last executing test programs: 7.260201463s ago: executing program 4 (id=108): socket$inet_sctp(0x2, 0x5, 0x84) mq_open(&(0x7f0000000400)='@[\x00', 0x40, 0x30, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYRES64=0x0], 0x11, 0x236, &(0x7f0000000000)="$eJzs3TFrE2EYB/DHNm1DFjuLw4GLU1C/wSEVxAMhkkEnD6pLK8J1OZ3uY/gZ/Eh+jEzdTpIrTRujiyav6f1+EPInfw6ey5A3w/sm7x9+Ojv9fPGx/fEthsMsBhFNXEYcx17sR+fe1fPeIh/GTU0AALtmMinz1DOwWVWVlwcRcfRLM/2eZCAAAAAAAAAAAAD+mv3/ANA/9v/ffVWVl6Or72+32f8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApHPZtvfbPzxSzwcA/HvWfwDoH+s/APSP9R8A+ufN23ev8qI4mWTZMGLW1O381VlTTyNGEfHiZXHyJFs4Xl41q+vp/iLN+6ddn93uD66vf7a2P4zHj7p+3j1/Xaz0R3G6jTcAAAAAAAAAAAAAAAAAAAAA/gPj7Nra8/3j8e/6Lt34fYCV8/uDeDDY2m0AAAAAAAAAAAAAAAAAAADATrv48vWsPD//UAmC0NMwWlOl/mQCAAAAAAAAAAAAAAAAAID+WR76TT0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKSz/P//zYXU9wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0w88AAAD//9vbk2A=") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$sock_ifreq(0xffffffffffffffff, 0x8949, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x22) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x8) 6.76847837s ago: executing program 4 (id=112): r0 = fsopen(&(0x7f0000000140)='mqueue\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x25) mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) 6.14425767s ago: executing program 4 (id=117): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380100001000130700000000fcdbdf2520010000000000000000000000000001ac14143d000000000000000000000000000000004c9fe2d23a8d5d210002000000005c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000fe32000000fe80000000000000000000000000001b0000000000000000000000000000000000000000000000000a0000000000000000000000000000000000080000000000000000000000000043050000000000000400000000000000ffffffffffffff7f0000000000000000000000000000000000000000000000000000000028bd7000003500000a00040022"], 0x138}, 0x1, 0x0, 0x0, 0x880}, 0x0) 5.748448748s ago: executing program 4 (id=122): setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r0, 0xc1007c00, 0x0) 5.532358609s ago: executing program 4 (id=125): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x6e) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x564b043a, 0xb, 0xffff, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.256197246s ago: executing program 4 (id=127): r0 = inotify_init() r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x9132, 0xffffffffffffffff, 0x9aa9b000) move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x3c7}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_uring_setup(0x57eb, &(0x7f0000000140)={0x0, 0x0, 0x3000, 0x0, 0x2a1}) r4 = io_uring_setup(0x4fee, 0x0) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(r1, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000780)={0x0, {{0xa, 0x4e24, 0x6589e3, @mcast1, 0x8}}, {{0xa, 0x4e24, 0x4, @private1, 0xfffffff8}}}, 0x108) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) close_range(r0, 0xffffffffffffffff, 0x0) r5 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r5, &(0x7f0000f62000/0x1000)=nil, 0x7000) 3.035307449s ago: executing program 3 (id=141): socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x7c8e57edab868d16, 0x0, '\x00', 0x0, 0x2}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB], 0xfe33) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7fff0000}]}) io_setup(0x82a5, &(0x7f0000000080)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x4, 0x0, 0x0, 0xffffffff}}}}]}, 0x4c}}, 0x0) 2.853894687s ago: executing program 3 (id=143): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x800, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0xc) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000240)=0x8) 2.772643414s ago: executing program 2 (id=144): r0 = openat$fb0(0xffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f00000000c0)={0x0, 0x2}) 2.680306003s ago: executing program 3 (id=145): syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000001080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x21408, 0x0, 0x3, 0x0, &(0x7f0000006380)) mount(0x0, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)='ceph\x00', 0x0, 0x0) 2.532080907s ago: executing program 3 (id=147): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffd}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x18}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000a80)=0x2) syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x2000048, &(0x7f0000000180)={[{@dax_never}]}, 0x1, 0xb9f3, &(0x7f0000017e40)="$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") truncate(&(0x7f00000000c0)='./file1\x00', 0x8000008) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) 2.435844436s ago: executing program 2 (id=148): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x2, @loopback, 0xd1f8}, {0xa, 0x2, 0xfffffffe, @loopback}, r1, 0x40099d}}, 0x48) writev(r0, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000002800)=ANY=[@ANYBLOB="73686f727461642c756e64656c6574652c73657373696f6e3d30303030000800003030303030303030303139302c6d6f64653d30303030303030303030303030303030303030303030352c726f6f746469723d30303030303030303030303030303030303030352c646d6f64653d30303030303030303030303030303030303030303030362c696f636861727365743d6370313235312c696f636861727365743d6b6f69382d722c6e6f7672732c0084f5b23d82aacbefd1de1daab7394a9b4696461da9ab46f2d71c895d8c"], 0xfc, 0xc41, &(0x7f0000001b80)="$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") r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) open_by_handle_at(r2, 0x0, 0x121000) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000940)={[{@uid={'uid', 0x3d, 0xee01}}, {@nls={'nls', 0x3d, 'maccroatian'}}, {@uid}, {@nobarrier}, {@gid}, {@gid}, {@gid}]}, 0x44, 0x70c, &(0x7f00000027c0)="$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") r4 = syz_open_procfs(0x0, 0x0) pwritev(r4, 0x0, 0x0, 0xe94, 0xa) r5 = openat(0xffffffffffffff9c, 0x0, 0x80000, 0x0) getdents64(r5, &(0x7f0000000080)=""/4096, 0x1000) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000000)=@ethtool_stats={0x19}}) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x20, &(0x7f0000000000)="0bbb268dd6ffa808000000005d0f000000000000000000a8fa01727f000000d41000000000000000290000003b660000", 0x30) r7 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r7, 0x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x61) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fcdbdf2501"], 0x30}, 0x1, 0x0, 0x0, 0x2010}, 0x80) 1.920745456s ago: executing program 0 (id=150): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x414082, &(0x7f0000000d80)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX=0x0, @ANYBLOB="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"/280, @ANYRESOCT, @ANYRESHEX=0x0, @ANYBLOB="fd7c4f095f9c27bafc062028ed8073836f93d09515b00eccdbc2413a73f774a11e2e915151d707a2fe975593a5ddd29cbf8965084f0624846f0f4bb7179d18b06c541ab9aee57021cae51ed1c27de4e5e027d349c4c2a424f04148d822b273465b494ee58721cb8b0dd662072a92b2c5a91429c7c1dcfa5aa00ae505151b9bf5544ed9cf8261b5a3bfa8b14c61ce96d81c"], 0x44, 0x6ff, &(0x7f0000000480)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) mknod$loop(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8000, 0x1) 1.920549296s ago: executing program 1 (id=151): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bc2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {}, {0xfff3, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20040000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 1.584244268s ago: executing program 1 (id=152): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000056000000008eb5a86c0000000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='rss_stat\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 1.424251763s ago: executing program 3 (id=153): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0xc000054}, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @broadcast}, 0x10) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) dup3(r4, r3, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f00000001c0)={0x4, 0xffffffffffffffff, 0x1}) finit_module(r4, 0x0, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x81}) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e1d, @broadcast}, 0x4) sendto$inet(r3, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x77e54afafa08ad78, 0x0) recvfrom(r1, &(0x7f0000000100)=""/10, 0xa, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000000), 0xfffffffffffffff8, 0xa200) 1.347420541s ago: executing program 0 (id=154): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000210001"], 0x24}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.220247833s ago: executing program 2 (id=155): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x841, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8080000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x140) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r3, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.220136483s ago: executing program 1 (id=156): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x40009) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f00000004c0)=0x3) 1.111563424s ago: executing program 0 (id=157): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r2, 0x4018aee2, 0x0) 967.377608ms ago: executing program 1 (id=158): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xfcffffffffffffff, &(0x7f0000000440)='B'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 860.316648ms ago: executing program 2 (id=159): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000240)='./file1\x00', 0x2000082, &(0x7f0000000300)={[{@uni_xlate}, {@utf8}, {@rodir}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@uni_xlate}, {@shortname_mixed}, {@rodir}, {@uni_xlateno}, {@shortname_winnt}, {@utf8}, {@uni_xlate}, {@uni_xlate}]}, 0x1, 0x361, &(0x7f0000000900)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 766.355827ms ago: executing program 0 (id=160): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) openat$sndseq(0xffffff9c, &(0x7f0000000040), 0x81) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x2000, 0x3, &(0x7f0000ff7000/0x2000)=nil) syz_open_dev$vim2m(&(0x7f0000000000), 0x100000001, 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 735.79716ms ago: executing program 1 (id=161): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f00000000c0)="6b5ea0cd187ede3e538bc3543948db92", 0x10}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, r0, 0x0) ioctl(r0, 0x1, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x8, &(0x7f0000000040)={[{@oldalloc}, {@discard}, {@data_journal}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}]}, 0x3, 0x43b, &(0x7f0000000200)="$eJzs3MtvG8UfAPDv2kn6Sx+/mKo8mhYIFETEI2nSUnrgAgKJA0hIcCjHkKRVqNugJki0iiAgVI6oEnfEEYm/gBNcEHBC4gp3VKlCubT0ZLT2buI4dh5uEgf8+UibzOzOaubr3bFnduIE0LWG0h9JxMGI+D0iBmrZ1QWGar/uLC1M/r20MJlEpfLWX0m13O2lhcm8aH7egTxTiih8lsSxJvXOXb12caJcnr6S5UfnL70/Onf12nMzlyYuTF+Yvjx+9uzpU2MvnBl/flviTOO6PfjR7PGjr71z443Jczfe/fnbJI+/IY4tKbQ8MrTeaU9WKm1Vt1cdqksnPSvJDU6rtH752A3FiEgvV2+1/w9EMVYu3kC8+mlHGwfsqL71Dy9WgP+wdDQPdKP8gz6d/+bbLgw79oxbL9UmQGncd7KtdqRneWrf2zC/3U5DEXFu8e5X6Rb38hwCAGCTvk/HP882G/8V4oG6cv/P1lBKEXFfRByOiDMRcSQi7o+oln0wIh7aYv2NiyRrxz+Fm20Ftknp+O/FbG1r9fhveWWiVMxyh6rx9ybnZ8rTJ7PXZDh696X5sXXq+OGV375odax+/Jduaf35WDBrx82efavPmZqYn7iXmOvd+iRisKdZ/MnySkASEUcjYrDNOmae/uZ4q2Mbx7+zKl9HPFW7/ovREH8uWX99cvR/UZ4+OZrfFWv98uv1N1vV3+n40+u/v+n9vxx/Kalfr53beh3X//i85Zym3fu/L3l71b4PJ+bnr4xF9CWv1xpdv3+8odz4Svk0/uETzfv/4Vh5JY5FRHoTPxwRj0TEo1nbH4uIxyPixDrx//TyE++1H//OSuOfioi72fOAja//SqIvGvc0TxQv/vjdqkpLW4k/vf6nq6nhbM9m3v8206727mYAAAD49ylExMFICiPL6UJhZKT2N/xHYn+hPDs3/8z52Q8uT9W+I1CK3kL+pGug7nnoWDatz/PjDflT2XPjL4v91fzI5Gx5qtPBQ5c70KL/p/4sdrp1wI7r6XQDgI7R/6F76f/QvfR/6F5N+n9/J9oB7L5q/2/4V00fd6gtwO5q+Py37AddxPwfupf+D91L/4euNNcfG39JXkJiTSIKe6IZEjuU6PQ7EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPb4JwAA///5++Y6") 268.299715ms ago: executing program 0 (id=162): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast2, @in=@loopback, 0xfffd, 0x0, 0x4e24, 0x0, 0x2}, {0x0, 0x1, 0x1, 0x7, 0x400000000000, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x8}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in=@empty, 0x1, 0x32}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3502, 0x1, 0x0, 0x0, 0x8, 0xfffffffd, 0x10}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) 246.673127ms ago: executing program 2 (id=163): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 72.509514ms ago: executing program 1 (id=164): r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x841, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xffffffffffffffff) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x28, r3, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='|'}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4810}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r7, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 20.261468ms ago: executing program 3 (id=165): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x414082, &(0x7f0000000d80)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX=0x0, @ANYBLOB="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"/280, @ANYRESOCT, @ANYRESHEX=0x0, @ANYBLOB="fd7c4f095f9c27bafc062028ed8073836f93d09515b00eccdbc2413a73f774a11e2e915151d707a2fe975593a5ddd29cbf8965084f0624846f0f4bb7179d18b06c541ab9aee57021cae51ed1c27de4e5e027d349c4c2a424f04148d822b273465b494ee58721cb8b0dd662072a92b2c5a91429c7c1dcfa5aa00ae505151b9bf5544ed9cf8261b5a3bfa8b14c61ce96d81c"], 0x44, 0x6ff, &(0x7f0000000480)="$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") mknod$loop(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8000, 0x1) 20.067328ms ago: executing program 0 (id=166): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "75287ad1ee602ec4452a04ea7cdcd151bb2cd9893bc31f80718316d9bd3517076db9ad1f6a120d8be6d7f81cd81ec2757d0386e7d95f0669b740a5418d69d0", 0x4}, 0x58) 0s ago: executing program 2 (id=167): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) splice(r0, 0x0, r4, 0x0, 0x80, 0x6) write$bt_hci(r4, &(0x7f0000000e80)={0x1, @write_class_of_dev={{0xc24, 0x3}, {"8d2c6f"}}}, 0x7) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) write(r2, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000001080)={0x40, r5, 0x1, 0xfffffffe, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}, @ETHTOOL_A_BITSET_VALUE={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x40}}, 0x8084) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.6' (ED25519) to the list of known hosts. [ 67.845962][ T4254] cgroup: Unknown subsys name 'net' [ 67.986427][ T4254] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.362050][ T4254] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 71.214951][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.221507][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.556508][ T4277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.566355][ T4282] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.574768][ T4278] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.578391][ T4282] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.584591][ T4278] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.591075][ T4282] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.600491][ T4278] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.605022][ T4282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.612021][ T4278] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.620049][ T4282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.625247][ T4278] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.631645][ T4282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.639587][ T4278] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.652648][ T4282] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.653870][ T4278] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.662808][ T4282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.674136][ T4278] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.681480][ T4278] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.690018][ T4278] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.697207][ T4278] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.704555][ T4278] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.711714][ T4278] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.718947][ T4278] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.727643][ T4272] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.734953][ T4272] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.742544][ T4282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.749735][ T4282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.778014][ T4284] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.786140][ T4284] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 71.793547][ T4284] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.254845][ T4265] chnl_net:caif_netlink_parms(): no params data found [ 72.267063][ T4280] chnl_net:caif_netlink_parms(): no params data found [ 72.287058][ T4264] chnl_net:caif_netlink_parms(): no params data found [ 72.372132][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 72.421271][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 72.467334][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.474813][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.484571][ T4265] device bridge_slave_0 entered promiscuous mode [ 72.523146][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.530255][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.538266][ T4265] device bridge_slave_1 entered promiscuous mode [ 72.552358][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.559448][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.567639][ T4264] device bridge_slave_0 entered promiscuous mode [ 72.597789][ T4280] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.605117][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.613550][ T4280] device bridge_slave_0 entered promiscuous mode [ 72.621326][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.628416][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.636635][ T4264] device bridge_slave_1 entered promiscuous mode [ 72.646994][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.656224][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.664593][ T4271] device bridge_slave_0 entered promiscuous mode [ 72.681130][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.688322][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.697077][ T4280] device bridge_slave_1 entered promiscuous mode [ 72.716208][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.723381][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.731414][ T4271] device bridge_slave_1 entered promiscuous mode [ 72.748705][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.786781][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.805844][ T4264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.824673][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.851906][ T4280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.862817][ T4280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.873732][ T4264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.891807][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.903695][ T4265] team0: Port device team_slave_0 added [ 72.931508][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.938733][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.946642][ T4273] device bridge_slave_0 entered promiscuous mode [ 72.958621][ T4265] team0: Port device team_slave_1 added [ 72.985224][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.992540][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.000428][ T4273] device bridge_slave_1 entered promiscuous mode [ 73.025391][ T4271] team0: Port device team_slave_0 added [ 73.033444][ T4280] team0: Port device team_slave_0 added [ 73.041407][ T4271] team0: Port device team_slave_1 added [ 73.049138][ T4264] team0: Port device team_slave_0 added [ 73.071247][ T4280] team0: Port device team_slave_1 added [ 73.087415][ T4264] team0: Port device team_slave_1 added [ 73.094921][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.106519][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.116739][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.123787][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.149824][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.201546][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.208540][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.234632][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.252989][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.259976][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.285963][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.316935][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.324083][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.350228][ T4280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.362017][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.368998][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.398795][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.411021][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.417996][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.443980][ T4264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.457770][ T4273] team0: Port device team_slave_0 added [ 73.466585][ T4273] team0: Port device team_slave_1 added [ 73.474038][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.481075][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.507236][ T4280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.522068][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.529045][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.555254][ T4264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.612344][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.619330][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.645468][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.668150][ T4271] device hsr_slave_0 entered promiscuous mode [ 73.675627][ T4271] device hsr_slave_1 entered promiscuous mode [ 73.686225][ T4265] device hsr_slave_0 entered promiscuous mode [ 73.693163][ T4265] device hsr_slave_1 entered promiscuous mode [ 73.699783][ T4265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.707796][ T4265] Cannot create hsr debugfs directory [ 73.714417][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.721855][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.748050][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.831063][ T4280] device hsr_slave_0 entered promiscuous mode [ 73.837698][ T4280] device hsr_slave_1 entered promiscuous mode [ 73.844490][ T4280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.852943][ T4285] Bluetooth: hci4: command 0x0409 tx timeout [ 73.853271][ T4285] Bluetooth: hci2: command 0x0409 tx timeout [ 73.859062][ T4280] Cannot create hsr debugfs directory [ 73.865405][ T4283] Bluetooth: hci1: command 0x0409 tx timeout [ 73.865971][ T4283] Bluetooth: hci3: command 0x0409 tx timeout [ 73.871156][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 73.893046][ T4264] device hsr_slave_0 entered promiscuous mode [ 73.899794][ T4264] device hsr_slave_1 entered promiscuous mode [ 73.906481][ T4264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.914157][ T4264] Cannot create hsr debugfs directory [ 73.986348][ T4273] device hsr_slave_0 entered promiscuous mode [ 73.993786][ T4273] device hsr_slave_1 entered promiscuous mode [ 74.000329][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.008247][ T4273] Cannot create hsr debugfs directory [ 74.239352][ T4271] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.281574][ T4271] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.311553][ T4271] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.320423][ T4271] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.345150][ T4265] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.365704][ T4265] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.376746][ T4265] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.409779][ T4265] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.473439][ T4280] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.506852][ T4280] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.515775][ T4280] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.524834][ T4280] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.539847][ T4273] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.552390][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.559882][ T4273] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.582617][ T4273] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.594096][ T4273] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.632786][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.645733][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.670565][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.712009][ T4264] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.730797][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.741165][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.750460][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.757810][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.766446][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.775238][ T4264] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.785863][ T4264] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.804172][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.814097][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.823633][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.830727][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.854251][ T4264] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.878204][ T4280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.891517][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.900519][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.926574][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.946770][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.956606][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.968785][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.977404][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.986608][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.002571][ T4280] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.016736][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.033316][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.041851][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.049564][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.057974][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.066508][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.075425][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.094556][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.103803][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.113056][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.120182][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.128590][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.139261][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.147963][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.155063][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.165877][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.174367][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.183049][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.197291][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.206324][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.215453][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.222661][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.234722][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.244796][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.254379][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.261538][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.298389][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.306579][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.320214][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.328876][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.338092][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.347144][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.356113][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.364811][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.374671][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.383794][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.392446][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.400672][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.409308][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.418043][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.427775][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.451895][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.470496][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.484168][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.493121][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.502298][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.528800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.542875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.571740][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.578876][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.617685][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.626665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.656624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.666153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.676254][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.683441][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.698194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.708271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.741764][ T4264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.759936][ T4265] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.774847][ T4265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.790256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.799248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.813821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.824321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.833495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.842227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.850734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.860376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.869276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.907843][ T4264] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.931257][ T48] Bluetooth: hci2: command 0x041b tx timeout [ 75.937376][ T48] Bluetooth: hci3: command 0x041b tx timeout [ 75.944154][ T4277] Bluetooth: hci1: command 0x041b tx timeout [ 75.944172][ T4283] Bluetooth: hci0: command 0x041b tx timeout [ 75.944202][ T4283] Bluetooth: hci4: command 0x041b tx timeout [ 75.969232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.991584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.020298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.055353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.088536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.099561][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.110559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.125094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.137792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.152816][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.159957][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.174016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.186087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.197092][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.204347][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.241473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.250151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.268392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.278107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.289422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.298349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.312796][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.342703][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.352133][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.373357][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.383507][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.392776][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.428033][ T4264] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.446526][ T4264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.463061][ T4280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.477133][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.485551][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.500627][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.509446][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.517245][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.524914][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.532843][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.541645][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.550706][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.559508][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.608940][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.655685][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.673372][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.691594][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.716941][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.752263][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.761902][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.770629][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.782157][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.792004][ T4280] device veth0_vlan entered promiscuous mode [ 76.815770][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.838366][ T4280] device veth1_vlan entered promiscuous mode [ 76.856881][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.873289][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.889855][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.898782][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.908846][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.921868][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.929666][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.991143][ T4271] device veth0_vlan entered promiscuous mode [ 76.998176][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.009358][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.028842][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.041233][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.051275][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.069104][ T4265] device veth0_vlan entered promiscuous mode [ 77.083026][ T4280] device veth0_macvtap entered promiscuous mode [ 77.096411][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.104921][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.114544][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.129107][ T4271] device veth1_vlan entered promiscuous mode [ 77.145668][ T4280] device veth1_macvtap entered promiscuous mode [ 77.164897][ T4265] device veth1_vlan entered promiscuous mode [ 77.178192][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.188186][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.202808][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.216756][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.224952][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.233638][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.241383][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.254541][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.289892][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.305321][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.314523][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.323035][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.330456][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.338610][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.347727][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.356958][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.365729][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.378462][ T4271] device veth0_macvtap entered promiscuous mode [ 77.390778][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.411930][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.444688][ T4271] device veth1_macvtap entered promiscuous mode [ 77.461920][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.475748][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.485462][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.500595][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.514095][ T4280] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.527743][ T4280] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.551066][ T4280] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.559796][ T4280] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.580467][ T4273] device veth0_vlan entered promiscuous mode [ 77.598477][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.610239][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.624969][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.632992][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.642603][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.651288][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.659656][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.668972][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.677966][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.686766][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.699832][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.718223][ T4265] device veth0_macvtap entered promiscuous mode [ 77.755899][ T4265] device veth1_macvtap entered promiscuous mode [ 77.768299][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.786450][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.798891][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.812287][ T4273] device veth1_vlan entered promiscuous mode [ 77.837813][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.857044][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.867605][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.878380][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.890323][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.898357][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.907123][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.916125][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.925123][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.934792][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.944296][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.953972][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.968430][ T4271] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.979454][ T4271] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.990378][ T4271] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.999363][ T4271] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.011413][ T4283] Bluetooth: hci4: command 0x040f tx timeout [ 78.017468][ T4283] Bluetooth: hci3: command 0x040f tx timeout [ 78.027444][ T4283] Bluetooth: hci1: command 0x040f tx timeout [ 78.031329][ T4285] Bluetooth: hci0: command 0x040f tx timeout [ 78.033864][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 78.097137][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.116081][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.126109][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.136691][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.148083][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.180152][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.193123][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.205423][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.214571][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.226190][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.241799][ T4265] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.250535][ T4265] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.263456][ T4265] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.272454][ T4265] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.290150][ T4273] device veth0_macvtap entered promiscuous mode [ 78.351605][ T4273] device veth1_macvtap entered promiscuous mode [ 