [ 82.876770][ T4463] loop1: detected capacity change from 0 to 8192 [ 82.891536][ T4422] XFS (loop3): Ending recovery (logdev: internal) [ 82.936128][ T4463] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 83.064019][ T4463] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 83.128468][ T4463] REISERFS (device loop1): using ordered data mode [ 83.159835][ T4463] reiserfs: using flush barriers [ 83.196605][ T4267] XFS (loop3): Unmounting Filesystem [ 83.203247][ T4471] netlink: 'syz.2.36': attribute type 39 has an invalid length. [ 83.217282][ T4463] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 83.295511][ T4463] REISERFS (device loop1): checking transaction log (loop1) [ 83.626365][ T4463] REISERFS (device loop1): Using rupasov hash to sort names [ 83.656776][ T4463] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 84.228850][ T4488] loop4: detected capacity change from 0 to 2048 [ 84.371479][ T4488] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 84.648302][ T4497] loop2: detected capacity change from 0 to 2048 [ 84.738237][ T4497] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 84.995345][ T4268] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh [ 85.037506][ T4268] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh [ 85.385526][ T4505] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-61) [ 85.653660][ T4399] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.796417][ T4496] loop3: detected capacity change from 0 to 32768 [ 85.824823][ T4496] XFS: attr2 mount option is deprecated. [ 85.846491][ T4399] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.909927][ T4496] XFS (loop3): Mounting V5 Filesystem [ 85.971390][ T4399] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.066526][ T4399] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.191467][ T4496] XFS (loop3): Ending clean mount [ 86.216515][ T4496] XFS (loop3): Quotacheck needed: Please wait. [ 86.300422][ T4496] XFS (loop3): Quotacheck: Done. [ 86.401203][ T4513] loop0: detected capacity change from 0 to 32768 [ 86.521514][ T26] audit: type=1800 audit(1769112507.514:2): pid=4513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.42" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 86.559099][ T4528] netlink: 'syz.1.43': attribute type 39 has an invalid length. [ 86.573201][ T14] cfg80211: failed to load regulatory.db [ 86.711232][ T4267] XFS (loop3): Unmounting Filesystem [ 87.045684][ T4534] netlink: 24 bytes leftover after parsing attributes in process `syz.3.47'. [ 87.089991][ T4534] bond0: ARP target 170.170.170.170 is already present [ 87.122346][ T4534] bond0: option arp_ip_target: invalid value (2863311530) [ 87.431203][ T4537] loop4: detected capacity change from 0 to 4096 [ 87.543460][ T4542] loop1: detected capacity change from 0 to 2048 [ 87.651454][ T4547] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 87.685574][ T4542] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 87.762004][ T4282] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.772955][ T4282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.786692][ T4279] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.795289][ T4282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.813878][ T4282] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.822614][ T4279] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.408272][ T4557] loop4: detected capacity change from 0 to 128 [ 88.504579][ T4557] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 88.569993][ T4557] hpfs: filesystem error: improperly stopped [ 88.576051][ T4557] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 88.650024][ T4557] hpfs: You really don't want any checks? You are crazy... [ 88.720514][ T4557] hpfs: hpfs_map_sector(): read error [ 88.725950][ T4557] hpfs: code page support is disabled [ 88.795275][ T4557] hpfs: hpfs_map_4sectors(): unaligned read [ 88.801474][ T4557] hpfs: hpfs_map_4sectors(): unaligned read [ 88.807538][ T4557] hpfs: filesystem error: unable to find root dir [ 89.008647][ T4546] chnl_net:caif_netlink_parms(): no params data found [ 89.085589][ T22] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.290899][ T22] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 89.326655][ T22] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 89.356213][ T22] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 89.380107][ T22] usb 4-1: config 0 interface 0 has no altsetting 0 [ 89.391084][ T22] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 89.409823][ T22] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 89.421780][ T22] usb 4-1: config 0 interface 0 has no altsetting 0 [ 89.431010][ T22] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 89.442273][ T4399] device hsr_slave_0 left promiscuous mode [ 89.453626][ T22] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 89.473330][ T4399] device hsr_slave_1 left promiscuous mode [ 89.490717][ T4399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.493630][ T22] usb 4-1: config 0 interface 0 has no altsetting 0 [ 89.498189][ T4399] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.529549][ T22] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 89.547648][ T4399] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.556621][ T4399] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.571085][ T22] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 89.585184][ T22] usb 4-1: config 0 interface 0 has no altsetting 0 [ 89.597129][ T4399] device bridge_slave_1 left promiscuous mode [ 89.608322][ T22] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 89.620260][ T4399] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.629472][ T22] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 89.641215][ T22] usb 4-1: config 0 interface 0 has no altsetting 0 [ 89.651215][ T4399] device bridge_slave_0 left promiscuous mode [ 89.657838][ T4399] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.672303][ T22] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 89.685586][ T22] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 89.698883][ T22] usb 4-1: config 0 interface 0 has no altsetting 0 [ 89.718044][ T4399] device veth1_macvtap left promiscuous mode [ 89.718748][ T22] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 89.736650][ T4399] device veth0_macvtap left promiscuous mode [ 89.744069][ T4399] device veth1_vlan left promiscuous mode [ 89.749859][ T22] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 89.760758][ T4399] device veth0_vlan left promiscuous mode [ 89.784565][ T22] usb 4-1: config 0 interface 0 has no altsetting 0 [ 89.834827][ T22] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 89.849926][ T4275] Bluetooth: hci1: command 0x0409 tx timeout [ 89.851955][ T22] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 89.868195][ T22] usb 4-1: config 0 interface 0 has no altsetting 0 [ 89.877859][ T22] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 89.887942][ T22] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 89.919937][ T22] usb 4-1: Product: syz [ 89.947917][ T22] usb 4-1: Manufacturer: syz [ 89.971709][ T22] usb 4-1: SerialNumber: syz [ 90.019107][ T22] usb 4-1: config 0 descriptor?? [ 90.105455][ T22] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 90.147436][ T4591] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 90.436578][ C1] usb 4-1: yurex_control_callback - control failed: -2 [ 90.459060][ T4387] usb 4-1: USB disconnect, device number 2 [ 90.490911][ T4387] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 90.783319][ T4588] loop1: detected capacity change from 0 to 32768 [ 90.823331][ T26] audit: type=1800 audit(1769112511.824:3): pid=4588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.62" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 90.935887][ T4598] loop0: detected capacity change from 0 to 