last executing test programs: 1.98341638s ago: executing program 3 (id=463): syz_read_part_table(0x5e4, &(0x7f0000000000)="$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") socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000cc0)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xf}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7ff, 0x7ff, 0x10000000, 0x1}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x9751304b5dc4b606, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500001c000100004011"], 0xfdef) 1.631941019s ago: executing program 3 (id=472): mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000600), 0x2008800, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) capset(&(0x7f0000000e80)={0x20071026}, &(0x7f0000000040)={0x2, 0x200003, 0x0, 0x0, 0x3}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffffe, 0x300040ac, 0x0, 0xffff, 0x6, 0xfffffffe, 0x0, 0x0, 0x1, 0x100}}, 0x50) 1.557801381s ago: executing program 3 (id=473): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000001040)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0xb}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.300084577s ago: executing program 2 (id=477): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000008180)=[{{&(0x7f0000000400)={0xa, 0x4e21, 0x2, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000d40)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x10000}}], 0x18}}], 0x1, 0x4008080) 1.266622118s ago: executing program 2 (id=481): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x10, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e86dd", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.140073951s ago: executing program 2 (id=484): r0 = syz_usb_connect(0x0, 0x62, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d24060101030200010006000609240305050306058109240306010304050507"], 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000700)={0x14, &(0x7f0000000000)={0x0, 0x2b, 0x2, {0x2, 0xd}}, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x421}}}, 0x0) 1.139879341s ago: executing program 1 (id=485): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b031400e2ff020002004788001ca13bb1000011000088ca1a00", 0xa059, 0x0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x9, 0x6, @link_local}, 0x14) 1.091643783s ago: executing program 1 (id=486): socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) 972.001296ms ago: executing program 1 (id=488): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000001000000080000000b"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendto(r0, 0x0, 0x0, 0x24000840, 0x0, 0x0) 948.371966ms ago: executing program 1 (id=490): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x4, 0x400000, 0x0, 'queue1\x00', 0x2}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r1 = socket$netlink(0x10, 0x3, 0x4) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000180)={0xfffffff8, 0x6, 0x7, 0x0, 0x596b, 0x8}) syz_genetlink_get_family_id$nl80211(0x0, r1) setreuid(0xee01, 0xee01) writev(r1, 0x0, 0x0) 807.44413ms ago: executing program 0 (id=492): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') lseek(r0, 0x7fffffffffffffff, 0x1) 806.94249ms ago: executing program 4 (id=493): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa10812, &(0x7f0000000240)=ANY=[], 0x21, 0x14ff, &(0x7f0000000740)="$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") timer_create(0xfffffffffffffffc, 0x0, &(0x7f00000000c0)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000100)={{0x77359400}, {r1, r2+10000000}}, 0x0) syz_clone(0x10eb22f000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000780), 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, 0x0) 716.023662ms ago: executing program 0 (id=494): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0x4, 0x10}, {0x0, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040091}, 0x0) 692.779333ms ago: executing program 1 (id=495): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000080), 0xfc, 0x5b9, &(0x7f00000029c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x80000, 0x89) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x268, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x1, 0x1, 0x8, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x2, 0x0, 0x8, "008c"}, @global=@item_012={0x1, 0x1, 0x0, '\b'}, @global=@item_012={0x1, 0x1, 0x9, "01"}, @local=@item_4={0x3, 0x2, 0xa, "53b2b1df"}]}}, 0x0}, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20000010) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000050) 669.901553ms ago: executing program 3 (id=496): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req={0x8000, 0x6, 0x300, 0xfc}, 0x10) mmap(&(0x7f0000000000/0x30000)=nil, 0x30000, 0x1000001, 0x12, r0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) 667.050043ms ago: executing program 0 (id=497): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000380)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x54, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x1, 0x0, 0x0, 0x400, {[@timestamp={0x8, 0xa, 0x7ffffffe, 0x98c6}, @window={0x3, 0x3, 0x22}, @nop, @generic={0xfe, 0xb, "87bc559f00fdfddf5b"}, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec814f9bcfdfea9"}, @sack={0x5, 0x6, [0x1]}, @generic={0x3, 0x2}, @timestamp={0x8, 0xa, 0x9, 0xffff9bb2}]}}}}}}}}, 0x0) 563.397866ms ago: executing program 0 (id=498): socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7040000000000008500000001"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) 504.075677ms ago: executing program 0 (id=499): r0 = shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/120) 503.759857ms ago: executing program 3 (id=500): syz_read_part_table(0x5e4, &(0x7f0000000000)="$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") socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000cc0)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xf}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7ff, 0x7ff, 0x10000000, 0x1}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x9751304b5dc4b606, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500001c000100004011"], 0xfdef) 503.610587ms ago: executing program 2 (id=501): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file1\x00', 0x208008de, &(0x7f0000000b40)=ANY=[], 0x80, 0x150a, &(0x7f0000002080)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x300000f, 0x11, r0, 0xcfa3e000) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, 0x0) 494.107668ms ago: executing program 0 (id=502): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) open(0x0, 0x108843, 0x98) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000b4bffc)=0x10, 0x4) write(r1, &(0x7f0000000000)='\"', 0x1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 357.814131ms ago: executing program 4 (id=503): r0 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000080)=0x2, 0x4) 232.066954ms ago: executing program 4 (id=504): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x2d, 0x20040040) dup3(r1, r2, 0x0) connect$unix(r2, &(0x7f0000000340)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 227.953835ms ago: executing program 2 (id=505): rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x14, &(0x7f0000000840)={0x2, 0x4, 0x3ff}) rt_tgsigqueueinfo(r1, r0, 0x14, &(0x7f0000000480)={0x3d, 0x0, 0x4}) 222.004715ms ago: executing program 4 (id=506): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x39, 0x30, 0x38, 0x30, 0x30, 0x30, 0x36, 0x31, 0x30, 0x37, 0x30, 0x31]}, &(0x7f0000000100)={0x0, "00112233444566778899aabbccddeeff00112233445566778899aabbccddeeff0011fb2fa087e1a5a490aabbccddeeff001122334455667788d9aabbccddeeff", 0x41}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x38}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3d}, 0x48, r0) add_key$keyring(&(0x7f0000000300), &(0x7f0000000680)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x66, 0x64, 0x30, 0x63, 0x66]}, &(0x7f0000000740)={0x0, "001122334b0c66778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbddddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x35, 0x30, 0x35, 0x30, 0x30, 0x30, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x34, 0x62, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x37, 0x63, 0x66, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x33, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x32, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x32, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x62, 0xf]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x44}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r0) 166.363876ms ago: executing program 3 (id=507): syz_mount_image$ext4(&(0x7f0000002180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1008802, &(0x7f0000000d00)={[{@resgid}, {@abort}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0xac9}}, {@jqfmt_vfsold}, {@test_dummy_encryption_v1}, {@quota}, {@usrjquota}, {@errors_remount}, {}, {@auto_da_alloc}]}, 0x1, 0x606, &(0x7f0000000600)="$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") syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xd6) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) getdents64(r0, &(0x7f0000000180)=""/82, 0x52) 116.010267ms ago: executing program 4 (id=508): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="06000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xbe2, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xbd4, 0x3, 0x0, 0x0, 0x84, 0x0, @private=0xa010100, @broadcast}, "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"}}}}, 0x0) 103.356678ms ago: executing program 2 (id=509): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x404c8f0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc93f8b78040000ea0756", 0xe, 0x4041, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 87.303098ms ago: executing program 4 (id=510): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x1b4, &(0x7f0000000640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x1000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) 0s ago: executing program 1 (id=511): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_debugfs\x00', 0x1ff) unshare(0x8040480) mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r0, 0x8caf, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.163' (ED25519) to