78.386625][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.402328][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.418787][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.430024][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.440748][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.452297][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.462673][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.473377][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.485096][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.518144][ T4351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.526424][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.537227][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.545508][ T4351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.554542][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.565357][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.575968][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.584427][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.607404][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.624126][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.636097][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.647001][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.657585][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.668546][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.680254][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.705159][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.716127][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.725668][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.735859][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.757796][ T4351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.770394][ T4351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.785608][ T4273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.795752][ T4273] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.805010][ T4273] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.815266][ T4273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.837275][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.853676][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.862933][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.887832][ T4264] device veth0_vlan entered promiscuous mode [ 78.903461][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.908032][ T4264] device veth1_vlan entered promiscuous mode [ 78.921505][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.922204][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.933434][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.944633][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.954848][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.978816][ T4351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.994106][ T4351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.025031][ T4264] device veth0_macvtap entered promiscuous mode [ 79.045900][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 79.047035][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.062479][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.074572][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.083546][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.092601][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.104037][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.123336][ T4264] device veth1_macvtap entered promiscuous mode [ 79.160986][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.169216][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.190172][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.230578][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.244243][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.257697][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.269572][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.283013][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.298533][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.309161][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.322509][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.340013][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.356592][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.401220][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.412012][ T4348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.423691][ T4348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.432434][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.442594][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.453705][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.465174][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.477780][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.489966][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.502278][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.514072][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.526227][ T4264] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.536057][ T14] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 79.544673][ T4264] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.555387][ T4264] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.568267][ T4264] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.589593][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.607655][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.619725][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.719266][ T4351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.729008][ T4351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.739695][ T14] usb 4-1: config 128 has an invalid interface number: 148 but max is 0 [ 79.750404][ T4348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.751730][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.769126][ T4393] loop1: detected capacity change from 0 to 1024 [ 79.784631][ T14] usb 4-1: config 128 has no interface number 0 [ 79.788989][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.798632][ T4348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.806747][ T14] usb 4-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 79.848137][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.875835][ T14] usb 4-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 79.908474][ T4351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.915114][ T14] usb 4-1: config 128 interface 148 has no altsetting 0 [ 79.926791][ T4351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.940155][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.951461][ T14] usb 4-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 80.016175][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.033033][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.069131][ T7] usb 1-1: config 0 has no interfaces? [ 80.080878][ T14] usb 4-1: Product: syz [ 80.085080][ T14] usb 4-1: Manufacturer: syz [ 80.089745][ T14] usb 4-1: SerialNumber: syz [ 80.095672][ T4395] loop4: detected capacity change from 0 to 1024 [ 80.104887][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 80.104907][ T4277] Bluetooth: hci1: command 0x0419 tx timeout [ 80.110942][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 80.110967][ T48] Bluetooth: hci3: command 0x0419 tx timeout [ 80.110989][ T48] Bluetooth: hci4: command 0x0419 tx timeout [ 80.137722][ T56] hfsplus: b-tree write err: -5, ino 4 [ 80.143323][ T4395] EXT4-fs: inline encryption not supported [ 80.143888][ T7] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 80.171799][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.185044][ T7] usb 1-1: config 0 descriptor?? [ 80.197353][ T4395] EXT4-fs: Ignoring removed orlov option [ 80.299258][ T4395] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 80.335298][ T26] audit: type=1800 audit(1766715512.209:2): pid=4395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 80.385220][ T14] usb 4-1: USB disconnect, device number 2 [ 80.455694][ T4387] mmap: syz.0.1 (4387) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 80.591721][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 80.643297][ T4318] usb 1-1: USB disconnect, device number 2 [ 80.767856][ T4419] device syzkaller0 entered promiscuous mode [ 80.971926][ T22] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 81.021118][ T14] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 81.052561][ T4311] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 81.173727][ T22] usb 2-1: unable to get BOS descriptor or descriptor too short [ 81.196534][ T22] usb 2-1: not running at top speed; connect to a high speed hub [ 81.216831][ T14] usb 4-1: Using ep0 maxpacket: 8 [ 81.225840][ T14] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 81.236035][ T22] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.246537][ T4311] usb 5-1: Using ep0 maxpacket: 16 [ 81.254933][ T4311] usb 5-1: config 1 interface 0 has no altsetting 0 [ 81.261815][ T14] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 81.261838][ T14] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 81.261860][ T14] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 81.261881][ T14] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.261914][ T14] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 81.261934][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.353972][ T22] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 81.377064][ T22] usb 2-1: string descriptor 0 read error: -22 [ 81.391742][ T4311] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=96.c5 [ 81.401121][ T22] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 81.410208][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.428424][ T4311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.454536][ T4311] usb 5-1: Product: syz [ 81.458764][ T4311] usb 5-1: Manufacturer: syz [ 81.485704][ T22] usb 2-1: 0:2 : does not exist [ 81.493169][ T14] usb 4-1: usb_control_msg returned -32 [ 81.496101][ T4311] usb 5-1: SerialNumber: syz [ 81.498988][ T14] usbtmc 4-1:16.0: can't read capabilities [ 81.757030][ T4311] usb 5-1: Waiting for MOTU Microbook II to boot up... [ 81.774255][ T4311] usb 5-1: failed setting the sample rate for Motu MicroBook II: -22 [ 81.811183][ T4311] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 81.861742][ T4311] usb 5-1: USB disconnect, device number 2 [ 82.049301][ T4440] loop2: detected capacity