last executing test programs: 17.813998072s ago: executing program 4 (id=58): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x3f00000000000000) 17.367629874s ago: executing program 4 (id=61): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4001af84, 0x0) 17.247826779s ago: executing program 4 (id=64): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e23, 0x180000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000000000029"], 0x30}, 0x34004894) 17.247674879s ago: executing program 4 (id=65): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x2b7, &(0x7f0000000880)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000780), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000007c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x98, 0x3a, 'max_read', 0x3a, '', 0x3a, './file0', 0x3a, [0x46]}, 0x30) 17.151899464s ago: executing program 4 (id=70): unshare(0x22020600) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x1, 0x0}, &(0x7f0000000340)=0x88) 16.307066214s ago: executing program 4 (id=78): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newlink={0x20, 0x10, 0x503}, 0x20}}, 0x0) 16.212505748s ago: executing program 32 (id=78): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newlink={0x20, 0x10, 0x503}, 0x20}}, 0x0) 4.26631117s ago: executing program 5 (id=80): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xd2}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x359}, 0x94) 4.179766264s ago: executing program 5 (id=168): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) getsockopt$llc_int(r0, 0x10c, 0x337033f6cd8ef1b, 0x0, &(0x7f0000000080)) 3.295771836s ago: executing program 1 (id=177): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000740)=ANY=[@ANYBLOB="00164c000000e5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.295597826s ago: executing program 5 (id=178): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) write$tun(r0, &(0x7f0000000640)={@val={0x0, 0x201}, @void, @ipv4=@icmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x9, 0x1, 0x0, @loopback, @multicast2}, @echo={0x8, 0x0, 0x0, 0x3, 0x7}}}, 0x20) 2.899712154s ago: executing program 2 (id=182): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x5, 0xd000, 0xe, "0062ba7d8200000016001b000200f705096604"}) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe27, 0x0, 0x0, 0x1000, 0x10000}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x20fb89, 0x800, 0x1, 0x122}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x3, 0x15a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x8000146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4cc2, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffd, 0x2000, 0x3, 0x400bd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x2b3, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) 2.848990447s ago: executing program 3 (id=183): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r2, 0xb) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x4000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x1, 0x4, 0x0, 0xffffffff, {0x77359400}, {0x0, 0x1, 0xf1, 0x5, 0x0, 0x1, "bf231e4b"}}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cb, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 2.78230652s ago: executing program 1 (id=184): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000100)={0x0, 0x8, 0x6, {0x6, 0xe, "89cfa930"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x9, 0x251, &(0x7f0000000800)="$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") lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="747275738b65642e"], 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c8) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 2.151295319s ago: executing program 1 (id=189): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x8000, 0x7800, 0x400, 0x400, {{0x5, 0x4, 0x1, 0x3f, 0x14, 0x65, 0x0, 0x8, 0x29, 0x0, @multicast2, @local}}}}) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x800) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000009, 0x400}, 0x0, 0x0) 1.904190091s ago: executing program 2 (id=190): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newqdisc={0x24, 0x24, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}}, 0x24}}, 0x0) 1.843894083s ago: executing program 3 (id=191): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x80000) 1.751723518s ago: executing program 2 (id=192): r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 1.684198382s ago: executing program 3 (id=194): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) 1.575729576s ago: executing program 0 (id=195): r0 = syz_open_dev$video(&(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000004c0)=@multiplanar_fd={0x8, 0x7, 0x4, 0x4000, 0x4, {}, {0x4, 0x2, 0x0, 0x9, 0x0, 0xf, "a6c98b6d"}, 0x200, 0x4, {0x0}, 0x9}) 1.530848609s ago: executing program 3 (id=196): syz_open_dev$dri(&(0x7f00000000c0), 0xfffffffffffffffb, 0x40100) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0xe, 0xc, 0xe8, 0xc, 0x4, 0xffffffffffffffff}) syz_pidfd_open(r1, 0x0) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000340)={0xe939, r0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000500)={{0xffffffffffffffff, &(0x7f00000005c0)='\x00\x04\x92+\xb1>\xdb!\xd3t\xca\xa7\xcbl[\x15\x7f\x04gg\xfc e\t:\aP\xear\x98\xf8\xb5\x90\x8ar\x86\x04\xe4K\x15T9m7\x0e8\xf7\x8e\x17\'\xc8\xa9\x02+\x1b\xf8ZmS\xdd\xfe\x19u\x06G\x06\xebw\xe21T\x1a\xa1\xa7:Ak\x19\xa8r\xed`\x14\xc0\xde\xee \xafu\xba\xcf\xf4T\x04g\x89\xa9\xd3\xcb5&\xd7\x85p\x8c\x00\xeb\xf1\x83\xbc\xee4O^]\xa5J[UN\'\xefI\b\xcfW0\xcdo\x8a\xea\xf2ZG\xda\xa3\xed\xb5dB\xe29\x1f\xdfP\\O\xfa\xa3', 0x100, &(0x7f00000001c0)={@align, {0x0, 0x1ed7, 0x7963, 0x7fffffffffffff}}, 0xb, &(0x7f0000000200)={@_ha_fsid}, &(0x7f00000002c0)=0x8}, {[0x1, 0x8c34, 0x2, 0x9]}, 0x3, 0xff, &(0x7f0000000380)=""/255}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_sctp(0x2, 0x5, 0x84) setresuid(0x0, 0xee01, 0xffffffffffffffff) socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_VENDOR(r3, 0x0, 0x2000a080) lseek(r5, 0xffffffff, 0x0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000580)={0x30, 0x5, 0x0, {0x0, 0x6, 0x2, 0x2}}, 0x30) 1.49984976s ago: executing program 2 (id=197): r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f000000ac40)="$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") ioctl$BTRFS_IOC_ENCODED_READ(r0, 0x80809440, &(0x7f0000000640)={&(0x7f00000005c0)=[{&(0x7f0000000000)="a8209f", 0x3}], 0x1, 0x9, 0x0, 0x8, 0x2, 0x7, 0x2, 0x7fffffff}) 1.411031104s ago: executing program 0 (id=198): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x10000, 0x0, 0x1, 0x1}, 0x20) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') read$FUSE(r1, &(0x7f00000059c0)={0x2020}, 0x2020) 1.400793525s ago: executing program 5 (id=199): syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB="b23d"], 0x0) r0 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$P9_RREADDIR(r0, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x5}}, 0xb) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000180)=0x8) 883.764949ms ago: executing program 0 (id=200): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000020)='./proc/net/afs/cells\x00', 0x2, 0x0) write$FUSE_INIT(r0, &(0x7f00000021c0)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x4, 0x20, 0x6, 0x6, 0xc4, 0x162200, 0x0, 0x0, 0x8, 0x4}}, 0x50) 857.12928ms ago: executing program 0 (id=201): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1, r0, 0x26, 0x0, @val=@iter={0x0}}, 0x20) 818.319122ms ago: executing program 1 (id=202): r0 = socket(0x2, 0x80805, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000002c0)={@mcast1, @loopback, @remote, 0x9, 0x800, 0x3, 0x100, 0x7f, 0x80010342}) 816.969792ms ago: executing program 0 (id=203): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4004095}, 0x40050) 751.739885ms ago: executing program 0 (id=204): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) capset(&(0x7f0000000040)={0x19980330}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x0, 0x20, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x7, 0x1, 0x3, 0x1c, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0xf7, 0x80, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x20, 0xfe, 0xa}}]}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x26, 0x26, 0x9, 0x8, 0x6}, 0x65, &(0x7f0000000080)={0x5, 0xf, 0x65, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "32d025d3474e9f14d6829b1baeca444f"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "08b1b9f08aff09972fc4ea5b5fff24a0"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "ce58e20e926169681c443593b4a24815"}, @ssp_cap={0x24, 0x10, 0xa, 0xf3, 0x6, 0x9, 0xf0f, 0x5, [0xffc000, 0xc0, 0x3f00, 0xc030, 0x3f00, 0x18000]}]}, 0x4, [{0x2, &(0x7f0000000300)=@string={0x2}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x436}}, {0x7a, &(0x7f0000000440)=@string={0x7a, 0x3, "ea731a2405eeee0cc50f33c4f70a76e67270db4df9e199b8e9c5403932ea1518b761c0e811a546290ddffd3e0be8bd6a81eedbc5861576fe33282b93ec30bc6d62eba7849d3f9e7106c19a8ad1783677ccc241c38f194d938ba161d953b82a3add5f8ce615675baf305415396654e437c53dd35b8ce7ed69"}}]}) syz_usb_connect$uac1(0x4, 0x72, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000840)={0xc, 0x0, 0x0}, &(0x7f0000000b40)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 751.527525ms ago: executing program 1 (id=205): syz_open_dev$video4linux(&(0x7f0000001140), 0x92e2, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0xd228, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x1a, 0x0, 0x0) 728.656046ms ago: executing program 1 (id=206): memfd_create(&(0x7f0000000240)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1fb;(\xb5\xe1jS\xd6\x91B\xb4\xe5=\xc1+\xb9\x12\xde0\x02\xcc\x18\xae%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa7^\xff\xf5\x95\xd2q#\xc6\xca\x97\b\x00\x00\x00\x00\x00\x00\x00&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdlC\xec\xe4\x9a\xc2\fX\x0e\xbc\xa4$\x9dU\xab\xbf\xbb\x12\xe6\x9f\x1d\xe4\x8a\x00\x00\x00\x00\x00\x00\x00\xa0W\xf1H\xb4~$\x05bIp+\x81Y\x9d\xd2!\"\x9d]zs\xb7\xfc,\b\xdd9\xc6\xe03t9\tT\n\xe8\x1f\x84\x1f\xf5\xc5\xf6}\xd7\xa3SL\xfa\xda\x97\x84\xa5Oj\x9by\xd3\x03 u(\x19\xd1\xc0\x8dG\xd8a\xad\x90jz\x12\xbc\xc3\xd7\x04~\xbe\xba\xccTO\xc1\xb2:\xdd\xc1M$\xbb\xe1{\x04\xb3\x13>\xf2n\xee\xab\x83%k\x92\x16\t\xe0\xe1\xa0\xa62\xef\x12\x96\x8b\x1es:\xfe&\x00'/318, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x4944, &(0x7f0000000100)={0x0, 0xd026, 0x2, 0x0, 0x42}, &(0x7f0000000400), &(0x7f0000011000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0x6, 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, 0x0) socket(0x10, 0x803, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) socket$inet6(0xa, 0x80003, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001e00)={0xffffffffffffffff, 0xe0, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001b80), 0x0, 0x0, 0x97, &(0x7f0000001c00)=[{}], 0x8, 0x10, &(0x7f0000001c40), 0x0, 0x0, 0x8f, 0x8, 0x0, 0x0}}, 0x10) 298.266976ms ago: executing program 3 (id=207): r0 = socket(0xa, 0x3, 0x87) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) 234.291809ms ago: executing program 3 (id=208): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000100)={[{@acl}, {@heartbeat_none}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x3}}, {@coherency_full}, {@coherency_full}, {@localflocks}, {@coherency_full}, {@inode64}]}, 0x1, 0x4421, &(0x7f0000004500)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4800, 0x0, 0x6, 0x0, &(0x7f0000000080)) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x84, 0x0, 0xfe, 0x0, &(0x7f00000002c0)) 143.741534ms ago: executing program 2 (id=209): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:05.0/remove\x00', 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) symlinkat(0x0, r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000240)={'wg1\x00'}) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socket(0x10, 0x4, 0x0) socket$unix(0x1, 0x2, 0x0) write(r0, &(0x7f00000002c0)='9', 0x1) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 143.550194ms ago: executing program 5 (id=210): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000840)='./file3\x00', 0x0, &(0x7f0000001040)=ANY=[], 0x1, 0xaf3, &(0x7f0000002400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file3\x00', 0x143002, 