32768 [ 91.088275][ T4598] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 91.330717][ T4280] (syz-executor,4280,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 91.353734][ T4604] use of bytesused == 0 is deprecated and will be removed in the future, [ 91.387187][ T4604] use the actual size instead. [ 91.404440][ T4280] ocfs2: Unmounting device (7,0) on (node local) [ 91.438314][ T4399] team0 (unregistering): Port device team_slave_1 removed [ 91.523344][ T4608] loop0: detected capacity change from 0 to 2048 [ 91.563728][ T4608] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.601725][ T4399] team0 (unregistering): Port device team_slave_0 removed [ 91.789405][ T4399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.929938][ T4275] Bluetooth: hci1: command 0x041b tx timeout [ 91.952202][ T4399] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.485342][ T4399] bond0 (unregistering): Released all slaves [ 92.619873][ T4387] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.642006][ T4546] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.649203][ T4546] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.663546][ T4614] loop3: detected capacity change from 0 to 32768 [ 92.667927][ T4546] device bridge_slave_0 entered promiscuous mode [ 92.683739][ T4596] netlink: 'syz.4.65': attribute type 3 has an invalid length. [ 92.700338][ T4596] netlink: 32 bytes leftover after parsing attributes in process `syz.4.65'. [ 92.714306][ T4610] netlink: 80 bytes leftover after parsing attributes in process `syz.0.70'. [ 92.731283][ T4610] netlink: 80 bytes leftover after parsing attributes in process `syz.0.70'. [ 92.746065][ T4610] netlink: 80 bytes leftover after parsing attributes in process `syz.0.70'. [ 92.748712][ T4614] XFS (loop3): Mounting V5 Filesystem [ 92.761023][ T4546] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.768183][ T4546] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.804419][ T4546] device bridge_slave_1 entered promiscuous mode [ 92.821686][ T4387] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.839699][ T4387] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.849599][ T4387] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 92.862825][ T4387] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 92.871962][ T4387] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.881803][ T4387] usb 2-1: config 0 descriptor?? [ 92.966580][ T4546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.089332][ T4546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.130441][ T4614] XFS (loop3): Ending clean mount [ 93.240751][ T4546] team0: Port device team_slave_0 added [ 93.271007][ T4546] team0: Port device team_slave_1 added [ 93.298172][ T4267] XFS (loop3): Unmounting Filesystem [ 93.310921][ T4387] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 93.337164][ T4387] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 93.366617][ T4546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.392127][ T4546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.421566][ T4387] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 93.496585][ T4546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.563410][ T4546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.580851][ T4546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.638358][ T4387] usb 2-1: USB disconnect, device number 2 [ 93.706944][ T4546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.847413][ T4634] fido_id[4634]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 93.905858][ T4546] device hsr_slave_0 entered promiscuous mode [ 93.963932][ T4546] device hsr_slave_1 entered promiscuous mode [ 93.986988][ T4546] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.010175][ T4275] Bluetooth: hci1: command 0x040f tx timeout [ 94.021308][ T4546] Cannot create hsr debugfs directory [ 94.249581][ T4626] loop4: detected capacity change from 0 to 32768 [ 94.288433][ T4626] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 94.324048][ T4629] loop0: detected capacity change from 0 to 32768 [ 94.346525][ T4626] JBD2: Ignoring recovery information on journal [ 94.370245][ T4629] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 94.390054][ T4629] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 94.440381][ T4629] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 94.461938][ T4629] (syz.0.76,4629,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=9 [ 94.484148][ T4629] (syz.0.76,4629,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=9 [ 94.588333][ T4280] ocfs2: Unmounting device (7,0) on (node local) [ 94.594957][ T14] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 94.645744][ T4626] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 95.758003][ T4283] ocfs2: Unmounting device (7,4) on (node local) [ 96.140681][ T4275] Bluetooth: hci1: command 0x0419 tx timeout [ 96.376831][ T4546] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.472753][ T4546] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.550914][ T4546] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.623605][ T4546] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.692876][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.697709][ T4660] device syzkaller1 entered promiscuous mode [ 96.719814][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.754394][ T4651] loop0: detected capacity change from 0 to 262144 [ 96.764318][ T14] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 96.780378][ T4651] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop0 scanned by syz.0.79 (4651) [ 96.809964][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.827987][ T14] usb 4-1: config 0 descriptor?? [ 96.853693][ T4651] BTRFS info (device loop0): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 96.864530][ T4651] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 96.873900][ T4651] BTRFS info (device loop0): using free space tree [ 96.919082][ T4645] loop1: detected capacity change from 0 to 65536 [ 97.008892][ T4645] XFS (loop1): Mounting V5 Filesystem [ 97.130079][ T4651] BTRFS info (device loop0): enabling ssd optimizations [ 97.142613][ T49] BTRFS warning (device loop0): checksum verify failed on logical 30457856 mirror 1 wanted 0x402e75f1de9ccfe6 found 0x4ce089a63f6c9001 level 0 [ 97.232724][ T4645] XFS (loop1): Ending clean mount [ 97.295367][ T4280] BTRFS info (device loop0): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 97.297249][ T14] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 97.351423][ T4387] XFS (loop1): Metadata CRC error detected at xfs_agfl_read_verify+0x189/0x240, xfs_agfl block 0x3 [ 97.370827][ T14] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 97.392580][ T14] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0002/input/input7 [ 97.398507][ T4387] XFS (loop1): Unmount and run xfs_repair [ 97.446868][ T4387] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 97.597979][ T14] cm6533_jd 0003:0D8C:0022.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 97.632516][ T4546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.677991][ T4375] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop0 scanned by udevd (4375) [ 97.750102][ T14] usb 4-1: USB disconnect, device number 3 [ 97.768684][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.795173][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.890791][ T4546] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.928836][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 97.969059][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.080513][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.087714][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.367811][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.419278][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.478566][ T4701] loop4: detected capacity change from 0 to 131072 [ 98.486504][ T4387] 00000000: 58 41 46 4c 00 00 00 00 d6 f6 9d bd 8c 5d 46 be XAFL.........]F. [ 98.495652][ T4387] 00000010: b8 8e 92 c0 ae 88 ce b2 00 00 00 00 00 00 00 00 ................ [ 98.504709][ T4387] 00000020: 35 fc 5c 25 ff 00 ff ff 00 00 00 05 00 00 00 06 5.\%............ [ 98.514342][ T4387] 00000030: 00 00 00 07 00 00 00 08 ff ff ff ff ff ff ff ff ................ [ 98.523384][ T4701] F2FS-fs (loop4): invalid crc value [ 98.528875][ T4387] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 98.537966][ T4387] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 98.547080][ T4387] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 98.556254][ T4387] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 98.565906][ T4645] XFS (loop1): metadata I/O error in "xfs_alloc_read_agfl+0x21a/0x3d0" at daddr 0x3 len 1 error 74 [ 98.572883][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.586718][ T4701] F2FS-fs (loop4): Found nat_bits in checkpoint [ 98.623768][ T4705] fido_id[4705]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 98.625538][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.645234][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.657096][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.667197][ T4701] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 98.690602][ T4645] XFS (loop1): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1798/0x1e60 (fs/xfs/libxfs/xfs_defer.c:580). Shutting down filesystem. [ 98.713562][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.725494][ T4645] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 98.735307][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.754348][ T4701] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 98.762391][ T4723] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 98.783775][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.849163][ T4546] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 98.908806][ T4546] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.914983][ T4276] XFS (loop1): Unmounting Filesystem [ 98.939111][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.957741][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.007869][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.051330][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.096340][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.122512][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.160499][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.198760][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 99.634378][ T4387] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 99.841738][ T4387] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.869857][ T4387] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.879644][ T4387] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.969892][ T4387] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 99.978988][ T4387] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.051754][ T4387] usb 1-1: config 0 descriptor?? [ 100.237659][ T4743] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 100.412727][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.440774][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.455298][ T4546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.469507][ T4387] acrux 0003:1A34:0802.0003: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.0-1/input0 [ 100.496835][ T4731] loop3: detected capacity change from 0 to 32768 [ 100.530758][ T4387] acrux 0003:1A34:0802.0003: no inputs found [ 100.541826][ T4387] acrux 0003:1A34:0802.0003: Failed to enable force feedback support, error: -19 [ 100.548909][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 100.601730][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.625404][ T26] audit: type=1800 audit(1769112521.624:4): pid=4731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.85" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 100.708798][ T4387] usb 1-1: USB disconnect, device number 2 [ 100.748667][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 100.766486][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.828407][ T4546] device veth0_vlan entered promiscuous mode [ 100.853774][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.882253][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.924708][ T4546] device veth1_vlan entered promiscuous mode [ 100.992485][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 101.012063][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 101.054489][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 101.090587][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.124609][ T4546] device veth0_macvtap entered promiscuous mode [ 101.152715][ T4747] fido_id[4747]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 101.167614][ T4546] device veth1_macvtap entered promiscuous mode [ 101.213006][ T4546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.252106][ T4546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.300527][ T4546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.359869][ T4546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.402190][ T4546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.439218][ T4546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.472654][ T4546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.559784][ T4546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.637225][ T4546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.727637][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 101.747173][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 101.792765][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 101.823516][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.884967][ T4546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.915992][ T4546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.959768][ T4546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.995443][ T4767] loop3: detected capacity change from 0 to 2048 [ 102.035113][ T4767] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.047608][ T4546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.101569][ T4546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.129808][ T27] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 102.148566][ T4546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.183303][ T4546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.250226][ T4546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.322450][ T27] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 102.340999][ T4546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.358424][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.389404][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 102.407224][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 102.412429][ T27] usb 1-1: config 0 descriptor?? [ 102.442473][ T27] cp210x 1-1:0.0: cp210x converter detected [ 102.453903][ T4546] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.484092][ T4546] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.510894][ T4546] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.541835][ T4546] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.639892][ T4708] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 102.661996][ T4752] loop1: detected capacity change from 0 to 40427 [ 102.712783][ T4752] F2FS-fs (loop1): invalid crc value [ 102.734224][ T4752] F2FS-fs (loop1): Found nat_bits in checkpoint [ 102.789395][ T4310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.827508][ T4310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.852041][ T27] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 102.860018][ T4708] usb 5-1: Using ep0 maxpacket: 8 [ 102.883272][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.891072][ T4708] usb 5-1: unable to get BOS descriptor or descriptor too short [ 102.900752][ T4708] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 102.908905][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.926200][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.935221][ T4708] usb 5-1: can't read configurations, error -71 [ 102.962422][ T4775] loop3: detected capacity change from 0 to 1024 [ 102.969952][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 103.007814][ T4752] F2FS-fs (loop1): Start checkpoint disabled! [ 103.050008][ T4752] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 103.082638][ T27] usb 1-1: cp210x converter now attached to ttyUSB0 [ 103.169719][ T4775] hfsplus: xattr searching failed [ 103.188786][ T4775] process 'syz.3.93' launched './file0' with NULL argv: empty string added [ 103.238696][ T4775] hfsplus: xattr searching failed [ 103.247744][ T4775] hfsplus: xattr searching failed [ 103.280782][ T27] usb 1-1: USB disconnect, device number 3 [ 103.310681][ T27] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 103.359450][ T27] cp210x 1-1:0.0: device disconnected [ 103.556997][ T4785] loop4: detected capacity change from 0 to 256 [ 103.602279][ T4786] loop3: detected capacity change from 0 to 1024 [ 103.608675][ T4785] exfat: Deprecated parameter 'utf8' [ 103.653817][ T4786] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 103.679683][ T4785] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 103.690616][ T4786] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 103.730484][ T4786] JBD2: no valid journal superblock found [ 103.760174][ T4786] EXT4-fs (loop3): error loading journal [ 104.127896][ T4793] loop0: detected capacity change from 0 to 4096 [ 104.274817][ T4797] loop2: detected capacity change from 0 to 2048 [ 104.347501][ T4803] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 104.365695][ T4801] loop1: detected capacity change from 0 to 1024 [ 104.508862][ T4805] device syzkaller1 entered promiscuous mode [ 104.708504][ T11] hfsplus: b-tree write err: -5, ino 4 [ 104.933310][ T4814] netlink: 28 bytes leftover after parsing attributes in process `syz.1.111'. [ 105.041870][ T4819] MTD: Attempt to mount non-MTD device "./file0" [ 105.051437][ T4819] ./file0: Can't open blockdev [ 105.268241][ T4827] vivid-000: disconnect [ 105.280237][ T4827] vivid-000: reconnect [ 105.683146][ T4842] overlayfs: invalid origin (000000790065726c6179000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 106.198455][ T4832] loop1: detected capacity change from 0 to 32768 [ 106.269034][ T4832] XFS (loop1): Mounting V5 Filesystem [ 106.309579][ T4868] loop3: detected capacity change from 0 to 1024 [ 106.319837][ T22] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 106.331884][ T4832] XFS (loop1): Ending clean mount [ 106.344650][ T4832] XFS (loop1): Quotacheck needed: Please wait. [ 106.378115][ T26] audit: type=1800 audit(1769112527.374:5): pid=4868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.134" name="file1" dev="loop3" ino=2 res=0 errno=0 [ 106.418280][ T4832] XFS (loop1): Quotacheck: Done. [ 106.520178][ T4568] hfsplus: bad catalog file entry [ 106.525611][ T4568] hfsplus: b-tree write err: -5, ino 3 [ 106.531261][ T22] usb 5-1: Using ep0 maxpacket: 32 [ 106.542235][ T4276] XFS (loop1): Unmounting Filesystem [ 106.551017][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.597883][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.639569][ T22] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 106.667489][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.703600][ T22] usb 5-1: config 0 descriptor?? [ 107.065517][ T4878] set_capacity_and_notify: 1 callbacks suppressed [ 107.065533][ T4878] loop3: detected capacity change from 0 to 1024 [ 107.140680][ T22] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 107.176302][ T4878] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 107.440922][ T4318] usb 5-1: USB disconnect, device number 4 [ 107.466002][ T4878] syz.3.140 (4878) used greatest stack depth: 19832 bytes left [ 107.523059][ T4267] EXT4-fs error (device loop3): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 107.551529][ T4892] loop0: detected capacity change from 0 to 2048 [ 107.607268][ T4267] EXT4-fs error (device loop3): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 107.630527][ T4892] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.946870][ T4900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.956000][ T4900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.972314][ T4900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.981333][ T4900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.045577][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 108.226964][ T4903] loop1: detected capacity change from 0 to 8192 [ 108.292814][ T4568] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.315830][ T4903] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 108.483046][ T4568] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.677180][ T4568] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.801567][ T4568] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.290900][ T4714] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 109.347209][ T4920] loop1: detected capacity change from 0 to 16 [ 109.384558][ T4907] comedi comedi0: reset error (fatal) [ 109.447558][ T4920] erofs: (device loop1): mounted with root inode @ nid 36. [ 109.484219][ T4714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.522130][ T4920] syz.1.158: attempt to access beyond end of device [ 109.522130][ T4920] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 109.539901][ T4714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.589710][ T4714] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 109.608200][ T4924] syz.1.158: attempt to access beyond end of device [ 109.608200][ T4924] loop1: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 109.651123][ T4714] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 109.670006][ T4714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.738592][ T4714] usb 1-1: config 0 descriptor?? [ 110.018749][ T4936] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 110.164750][ T4714] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 110.272889][ T4714] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 110.412694][ T4275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 110.423054][ T4275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 110.432067][ T4714] usb 1-1: USB disconnect, device number 4 [ 110.447613][ T4275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 110.456679][ T4275] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 110.464789][ T4275] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 110.473450][ T4275] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 110.570603][ T4948] fido_id[4948]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 110.606557][ T4946] loop4: detected capacity change from 0 to 4096 [ 111.160541][ T4964] vxcan1: tx drop: invalid sa for name 0x0000000000000003 [ 111.371969][ T4568] device hsr_slave_0 left promiscuous mode [ 111.385680][ T4568] device hsr_slave_1 left promiscuous mode [ 111.407945][ T4568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.419839][ T4568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.437072][ T4568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.453566][ T4568] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.469197][ T4568] device bridge_slave_1 left promiscuous mode [ 111.484500][ T4568] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.511890][ T4568] device bridge_slave_0 left promiscuous mode [ 111.521160][ T4568] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.586202][ T4568] device veth1_macvtap left promiscuous mode [ 111.599209][ T4568] device veth0_macvtap left