change from 0 to 65536 [ 82.056927][ T4440] ======================================================= [ 82.056927][ T4440] WARNING: The mand mount option has been deprecated and [ 82.056927][ T4440] and is ignored by this kernel. Remove the mand [ 82.056927][ T4440] option from the mount to silence this warning. [ 82.056927][ T4440] ======================================================= [ 82.091813][ C0] vkms_vblank_simulate: vblank timer overrun [ 82.181443][ T4440] XFS (loop2): Mounting V5 Filesystem [ 82.259585][ T4440] XFS (loop2): Ending clean mount [ 82.292038][ T22] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 82.312565][ T22] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 82.363944][ T22] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 82.396366][ T22] usb 2-1: USB disconnect, device number 2 [ 82.402382][ T4449] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 82.435823][ T4273] XFS (loop2): Unmounting Filesystem [ 82.552277][ T4340] usb 4-1: USB disconnect, device number 3 [ 82.608964][ T4449] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 82.621457][ T4449] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.631848][ T4449] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 82.641178][ T4449] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.652533][ T4449] usb 1-1: config 0 descriptor?? [ 82.956393][ T4459] device syzkaller0 entered promiscuous mode [ 83.086608][ T4449] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 83.103975][ T4449] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 83.127448][ T4449] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 83.150994][ T4449] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 83.165830][ T4449] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 83.174618][ T4449] elan 0003:04F3:0755.0001: failed to start in urb: -90 [ 83.190075][ T4449] elan 0003:04F3:0755.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 83.283073][ T4449] usb 1-1: USB disconnect, device number 3 [ 83.352563][ T4470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.31'. [ 83.437729][ T4470] device hsr_slave_0 left promiscuous mode [ 83.462587][ T4470] device hsr_slave_1 left promiscuous mode [ 83.480088][ T4471] loop4: detected capacity change from 0 to 4096 [ 83.522242][ T4468] fido_id[4468]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 83.523630][ T4475] loop3: detected capacity change from 0 to 1024 [ 83.552004][ T4475] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.591719][ T4471] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 83.636334][ T4475] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 83.665889][ T26] audit: type=1800 audit(1766715515.539:3): pid=4475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.33" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 83.771972][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 83.805370][ T26] audit: type=1326 audit(1766715515.679:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4478 comm="syz.1.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6d98f749 code=0x7ffc0000 [ 83.835201][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 83.861430][ T4471] ntfs3: loop4: ntfs_sync_inode r=1e failed, -22. [ 83.891362][ T4471] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 83.920858][ T26] audit: type=1326 audit(1766715515.699:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4478 comm="syz.1.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6d98f749 code=0x7ffc0000 [ 83.971725][ T4480] ntfs3: loop4: ntfs3_write_inode r=1e failed, -22. [ 84.011102][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 84.025576][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.038619][ T26] audit: type=1326 audit(1766715515.709:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4478 comm="syz.1.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f5b6d98f749 code=0x7ffc0000 [ 84.078072][ T26] audit: type=1326 audit(1766715515.709:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4478 comm="syz.1.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6d98f749 code=0x7ffc0000 [ 84.087594][ T7] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 84.126472][ T4486] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.174516][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.178451][ T26] audit: type=1326 audit(1766715515.709:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4478 comm="syz.1.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6d98f749 code=0x7ffc0000 [ 84.244785][ T26] audit: type=1326 audit(1766715515.719:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4478 comm="syz.1.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5b6d98f749 code=0x7ffc0000 [ 84.250707][ T7] usb 3-1: config 0 descriptor?? [ 84.276406][ T4489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.37'. [ 84.290881][ T4264] ntfs3: loop4: ntfs_evict_inode r=1e failed, -22. [ 84.310312][ T4489] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.319384][ T4489] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.328556][ T4489] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.338044][ T4489] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.375167][ T26] audit: type=1326 audit(1766715515.719:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4478 comm="syz.1.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6d98f749 code=0x7ffc0000 [ 84.446749][ T4489] device vxlan0 entered promiscuous mode [ 84.470195][ T26] audit: type=1326 audit(1766715515.719:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4478 comm="syz.1.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6d98f749 code=0x7ffc0000 [ 84.558197][ T4494] loop3: detected capacity change from 0 to 128 [ 84.689755][ T4271] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 84.700997][ T4271] FAT-fs (loop3): Filesystem has been set read-only [ 84.731222][ T4326] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 84.777590][ T7] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x4 [ 84.801410][ T7] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 84.834872][ T4500] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.846239][ T4500] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.950954][ T4326] usb 5-1: Using ep0 maxpacket: 16 [ 84.958348][ T4326] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 84.997664][ T4326] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 85.008028][ T4326] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 85.017252][ T4326] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 85.026205][ T4326] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 85.035312][ T4326] usb 5-1: config 0 has no interface number 0 [ 85.067069][ T4326] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 85.088464][ T4326] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 85.125198][ T4326] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 85.175379][ T4326] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 85.206716][ T4326] usb 5-1: config 0 interface 125 has no altsetting 0 [ 85.220115][ T4326] usb 5-1: config 0 interface 125 has no altsetting 2 [ 85.235593][ T7] usb 3-1: USB disconnect, device number 2 [ 85.243816][ T4326] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 85.256809][ T4326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.296337][ T4326] usb 5-1: Product: syz [ 85.300641][ T4326] usb 5-1: Manufacturer: syz [ 85.305820][ T4326] usb 5-1: SerialNumber: syz [ 85.329763][ T4326] usb 5-1: config 0 descriptor?? [ 85.345299][ T4326] usb 5-1: selecting invalid altsetting 2 [ 85.466672][ T4516] loop1: detected capacity change from 0 to 16 [ 85.488928][ T4516] erofs: (device loop1): erofs_init_device: empty device tag @ pos 0 [ 85.634923][ T4518] loop1: detected capacity change from 0 to 64 [ 85.673766][ T4522] trusted_key: encrypted_key: insufficient parameters specified [ 85.683339][ T4521] loop2: detected capacity change from 0 to 256 [ 85.727689][ T4521] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5f26ded4, utbl_chksum : 0xe619d30d) [ 86.075150][ T4527] loop0: detected capacity change from 0 to 4096 [ 86.137853][ T4527] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 86.166858][ T4527] UDF-fs: Scanning with blocksize 512 failed [ 86.176527][ C0] usb 5-1: async_complete: urb error -32 [ 86.183537][ T4326] get_1284_register: usb error -32 [ 86.188788][ T4326] uss720: probe of 5-1:0.125 failed with error -32 [ 86.214681][ T4311] usb 5-1: USB disconnect, device number 3 [ 86.253675][ T4527] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 86.291741][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 86.291755][ T26] audit: type=1800 audit(1766715518.169:15): pid=4527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.51" name="file1" dev="loop0" ino=1334 res=0 errno=0 [ 86.497875][ T4542] loop1: detected capacity change from 0 to 1024 [ 86.583905][ T953] cfg80211: failed to load regulatory.db [ 86.632332][ T4544] loop0: detected capacity change from 0 to 4096 [ 86.649419][ T4544] ntfs3: Unknown parameter 'windows_names' [ 86.947165][ T4552] loop1: detected capacity change from 0 to 4096 [ 87.018629][ T4554] loop0: detected capacity change from 0 to 256 [ 87.060133][ T4554] exFAT-fs (loop0): invalid fs_name [ 87.104501][ T4554] exFAT-fs (loop0): failed to read boot sector [ 87.110708][ T4554] exFAT-fs (loop0): failed to recognize exfat type [ 87.141078][ T953] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 87.189251][ T4561] loop3: detected capacity change from 0 to 128 [ 87.259642][ T4561] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 87.337161][ T4561] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 87.369080][ C1] vkms_vblank_simulate: vblank timer overrun [ 87.375954][ T953] usb 5-1: Using ep0 maxpacket: 8 [ 87.385450][ T953] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 87.414994][ T953] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 87.458810][ T953] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 87.482670][ T953] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 87.504965][ T953] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.551174][ T953] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 87.575448][ T953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.681958][ T4561] syz.3.62 (pid 