last executing test programs: 1.353873547s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x68) r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x528) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x2010480, &(0x7f00000004c0), 0x5, 0x76a, &(0x7f0000000bc0)="$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") r1 = fanotify_init(0x8, 0x40000) r2 = openat(0xffffffffffffff9c, &(0x7f0000001340)='./file1\x00', 0x103402, 0x49) prlimit64(0x0, 0xe, &(0x7f0000001380)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000013c0)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x1, &(0x7f0000001440)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000014c0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000001540), 0x651, 0x0) recvmmsg(r4, &(0x7f0000001580), 0x4000087, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x6, 0x4000) mkdirat(0xffffffffffffff9c, 0x0, 0x184) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x7, 0xfe, 0x7fff000a}]}) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0x8200, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000200)={0x9f7a, r6, 0x2}) mmap$IORING_OFF_SQ_RING(0x7ffffffff000, 0x1040, 0x200000b, 0x12, r8, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x8, 0x10, 0x0, 0x0, 0x1, 0x1000, &(0x7f0000002040)=""/4096, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fanotify_mark(r1, 0x1, 0x8100030, r2, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000003040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r9, 0x40305829, &(0x7f0000003080)={0x17c04, 0xffffffffffffffff, 0x10, 0x100000001, 0x2}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1a42028, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x1000000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) 1.308394381s ago: executing program 3 (id=4): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2000200, &(0x7f0000000080)={[{@nombcache}]}, 0x7, 0x511, &(0x7f00000000c0)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002c427000fedbdf25210000000c0005000203aaaaaaaaaaaa050020000100000009001f"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0xc) clock_adjtime(0x0, &(0x7f0000000980)={0x19b1, 0xc1bdf10000000000, 0x0, 0x800, 0x0, 0xa9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5235, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 1.181446055s ago: executing program 0 (id=1): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000740)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x21400, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x80) sched_setscheduler(r1, 0x1, &(0x7f0000000440)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000540), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000580), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x9, 0x4, &(0x7f00000006c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3a}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0x0, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x1, 0x0, 0x4c7ac37826251993, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@cache={0x0, 0x800, 0x0, 0x80, 'cache\x00', {@ram_num={'1:', 0x0}, 0x20, @ram_num={'1:', 0x1}, 0x20, @ram_num={'1:', 0x0}, 0x20, '1024', 0x20, '0', 0x20, 'default 0'}}]}) 1.180862308s ago: executing program 2 (id=3): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000740)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x21400, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x80) sched_setscheduler(r1, 0x1, &(0x7f0000000440)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000540), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000580), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x9, 0x4, &(0x7f00000006c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3a}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0x0, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x1, 0x0, 0x4c7ac37826251993, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@cache={0x0, 0x800, 0x0, 0x80, 'cache\x00', {@ram_num={'1:', 0x0}, 0x20, @ram_num={'1:', 0x1}, 0x20, @ram_num={'1:', 0x0}, 0x20, '1024', 0x20, '0', 0x20, 'default 0'}}]}) setrlimit(0x5, &(0x7f0000000540)={0x7, 0x8001}) 1.148881572s ago: executing program 4 (id=5): syz_emit_ethernet(0xbe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, 0x0, 0x0, 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) memfd_create(&(0x7f0000000040)='\x00', 0x8340b1aabcc04bec) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0xc22, @remote}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="4c000000100001060000000000000000000000000000000300000000000000000b00033264756d6d793000000800400004020000180012000a00010064756d6d79"], 0x4c}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x5, [@struct={0x7, 0x1, 0x0, 0x4, 0x1, 0xfad, [{0x4, 0x4, 0xfff}]}, @int={0x7, 0x0, 0x0, 0x1, 0x1, 0x40, 0x0, 0x0, 0x4}, @ptr={0xc, 0x0, 0x0, 0x2, 0x3}, @int={0x8, 0x0, 0x0, 0x1, 0x12, 0x7c, 0x0, 0x4}]}, {0x0, [0x0, 0x5f, 0x0]}}, &(0x7f0000000240)=""/37, 0x61, 0x25, 0x1, 0x6}, 0x28) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) ioctl$KDGETKEYCODE(r1, 0x4b4c, 0x0) 0s ago: executing program 3 (id=6): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000e6ffffff0000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a003400020202020202000008003500000a000008002201"], 0x38}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.129' (ED25519) to the list of known hosts. [ 21.466054][ T4696] cgroup: Unknown subsys name 'net' [ 21.597215][ T4696] cgroup: Unknown subsys name 'cpuset' [ 21.598688][ T4696] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 