promiscuous mode [ 111.613645][ T4568] device veth1_vlan left promiscuous mode [ 111.626369][ T4568] device veth0_vlan left promiscuous mode [ 111.998338][ T4966] loop0: detected capacity change from 0 to 32768 [ 112.054478][ T4973] loop2: detected capacity change from 0 to 4096 [ 112.128181][ T4973] ntfs: volume version 3.1. [ 112.147294][ T4966] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 112.169305][ T4966] XFS (loop0): Mounting V5 Filesystem [ 112.378103][ T4966] XFS (loop0): Ending clean mount [ 112.433053][ T4966] XFS (loop0): Quotacheck needed: Please wait. [ 112.449371][ T4987] netlink: 12 bytes leftover after parsing attributes in process `syz.2.178'. [ 112.490220][ T4275] Bluetooth: hci0: command 0x0409 tx timeout [ 112.514184][ T4966] XFS (loop0): Quotacheck: Done. [ 112.638446][ T4280] XFS (loop0): Unmounting Filesystem [ 113.012538][ T4568] team0 (unregistering): Port device team_slave_1 removed [ 113.058985][ T4275] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 113.067907][ T4275] Bluetooth: hci1: Injecting HCI hardware error event [ 113.081884][ T4282] Bluetooth: hci1: hardware error 0x00 [ 113.091620][ T4568] team0 (unregistering): Port device team_slave_0 removed [ 113.149627][ T4568] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.219425][ T4568] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.315510][ T4996] loop4: detected capacity change from 0 to 512 [ 113.324616][ T4996] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 113.336723][ T4996] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 113.351324][ T4996] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 113.376304][ T4996] EXT4-fs (loop4): 1 truncate cleaned up [ 113.385324][ T4996] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 113.404900][ T26] audit: type=1800 audit(1769112534.404:6): pid=4996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.182" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 113.470824][ T4999] EXT4-fs (loop4): shut down requested (2) [ 113.547377][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 113.822404][ T22] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 113.856709][ T4568] bond0 (unregistering): Released all slaves [ 113.987057][ T4987] netlink: 12 bytes leftover after parsing attributes in process `syz.2.178'. [ 114.010465][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 114.024232][ T22] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 114.039374][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.048100][ T22] usb 1-1: Product: syz [ 114.056721][ T22] usb 1-1: Manufacturer: syz [ 114.061647][ T22] usb 1-1: SerialNumber: syz [ 114.269345][ T5019] loop1: detected capacity change from 0 to 1024 [ 114.282647][ T22] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 114.398656][ T5019] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 114.426667][ T5019] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.454670][ T5019] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: block 3: comm syz.1.186: lblock 3 mapped to illegal pblock 3 (length 3) [ 114.492224][ T5019] EXT4-fs error (device loop1): ext4_ext_remove_space:2930: inode #15: comm syz.1.186: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 114.513465][ T4708] usb 1-1: USB disconnect, device number 5 [ 114.568801][ T4945] chnl_net:caif_netlink_parms(): no params data found [ 114.579380][ T4275] Bluetooth: hci0: command 0x041b tx timeout [ 114.654831][ T5025] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: comm syz.1.186: lblock 0 mapped to illegal pblock 0 (length 1) [ 114.685905][ T5000] usblp0: removed [ 114.701307][ T5025] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 114.744168][ T5025] EXT4-fs (loop1): This should not happen!! Data will be lost [ 114.744168][ T5025] [ 114.844830][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 114.918275][ T4945] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.932563][ T4945] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.961073][ T4945] device bridge_slave_0 entered promiscuous mode [ 115.010647][ T4945] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.039979][ T4945] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.064740][ T4945] device bridge_slave_1 entered promiscuous mode [ 115.131954][ T4282] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 115.172308][ T4945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.242561][ T4945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.392874][ T4945] team0: Port device team_slave_0 added [ 115.433090][ T4945] team0: Port device team_slave_1 added [ 115.539591][ T4945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.573313][ T4945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.638140][ T5028] loop4: detected capacity change from 0 to 40427 [ 115.657886][ T5052] loop0: detected capacity change from 0 to 128 [ 115.692637][ T5052] EXT4-fs: Ignoring removed i_version option [ 115.699888][ T4945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.712526][ T5028] F2FS-fs (loop4): build fault injection attr: rate: 14, type: 0x3ffff [ 115.738264][ T5028] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0xe4 [ 115.763902][ T5052] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 115.785740][ T4945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.804645][ T5020] loop2: detected capacity change from 0 to 40427 [ 115.815090][ T5028] F2FS-fs (loop4): invalid crc value [ 115.827591][ T5052] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.845488][ T4945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.889871][ T5020] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 115.899527][ T5020] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 115.918571][ T5028] F2FS-fs (loop4): Found nat_bits in checkpoint [ 115.972687][ T5020] F2FS-fs (loop2): Found nat_bits in checkpoint [ 115.986859][ T5052] EXT4-fs error (device loop0): ext4_check_dx_root:2266: inode #2: comm syz.0.193: Corrupt dir, invalid name for '..', running e2fsck is recommended [ 116.047951][ T4945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.086771][ T5028] F2FS-fs (loop4) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x432/0xa20 [ 116.195407][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 116.218811][ T5028] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 116.270122][ T5020] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 116.287522][ T5028] F2FS-fs (loop4) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x6eb/0x1b10 [ 116.309812][ T5020] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 116.332392][ T4945] device hsr_slave_0 entered promiscuous mode [ 116.372699][ T5028] F2FS-fs (loop4) : inject alloc nid in f2fs_alloc_nid of f2fs_new_inode+0x111/0xfe0 [ 116.389852][ T4945] device hsr_slave_1 entered promiscuous mode [ 116.405233][ T4945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.430528][ T4945] Cannot create hsr debugfs directory [ 116.474648][ T4283] syz-executor: attempt to access beyond end of device [ 116.474648][ T4283] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 116.654207][ T4282] Bluetooth: hci0: command 0x040f tx timeout [ 117.008904][ T4945] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 117.086853][ T4945] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 117.169559][ T4945] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 117.193642][ T4945] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 117.508714][ T4945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.556469][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 117.567965][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.601199][ T4945] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.648865][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 