0x184) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r1, 0x0, 0x0) 0s ago: executing program 2 (id=211): openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.101' (ED25519) to the list of known hosts. [ 28.381368][ T4315] cgroup: Unknown subsys name 'net' [ 28.593240][ T4315] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.860024][ T4315] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 29.575765][ T4334] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.578503][ T4336] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.580170][ T4336] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.582700][ T4340] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.584124][ T4340] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.585516][ T4340] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.586737][ T4340] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.588089][ T4340] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.589675][ T4340] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.591279][ T4340] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.593647][ T4341] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.595493][ T4341] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.595608][ T4344] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.596965][ T4341] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.598330][ T4344] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.599518][ T4341] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 29.600883][ T4344] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.602460][ T4341] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.602846][ T4344] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 29.604586][ T4341] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.605823][ T4344] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 29.606801][ T4341] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.611085][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.618297][ T4341] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.619655][ T4331] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.621915][ T4341] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 29.623208][ T4341] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 29.624638][ T4341] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.626075][ T4341] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.627399][ T4331] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.740721][ T4330] chnl_net:caif_netlink_parms(): no params data found [ 29.777413][ T4337] chnl_net:caif_netlink_parms(): no params data found [ 29.779528][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 29.790076][ T4328] chnl_net:caif_netlink_parms(): no params data found [ 29.802300][ T4335] chnl_net:caif_netlink_parms(): no params data found [ 29.825099][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.826516][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.828228][ T4330] device bridge_slave_0 entered promiscuous mode [ 29.838896][ T4337] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.840153][ T4337] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.842879][ T4337] device bridge_slave_0 entered promiscuous mode [ 29.844567][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.845740][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.847341][ T4330] device bridge_slave_1 entered promiscuous mode [ 29.854852][ T4337] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.856182][ T4337] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.857794][ T4337] device bridge_slave_1 entered promiscuous mode [ 29.862912][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.864252][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.865863][ T4328] device bridge_slave_0 entered promiscuous mode [ 29.879479][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.880904][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.882562][ T4329] device bridge_slave_0 entered promiscuous mode [ 29.884162][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.885380][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.886943][ T4328] device bridge_slave_1 entered promiscuous mode [ 29.891492][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.893249][ T4335] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.894486][ T4335] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.896400][ T4335] device bridge_slave_0 entered promiscuous mode [ 29.898176][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.899585][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.901367][ T4329] device bridge_slave_1 entered promiscuous mode [ 29.907563][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.911942][ T4337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.914121][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.918016][ T4335] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.919348][ T4335] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.923370][ T4335] device bridge_slave_1 entered promiscuous mode [ 29.925381][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.929508][ T4337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.934613][ T4330] team0: Port device team_slave_0 added [ 29.936412][ T4330] team0: Port device team_slave_1 added [ 29.942200][ T4328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.948854][ T4337] team0: Port device team_slave_0 added [ 29.954711][ T4328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.958650][ T4337] team0: Port device team_slave_1 added [ 29.962656][ T4335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.969633][ T4329] team0: Port device team_slave_0 added [ 29.971455][ T4329] team0: Port device team_slave_1 added [ 29.977260][ T4335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.979017][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.980177][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.985209][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.991560][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.992855][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.997210][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.999887][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.001465][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.005895][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.012604][ T4335] team0: Port device team_slave_0 added [ 30.014419][ T4335] team0: Port device team_slave_1 added [ 30.017439][ T4337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.018702][ T4337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.024006][ T4337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.026575][ T4337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.027827][ T4337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.032863][ T4337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.035213][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.036351][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.043980][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.047614][ T4328] team0: Port device team_slave_0 added [ 30.056098][ T4328] team0: Port device team_slave_1 added [ 30.063116][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.064287][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.068751][ T4335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.073785][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.075047][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.079731][ T4335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.084693][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.085997][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.090305][ T4328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.141698][ T4329] device hsr_slave_0 entered promiscuous mode [ 30.180786][ T4329] device hsr_slave_1 entered promiscuous mode [ 30.239602][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.240879][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.245216][ T4328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.301629][ T4337] device hsr_slave_0 entered promiscuous mode [ 30.340792][ T4337] device hsr_slave_1 entered promiscuous mode [ 30.380857][ T4337] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.382187][ T4337] Cannot create hsr debugfs directory [ 30.421698][ T4330] device hsr_slave_0 entered promiscuous mode [ 30.460776][ T4330] device hsr_slave_1 entered promiscuous mode [ 30.500615][ T4330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.502044][ T4330] Cannot create hsr debugfs directory [ 30.551670][ T4335] device hsr_slave_0 entered promiscuous mode [ 30.590739][ T4335] device hsr_slave_1 entered promiscuous mode [ 30.630636][ T4335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.631946][ T4335] Cannot create hsr debugfs directory [ 30.672267][ T4328] device hsr_slave_0 entered promiscuous mode [ 30.710746][ T4328] device hsr_slave_1 entered promiscuous mode [ 30.750688][ T4328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.752001][ T4328] Cannot create hsr debugfs directory [ 30.867706][ T4329] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.911761][ T4329] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.953148][ T4329] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.991545][ T4329] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.033185][ T4328] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.071557][ T4328] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.112134][ T4328] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.155286][ T4328] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.206472][ T4335] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.227250][ T4335] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.281833][ T4335] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.321684][ T4335] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.378993][ T4337] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.414715][ T4337] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.451734][ T4337] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.506947][ T4337] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.569429][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.586750][ T4330] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.623085][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.626758][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.628807][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.632449][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.634199][ T4330] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.671413][ T4330] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.691010][ T4334] Bluetooth: hci2: command 0x0409 tx timeout [ 31.691014][ T4345] Bluetooth: hci3: command 0x0409 tx timeout [ 31.691081][ T4345] Bluetooth: hci1: command 0x0409 tx timeout [ 31.692167][ T4334] Bluetooth: hci4: command 0x0409 tx timeout [ 31.693162][ T4345] Bluetooth: hci0: command 0x0409 tx timeout [ 31.713841][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.723940][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.725584][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.726996][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.728980][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.730588][ T697] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.731841][ T697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.733529][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.735433][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.737095][ T697] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.738355][ T697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.739934][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.742139][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 31.743762][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.745463][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.747006][ T697] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.748311][ T697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.749921][ T4330] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.788696][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.790374][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.792094][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 