21.787795][ T4696] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 22.583374][ T4717] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 22.583731][ T4717] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 22.584039][ T4717] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 22.584204][ T4717] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 22.584359][ T4717] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 22.584477][ T4717] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 22.584639][ T4717] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 22.586497][ T4717] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 22.586591][ T4717] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 22.598455][ T4719] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 22.599738][ T4719] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 22.600262][ T4724] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 22.600441][ T4724] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 22.600741][ T4724] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 22.600959][ T4724] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 22.606773][ T4724] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 22.608320][ T4718] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 22.613148][ T4718] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 22.613994][ T4724] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 22.614500][ T4724] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 22.614907][ T4724] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 22.615126][ T4724] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 22.620240][ T4719] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 22.621086][ T4714] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 22.630616][ T4718] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 22.795503][ T4722] rxe_eth0 speed is unknown, defaulting to 1000 [ 22.795784][ T4722] rxe_eth0 speed is unknown, defaulting to 1000 [ 22.796138][ T4722] rxe_eth0 speed is unknown, defaulting to 1000 [ 22.810891][ T4720] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 22.827027][ T4709] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 22.833871][ T4710] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 22.839363][ T4708] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 22.868158][ T4722] infiniband rxe0: set active [ 22.868677][ T4722] infiniband rxe0: added rxe_eth0 [ 22.874104][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 22.882562][ T4722] RDS/IB: rxe0: added [ 22.882627][ T4722] smc: adding ib device rxe0 with port count 1 [ 22.882650][ T4722] smc: ib device rxe0 port 1 has no pnetid [ 22.883507][ T4722] rxe_eth0 speed is unknown, defaulting to 1000 [ 22.905055][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 22.938020][ T4722] rxe_eth0 speed is unknown, defaulting to 1000 [ 22.982024][ T4722] rxe_eth0 speed is unknown, defaulting to 1000 [ 23.048060][ T4722] rxe_eth0 speed is unknown, defaulting to 1000 [ 23.158343][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.158654][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.158722][ T4709] bridge_slave_0: entered allmulticast mode [ 23.159233][ T4709] bridge_slave_0: entered promiscuous mode [ 23.165599][ T4722] rxe_eth0 speed is unknown, defaulting to 1000 [ 23.165847][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.165870][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.166002][ T4709] bridge_slave_1: entered allmulticast mode [ 23.166552][ T4709] bridge_slave_1: entered promiscuous mode [ 23.186856][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.186886][ T4708] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.186971][ T4708] bridge_slave_0: entered allmulticast mode [ 23.187404][ T4708] bridge_slave_0: entered promiscuous mode [ 23.188628][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.188652][ T4708] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.188699][ T4708] bridge_slave_1: entered allmulticast mode [ 23.189075][ T4708] bridge_slave_1: entered promiscuous mode [ 23.200093][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.200118][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.200212][ T4710] bridge_slave_0: entered allmulticast mode [ 23.205306][ T4710] bridge_slave_0: entered promiscuous mode [ 23.223693][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.223724][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.223821][ T4710] bridge_slave_1: entered allmulticast mode [ 23.224236][ T4710] bridge_slave_1: entered promiscuous mode [ 23.231608][ T4709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.236127][ T4709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.237406][ T4708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.238987][ T4708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.259896][ T4720] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.259976][ T4720] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.260035][ T4720] bridge_slave_0: entered allmulticast mode [ 23.260494][ T4720] bridge_slave_0: entered promiscuous mode [ 23.265300][ T4720] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.265325][ T4720] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.265376][ T4720] bridge_slave_1: entered allmulticast mode [ 23.265803][ T4720] bridge_slave_1: entered promiscuous mode [ 23.267576][ T4710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.268533][ T4710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.276158][ T4710] team0: Port device team_slave_0 added [ 23.278057][ T4709] team0: Port device team_slave_0 added [ 23.278629][ T4710] team0: Port device team_slave_1 added [ 23.282130][ T4708] team0: Port device team_slave_0 added [ 23.290933][ T4709] team0: Port device team_slave_1 added [ 23.297873][ T4708] team0: Port device team_slave_1 added [ 23.302271][ T4720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.308570][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.308581][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.308596][ T4709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.309821][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.309833][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.309848][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.313697][ T4720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.326959][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.326972][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.326989][ T4709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.333699][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.333710][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.333727][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.343940][ T4710] hsr_slave_0: entered promiscuous mode [ 23.344268][ T4710] hsr_slave_1: entered promiscuous mode [ 23.348965][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.348977][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.348993][ T4708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.349593][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.349600][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.349613][ T4708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.369704][ T4709] hsr_slave_0: entered promiscuous mode [ 23.370415][ T4709] hsr_slave_1: entered promiscuous mode [ 23.370809][ T4709] debugfs: 'hsr0' already exists in 'hsr' [ 23.370846][ T4709] Cannot create hsr debugfs directory [ 23.373975][ T4720] team0: Port device team_slave_0 added [ 23.381673][ T4720] team0: Port device team_slave_1 added [ 23.383773][ T4708] hsr_slave_0: entered promiscuous mode [ 23.384101][ T4708] hsr_slave_1: entered promiscuous mode [ 23.384305][ T4708] debugfs: 'hsr0' already exists in 'hsr' [ 23.384315][ T4708] Cannot create hsr debugfs directory [ 23.418430][ T4720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.418448][ T4720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.418460][ T4720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.421762][ T4720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.421772][ T4720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.421786][ T4720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.460173][ T4720] hsr_slave_0: entered promiscuous mode [ 23.460733][ T4720] hsr_slave_1: entered promiscuous mode [ 23.460918][ T4720] debugfs: 'hsr0' already exists in 'hsr' [ 23.460928][ T4720] Cannot create hsr debugfs directory [ 23.515150][ T4722] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.515210][ T4722] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.515311][ T4722] bridge_slave_0: entered allmulticast mode [ 23.515754][ T4722] bridge_slave_0: entered promiscuous mode [ 23.516538][ T4722] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.516559][ T4722] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.516646][ T4722] bridge_slave_1: entered allmulticast mode [ 23.517033][ T4722] bridge_slave_1: entered promiscuous mode [ 23.523722][ T4722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.525559][ T4722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.556340][ T4722] team0: Port device team_slave_0 added [ 23.557187][ T4722] team0: Port device team_slave_1 added [ 23.575273][ T4722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.575287][ T4722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.575299][ T4722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.575966][ T4722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.575973][ T4722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.575986][ T4722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.578727][ T4710] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 23.581561][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 23.583285][ T4710] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 23.584501][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 23.610172][ T4722] hsr_slave_0: entered promiscuous mode [ 23.610455][ T4722] hsr_slave_1: entered promiscuous mode [ 23.610623][ T4722] debugfs: 'hsr0' already exists in 'hsr' [ 23.610633][ T4722] Cannot create hsr debugfs directory [ 23.620816][ T4710] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 23.622418][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 23.629140][ T4710] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 23.630894][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 23.655366][ T4709] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 23.656733][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 23.657057][ T4709] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 23.658020][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 23.658359][ T4709] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 23.659836][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 23.669605][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.669639][ T4710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.669784][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.669813][ T4710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.670888][ T4709] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 23.673026][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 23.690638][ T4708] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 23.691681][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 23.692192][ T4708] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 23.693411][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 23.694032][ T4708] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 23.696835][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 23.697616][ T4708] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 23.700024][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 23.726598][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.726637][ T4709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.726720][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.726747][ T4709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.735525][ T4720] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 23.737206][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 23.737510][ T4720] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 23.738620][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 23.739563][ T4720] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 23.741480][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 23.748796][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.748823][ T4708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.748906][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.748933][ T4708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.753155][ T4720] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 23.756436][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 23.764937][ T4720] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.764967][ T4720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.765039][ T4720] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.765067][ T4720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.782517][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.790253][ T4722] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 23.791283][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 23.791669][ T4722] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 23.792605][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 23.792932][ T4722] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 23.793770][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 23.794111][ T4722] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 23.798834][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 23.801615][ T4709] 8021q: adding VLAN 0 to HW filter on device team0 [ 23.804504][ T217] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.805868][ T217] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.806467][ T217] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.807920][ T217] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.809408][ T217] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.812295][ T217] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.817356][ T217] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.821942][ T217] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.845074][ T1482] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.845109][ T1482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.845495][ T1482] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.845514][ T1482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.857622][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.861176][ T4710] 8021q: adding VLAN 0 to HW filter on device team0 [ 23.866056][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.866085][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.866565][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.866585][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.882121][ T4720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.902296][ T4708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.906280][ T4720] 8021q: adding VLAN 0 to HW filter on device team0 [ 23.912410][ T4708] 8021q: adding VLAN 0 to HW filter on device team0 [ 23.921912][ T1345] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.921942][ T1345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.925798][ T4722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.937819][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.937849][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.938315][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.938334][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.938641][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.938658][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.964340][ T4722] 8021q: adding VLAN 0 to HW filter on device team0 [ 23.972351][ T4720] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 23.992009][ T4722] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 23.992028][ T4722] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 23.996818][ T4708] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 23.996836][ T4708] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 24.010129][ T1345] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.010156][ T1345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.012466][ T1345] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.012490][ T1345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.182669][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.214464][ T4722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.219139][ T4709] veth0_vlan: entered promiscuous mode [ 24.228678][ T4709] veth1_vlan: entered promiscuous mode [ 24.239418][ T4709] veth0_macvtap: entered promiscuous mode [ 24.240520][ T4709] veth1_macvtap: entered promiscuous mode [ 24.256700][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.258053][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.273211][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.274215][ T4720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.289294][ T4708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.294871][ T42] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.294996][ T42] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.295057][ T42] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.295272][ T42] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.302454][ T4708] veth0_vlan: entered promiscuous mode [ 24.305580][ T4708] veth1_vlan: entered promiscuous mode [ 24.322172][ T4710] veth0_vlan: entered promiscuous mode [ 24.324074][ T4710] veth1_vlan: entered promiscuous mode [ 24.353058][ T4708] veth0_macvtap: entered promiscuous mode [ 24.356059][ T4720] veth0_vlan: entered promiscuous mode [ 24.365783][ T4710] veth0_macvtap: entered promiscuous mode [ 24.366973][ T4710] veth1_macvtap: entered promiscuous mode [ 24.376642][ T4720] veth1_vlan: entered promiscuous mode [ 24.380672][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.380684][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.382447][ T4708] veth1_macvtap: entered promiscuous mode [ 24.395145][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.406830][ T4720] veth0_macvtap: entered promiscuous mode [ 24.407718][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.408396][ T4720] veth1_macvtap: entered promiscuous mode [ 24.417367][ T1345] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.417879][ T1345] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.418111][ T1345] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.432151][ T4722] veth0_vlan: entered promiscuous mode [ 24.433812][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.434431][ T4722] veth1_vlan: entered promiscuous mode [ 24.437865][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.449080][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.453476][ T4722] veth0_macvtap: entered promiscuous mode [ 24.454677][ T1345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.454689][ T1345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.456271][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.465967][ T14] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.479191][ T4722] veth1_macvtap: entered promiscuous mode [ 24.485722][ T1345] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.485752][ T1345] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.485772][ T1345] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.485789][ T1345] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.485805][ T1345] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.485820][ T1345] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.485835][ T1345] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.504934][ T1345] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.510971][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.510986][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.515542][ T1345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.515554][ T1345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.523207][ T4709] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.539925][ T4722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.541065][ T4722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.547044][ T1345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.547058][ T1345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.591078][ T4897] loop1: detected capacity change from 0 to 2048 [ 24.605218][ T306] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.608870][ T306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.608883][ T306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.608989][ T306] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.609544][ T306] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.609648][ T306] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.625000][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.625015][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.640514][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.640527][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.646231][ T4897] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 24.654481][ T1345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.654497][ T1345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.655614][ T51] Bluetooth: hci0: command tx timeout [ 24.655729][ T51] Bluetooth: hci4: command tx timeout [ 24.657731][ T4901] loop3: detected capacity change from 0 to 512 [ 24.665847][ T51] Bluetooth: hci3: command tx timeout [ 24.665888][ T4718] Bluetooth: hci1: command tx timeout [ 24.666274][ T4718] Bluetooth: hci2: command tx timeout [ 24.689131][ T217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.689147][ T217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.760523][ T4901] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #11: comm syz.3.4: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0) [ 24.760576][ T4901] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 