4561) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 87.812641][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 87.964518][ T4326] kernel write not supported for file /40/loginuid (pid: 4326 comm: kworker/0:4) [ 88.115381][ T4569] loop0: detected capacity change from 0 to 65536 [ 88.131196][ T953] usb 5-1: usb_control_msg returned -32 [ 88.136816][ T953] usbtmc 5-1:16.0: can't read capabilities [ 88.154152][ T4577] loop1: detected capacity change from 0 to 128 [ 88.229248][ T4569] XFS (loop0): Mounting V5 Filesystem [ 88.367445][ T4569] XFS (loop0): Ending clean mount [ 88.377960][ T4569] XFS (loop0): Quotacheck needed: Please wait. [ 88.437576][ T4569] XFS (loop0): Quotacheck: Done. [ 88.919381][ T26] audit: type=1800 audit(1766715520.789:16): pid=4592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.65" name="file1" dev="loop0" ino=38 res=0 errno=0 [ 89.232509][ T4280] XFS (loop0): Unmounting Filesystem [ 89.710602][ T4615] loop2: detected capacity change from 0 to 256 [ 89.731222][ T22] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 89.907725][ T4326] usb 5-1: USB disconnect, device number 4 [ 89.928820][ T22] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 89.952289][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.995592][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.018451][ T22] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 90.049457][ T22] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 90.070226][ T22] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 90.088802][ T22] usb 2-1: Manufacturer: syz [ 90.097639][ T22] usb 2-1: config 0 descriptor?? [ 90.111078][ T4340] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 90.208833][ T4629] binder: 4625:4629 unknown command 1074553619 [ 90.220326][ T4629] binder: 4625:4629 ioctl c0306201 200000000040 returned -22 [ 90.230410][ T4629] binder: 4625:4629 unknown command 1074553620 [ 90.236789][ T4629] binder: 4625:4629 ioctl c0306201 200000000640 returned -22 [ 90.300998][ T4340] usb 3-1: Using ep0 maxpacket: 8 [ 90.309235][ T4340] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 90.319621][ T4340] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.364751][ T4340] pvrusb2: Hardware description: Terratec Grabster AV400 [ 90.378870][ T4340] pvrusb2: ********** [ 90.386491][ T4340] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 90.400431][ T4340] pvrusb2: Important functionality might not be entirely working. [ 90.409643][ T4632] netlink: 12 bytes leftover after parsing attributes in process `syz.0.84'. [ 90.425411][ T4340] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 90.439252][ T4340] pvrusb2: ********** [ 90.514439][ T22] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 90.523297][ T22] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 90.554396][ T22] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 90.575250][ T2309] pvrusb2: Invalid write control endpoint [ 90.744469][ T2309] pvrusb2: Invalid write control endpoint [ 90.759715][ T2309] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 90.785930][ T2309] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 90.797254][ T4634] loop0: detected capacity change from 0 to 4096 [ 90.815253][ T4634] ntfs3: Unknown parameter 'windows_names' [ 90.819162][ T4311] usb 2-1: USB disconnect, device number 3 [ 90.828406][ T2309] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 90.870975][ T2309] pvrusb2: Device being rendered inoperable [ 90.885748][ T2309] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 90.893495][ T2309] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 90.898245][ T4340] usb 3-1: USB disconnect, device number 3 [ 90.917623][ T2309] pvrusb2: Attached sub-driver cx25840 [ 90.923937][ T2309] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 90.992344][ T2309] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 91.115311][ T4642] loop0: detected capacity change from 0 to 512 [ 91.147790][ T4644] loop4: detected capacity change from 0 to 2048 [ 91.156844][ T4642] EXT4-fs: Ignoring removed orlov option [ 91.174361][ T4642] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c119, mo2=0002] [ 91.188455][ T4646] loop3: detected capacity change from 0 to 1024 [ 91.199797][ T4644] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 91.209405][ T4642] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2196: inode #15: comm syz.0.88: corrupted in-inode xattr [ 91.231003][ T4642] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.88: couldn't read orphan inode 15 (err -117) [ 91.269382][ T4642] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 91.355319][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 91.499881][ T46] hfsplus: b-tree write err: -5, ino 4 [ 91.580416][ T4654] loop1: detected capacity change from 0 to 22 [ 91.611180][ T4654] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 91.641081][ T4654] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 91.696980][ T4658] loop2: detected capacity change from 0 to 16 [ 91.717034][ T4658] erofs: (device loop2): mounted with root inode @ nid 36. [ 91.831161][ T4661] EXT4-fs (loop4): Online defrag not supported with bigalloc [ 92.017055][ T4668] syz.3.97 uses obsolete (PF_INET,SOCK_PACKET) [ 92.104549][ T4643] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 92.150044][ T4643] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 758 with error 28 [ 92.183985][ T4643] EXT4-fs (loop4): This should not happen!! Data will be lost [ 92.183985][ T4643] [ 92.204391][ T4643] EXT4-fs (loop4): Total free blocks count 0 [ 92.213965][ T4643] EXT4-fs (loop4): Free/Dirty block details [ 92.249324][ T4643] EXT4-fs (loop4): free_blocks=2415919504 [ 92.256042][ T4643] EXT4-fs (loop4): dirty_blocks=768 [ 92.283836][ T4643] EXT4-fs (loop4): Block reservation details [ 92.290029][ T4643] EXT4-fs (loop4): i_reserved_data_blocks=48 [ 92.804472][ T4684] loop2: detected capacity change from 0 to 256 [ 92.855311][ T4684] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 92.894199][ T4683] loop3: detected capacity change from 0 to 32768 [ 92.904569][ T4683] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.104 (4683) [ 92.925802][ T4683] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 92.937036][ T4683] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 92.946728][ T4683] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 92.956363][ T4683] BTRFS info (device loop3): use zstd compression, level 3 [ 92.963678][ T4683] BTRFS info (device loop3): use zlib compression, level 3 [ 92.971472][ T4683] BTRFS info (device loop3): using free space tree [ 93.014782][ T4670] loop0: detected capacity change from 0 to 32768 [ 93.025524][ T4684] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 93.070454][ T4670] (syz.0.99,4670,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 93.086121][ T4670] (syz.0.99,4670,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 93.148264][ T4670] JBD2: Ignoring recovery information on journal [ 93.227602][ T4670] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 93.289206][ T4683] BTRFS info (device loop3): enabling ssd optimizations [ 93.387103][ T4710] loop4: detected capacity change from 0 to 512 [ 93.468246][ T4712] loop2: detected capacity change from 0 to 256 [ 93.633439][ T4271] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 93.952218][ T4280] ocfs2: Unmounting device (7,0) on (node local) [ 94.042271][ T4734] sctp: [Deprecated]: syz.0.113 (pid 4734) Use of struct sctp_assoc_value in delayed_ack socket option. [ 94.042271][ T4734] Use struct sctp_sack_info instead [ 94.290767][ T4715] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 94.340584][ T4748] netlink: 72 bytes leftover after parsing attributes in process `syz.4.117'. [ 94.366921][ T4742] loop2: detected capacity change from 0 to 2048 [ 94.437884][ T4742] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 94.498647][ T4742] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 94.566871][ T4742] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 94.902956][ T4761] loop2: detected capacity change from 0 to 1024 [ 94.923185][ T4763] loop0: detected capacity change from 0 to 256 [ 94.965818][ T4761] hfsplus: bad catalog entry type [ 94.997309][ T4763] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xd22393c8, utbl_chksum : 0xe619d30d) [ 95.050691][ T4767] loop3: detected capacity change from 0 to 128 [ 95.117255][ T4767] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 95.212611][ T4767] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.319690][ T26] audit: type=1800 audit(1766715527.189:17): pid=4767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.126" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 95.377881][ T4777] loop2: detected capacity change from 0 to 256 [ 95.428088][ T4777] FAT-fs (loop2): Directory bread(block 64) failed [ 95.460999][ T4777] FAT-fs (loop2): Directory bread(block 65) failed [ 95.501031][ T4777] FAT-fs (loop2): Directory bread(block 66) failed [ 95.507637][ T4777] FAT-fs (loop2): Directory bread(block 67) failed [ 95.530496][ T4777] FAT-fs (loop2): Directory bread(block 68) failed [ 95.537541][ T4777] FAT-fs (loop2): Directory bread(block 69) failed [ 95.545121][ T4777] FAT-fs (loop2): Directory bread(block 70) failed [ 95.552190][ T14] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 95.560225][ T4777] FAT-fs (loop2): Directory bread(block 71) failed [ 95.567581][ T4777] FAT-fs (loop2): Directory bread(block 72) failed [ 95.574876][ T4777] FAT-fs (loop2): Directory bread(block 73) failed [ 95.620985][ T4340] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 95.645791][ T4751] loop1: detected capacity change from 0 to 32768 [ 95.671907][ T4751] (syz.1.119,4751,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 95.716027][ T4751] (syz.1.119,4751,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 95.739314][ T4751] JBD2: Ignoring recovery information on journal [ 95.750621][ T14] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 95.780541][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.797687][ T4751] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 95.822506][ T4340] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 95.849178][ T14] usb 1-1: Product: syz [ 95.865385][ T4340] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 