the list of known hosts. syzkaller login: [ 28.332622][ T4317] cgroup: Unknown subsys name 'net' [ 28.558288][ T4317] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.825040][ T4317] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 30.053999][ T4335] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.056270][ T4335] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.060289][ T4335] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.065850][ T4337] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.067741][ T4337] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.069747][ T4341] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.071643][ T4341] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.072267][ T4344] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.073252][ T4341] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.074717][ T4344] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.076375][ T4341] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.077210][ T4344] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.079348][ T4341] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.081574][ T4341] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.081760][ T4345] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 30.082993][ T4341] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.084358][ T4345] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.086476][ T4341] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.088070][ T4345] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.088253][ T4341] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.090878][ T4341] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 30.092232][ T4341] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.093662][ T4341] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 30.095705][ T4345] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.096630][ T4341] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.097314][ T4345] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 30.109977][ T4346] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.113108][ T4333] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.114704][ T4346] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 30.116599][ T4346] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.257973][ T4336] chnl_net:caif_netlink_parms(): no params data found [ 30.271642][ T4342] chnl_net:caif_netlink_parms(): no params data found [ 30.284997][ T4330] chnl_net:caif_netlink_parms(): no params data found [ 30.315866][ T4334] chnl_net:caif_netlink_parms(): no params data found [ 30.341617][ T4336] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.343042][ T4336] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.344770][ T4336] device bridge_slave_0 entered promiscuous mode [ 30.357563][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.358884][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.360592][ T4330] device bridge_slave_0 entered promiscuous mode [ 30.362488][ T4336] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.363750][ T4336] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.366025][ T4336] device bridge_slave_1 entered promiscuous mode [ 30.367736][ T4342] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.369051][ T4342] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.370769][ T4342] device bridge_slave_0 entered promiscuous mode [ 30.375986][ T4334] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.377223][ T4334] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.378797][ T4334] device bridge_slave_0 entered promiscuous mode [ 30.381540][ T4334] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.382795][ T4334] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.384411][ T4334] device bridge_slave_1 entered promiscuous mode [ 30.386300][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.387582][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.389181][ T4330] device bridge_slave_1 entered promiscuous mode [ 30.392783][ T4342] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.394020][ T4342] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.395900][ T4342] device bridge_slave_1 entered promiscuous mode [ 30.397535][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 30.412015][ T4336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.414821][ T4336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.424187][ T4342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.430940][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.435870][ T4334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.438461][ T4342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.442804][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.450770][ T4334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.460182][ T4336] team0: Port device team_slave_0 added [ 30.472544][ T4342] team0: Port device team_slave_0 added [ 30.476424][ T4342] team0: Port device team_slave_1 added [ 30.481672][ T4342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.482891][ T4342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.487530][ T4342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.490856][ T4336] team0: Port device team_slave_1 added [ 30.497440][ T4330] team0: Port device team_slave_0 added [ 30.502849][ T4336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.504001][ T4336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.508909][ T4336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.511209][ T4342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.512344][ T4342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.517703][ T4342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.520956][ T4334] team0: Port device team_slave_0 added [ 30.522263][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.523553][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.525230][ T4329] device bridge_slave_0 entered promiscuous mode [ 30.527575][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.528866][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.530440][ T4329] device bridge_slave_1 entered promiscuous mode [ 30.532569][ T4330] team0: Port device team_slave_1 added [ 30.533892][ T4336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.535128][ T4336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.540136][ T4336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.544441][ T4334] team0: Port device team_slave_1 added [ 30.554667][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.556248][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.560929][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.572266][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.574484][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.575775][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.579924][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.585065][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.586413][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.590642][ T4334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.600079][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.607640][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.608841][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.613189][ T4334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.666447][ T4342] device hsr_slave_0 entered promiscuous mode [ 30.715604][ T4342] device hsr_slave_1 entered promiscuous mode [ 30.796643][ T4330] device hsr_slave_0 entered promiscuous mode [ 30.835533][ T4330] device hsr_slave_1 entered promiscuous mode [ 30.905409][ T4330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.906788][ T4330] Cannot create hsr debugfs directory [ 30.946525][ T4336] device hsr_slave_0 entered promiscuous mode [ 30.985489][ T4336] device hsr_slave_1 entered promiscuous mode [ 31.025370][ T4336] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.026689][ T4336] Cannot create hsr debugfs directory [ 31.040561][ T4329] team0: Port device team_slave_0 added [ 31.052915][ T4329] team0: Port device team_slave_1 added [ 31.126485][ T4334] device hsr_slave_0 entered promiscuous mode [ 31.177926][ T4334] device hsr_slave_1 entered promiscuous mode [ 31.215390][ T4334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.216772][ T4334] Cannot create hsr debugfs directory [ 31.231697][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.233008][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.237610][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.248266][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.249595][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.254370][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.356397][ T4329] device hsr_slave_0 entered promiscuous mode [ 31.395646][ T4329] device hsr_slave_1 entered promiscuous mode [ 31.435421][ T4329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.436768][ T4329] Cannot create hsr debugfs directory [ 31.480561][ T4330] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.516661][ T4330] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.560676][ T4330] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.598321][ T4330] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.660478][ T4342] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.710515][ T4342] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.746570][ T4342] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.787074][ T4334] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.829713][ T4334] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.867499][ T4342] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.913961][ T4334] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.956606][ T4334] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.052132][ T4336] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.109520][ T4336] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.141023][ T4329] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.175595][ T4346] Bluetooth: hci4: command 0x0409 tx timeout [ 32.175727][ T4337] Bluetooth: hci1: command 0x0409 tx timeout [ 32.176823][ T4346] Bluetooth: hci2: command 0x0409 tx timeout [ 32.177841][ T4337] Bluetooth: hci3: command 0x0409 tx timeout [ 32.178889][ T4346] Bluetooth: hci0: command 0x0409 tx timeout [ 32.181263][ T4329] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.226594][ T4336] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.266576][ T4336] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.301382][ T4329] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.348795][ T4329] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.402971][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.416494][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.418860][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.429584][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.442083][ T4334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.448349][ T4342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.450221][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.452584][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.454411][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.455773][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.457933][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.469828][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.471808][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.473443][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.474797][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.489194][ T4334] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.490524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.492061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.493582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.495157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.503599][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.506289][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.511430][ T4336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.519271][ T4342] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.520791][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.522635][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.524247][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.525845][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.528686][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.530807][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.541535][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.543267][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.545727][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.547860][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.549638][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.551304][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.552884][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.554182][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.563203][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.566067][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.567950][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.569468][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.570739][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.572666][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.574305][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.578951][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.580647][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.582406][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.588585][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.590503][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.592134][ T1615] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.593360][ T1615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.594922][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.599651][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.608112][ T4336] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.609656][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.611517][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.613023][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.614620][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.619276][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.620936][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.624648][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.629703][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.631543][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.633177][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.634840][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.638383][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.641842][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.643997][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.647395][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.660889][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.662599][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.664296][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.682236][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.684080][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.686285][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.687509][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.689067][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.691849][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.693404][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.695032][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.697842][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.699754][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.701509][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.703396][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.705086][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.708430][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.710128][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.711766][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.713402][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.715121][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.718140][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.719791][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.721436][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.722788][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.724343][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.726852][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.730398][ T4334] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.732487][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.733987][ T4342] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.737023][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.741372][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.742989][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.744508][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.746690][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.748348][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.750014][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.751760][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.753338][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.754973][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.757071][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.758237][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.765075][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.773840][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.775609][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.776964][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.778569][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.780229][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.782021][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.783702][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.789213][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.791085][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.792770][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.800721][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.803811][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.807970][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.810438][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.818078][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.819742][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.836612][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.850532][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.852316][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.868667][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.871014][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.873113][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.888624][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.891858][ T4330] device veth0_vlan entered promiscuous mode [ 32.905983][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.907492][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.911758][ T4334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.916545][ T4330] device veth1_vlan entered promiscuous mode [ 32.921696][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.923771][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.925180][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.931269][ T4342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.952090][ T4330] device veth0_macvtap entered promiscuous mode [ 32.954679][ T4330] device veth1_macvtap entered promiscuous mode [ 32.963788][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.966033][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.967675][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.969270][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.976897][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.978655][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.980587][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.988240][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.990646][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.992006][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.993276][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.995076][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.997672][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.999107][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.008187][ T4336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.019025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.020749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.023290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.024832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.032105][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.033819][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.036718][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.038343][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.040650][ T4342] device veth0_vlan entered promiscuous mode [ 33.042807][ T4334] device veth0_vlan entered promiscuous mode [ 33.047593][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.051897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.053734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.060265][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.067381][ T4334] device veth1_vlan entered promiscuous mode [ 33.069129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.070798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.072494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.082033][ T4330] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.083748][ T4330] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.085964][ T4330] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.087515][ T4330] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.090883][ T4342] device veth1_vlan entered promiscuous mode [ 33.109146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.110979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.112660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.114277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.117838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.119507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.121043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.128668][ T4334] device veth0_macvtap entered promiscuous mode [ 33.144149][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.147590][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.149237][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.150986][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.152600][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.154854][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.156820][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.159416][ T4334] device veth1_macvtap entered promiscuous mode [ 33.161099][ T4336] device veth0_vlan entered promiscuous mode [ 33.164393][ T4342] device veth0_macvtap entered promiscuous mode [ 33.180309][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.181957][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.183644][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.188622][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.196272][ T4342] device veth1_macvtap entered promiscuous mode [ 33.207937][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.209916][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.212458][ T4342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.215397][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.217206][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.218809][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.225230][ T1615] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.227646][ T1615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.229969][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.232760][ T4336] device veth1_vlan entered promiscuous mode [ 33.234415][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.236686][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.238449][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.240132][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.242427][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.249646][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.251275][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.253045][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.255163][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.258111][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.260598][ T4342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.264926][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.269464][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.271231][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.273127][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.276570][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.277927][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.279593][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.281115][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.282768][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.285774][ T1615] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.287201][ T1615] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.289356][ T4342] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.291017][ T4342] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.292519][ T4342] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.294082][ T4342] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.302474][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.304289][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.308039][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.309721][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.311288][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.314399][ T4334] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.316093][ T4334] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.317595][ T4334] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.319091][ T4334] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.342506][ T4329] device veth0_vlan entered promiscuous mode [ 33.361443][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.363231][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.365009][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.388349][ T1615] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.389729][ T1615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.409786][ T4336] device veth0_macvtap entered promiscuous mode [ 33.414775][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.417250][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.423351][ T4329] device veth1_vlan entered promiscuous mode [ 33.429094][ T4412] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.430814][ T4412] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.452340][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.453734][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.455161][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.461255][ T4336] device veth1_macvtap entered promiscuous mode [ 33.465939][ T4412] device bridge_slave_1 left promiscuous mode [ 33.467430][ T4412] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.496639][ T4412] device bridge_slave_0 left promiscuous mode [ 33.497842][ T4412] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.767947][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.769555][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.772603][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.782989][ T4329] device veth0_macvtap entered promiscuous mode [ 33.784882][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.788798][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.790554][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.798897][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.800900][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.802674][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.804432][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.809292][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.810976][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.813537][ T4336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.817043][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.818764][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.821438][ T4329] device veth1_macvtap entered promiscuous mode [ 33.834074][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.836574][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.838345][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.840304][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.842031][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.843779][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.849837][ T4336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.852779][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.854436][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.857080][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.860321][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.861607][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.863022][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.868498][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.870270][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.872162][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.873896][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.877266][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.878975][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.880573][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.882344][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.891629][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.900139][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.902044][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.912195][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.914469][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.916623][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.918726][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.920467][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.922280][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.924024][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.926323][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.929758][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.931769][ T4418] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 33.933241][ T4418] IPv6: NLM_F_CREATE should be set when creating new route [ 33.935010][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.937478][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.947658][ T4336] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.949212][ T4336] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.950723][ T4336] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.952292][ T4336] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.963738][ T4329] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.966062][ T4329] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.967803][ T4329] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.969354][ T4329] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.047982][ T4422] device veth0_macvtap left promiscuous mode [ 34.087659][ T4424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9'. [ 34.237094][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.238534][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.240385][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.258093][ T4337] Bluetooth: hci3: command 0x041b tx timeout [ 34.258216][ T4331] Bluetooth: hci0: command 0x041b tx timeout [ 34.259266][ T4337] Bluetooth: hci2: command 0x041b tx timeout [ 34.260347][ T4331] Bluetooth: hci1: command 0x041b tx timeout [ 34.261384][ T4337] Bluetooth: hci4: command 0x041b tx timeout [ 34.273839][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.276029][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.278776][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.304403][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.306107][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.306124][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.306273][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.311690][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.313360][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.333283][ T4443] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 34.503132][ T4462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19'. [ 34.592774][ T4472] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 34.594288][ T4472] IPv6: NLM_F_CREATE should be set when creating new route [ 34.706165][ T4486] loop2: detected capacity change from 0 to 164 [ 34.711715][ T4486] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 34.858423][ T4502] Zero length message leads to an empty skb [ 34.962533][ T4516] loop4: detected capacity change from 0 to 164 [ 34.982534][ T4516] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 35.000492][ T4520] device syzkaller0 entered promiscuous mode [ 35.229254][ T4542] loop2: detected capacity change from 0 to 164 [ 35.238259][ T4542] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 35.959388][ T4329] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 35.962539][ T4329] CPU: 1 PID: 4329 Comm: syz-executor Not tainted syzkaller #0 [ 35.963889][ T4329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 35.965977][ T4329] Call trace: [ 35.966656][ T4329] dump_backtrace+0x1c4/0x1f0 [ 35.967582][ T4329] show_stack+0x2c/0x3c [ 35.968397][ T4329] __dump_stack+0x30/0x40 [ 35.969227][ T4329] dump_stack_lvl+0xf4/0x15c [ 35.970100][ T4329] dump_stack+0x1c/0x5c [ 35.970899][ T4329] dump_header+0xc0/0x724 [ 35.971751][ T4329] oom_kill_process+0x35c/0x660 [ 35.972693][ T4329] out_of_memory+0xbf0/0xf70 [ 35.973508][ T4329] mem_cgroup_out_of_memory+0x228/0x2d0 [ 35.974551][ T4329] try_charge_memcg+0xa4c/0x1390 [ 35.975582][ T4329] charge_memcg+0xa4/0x1f0 [ 35.976480][ T4329] mem_cgroup_swapin_charge_folio+0x270/0x3d4 [ 35.977637][ T4329] __read_swap_cache_async+0x378/0x688 [ 35.978835][ T4329] swapin_readahead+0x58c/0xa48 [ 35.979883][ T4329] do_swap_page+0x2c0/0x2340 [ 35.980871][ T4329] handle_mm_fault+0x11e4/0x3018 [ 35.981906][ T4329] do_page_fault+0x310/0x99c [ 35.982881][ T4329] do_translation_fault+0x94/0xc8 [ 35.983947][ T4329] do_mem_abort+0x70/0x198 [ 35.984878][ T4329] el0_da+0x70/0x144 [ 35.985697][ T4329] el0t_64_sync_handler+0x90/0xf0 [ 35.986712][ T4329] el0t_64_sync+0x18c/0x190 [ 35.994311][ T4329] memory: usage 307200kB, limit 307200kB, failcnt 225 [ 35.995701][ T4329] memory+swap: usage 307312kB, limit 9007199254740988kB, failcnt 0 [ 35.997144][ T4329] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 35.998756][ T4329] Memory cgroup stats for /syz4: [ 35.998973][ T4329] anon 0 [ 35.998973][ T4329] file 24576 [ 35.998973][ T4329] kernel 314544128 [ 35.998973][ T4329] kernel_stack 65536 [ 35.998973][ T4329] pagetables 114688 [ 35.998973][ T4329] sec_pagetables 0 [ 35.998973][ T4329] percpu 0 [ 35.998973][ T4329] sock 0 [ 35.998973][ T4329] vmalloc 135806976 [ 35.998973][ T4329] shmem 0 [ 35.998973][ T4329] zswap 0 [ 35.998973][ T4329] zswapped 0 [ 35.998973][ T4329] file_mapped 24576 [ 35.998973][ T4329] file_dirty 24576 [ 35.998973][ T4329] file_writeback 0 [ 35.998973][ T4329] swapcached 225280 [ 35.998973][ T4329] anon_thp 0 [ 35.998973][ T4329] file_thp 0 [ 35.998973][ T4329] shmem_thp 0 [ 35.998973][ T4329] inactive_anon 0 [ 35.998973][ T4329] active_anon 0 [ 35.998973][ T4329] inactive_file 0 [ 35.998973][ T4329] active_file 24576 [ 35.998973][ T4329] unevictable 0 [ 35.998973][ T4329] slab_reclaimable 16480 [ 35.998973][ T4329] slab_unreclaimable 99240 [ 35.998973][ T4329] slab 115720 [ 36.016349][ T4329] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.60,pid=4539,uid=0 [ 36.019831][ T4329] Memory cgroup out of memory: Killed process 4539 (syz.4.60) total-vm:102176kB, anon-rss:1132kB, file-rss:20480kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 36.335389][ T4337] Bluetooth: hci4: command 0x040f tx timeout [ 36.335932][ T4346] Bluetooth: hci1: command 0x040f tx timeout [ 36.336573][ T4337] Bluetooth: hci2: command 0x040f tx timeout [ 36.337577][ T4346] Bluetooth: hci0: command 0x040f tx timeout [ 36.338573][ T4337] Bluetooth: hci3: command 0x040f tx timeout [ 37.816887][ T4618] loop4: detected capacity change from 0 to 2048 [ 37.866896][ T4618] loop4: p3 < > p4 < > [ 37.867721][ T4618] loop4: partition table partially beyond EOD, truncated [ 37.869164][ T4618] loop4: p3 start 4284289 is beyond EOD, truncated [ 38.416522][ T4337] Bluetooth: hci3: command 0x0419 tx timeout [ 38.416539][ T4331] Bluetooth: hci0: command 0x0419 tx timeout [ 38.417643][ T4337] Bluetooth: hci2: command 0x0419 tx timeout [ 38.418714][ T4331] Bluetooth: hci1: command 0x0419 tx timeout [ 38.419729][ T4337] Bluetooth: hci4: command 0x0419 tx timeout [ 46.643955][ T4610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.90'. [ 46.649424][ T4632] netlink: 'syz.2.97': attribute type 1 has an invalid length. [ 46.650748][ T4632] netlink: 'syz.2.97': attribute type 2 has an invalid length. [ 46.692002][ T4636] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(0.0.0), cmd(4) [ 47.637000][ T4670] loop0: detected capacity change from 0 to 2048 [ 47.677143][ T4670] loop0: p3 < > p4 < > [ 47.678324][ T4670] loop0: partition table partially beyond EOD, truncated [ 47.680292][ T4670] loop0: p3 start 4284289 is beyond EOD, truncated [ 47.702140][ T3940] loop0: p3 < > p4 < > [ 47.702958][ T3940] loop0: partition table partially beyond EOD, truncated [ 47.704385][ T3940] loop0: p3 start 4284289 is beyond EOD, truncated [ 48.668025][ T4717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.125'. [ 49.380833][ T4748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.137'. [ 50.170634][ T4786] netlink: 4 bytes leftover after parsing attributes in process `syz.4.151'. [ 50.444758][ T4804] cgroup: Need name or subsystem set [ 51.158817][ T4824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.165'. [ 52.455210][ T4880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.182'. [ 52.691903][ T4894] x_tables: duplicate underflow at hook 2 [ 53.753624][ T4933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.197'. [ 54.358898][ T4960] netlink: 48 bytes leftover after parsing attributes in process `syz.4.204'. [ 54.887414][ T4978] process 'syz.2.209' launched './file0' with NULL argv: empty string added [ 57.710218][ T5085] Illegal XDP return value 5 on prog (id 22) dev N/A, expect packet loss! [ 58.652080][ T5116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.262'. [ 59.692906][ T5176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.290'. [ 59.813741][ T5180] loop1: detected capacity change from 0 to 512 [ 59.826862][ T5181] capability: warning: `syz.2.291' uses deprecated v2 capabilities in a way that may be insecure [ 59.860989][ T5174] loop3: detected capacity change from 0 to 1024 [ 59.889226][ T5184] loop0: detected capacity change from 0 to 512 [ 59.904042][ T5180] EXT4-fs error (device loop1): ext4_orphan_get:1409: inode #15: comm syz.1.292: inode has both inline data and extents flags [ 59.909594][ T5180] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.292: couldn't read orphan inode 15 (err -117) [ 59.917542][ T5180] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 59.950298][ T5184] EXT4-fs (loop0): 1 truncate cleaned up [ 59.952044][ T5184] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 59.982380][ T5184] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.293: bg 0: block 465: padding at end of block bitmap is not set [ 60.039352][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 60.058963][ T5184] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 60.061327][ T5184] EXT4-fs (loop0): This should not happen!! Data will be lost [ 60.061327][ T5184] [ 60.077611][ T5184] EXT4-fs (loop0): Total free blocks count 0 [ 60.078741][ T5184] EXT4-fs (loop0): Free/Dirty block details [ 60.079739][ T5184] EXT4-fs (loop0): free_blocks=0 [ 60.080595][ T5184] EXT4-fs (loop0): dirty_blocks=66 [ 60.081553][ T5184] EXT4-fs (loop0): Block reservation details [ 60.082517][ T5184] EXT4-fs (loop0): i_reserved_data_blocks=66 [ 60.251771][ T5195] loop2: detected capacity change from 0 to 2048 [ 60.375385][ T5195] loop2: p3 < > p4 < > [ 60.376300][ T5195] loop2: partition table partially beyond EOD, truncated [ 60.385835][ T5195] loop2: p3 start 4284289 is beyond EOD, truncated [ 60.566732][ T5211] loop4: detected capacity change from 0 to 128 [ 60.638359][ T5211] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 60.809110][ T55] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 60.809897][ T5220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.304'. [ 60.855710][ T4329] EXT4-fs (loop4): unmounting filesystem. [ 60.972780][ T5223] netlink: 16 bytes leftover after parsing attributes in process `syz.0.303'. [ 60.974892][ T5223] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 61.178615][ T5236] loop1: detected capacity change from 0 to 256 [ 61.310255][ T5242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.312203][ T5242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.326590][ T4733] syz.3.129 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 61.328492][ T4733] CPU: 1 PID: 4733 Comm: syz.3.129 Not tainted syzkaller #0 [ 61.329756][ T4733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 61.331653][ T4733] Call trace: [ 61.332258][ T4733] dump_backtrace+0x1c4/0x1f0 [ 61.333146][ T4733] show_stack+0x2c/0x3c [ 61.333898][ T4733] __dump_stack+0x30/0x40 [ 61.334680][ T4733] dump_stack_lvl+0xf4/0x15c [ 61.335556][ T4733] dump_stack+0x1c/0x5c [ 61.336304][ T4733] dump_header+0xc0/0x724 [ 61.337088][ T4733] oom_kill_process+0x35c/0x660 [ 61.338036][ T4733] out_of_memory+0xbf0/0xf70 [ 61.338935][ T4733] mem_cgroup_out_of_memory+0x228/0x2d0 [ 61.340074][ T4733] try_charge_memcg+0xa4c/0x1390 [ 61.341105][ T4733] charge_memcg+0xa4/0x1f0 [ 61.341654][ T5241] loop4: detected capacity change from 0 to 128 [ 61.341999][ T4733] __mem_cgroup_charge+0x38/0xa8 [ 61.343707][ T5241] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 61.344014][ T4733] shmem_add_to_page_cache+0x678/0xf14 [ 61.347120][ T4733] shmem_get_folio_gfp+0x10a4/0x2038 [ 61.348082][ T4733] shmem_fault+0x170/0x564 [ 61.348893][ T4733] __do_fault+0x11c/0x3d8 [ 61.349676][ T4733] handle_mm_fault+0x1d04/0x3018 [ 61.350617][ T4733] __get_user_pages+0x340/0x770 [ 61.351616][ T4733] get_dump_page+0x14c/0x5ac [ 61.352562][ T4733] dump_user_range+0xe8/0x5c4 [ 61.353520][ T4733] elf_core_dump+0x2900/0x2e14 [ 61.354463][ T4733] do_coredump+0x10dc/0x1c90 [ 61.355297][ T4733] get_signal+0xdfc/0x133c [ 61.356086][ T4733] do_notify_resume+0x2a8/0x2c84 [ 61.356297][ T5241] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 61.356988][ T4733] el0_da+0xb4/0x144 [ 61.359266][ T4733] el0t_64_sync_handler+0x90/0xf0 [ 61.360207][ T4733] el0t_64_sync+0x18c/0x190 [ 61.410608][ T5241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.412319][ T5241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.452072][ T4733] memory: usage 307200kB, limit 307200kB, failcnt 13390 [ 61.453454][ T4733] memory+swap: usage 377600kB, limit 9007199254740988kB, failcnt 0 [ 61.454849][ T4733] kmem: usage 2688kB, limit 9007199254740988kB, failcnt 0 [ 61.465475][ T4733] Memory cgroup stats for /syz3: [ 61.465666][ T4733] anon 1339392 [ 61.465666][ T4733] file 310480896 [ 61.465666][ T4733] kernel 2752512 [ 61.465666][ T4733] kernel_stack 196608 [ 61.465666][ T4733] pagetables 1069056 [ 61.465666][ T4733] sec_pagetables 0 [ 61.465666][ T4733] percpu 0 [ 61.465666][ T4733] sock 0 [ 61.465666][ T4733] vmalloc 0 [ 61.465666][ T4733] shmem 310468608 [ 61.465666][ T4733] zswap 0 [ 61.465666][ T4733] zswapped 0 [ 61.465666][ T4733] file_mapped 135864320 [ 61.465666][ T4733] file_dirty 8192 [ 61.465666][ T4733] file_writeback 0 [ 61.465666][ T4733] swapcached 72089600 [ 61.465666][ T4733] anon_thp 0 [ 61.465666][ T4733] file_thp 0 [ 61.465666][ T4733] shmem_thp 0 [ 61.465666][ T4733] inactive_anon 265478144 [ 61.465666][ T4733] active_anon 46329856 [ 61.465666][ T4733] inactive_file 0 [ 61.465666][ T4733] active_file 12288 [ 61.465666][ T4733] unevictable 0 [ 61.465666][ T4733] slab_reclaimable 1111648 [ 61.465666][ T4733] slab_unreclaimable 269784 [ 61.493098][ T4733] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.129,pid=4733,uid=0 [ 61.505875][ T4733] Memory cgroup out of memory: Killed process 4733 (syz.3.129) total-vm:200412kB, anon-rss:1488kB, file-rss:20864kB, shmem-rss:100960kB, UID:0 pgtables:300kB oom_score_adj:1000 [ 61.526637][ T4779] syz.2.146 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 61.528776][ T4779] CPU: 0 PID: 4779 Comm: syz.2.146 Not tainted syzkaller #0 [ 61.529981][ T4779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 61.531616][ T4779] Call trace: [ 61.532204][ T4779] dump_backtrace+0x1c4/0x1f0 [ 61.533049][ T4779] show_stack+0x2c/0x3c [ 61.533781][ T4779] __dump_stack+0x30/0x40 [ 61.534596][ T4779] dump_stack_lvl+0xf4/0x15c [ 61.535391][ T4779] dump_stack+0x1c/0x5c [ 61.536136][ T4779] dump_header+0xc0/0x724 [ 61.536915][ T4779] oom_kill_process+0x35c/0x660 [ 61.537829][ T4779] out_of_memory+0xbf0/0xf70 [ 61.538656][ T4779] mem_cgroup_out_of_memory+0x228/0x2d0 [ 61.539710][ T4779] try_charge_memcg+0xa4c/0x1390 [ 61.540570][ T4779] charge_memcg+0xa4/0x1f0 [ 61.541370][ T4779] __mem_cgroup_charge+0x38/0xa8 [ 61.542289][ T4779] shmem_add_to_page_cache+0x678/0xf14 [ 61.543268][ T4779] shmem_get_folio_gfp+0x10a4/0x2038 [ 61.544228][ T4779] shmem_fault+0x170/0x564 [ 61.545044][ T4779] __do_fault+0x11c/0x3d8 [ 61.545847][ T4779] handle_mm_fault+0x1d04/0x3018 [ 61.546803][ T4779] __get_user_pages+0x340/0x770 [ 61.547654][ T4779] get_dump_page+0x14c/0x5ac [ 61.548493][ T4779] dump_user_range+0xe8/0x5c4 [ 61.549312][ T4779] elf_core_dump+0x2900/0x2e14 [ 61.550128][ T4779] do_coredump+0x10dc/0x1c90 [ 61.550941][ T4779] get_signal+0xdfc/0x133c [ 61.551724][ T4779] do_notify_resume+0x2a8/0x2c84 [ 61.552594][ T4779] el0_da+0xb4/0x144 [ 61.553257][ T4779] el0t_64_sync_handler+0x90/0xf0 [ 61.554126][ T4779] el0t_64_sync+0x18c/0x190 [ 61.618738][ T4779] memory: usage 307200kB, limit 307200kB, failcnt 11122 [ 61.620086][ T4779] memory+swap: usage 361728kB, limit 9007199254740988kB, failcnt 0 [ 61.621515][ T4779] kmem: usage 2148kB, limit 9007199254740988kB, failcnt 0 [ 61.622812][ T4779] Memory cgroup stats for /syz2: [ 61.622990][ T4779] anon 733184 [ 61.622990][ T4779] file 311640064 [ 61.622990][ T4779] kernel 2199552 [ 61.622990][ T4779] kernel_stack 131072 [ 61.622990][ T4779] pagetables 749568 [ 61.622990][ T4779] sec_pagetables 0 [ 61.622990][ T4779] percpu 0 [ 61.622990][ T4779] sock 0 [ 61.622990][ T4779] vmalloc 0 [ 61.622990][ T4779] shmem 311631872 [ 61.622990][ T4779] zswap 0 [ 61.622990][ T4779] zswapped 0 [ 61.622990][ T4779] file_mapped 157954048 [ 61.622990][ T4779] file_dirty 8192 [ 61.622990][ T4779] file_writeback 0 [ 61.622990][ T4779] swapcached 55836672 [ 61.622990][ T4779] anon_thp 0 [ 61.622990][ T4779] file_thp 0 [ 61.622990][ T4779] shmem_thp 0 [ 61.622990][ T4779] inactive_anon 81178624 [ 61.622990][ T4779] active_anon 231186432 [ 61.622990][ T4779] inactive_file 0 [ 61.622990][ T4779] active_file 8192 [ 61.622990][ T4779] unevictable 0 [ 61.622990][ T4779] slab_reclaimable 1060208 [ 61.622990][ T4779] slab_unreclaimable 188456 [ 61.652661][ T4779] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.146,pid=4779,uid=0 [ 61.656474][ T4779] Memory cgroup out of memory: Killed process 4779 (syz.2.146) total-vm:200676kB, anon-rss:1504kB, file-rss:20864kB, shmem-rss:103600kB, UID:0 pgtables:304kB oom_score_adj:1000 [ 61.814678][ T5250] loop0: detected capacity change from 0 to 2048 [ 61.920949][ T5250] loop0: p3 < > p4 < > [ 61.921846][ T5250] loop0: partition table partially beyond EOD, truncated [ 61.923198][ T5250] loop0: p3 start 4284289 is beyond EOD, truncated [ 61.982366][ T5253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.319'. [ 62.043100][ T5260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.051756][ T5260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.129956][ T5263] loop1: detected capacity change from 0 to 512 [ 62.134409][ T5263] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 62.137093][ T5263] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 62.143088][ T5263] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.322: bg 0: block 384: padding at end of block bitmap is not set [ 62.152093][ T5263] EXT4-fs (loop1): Remounting filesystem read-only [ 62.160146][ T5263] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 62.162113][ T5263] EXT4-fs (loop1): Remounting filesystem read-only [ 62.163349][ T5263] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.322: attempt to clear invalid blocks 983260 len 1 [ 62.184171][ T5263] EXT4-fs (loop1): Remounting filesystem read-only [ 62.185690][ T5263] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz.1.322: Invalid inode table block 0 in block_group 0 [ 62.189521][ T5263] EXT4-fs (loop1): Remounting filesystem read-only [ 62.190975][ T5263] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 62.192981][ T5263] EXT4-fs (loop1): Remounting filesystem read-only [ 62.194105][ T5263] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 62.196957][ T5263] EXT4-fs (loop1): Remounting filesystem read-only [ 62.198118][ T5263] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz.1.322: Invalid inode table block 0 in block_group 0 [ 62.200707][ T5263] EXT4-fs (loop1): Remounting filesystem read-only [ 62.201830][ T5263] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 62.203602][ T5263] EXT4-fs (loop1): Remounting filesystem read-only [ 62.204726][ T5263] EXT4-fs error (device loop1): ext4_truncate:4325: inode #11: comm syz.1.322: mark_inode_dirty error [ 62.210635][ T5263] EXT4-fs (loop1): Remounting filesystem read-only [ 62.211892][ T5263] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 62.213707][ T5263] EXT4-fs (loop1): Remounting filesystem read-only [ 62.214948][ T5263] EXT4-fs (loop1): 1 truncate cleaned up [ 62.216299][ T5263] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 62.238557][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 62.291519][ T5270] loop1: detected capacity change from 0 to 128 [ 62.303373][ T5270] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 62.430539][ T5274] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 62.433539][ T5274] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 62.455932][ T5274] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 62.515864][ T5278] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.517889][ T5278] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.555461][ T5279] device bridge_slave_1 left promiscuous mode [ 62.557618][ T5279] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.573354][ T58] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 62.717844][ T5279] device bridge_slave_0 left promiscuous mode [ 62.719269][ T5279] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.724840][ T5291] EXT4-fs: Ignoring removed bh option [ 62.730718][ T5291] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 62.760348][ T5295] EXT4-fs: Ignoring removed oldalloc option [ 62.783023][ T5291] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 62.796753][ T5295] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 62.860212][ T5293] loop0: p3 < > p4 < > [ 62.861092][ T5293] loop0: partition table partially beyond EOD, truncated [ 62.863704][ T5293] loop0: p3 start 4284289 is beyond EOD, truncated [ 62.893381][ T4329] EXT4-fs (loop4): unmounting filesystem. [ 62.895788][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 62.945683][ T5304] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 62.961709][ T5304] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 63.208604][ T5312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.333'. [ 63.339691][ T5323] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 63.340999][ T5323] EXT4-fs (loop1): mount failed [ 63.350322][ T5323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.352042][ T5323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.616978][ T5351] loop4: p3 < > p4 < > [ 63.618014][ T5351] loop4: partition table partially beyond EOD, truncated [ 63.619397][ T5351] loop4: p3 start 4284289 is beyond EOD, truncated [ 63.775493][ T14] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 63.922994][ T5366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.354'. [ 63.942190][ T5367] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 63.991484][ T14] usb 1-1: unable to get BOS descriptor or descriptor too short [ 63.995147][ T14] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 is Bulk; changing to Interrupt [ 63.997505][ T14] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 is Bulk; changing to Interrupt [ 64.001520][ T14] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xE is Bulk; changing to Interrupt [ 64.008322][ T14] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 64.034991][ T14] usb 1-1: string descriptor 0 read error: -22 [ 64.036456][ T14] usb 1-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 64.037948][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.054320][ T5345] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 64.055896][ T5345] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 64.057240][ T5345] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 64.074979][ T14] usb 1-1: MIDIStreaming interface descriptor not found [ 64.082609][ T14] usb 1-1: too many endpoints [ 64.265472][ T14] usb 1-1: USB disconnect, device number 2 [ 64.421000][ T5357] loop2: p1 p3 < > [ 64.497752][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.499119][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.897949][ T5394] loop3: p3 < > p4 < > [ 64.898815][ T5394] loop3: partition table partially beyond EOD, truncated [ 64.901470][ T5394] loop3: p3 start 4284289 is beyond EOD, truncated [ 64.943531][ T5381] udevd[5381]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 64.951769][ T5378] udevd[5378]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 65.070614][ T5403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.368'. [ 65.271051][ T5422] set_capacity_and_notify: 10 callbacks suppressed [ 65.271062][ T5422] loop2: detected capacity change from 0 to 128 [ 65.327723][ T5422] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 65.370856][ T5422] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 65.443777][ T5432] loop1: detected capacity change from 0 to 2048 [ 65.518519][ T5432] loop1: p3 < > p4 < > [ 65.519343][ T5432] loop1: partition table partially beyond EOD, truncated [ 65.520709][ T5432] loop1: p3 start 4284289 is beyond EOD, truncated [ 65.528659][ T5436] loop3: detected capacity change from 0 to 2048 [ 65.552183][ T5436] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 65.601976][ T5436] UDF-fs: error (device loop3): udf_read_inode: (ino 1345) failed !bh [ 65.605432][ T4376] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 65.664543][ T5445] loop4: detected capacity change from 0 to 128 [ 65.668695][ T5445] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 65.789209][ T4376] usb 1-1: not running at top speed; connect to a high speed hub [ 65.791729][ T4376] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.793488][ T4376] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 65.795079][ T4376] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.814227][ T4376] gspca_main: spca501-2.14.0 probing 0000:0000 [ 65.877091][ T5456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.393'. [ 66.009302][ T4376] gspca_spca501: reg write: error -71 [ 66.010413][ T4376] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 66.011684][ T4376] spca501: probe of 1-1:1.0 failed with error -22 [ 66.013976][ T4376] usb 1-1: Found UVC 1.00 device (0000:0000) [ 66.015162][ T4376] usb 1-1: No streaming interface found for terminal 2. [ 66.037688][ T4376] usb 1-1: USB disconnect, device number 3 [ 66.044683][ T5471] loop4: detected capacity change from 0 to 2048 [ 66.086277][ T5471] loop4: p3 < > p4 < > [ 66.087127][ T5471] loop4: partition table partially beyond EOD, truncated [ 66.088564][ T5471] loop4: p3 start 4284289 is beyond EOD, truncated [ 66.248479][ T5486] loop1: detected capacity change from 0 to 16 [ 66.267297][ T5486] erofs: (device loop1): mounted with root inode @ nid 36. [ 66.356179][ T5490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.409'. [ 66.388376][ T5493] loop4: detected capacity change from 0 to 256 [ 66.405976][ T5493] ======================================================= [ 66.405976][ T5493] WARNING: The mand mount option has been deprecated and [ 66.405976][ T5493] and is ignored by this kernel. Remove the mand [ 66.405976][ T5493] option from the mount to silence this warning. [ 66.405976][ T5493] ======================================================= [ 66.478778][ T5493] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 66.508546][ T5500] loop1: detected capacity change from 0 to 512 [ 66.518590][ T5500] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 66.520185][ T5500] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 66.521872][ T5500] System zones: 0-1, 15-15, 18-18, 34-34 [ 66.523319][ T5500] EXT4-fs (loop1): orphan cleanup on readonly fs [ 66.524522][ T5500] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 66.529166][ T5500] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 66.531790][ T5500] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 66.535642][ T5500] EXT4-fs error (device loop1): ext4_orphan_get:1435: comm syz.1.415: bad orphan inode 16 [ 66.537807][ T5500] ext4_test_bit(bit=15, block=18) = 1 [ 66.538836][ T5500] is_bad_inode(inode)=0 [ 66.539570][ T5500] NEXT_ORPHAN(inode)=0 [ 66.540289][ T5500] max_ino=32 [ 66.540848][ T5500] i_nlink=2 [ 66.541472][ T5500] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 66.615529][ T5500] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 66.617070][ T5500] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 66.745800][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 66.775049][ T5515] loop4: detected capacity change from 0 to 2048 [ 66.818587][ T5521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.424'. [ 66.827884][ T5515] loop4: p3 < > p4 < > [ 66.828725][ T5515] loop4: partition table partially beyond EOD, truncated [ 66.830073][ T5515] loop4: p3 start 4284289 is beyond EOD, truncated [ 66.852329][ T5525] loop1: detected capacity change from 0 to 8 [ 66.962022][ T5527] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 67.057355][ T4336] EXT4-fs (loop2): unmounting filesystem. [ 67.107955][ T5538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.109651][ T5538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.112990][ T5537] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 67.124562][ T5537] UDF-fs: error (device loop0): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 67.129873][ T5537] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232 [ 67.147893][ T5540] FAT-fs (loop1): bogus number of reserved sectors [ 67.149136][ T5540] FAT-fs (loop1): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 67.174448][ T5540] FAT-fs (loop1): Can't find a valid FAT filesystem [ 67.246872][ T5378] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 67.271956][ T5548] EXT4-fs: Ignoring removed bh option [ 67.293107][ T5548] EXT4-fs: Ignoring removed mblk_io_submit option [ 67.299953][ T5548] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 67.351867][ T5548] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 67.501944][ T5562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.442'. [ 67.548402][ T4329] EXT4-fs (loop4): unmounting filesystem. [ 67.559078][ T5564] loop0: p3 < > p4 < > [ 67.559975][ T5564] loop0: partition table partially beyond EOD, truncated [ 67.561531][ T5564] loop0: p3 start 4284289 is beyond EOD, truncated [ 67.853552][ T5590] EXT4-fs: inline encryption not supported [ 67.873327][ T5590] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.456: inode #1: comm syz.4.456: iget: illegal inode # [ 67.892948][ T5588] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 67.937800][ T5590] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.456: error while reading EA inode 1 err=-117 [ 67.941312][ T5590] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 67.943648][ T5590] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.456: inode #1: comm syz.4.456: iget: illegal inode # [ 67.990563][ T5590] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.456: error while reading EA inode 1 err=-117 [ 67.998864][ T5590] EXT4-fs (loop4): 1 orphan inode deleted [ 67.999910][ T5590] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 68.006840][ T5597] EXT4-fs (loop0): shut down requested (1) [ 68.047353][ T5596] erofs: (device loop3): mounted with root inode @ nid 36. [ 68.076838][ T5596] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 68.129932][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 68.174683][ T4329] EXT4-fs (loop4): unmounting filesystem. [ 68.202617][ T5608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.461'. [ 68.243337][ T5613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.245136][ T5613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.354119][ T5625] netlink: 16 bytes leftover after parsing attributes in process `syz.0.469'. [ 68.356431][ T5620] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 68.395780][ T4329] EXT4-fs (loop4): unmounting filesystem. [ 68.439507][ T5629] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 68.443161][ T5629] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 68.448939][ T5627] EXT4-fs (loop0): 1 truncate cleaned up [ 68.449930][ T5627] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 68.487752][ T5627] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.470: bg 0: block 465: padding at end of block bitmap is not set [ 68.490868][ T5627] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 68.509029][ T5627] EXT4-fs (loop0): This should not happen!! Data will be lost [ 68.509029][ T5627] [ 68.513616][ T4441] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 68.516804][ T4441] EXT4-fs (loop0): This should not happen!! Data will be lost [ 68.516804][ T4441] [ 68.518507][ T4441] EXT4-fs (loop0): Total free blocks count 0 [ 68.519569][ T4441] EXT4-fs (loop0): Free/Dirty block details [ 68.520734][ T4441] EXT4-fs (loop0): free_blocks=0 [ 68.532496][ T4441] EXT4-fs (loop0): dirty_blocks=65 [ 68.533435][ T4441] EXT4-fs (loop0): Block reservation details [ 68.652061][ T5638] binder: 5635:5638 tried to acquire reference to desc 0, got 1 instead [ 68.716665][ T5644] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 68.729943][ T5644] EXT4-fs (loop4): 1 truncate cleaned up [ 68.731160][ T5644] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 68.772579][ T4329] EXT4-fs (loop4): unmounting filesystem. [ 68.866754][ T5654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.480'. [ 68.928683][ T5658] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 68.958416][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 68.982357][ T5663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.986541][ T5661] loop4: p3 < > p4 < > [ 68.987400][ T5661] loop4: partition table partially beyond EOD, truncated [ 68.989018][ T5661] loop4: p3 start 4284289 is beyond EOD, truncated [ 69.008931][ T5663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.099837][ T5669] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 69.108999][ T5669] EXT4-fs (loop0): 1 truncate cleaned up [ 69.110076][ T5669] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 69.281248][ T4334] EXT4-fs (loop0): unmounting filesystem. [ 69.338906][ T5683] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 69.365139][ T5685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.494'. [ 69.465749][ T4379] binder: undelivered TRANSACTION_COMPLETE [ 69.467160][ T4379] binder: send failed reply for transaction 12 to 5635:5638 [ 69.468644][ T4379] binder: undelivered TRANSACTION_COMPLETE [ 69.469682][ T4379] binder: undelivered TRANSACTION_ERROR: 29189 [ 69.470788][ T4379] binder: undelivered transaction 5, process died. [ 69.509557][ T5690] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 69.514386][ T5690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.533435][ T5690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.616127][ T114] cfg80211: failed to load regulatory.db [ 69.709596][ T5700] loop3: p3 < > p4 < > [ 69.710197][ T5704] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 69.710393][ T5700] loop3: partition table partially beyond EOD, truncated [ 69.713901][ T5700] loop3: p3 start 4284289 is beyond EOD, truncated [ 69.763121][ T5704] syz.2.501: attempt to access beyond end of device [ 69.763121][ T5704] loop2: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 69.817399][ T5704] syz.2.501: attempt to access beyond end of device [ 69.817399][ T5704] loop2: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 70.032750][ T5720] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 70.039532][ T5720] EXT4-fs (loop3): Test dummy encryption mode enabled [ 70.060408][ T5725] erofs: (device loop4): mounted with root inode @ nid 36. [ 70.062662][ T5720] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 70.071900][ T5720] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 70.101043][ T5722] device syzkaller0 entered promiscuous mode [ 70.103738][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 70.125123][ T5725] syz.4.510: attempt to access beyond end of device [ 70.125123][ T5725] loop4: rw=524288, sector=88, nr_sectors = 48 limit=16 [ 70.152832][ T5725] syz.4.510: attempt to access beyond end of device [ 70.152832][ T5725] loop4: rw=524288, sector=8, nr_sectors = 80 limit=16 [ 70.184131][ T5725] ================================================================== [ 70.185620][ T5725] BUG: KASAN: slab-out-of-bounds in z_erofs_transform_plain+0x39c/0x494 [ 70.187231][ T5725] Read of size 4096 at addr ffff0000cb8e0000 by task syz.4.510/5725 [ 70.188756][ T5725] [ 70.189197][ T5725] CPU: 0 PID: 5725 Comm: syz.4.510 Not tainted syzkaller #0 [ 70.190531][ T5725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 70.192344][ T5725] Call trace: [ 70.192940][ T5725] dump_backtrace+0x1c4/0x1f0 [ 70.193777][ T5725] show_stack+0x2c/0x3c [ 70.194548][ T5725] __dump_stack+0x30/0x40 [ 70.195345][ T5725] dump_stack_lvl+0xf4/0x15c [ 70.196180][ T5725] print_address_description+0x88/0x218 [ 70.197179][ T5725] print_report+0x50/0x68 [ 70.197980][ T5725] kasan_report+0xa8/0xfc [ 70.198894][ T5725] kasan_check_range+0x258/0x290 [ 70.199940][ T5725] memcpy+0x48/0x90 [ 70.200706][ T5725] z_erofs_transform_plain+0x39c/0x494 [ 70.201726][ T5725] z_erofs_decompress+0x9c/0xd4 [ 70.202640][ T5725] z_erofs_decompress_queue+0x103c/0x1bf4 [ 70.203714][ T5725] z_erofs_runqueue+0x1540/0x16a8 [ 70.204624][ T5725] z_erofs_read_folio+0x2dc/0x5cc [ 70.205500][ T5725] filemap_read_folio+0x134/0x384 [ 70.206352][ T5725] filemap_fault+0x990/0xe98 [ 70.207167][ T5725] __do_fault+0x11c/0x3d8 [ 70.207881][ T5725] handle_mm_fault+0x1d04/0x3018 [ 70.208776][ T5725] do_page_fault+0x310/0x99c [ 70.209523][ T5725] do_translation_fault+0x94/0xc8 [ 70.210331][ T5725] do_mem_abort+0x70/0x198 [ 70.211084][ T5725] el1_abort+0x3c/0x5c [ 70.211803][ T5725] el1h_64_sync_handler+0x50/0xac [ 70.212662][ T5725] el1h_64_sync+0x64/0x68 [ 70.213395][ T5725] __arch_copy_from_user+0xa4/0x230 [ 70.214363][ T5725] invoke_syscall+0x98/0x290 [ 70.215207][ T5725] el0_svc_common+0x13c/0x258 [ 70.216085][ T5725] do_el0_svc+0x5c/0x134 [ 70.216849][ T5725] el0_svc+0x58/0x128 [ 70.217523][ T5725] el0t_64_sync_handler+0x84/0xf0 [ 70.218462][ T5725] el0t_64_sync+0x18c/0x190 [ 70.219303][ T5725] [ 70.219711][ T5725] Allocated by task 1: [ 70.220412][ T5725] kasan_set_track+0x4c/0x80 [ 70.221229][ T5725] kasan_save_alloc_info+0x24/0x30 [ 70.222119][ T5725] __kasan_kmalloc+0xa0/0xb8 [ 70.222932][ T5725] __kmalloc_node+0xdc/0x184 [ 70.223726][ T5725] __vmalloc_node_range+0x448/0xe70 [ 70.224657][ T5725] vzalloc+0x9c/0xd4 [ 70.225374][ T5725] tpg_alloc+0xe4/0x6ec [ 70.226142][ T5725] vivid_probe+0x160c/0x5b3c [ 70.227002][ T5725] platform_probe+0x148/0x1c8 [ 70.227867][ T5725] really_probe+0x3a0/0xac4 [ 70.228682][ T5725] __driver_probe_device+0x1c8/0x368 [ 70.229643][ T5725] driver_probe_device+0x78/0x324 [ 70.230563][ T5725] __driver_attach+0x3bc/0x614 [ 70.231445][ T5725] bus_for_each_dev+0x148/0x1d0 [ 70.232345][ T5725] driver_attach+0x50/0x60 [ 70.233199][ T5725] bus_add_driver+0x2c0/0x518 [ 70.234005][ T5725] driver_register+0x200/0x37c [ 70.234856][ T5725] __platform_driver_register+0x70/0x84 [ 70.235849][ T5725] vivid_init+0x4c/0x8c [ 70.236638][ T5725] do_one_initcall+0x278/0x9f0 [ 70.237493][ T5725] do_initcall_level+0x158/0x214 [ 70.238365][ T5725] do_initcalls+0x58/0xac [ 70.239100][ T5725] do_basic_setup+0x8c/0xa0 [ 70.239914][ T5725] kernel_init_freeable+0x35c/0x4f0 [ 70.240840][ T5725] kernel_init+0x24/0x1d8 [ 70.241615][ T5725] ret_from_fork+0x10/0x20 [ 70.242380][ T5725] [ 70.242786][ T5725] The buggy address belongs to the object at ffff0000cb8e0000 [ 70.242786][ T5725] which belongs to the cache kmalloc-128 of size 128 [ 70.245120][ T5725] The buggy address is located 0 bytes inside of [ 70.245120][ T5725] 128-byte region [ffff0000cb8e0000, ffff0000cb8e0080) [ 70.247302][ T5725] [ 70.247686][ T5725] The buggy address belongs to the physical page: [ 70.248772][ T5725] page:00000000e5c5236f refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10b8e0 [ 70.250548][ T5725] flags: 0x5ffc00000000200(slab|node=0|zone=2|lastcpupid=0x7ff) [ 70.251872][ T5725] raw: 05ffc00000000200 0000000000000000 dead000000000122 ffff0000c0002300 [ 70.253409][ T5725] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 70.254953][ T5725] page dumped because: kasan: bad access detected [ 70.256104][ T5725] [ 70.256526][ T5725] Memory state around the buggy address: [ 70.257505][ T5725] ffff0000cb8dff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 70.258965][ T5725] ffff0000cb8e0000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 70.260399][ T5725] >ffff0000cb8e0080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 70.261824][ T5725] ^ [ 70.262536][ T5725] ffff0000cb8e0100: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 70.263941][ T5725] ffff0000cb8e0180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 70.265363][ T5725] ================================================================== [ 70.314887][ T4342] EXT4-fs (loop3): unmounting filesystem. [ 70.454140][ T5725] Disabling lock debugging due to kernel taint