24.762048][ T4901] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.4: couldn't read orphan inode 11 (err -117) [ 24.762105][ T4901] loop3: lost filesystem error report for type 5 error -117 [ 24.763217][ T4901] EXT4-fs (loop3): 1 truncate cleaned up [ 24.773655][ T4901] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 25.878876][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 25.899425][ T4917] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 25.900171][ T4917] overlayfs: failed to set uuid (/bus, err=-28); falling back to uuid=null. [ 26.090653][ T4913] workqueue: Failed to create a rescuer kthread for wq "kcopyd": -EINTR [ 26.092441][ T4913] ================================================================== [ 26.092453][ T4913] BUG: KASAN: null-ptr-deref in dm_kcopyd_client_destroy+0xa0/0x3c4 [ 26.092477][ T4913] Read of size 4 at addr 0000000000000174 by task syz.2.3/4913 [ 26.092486][ T4913] [ 26.092491][ T4913] CPU: 1 UID: 0 PID: 4913 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT [ 26.092501][ T4913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 26.092507][ T4913] Call trace: [ 26.092510][ T4913] show_stack+0x2c/0x3c (C) [ 26.092527][ T4913] __dump_stack+0x30/0x40 [ 26.092541][ T4913] dump_stack_lvl+0xd8/0x12c [ 26.092553][ T4913] print_report+0x58/0x84 [ 26.092562][ T4913] kasan_report+0x8c/0xc4 [ 26.092575][ T4913] kasan_check_range+0x17c/0x1ac [ 26.092585][ T4913] __kasan_check_read+0x20/0x30 [ 26.092596][ T4913] dm_kcopyd_client_destroy+0xa0/0x3c4 [ 26.092606][ T4913] __destroy+0x15c/0x2cc [ 26.092617][ T4913] cache_ctr+0xe78/0x1f1c [ 26.092627][ T4913] dm_table_add_target+0x44c/0xb18 [ 26.092640][ T4913] table_load+0x27c/0x764 [ 26.092649][ T4913] dm_ctl_ioctl+0x884/0xbbc [ 26.092658][ T4913] __arm64_sys_ioctl+0x154/0x1cc [ 26.092667][ T4913] invoke_syscall+0x98/0x244 [ 26.092679][ T4913] el0_svc_common+0xec/0x23c [ 26.092691][ T4913] do_el0_svc+0x4c/0x5c [ 26.092702][ T4913] el0_svc+0x60/0x1d8 [ 26.092711][ T4913] el0t_64_sync_handler+0x44/0x104 [ 26.092720][ T4913] el0t_64_sync+0x198/0x19c [ 26.092729][ T4913] ================================================================== [ 26.092733][ T4913] Disabling lock debugging due to kernel taint [ 26.092747][ T4913] Unable to handle kernel paging request at virtual address dfff80000000002e [ 26.092753][ T4913] KASAN: null-ptr-deref in range [0x0000000000000170-0x0000000000000177] [ 26.092758][ T4913] Mem abort info: [ 26.092761][ T4913] ESR = 0x0000000096000005 [ 26.092765][ T4913] EC = 0x25: DABT (current EL), IL = 32 bits [ 26.092770][ T4913] SET = 0, FnV = 0 [ 26.092774][ T4913] EA = 0, S1PTW = 0 [ 26.092778][ T4913] FSC = 0x05: level 1 translation fault [ 26.092783][ T4913] Data abort info: [ 26.092785][ T4913] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 26.092790][ T4913] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 26.092795][ T4913] GCS = 0, Overlay = 0, DirtyBit = 0 [ 26.092800][ T4913] [dfff80000000002e] address between user and kernel address ranges [ 26.092806][ T4913] Internal error: Oops: 0000000096000005 [#1] SMP [ 26.143040][ T4913] Modules linked in: [ 26.143886][ T4913] CPU: 1 UID: 0 PID: 4913 Comm: syz.2.3 Tainted: G B syzkaller #0 PREEMPT [ 26.146066][ T4913] Tainted: [B]=BAD_PAGE [ 26.146925][ T4913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 26.149040][ T4913] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 26.150762][ T4913] pc : dm_kcopyd_client_destroy+0xa4/0x3c4 [ 26.151987][ T4913] lr : dm_kcopyd_client_destroy+0xa0/0x3c4 [ 26.153168][ T4913] sp : ffff8000a9227620 [ 26.154038][ T4913] x29: ffff8000a92276c0 x28: ffff700015244efc x27: dfff800000000000 [ 26.155722][ T4913] x26: 0000000000000400 x25: 000000000000002e x24: 0000000000000174 [ 26.157363][ T4913] x23: dfff800000000000 x22: ffff700015244ec4 x21: ffff8000a9227620 [ 26.158918][ T4913] x20: fffffffffffffff4 x19: fffffffffffffff4 x18: ffff80011b88c000 [ 26.160645][ T4913] x17: 3d3d3d3d3d3d3d3d x16: 3d3d3d3d3d3d3d3d x15: 3d3d3d3d3d3d3d3d [ 26.162333][ T4913] x14: 000000000000059f x13: 0000000000000001 x12: 0000000000000000 [ 26.164043][ T4913] x11: 0000000000000000 x10: 0000000000080000 x9 : 0000000000000000 [ 26.165824][ T4913] x8 : 0000000000000000 x7 : 0000000000000000 x6 : ffff800080483084 [ 26.167552][ T4913] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f3854 [ 26.169287][ T4913] x2 : 0000000000000000 x1 : ffff0000cc6fd880 x0 : 0000000000000000 [ 26.171043][ T4913] Call trace: [ 26.171720][ T4913] dm_kcopyd_client_destroy+0xa4/0x3c4 (P) [ 26.172965][ T4913] __destroy+0x15c/0x2cc [ 26.173887][ T4913] cache_ctr+0xe78/0x1f1c [ 26.174809][ T4913] dm_table_add_target+0x44c/0xb18 [ 26.175730][ T4913] table_load+0x27c/0x764 [ 26.176451][ T4913] dm_ctl_ioctl+0x884/0xbbc [ 26.177277][ T4913] __arm64_sys_ioctl+0x154/0x1cc [ 26.178309][ T4913] invoke_syscall+0x98/0x244 [ 26.179249][ T4913] el0_svc_common+0xec/0x23c [ 26.180168][ T4913] do_el0_svc+0x4c/0x5c [ 26.181064][ T4913] el0_svc+0x60/0x1d8 [ 26.181940][ T4913] el0t_64_sync_handler+0x44/0x104 [ 26.183001][ T4913] el0t_64_sync+0x198/0x19c [ 26.183931][ T4913] Code: 52800081 91060278 972cc052 d343ff19 (38f76b28) [ 26.185191][ T4913] ---[ end trace 0000000000000000 ]--- [ 26.469908][ T4913] Kernel panic - not syncing: Oops: Fatal exception [ 26.471144][ T4913] SMP: stopping secondary CPUs [ 26.472217][ T4913] Kernel Offset: disabled [ 26.473174][ T4913] CPU features: 0x0,a0000000,00f00020,9c080a02,a84ff6a7 [ 26.474708][ T4913] Memory Limit: none [ 26.749253][ T4913] Rebooting in 86400 seconds..