95.886491][ T14] usb 1-1: Manufacturer: syz [ 95.915595][ T14] usb 1-1: SerialNumber: syz [ 95.940634][ T4340] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 95.967558][ T4340] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.989792][ T4265] ocfs2: Unmounting device (7,1) on (node local) [ 96.025725][ T4340] usb 4-1: config 0 descriptor?? [ 96.294406][ T4340] usb 4-1: USB disconnect, device number 4 [ 96.475541][ T4789] loop1: detected capacity change from 0 to 512 [ 96.512697][ T4789] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c02c, mo2=0002] [ 96.530954][ T4789] System zones: 1-12 [ 96.539354][ T4789] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.134: error while reading EA inode 32 err=-116 [ 96.574658][ T4791] loop2: detected capacity change from 0 to 2048 [ 96.588647][ T14] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 96.602379][ T4789] EXT4-fs (loop1): Remounting filesystem read-only [ 96.626789][ T14] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 96.636909][ T4789] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2819: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 96.682953][ T14] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 96.751741][ T4793] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.766629][ T14] lan78xx: probe of 1-1:1.0 failed with error -32 [ 96.778773][ T4789] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.134: error while reading EA inode 32 err=-116 [ 96.866831][ T4789] EXT4-fs (loop1): Remounting filesystem read-only [ 96.879096][ T4789] EXT4-fs (loop1): 1 orphan inode deleted [ 96.892117][ T4789] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 96.905074][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 96.921804][ T4789] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.134: deleted inode referenced: 15 [ 96.958482][ T4789] EXT4-fs (loop1): Remounting filesystem read-only [ 97.080141][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 97.169352][ T26] audit: type=1326 audit(1766715529.039:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4799 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6d98f749 code=0x7ffc0000 [ 97.232955][ T26] audit: type=1326 audit(1766715529.079:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4799 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f5b6d98f749 code=0x7ffc0000 [ 97.312108][ T26] audit: type=1326 audit(1766715529.079:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4799 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6d98f749 code=0x7ffc0000 [ 97.343440][ T4805] netlink: 12 bytes leftover after parsing attributes in process `syz.1.139'. [ 97.446072][ T4809] loop1: detected capacity change from 0 to 128 [ 97.781052][ T4819] ceph: No source [ 98.162347][ T4827] loop2: detected capacity change from 0 to 2048 [ 98.242621][ T4827] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.406492][ T4823] loop3: detected capacity change from 0 to 65536 [ 98.436799][ T4732] usb 1-1: USB disconnect, device number 4 [ 98.529649][ T4823] XFS (loop3): Mounting V5 Filesystem [ 98.590581][ T4840] loop0: detected capacity change from 0 to 1024 [ 98.618584][ T4823] XFS (loop3): Ending clean mount [ 98.825682][ T46] hfsplus: b-tree write err: -5, ino 4 [ 98.850869][ T26] audit: type=1800 audit(1766715530.719:21): pid=4823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.147" name="file1" dev="loop3" ino=38 res=0 errno=0 [ 98.963764][ T4271] XFS (loop3): Unmounting Filesystem [ 99.498490][ T4859] binder: 4857:4859 ioctl c0306201 200000000280 returned -14 [ 99.572234][ T4863] loop2: detected capacity change from 0 to 256 [ 99.664084][ T4863] FAT-fs (loop2): Directory bread(block 64) failed [ 99.689577][ T4863] FAT-fs (loop2): Directory bread(block 65) failed [ 99.711312][ T4863] FAT-fs (loop2): Directory bread(block 66) failed [ 99.717891][ T4863] FAT-fs (loop2): Directory bread(block 67) failed [ 99.760939][ T4863] FAT-fs (loop2): Directory bread(block 68) failed [ 99.767540][ T4863] FAT-fs (loop2): Directory bread(block 69) failed [ 99.777168][ T4863] FAT-fs (loop2): Directory bread(block 70) failed [ 99.795833][ T4863] FAT-fs (loop2): Directory bread(block 71) failed [ 99.816627][ T4863] FAT-fs (loop2): Directory bread(block 72) failed [ 99.835727][ T4863] FAT-fs (loop2): Directory bread(block 73) failed [ 99.851661][ T4867] loop1: detected capacity change from 0 to 2048 [ 99.928642][ T4863] FAT-fs (loop2): Filesystem has been set read-only [ 99.968492][ T26] audit: type=1800 audit(1766715531.839:22): pid=4863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.159" name="cpu.stat" dev="loop2" ino=1048611 res=0 errno=0 [ 99.988654][ T4867] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 100.007994][ T4863] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006c61) [ 100.037349][ T4867] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 100.124782][ T4863] syz.2.159 (4863) used greatest stack depth: 20712 bytes left [ 100.271942][ T4875] syz.2.163[4875] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.272061][ T4875] syz.2.163[4875] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.321116][ T56] ------------[ cut here ]------------ [ 100.338388][ T56] kernel BUG at fs/ext4/inode.c:2760! [ 100.410534][ T4879] loop3: detected capacity change from 0 to 1024 [ 100.412694][ T56] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 100.423028][ T56] CPU: 0 PID: 56 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 100.430418][ T56] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 100.440490][ T56] Workqueue: writeback wb_workfn (flush-7:1) [ 100.446521][ T56] RIP: 0010:ext4_writepages+0x2e41/0x2e50 [ 100.452266][ T56] Code: c1 03 38 c1 0f 8c ac fd ff ff 4c 89 e7 e8 c7 87 ad ff e9 9f fd ff ff e8 7d 56 5d ff 0f 0b e8 76 56 5d ff 0f 0b e8 6f 56 5d ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 41 57 41 56 41 54 [ 100.471898][ T56] RSP: 0018:ffffc90001577040 EFLAGS: 00010293 [ 100.477993][ T56] RAX: ffffffff82238961 RBX: 000000c41000c000 RCX: ffff888018720000 [ 100.485974][ T56] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 100.493960][ T56] RBP: ffffc900015773b0 R08: dffffc0000000000 R09: ffffed100a7603ce [ 100.501951][ T56] R10: ffffed100a7603ce R11: 1ffff1100a7603cd R12: 1ffff920002aeee6 [ 100.509926][ T56] R13: dffffc0000000000 R14: 0000008000000000 R15: ffff888054284000 [ 100.517915][ T56] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 100.526853][ T56] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.533443][ T56] CR2: 000000110c399044 CR3: 0000000058543000 CR4: 00000000003506f0 [ 100.541461][ T56] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 100.549435][ T56] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 100.557410][ T56] Call Trace: [ 100.560697][ T56] [ 100.563666][ T56] ? verify_lock_unused+0x140/0x140 [ 100.568887][ T56] ? ext4_read_folio+0x370/0x370 [ 100.573835][ T56] ? __lock_acquire+0x13c0/0x7c50 [ 100.578880][ T56] ? verify_lock_unused+0x140/0x140 [ 100.584103][ T56] ? __lock_acquire+0x7c50/0x7c50 [ 100.589178][ T56] ? do_raw_spin_lock+0x11d/0x280 [ 100.594239][ T56] ? writeback_sb_inodes+0x441/0x17d0 [ 100.599636][ T56] ? do_raw_spin_unlock+0x11d/0x230 [ 100.604849][ T56] ? ext4_read_folio+0x370/0x370 [ 100.609790][ T56] do_writepages+0x3b7/0x610 [ 100.614408][ T56] ? __writepage+0x130/0x130 [ 100.619052][ T56] ? writeback_sb_inodes+0x6e5/0x17d0 [ 100.624479][ T56] ? __lock_acquire+0x7c50/0x7c50 [ 100.629528][ T56] ? do_raw_spin_lock+0x11d/0x280 [ 100.634570][ T56] __writeback_single_inode+0x156/0x1160 [ 100.640224][ T56] writeback_sb_inodes+0xad8/0x17d0 [ 100.645442][ T56] ? do_raw_spin_lock+0x11d/0x280 [ 100.650482][ T56] ? queue_io+0x5a0/0x5a0 [ 100.654824][ T56] ? rcu_is_watching+0x11/0xa0 [ 100.659642][ T56] wb_writeback+0x468/0xd00 [ 100.664165][ T56] ? percpu_ref_tryget+0x250/0x250 [ 100.669292][ T56] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 100.675301][ T56] ? _raw_spin_unlock_irq+0x1f/0x40 [ 100.680516][ T56] wb_workfn+0x435/0xec0 [ 100.684786][ T56] ? inode_wait_for_writeback+0x200/0x200 [ 100.690519][ T56] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 100.696508][ T56] ? read_lock_is_recursive+0x10/0x10 [ 100.701892][ T56] ? _raw_spin_unlock_irq+0x1f/0x40 [ 100.707124][ T56] ? process_one_work+0x7a1/0x1160 [ 100.712245][ T56] process_one_work+0x898/0x1160 [ 100.717199][ T56] ? worker_detach_from_pool+0x240/0x240 [ 100.722837][ T56] ? _raw_spin_lock_irq+0xab/0xe0 [ 100.727864][ T56] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 100.733238][ T56] ? kthread_data+0x4b/0xc0 [ 100.737795][ T56] worker_thread+0xaa2/0x1250 [ 100.742488][ T56] ? __kthread_parkme+0x162/0x1c0 [ 100.747533][ T56] kthread+0x29d/0x330 [ 100.751624][ T56] ? worker_clr_flags+0x1a0/0x1a0 [ 100.756680][ T56] ? kthread_blkcg+0xd0/0xd0 [ 100.761302][ T56] ret_from_fork+0x1f/0x30 [ 100.765748][ T56] [ 100.768785][ T56] Modules linked in: [ 100.789753][ T56] ---[ end trace 0000000000000000 ]--- [ 100.790057][ T46] hfsplus: b-tree write err: -5, ino 4 [ 100.795504][ T56] RIP: 0010:ext4_writepages+0x2e41/0x2e50 [ 100.806983][ T56] Code: c1 03 38 c1 0f 8c ac fd ff ff 4c 89 e7 e8 c7 87 ad ff e9 9f fd ff ff e8 7d 56 5d ff 0f 0b e8 76 56 5d ff 0f 0b e8 6f 56 5d ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 41 57 41 56 41 54 [ 100.827683][ T56] RSP: 0018:ffffc90001577040 EFLAGS: 00010293 [ 100.844121][ T56] RAX: ffffffff82238961 RBX: 000000c41000c000 RCX: ffff888018720000 [ 100.852451][ T56] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 100.860508][ T56] RBP: ffffc900015773b0 R08: dffffc0000000000 R09: ffffed100a7603ce [ 100.868814][ T56] R10: ffffed100a7603ce R11: 1ffff1100a7603cd R12: 1ffff920002aeee6 [ 100.877085][ T56] R13: dffffc0000000000 R14: 0000008000000000 R15: ffff888054284000 [ 100.895261][ T56] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 100.904735][ T56] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.913070][ T56] CR2: 00007f39b1c64f98 CR3: 000000002970c000 CR4: 00000000003506f0 [ 100.922813][ T56] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 100.931205][ T56] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 100.939322][ T56] Kernel panic - not syncing: Fatal exception [ 100.945993][ T56] Kernel Offset: disabled [ 100.950328][ T56] Rebooting in 86400 seconds..