117.671118][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.693904][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.701125][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.722539][ T5102] Driver unsupported XDP return value 0 on prog (id 7) dev N/A, expect packet loss! [ 117.734047][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 117.843748][ T5080] loop1: detected capacity change from 0 to 32768 [ 117.882979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 117.908386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 117.942660][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.949978][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.987002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 118.020782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 118.120710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 118.154219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 118.184401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 118.221000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 118.269492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 118.313217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 118.365116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 118.404282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 118.424454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 118.455525][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 118.729967][ T4282] Bluetooth: hci0: command 0x0419 tx timeout [ 119.110479][ T5132] loop2: detected capacity change from 0 to 256 [ 119.178176][ T5132] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011bf5, chksum : 0xdfba1b89, utbl_chksum : 0xe619d30d) [ 119.233185][ T5110] loop4: detected capacity change from 0 to 32768 [ 119.250425][ T5132] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 119.273782][ T5110] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.205 (5110) [ 119.375078][ T5110] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 119.450336][ T5110] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 119.511311][ T5110] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 119.584176][ T5110] BTRFS info (device loop4): use zstd compression, level 3 [ 119.610615][ T5110] BTRFS info (device loop4): using free space tree [ 119.633198][ T5141] loop0: detected capacity change from 0 to 512 [ 119.676512][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 119.711716][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 119.769270][ T4945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.871636][ T5110] BTRFS info (device loop4): enabling ssd optimizations [ 120.482657][ T4283] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 120.739881][ T5143] loop2: detected capacity change from 0 to 32768 [ 120.914828][ T5143] XFS (loop2): Mounting V5 Filesystem [ 121.003252][ T5168] loop1: detected capacity change from 0 to 32768 [ 121.106136][ T5143] XFS (loop2): Ending clean mount [ 121.124788][ T5168] XFS (loop1): Mounting V5 Filesystem [ 121.222385][ T5168] XFS (loop1): Ending clean mount [ 121.305740][ T4276] XFS (loop1): Unmounting Filesystem [ 121.349270][ T4546] XFS (loop2): Unmounting Filesystem [ 121.653580][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 121.685420][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 121.765028][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 121.820911][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 121.900093][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 121.946213][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 121.968328][ T4945] device veth0_vlan entered promiscuous mode [ 121.996683][ T4945] device veth1_vlan entered promiscuous mode [ 122.142678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 122.162756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 122.181418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 122.201720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 122.238542][ T4945] device veth0_macvtap entered promiscuous mode [ 122.249581][ T5226] loop1: detected capacity change from 0 to 2048 [ 122.275925][ T4945] device veth1_macvtap entered promiscuous mode [ 122.293971][ T5226] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 122.352807][ T4945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.375055][ T5226] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.381936][ T4945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.425733][ T4945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.447747][ T4945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.471586][ T4945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.496367][ T4945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.530258][ T4945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.543757][ T4945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.555232][ T4945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.568669][ T4945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.583410][ T4945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.615089][ T4945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.626854][ T4945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.652096][ T4945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.684336][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 122.703150][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 122.760571][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 122.786688][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 122.841178][ T5236] loop1: detected capacity change from 0 to 22 [ 122.847510][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 122.862533][ T5236] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 122.886315][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 122.930891][ T5236] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 123.049073][ T4945] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.134635][ T4945] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.199822][ T4945] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.273429][ T4945] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.510529][ T125] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 123.593301][ T5248] loop8: detected capacity change from 0 to 7 [ 123.639869][ T5248] Dev loop8: unable to read RDB block 7 [ 123.670686][ T5248] loop8: unable to read partition table [ 123.702662][ T5248] loop8: partition table beyond EOD, truncated [ 123.710077][ T125] usb 3-1: Using ep0 maxpacket: 32 [ 123.725522][ T125] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 123.744252][ T4568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.795100][ T5248] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 123.814891][ T4568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.828875][ T125] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.959200][ T5238] loop4: detected capacity change from 0 to 131072 [ 123.982209][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 123.991801][ T125] usb 3-1: config 0 descriptor?? [ 123.996985][ T5238] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 124.005310][ T5238] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 124.014821][ T5238] F2FS-fs (loop4): invalid crc value [ 124.023759][ T125] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 124.051705][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.063022][ T5238] F2FS-fs (loop4): Found nat_bits in checkpoint [ 124.092150][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.141444][ T5238] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 124.148556][ T5238] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 124.169848][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 124.468331][ T5267] Set syz0 is full, maxelem 0 reached [ 124.799828][ T4387] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 125.004444][ T4387] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.016607][ T125] gspca_vc032x: reg_w err -71 [ 125.026793][ T125] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.036074][ T5282] loop5: detected capacity change from 0 to 256 [ 125.078576][ T125] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.081212][ T5282] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 125.099901][ T4387] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.134525][ T5282] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 125.139826][ T125] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.159217][ T125] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.164874][ T4387] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 125.179976][ T125] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.194587][ T5282] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 125.215594][ T125] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.221396][ T4387] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.245733][ T125] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.254762][ T4387] usb 2-1: config 0 descriptor?? [ 125.272267][ T125] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.277604][ T125] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.323191][ T5286] loop4: detected capacity change from 0 to 2048 [ 125.329644][ T125] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.355774][ T125] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.375928][ T125] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.398344][ T5286] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.407917][ T125] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.407961][ T125] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.407971][ T125] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.407981][ T125] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.407990][ T125] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.408000][ T125] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.408010][ T125] gspca_vc032x: Unknown sensor... [ 125.408063][ T125] vc032x: probe of 3-1:0.0 failed with error -22 [ 125.487419][ T125] usb 3-1: USB disconnect, device number 2 [ 126.010518][ T7] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 126.121797][ T4387] hid-led 0003:27B8:01ED.0006: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.1-1/input0 [ 126.215443][ T4387] hid-led 0003:27B8:01ED.0006: ThingM blink(1) v1 initialized [ 126.224590][ T7] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 126.258497][ T7] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 126.321003][ T7] usb 6-1: config 0 interface 0 has no altsetting 0 [ 126.361788][ T4703] usb 2-1: USB disconnect, device number 3 [ 126.371950][ T7] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 126.426845][ T7] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 126.479987][ T7] usb 6-1: Product: syz [ 126.494394][ T7] usb 6-1: Manufacturer: syz [ 126.499051][ T7] usb 6-1: SerialNumber: syz [ 126.546334][ T5314] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 126.566244][ T7] usb 6-1: config 0 descriptor?? [ 126.646637][ T7] usb 6-1: selecting invalid altsetting 0 [ 126.669616][ T5305] fido_id[5305]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 126.826130][ T5292] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 126.888248][ T7] usb 6-1: USB disconnect, device number 2 [ 127.166341][ T5330] loop1: detected capacity change from 0 to 1024 [ 127.248362][ T4390] udevd[4390]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 127.268216][ T5330] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 127.340398][ T5330] ================================================================== [ 127.348520][ T5330] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x965/0x1e90 [ 127.356314][ T5330] Read of size 18446744073709551588 at addr ffff888075770840 by task syz.1.261/5330 [ 127.365728][ T5330] [ 127.368100][ T5330] CPU: 0 PID: 5330 Comm: syz.1.261 Not tainted syzkaller #0 [ 127.375510][ T5330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 127.385610][ T5330] Call Trace: [ 127.389016][ T5330] [ 127.391984][ T5330] dump_stack_lvl+0x188/0x24e [ 127.396707][ T5330] ? __lock_acquire+0x7d10/0x7d10 [ 127.401779][ T5330] ? show_regs_print_info+0x12/0x12 [ 127.407025][ T5330] ? load_image+0x400/0x400 [ 127.411570][ T5330] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 127.417081][ T5330] ? __virt_addr_valid+0x188/0x540 [ 127.422240][ T5330] ? __virt_addr_valid+0x465/0x540 [ 127.427405][ T5330] ? ext4_xattr_set_entry+0x965/0x1e90 [ 127.432912][ T5330] print_report+0xa8/0x210 [ 127.437376][ T5330] kasan_report+0x10b/0x140 [ 127.442023][ T5330] ? ext4_xattr_set_entry+0x965/0x1e90 [ 127.447538][ T5330] ? ext4_xattr_set_entry+0x965/0x1e90 [ 127.453050][ T5330] kasan_check_range+0x235/0x290 [ 127.458037][ T5330] ? ext4_xattr_set_entry+0x965/0x1e90 [ 127.463545][ T5330] memmove+0x25/0x60 [ 127.467487][ T5330] ext4_xattr_set_entry+0x965/0x1e90 [ 127.472828][ T5330] ext4_xattr_block_set+0xae4/0x32b0 [ 127.478255][ T5330] ? ext4_destroy_inode+0x200/0x200 [ 127.483765][ T5330] ? proc_nr_inodes+0x2f0/0x2f0 [ 127.488670][ T5330] ? _raw_spin_unlock+0x24/0x40 [ 127.493563][ T5330] ? iput+0x768/0x980 [ 127.497595][ T5330] ? ext4_xattr_block_find+0x2b0/0x2b0 [ 127.503105][ T5330] ? ext4_xattr_ibody_set+0x509/0x690 [ 127.508526][ T5330] ext4_xattr_set_handle+0x1338/0x1570 [ 127.514043][ T5330] ? ext4_xattr_inode_free_quota+0x1b0/0x1b0 [ 127.520079][ T5330] ext4_xattr_set+0x242/0x320 [ 127.524820][ T5330] ? ext4_xattr_set_credits+0x290/0x290 [ 127.530412][ T5330] ? posix_xattr_acl+0x8f/0xb0 [ 127.535231][ T5330] ? evm_protect_xattr+0x333/0x9d0 [ 127.540388][ T5330] ? ext4_xattr_trusted_get+0x40/0x40 [ 127.545807][ T5330] __vfs_setxattr+0x3e0/0x420 [ 127.550540][ T5330] __vfs_setxattr_noperm+0x129/0x5e0 [ 127.555878][ T5330] vfs_setxattr+0x167/0x2e0 [ 127.560432][ T5330] ? xattr_permission+0x500/0x500 [ 127.565508][ T5330] ? _copy_from_user+0x10b/0x170 [ 127.570492][ T5330] ? setxattr+0x2ce/0x360 [ 127.574871][ T5330] setxattr+0x346/0x360 [ 127.579085][ T5330] ? path_setxattr+0x290/0x290 [ 127.583916][ T5330] ? __mnt_want_write+0x21f/0x2a0 [ 127.588993][ T5330] path_setxattr+0x147/0x290 [ 127.593637][ T5330] ? simple_xattr_list_add+0xf0/0xf0 [ 127.598974][ T5330] ? lock_chain_count+0x20/0x20 [ 127.603875][ T5330] __x64_sys_lsetxattr+0xb4/0xd0 [ 127.608857][ T5330] do_syscall_64+0x4c/0xa0 [ 127.613320][ T5330] ? clear_bhb_loop+0x60/0xb0 [ 127.618044][ T5330] ? clear_bhb_loop+0x60/0xb0 [ 127.622764][ T5330] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 127.628703][ T5330] RIP: 0033:0x7ffa1e19acb9 [ 127.633168][ T5330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.652806][ T5330] RSP: 002b:00007ffa1f002028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 127.661256][ T5330] RAX: ffffffffffffffda RBX: 00007ffa1e415fa0 RCX: 00007ffa1e19acb9 [ 127.669265][ T5330] RDX: 0000200000000000 RSI: 0000200000000180 RDI: 00002000000001c0 [ 127.677273][ T5330] RBP: 00007ffa1e208bf7 R08: 0000000000000000 R09: 0000000000000000 [ 127.685278][ T5330] R10: 0000000000000361 R11: 0000000000000246 R12: 0000000000000000 [ 127.693284][ T5330] R13: 00007ffa1e416038 R14: 00007ffa1e415fa0 R15: 00007ffd5d6ead48 [ 127.701302][ T5330] [ 127.704348][ T5330] [ 127.706706][ T5330] Allocated by task 5330: [ 127.711061][ T5330] kasan_set_track+0x4b/0x70 [ 127.715701][ T5330] __kasan_kmalloc+0x8e/0xa0 [ 127.720341][ T5330] __kmalloc_node_track_caller+0xae/0x230 [ 127.726119][ T5330] kmemdup+0x27/0x60 [ 127.730066][ T5330] ext4_xattr_block_set+0x9e6/0x32b0 [ 127.735398][ T5330] ext4_xattr_set_handle+0x1338/0x1570 [ 127.740993][ T5330] ext4_xattr_set+0x242/0x320 [ 127.745714][ T5330] __vfs_setxattr+0x3e0/0x420 [ 127.750434][ T5330] __vfs_setxattr_noperm+0x129/0x5e0 [ 127.755756][ T5330] vfs_setxattr+0x167/0x2e0 [ 127.760302][ T5330] setxattr+0x346/0x360 [ 127.764496][ T5330] path_setxattr+0x147/0x290 [ 127.769138][ T5330] __x64_sys_lsetxattr+0xb4/0xd0 [ 127.774120][ T5330] do_syscall_64+0x4c/0xa0 [ 127.778575][ T5330] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 127.784501][ T5330] [ 127.786851][ T5330] Last potentially related work creation: [ 127.792582][ T5330] kasan_save_stack+0x3a/0x60 [ 127.797302][ T5330] __kasan_record_aux_stack+0xb2/0xc0 [ 127.802726][ T5330] call_rcu+0x14f/0x990 [ 127.806930][ T5330] process_one_work+0x8a2/0x1160 [ 127.811912][ T5330] worker_thread+0xaa2/0x1270 [ 127.816632][ T5330] kthread+0x29d/0x330 [ 127.820749][ T5330] ret_from_fork+0x1f/0x30 [ 127.825211][ T5330] [ 127.827565][ T5330] The buggy address belongs to the object at ffff888075770800 [ 127.827565][ T5330] which belongs to the cache kmalloc-1k of size 1024 [ 127.841647][ T5330] The buggy address is located 64 bytes inside of [ 127.841647][ T5330] 1024-byte region [ffff888075770800, ffff888075770c00) [ 127.854953][ T5330] [ 127.857296][ T5330] The buggy address belongs to the physical page: [ 127.863740][ T5330] page:ffffea0001d5dc00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x75770 [ 127.873921][ T5330] head:ffffea0001d5dc00 order:3 compound_mapcount:0 compound_pincount:0 [ 127.882278][ T5330] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 127.890308][ T5330] raw: 00fff00000010200 ffffea0000992a00 dead000000000003 ffff888017441dc0 [ 127.898920][ T5330] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 127.907533][ T5330] page dumped because: kasan: bad access detected [ 127.913966][ T5330] page_owner tracks the page as allocated [ 127.919716][ T5330] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4267, tgid 4267 (syz-executor), ts 73048593245, free_ts 73002128223 [ 127.940500][ T5330] post_alloc_hook+0x173/0x1a0 [ 127.945312][ T5330] get_page_from_freelist+0x1a1e/0x1ab0 [ 127.950902][ T5330] __alloc_pages+0x1ec/0x4f0 [ 127.955532][ T5330] alloc_slab_page+0x5d/0x160 [ 127.960249][ T5330] new_slab+0x87/0x2c0 [ 127.964356][ T5330] ___slab_alloc+0xbc6/0x1240 [ 127.969071][ T5330] __kmem_cache_alloc_node+0x1a0/0x260 [ 127.974573][ T5330] __kmalloc_node_track_caller+0x9e/0x230 [ 127.980342][ T5330] __alloc_skb+0x22a/0x7e0 [ 127.984807][ T5330] inet6_rt_notify+0xb0/0x240 [ 127.989531][ T5330] fib6_add+0x1db0/0x3d10 [ 127.993894][ T5330] ip6_ins_rt+0xd3/0x130 [ 127.998173][ T5330] __ipv6_ifa_notify+0x4e7/0xe60 [ 128.003143][ T5330] add_addr+0x1b3/0x2c0 [ 128.007335][ T5330] add_v4_addrs+0x76e/0xcc0 [ 128.011874][ T5330] addrconf_init_auto_addrs+0x7bb/0xaf0 [ 128.017461][ T5330] page last free stack trace: [ 128.022157][ T5330] free_unref_page_prepare+0x8b4/0x9a0 [ 128.027666][ T5330] free_unref_page+0x2e/0x3f0 [ 128.032385][ T5330] qlist_free_all+0x76/0xe0 [ 128.036926][ T5330] kasan_quarantine_reduce+0x144/0x160 [ 128.042423][ T5330] __kasan_slab_alloc+0x1e/0x80 [ 128.047322][ T5330] slab_post_alloc_hook+0x4b/0x480 [ 128.052477][ T5330] __kmem_cache_alloc_node+0x140/0x260 [ 128.057967][ T5330] kmalloc_trace+0x26/0xe0 [ 128.062424][ T5330] ref_tracker_alloc+0x14e/0x4b0 [ 128.067406][ T5330] netdev_queue_update_kobjects+0x18d/0x480 [ 128.073342][ T5330] netdev_register_kobject+0x273/0x320 [ 128.078841][ T5330] register_netdevice+0x12dd/0x1ae0 [ 128.084090][ T5330] nsim_create+0x35f/0x410 [ 128.088549][ T5330] __nsim_dev_port_add+0x703/0xb70 [ 128.093713][ T5330] nsim_dev_port_add_all+0x35/0xe0 [ 128.098862][ T5330] nsim_drv_probe+0x841/0xb20 [ 128.103581][ T5330] [ 128.105936][ T5330] Memory state around the buggy address: [ 128.111593][ T5330] ffff888075770700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 128.119687][ T5330] ffff888075770780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 128.127782][ T5330] >ffff888075770800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 128.135873][ T5330] ^ [ 128.142053][ T5330] ffff888075770880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 128.150152][ T5330] ffff888075770900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 128.158240][ T5330] ================================================================== [ 128.166341][ C0] vkms_vblank_simulate: vblank timer overrun [ 128.247502][ T5330] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 128.254751][ T5330] CPU: 0 PID: 5330 Comm: syz.1.261 Not tainted syzkaller #0 [ 128.262072][ T5330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 128.272160][ T5330] Call Trace: [ 128.275469][ T5330] [ 128.278434][ T5330] dump_stack_lvl+0x188/0x24e [ 128.283162][ T5330] ? memcpy+0x3c/0x60 [ 128.287186][ T5330] ? show_regs_print_info+0x12/0x12 [ 128.292436][ T5330] ? load_image+0x400/0x400 [ 128.296979][ T5330] panic+0x2e5/0x730 [ 128.300936][ T5330] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 128.307139][ T5330] ? bpf_jit_dump+0xd0/0xd0 [ 128.311700][ T5330] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 128.317715][ T5330] ? _raw_spin_unlock+0x40/0x40 [ 128.322591][ T5330] check_panic_on_warn+0x80/0xa0 [ 128.327573][ T5330] ? ext4_xattr_set_entry+0x965/0x1e90 [ 128.333057][ T5330] end_report+0x66/0x110 [ 128.337331][ T5330] kasan_report+0x118/0x140 [ 128.341861][ T5330] ? ext4_xattr_set_entry+0x965/0x1e90 [ 128.347350][ T5330] ? ext4_xattr_set_entry+0x965/0x1e90 [ 128.352839][ T5330] kasan_check_range+0x235/0x290 [ 128.357802][ T5330] ? ext4_xattr_set_entry+0x965/0x1e90 [ 128.363280][ T5330] memmove+0x25/0x60 [ 128.367194][ T5330] ext4_xattr_set_entry+0x965/0x1e90 [ 128.372524][ T5330] ext4_xattr_block_set+0xae4/0x32b0 [ 128.377840][ T5330] ? ext4_destroy_inode+0x200/0x200 [ 128.383064][ T5330] ? proc_nr_inodes+0x2f0/0x2f0 [ 128.387943][ T5330] ? _raw_spin_unlock+0x24/0x40 [ 128.392819][ T5330] ? iput+0x768/0x980 [ 128.396824][ T5330] ? ext4_xattr_block_find+0x2b0/0x2b0 [ 128.402309][ T5330] ? ext4_xattr_ibody_set+0x509/0x690 [ 128.407709][ T5330] ext4_xattr_set_handle+0x1338/0x1570 [ 128.413198][ T5330] ? ext4_xattr_inode_free_quota+0x1b0/0x1b0 [ 128.419213][ T5330] ext4_xattr_set+0x242/0x320 [ 128.423918][ T5330] ? ext4_xattr_set_credits+0x290/0x290 [ 128.429501][ T5330] ? posix_xattr_acl+0x8f/0xb0 [ 128.434290][ T5330] ? evm_protect_xattr+0x333/0x9d0 [ 128.439430][ T5330] ? ext4_xattr_trusted_get+0x40/0x40 [ 128.444827][ T5330] __vfs_setxattr+0x3e0/0x420 [ 128.449530][ T5330] __vfs_setxattr_noperm+0x129/0x5e0 [ 128.454872][ T5330] vfs_setxattr+0x167/0x2e0 [ 128.459413][ T5330] ? xattr_permission+0x500/0x500 [ 128.464464][ T5330] ? _copy_from_user+0x10b/0x170 [ 128.469428][ T5330] ? setxattr+0x2ce/0x360 [ 128.473827][ T5330] setxattr+0x346/0x360 [ 128.478047][ T5330] ? path_setxattr+0x290/0x290 [ 128.482876][ T5330] ? __mnt_want_write+0x21f/0x2a0 [ 128.487932][ T5330] path_setxattr+0x147/0x290 [ 128.492555][ T5330] ? simple_xattr_list_add+0xf0/0xf0 [ 128.497870][ T5330] ? lock_chain_count+0x20/0x20 [ 128.502755][ T5330] __x64_sys_lsetxattr+0xb4/0xd0 [ 128.507716][ T5330] do_syscall_64+0x4c/0xa0 [ 128.512160][ T5330] ? clear_bhb_loop+0x60/0xb0 [ 128.516858][ T5330] ? clear_bhb_loop+0x60/0xb0 [ 128.521556][ T5330] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 128.527470][ T5330] RIP: 0033:0x7ffa1e19acb9 [ 128.531902][ T5330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.551531][ T5330] RSP: 002b:00007ffa1f002028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 128.559967][ T5330] RAX: ffffffffffffffda RBX: 00007ffa1e415fa0 RCX: 00007ffa1e19acb9 [ 128.567964][ T5330] RDX: 0000200000000000 RSI: 0000200000000180 RDI: 00002000000001c0 [ 128.575955][ T5330] RBP: 00007ffa1e208bf7 R08: 0000000000000000 R09: 0000000000000000 [ 128.583951][ T5330] R10: 0000000000000361 R11: 0000000000000246 R12: 0000000000000000 [ 128.591943][ T5330] R13: 00007ffa1e416038 R14: 00007ffa1e415fa0 R15: 00007ffd5d6ead48 [ 128.599943][ T5330] [ 128.603537][ T5330] Kernel Offset: disabled [ 128.607864][ T5330] Rebooting in 86400 seconds..