31.794035][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 31.795771][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 31.797468][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 31.799009][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.800746][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.802351][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 31.806565][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.808185][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.809946][ T1579] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.811239][ T1579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.818961][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 31.824166][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.835562][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 31.848575][ T4337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.850221][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 31.852822][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 31.854932][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 31.859672][ T4335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.872475][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.874082][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.875734][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.880202][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 31.882365][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 31.883936][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.885607][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.892308][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.893813][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.896130][ T4335] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.900289][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.906663][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.908357][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.910000][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.912524][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.914169][ T4387] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.915458][ T4387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.917017][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.918604][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.920049][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.924043][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 31.928237][ T4337] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.933232][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.934883][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.936524][ T1579] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.937837][ T1579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.939562][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.942517][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 31.944319][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.946023][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.947592][ T1579] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.948790][ T1579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.950241][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.956823][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.958550][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.960036][ T4387] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.961309][ T4387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.966655][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 31.968050][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 31.969367][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.971041][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.972500][ T4387] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.973713][ T4387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.980028][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.982964][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.984594][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.986328][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 31.988095][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 31.989810][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.009929][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.011722][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.014375][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.016067][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.017637][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.019291][ T4387] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.020427][ T4387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.023260][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.025117][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.026822][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.028688][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.030333][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.032449][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.034004][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.040372][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.042285][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.043827][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.045759][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.047293][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.049043][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.059374][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.064268][ T4335] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.066370][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.069376][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.071261][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.073007][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.075039][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.083919][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.085625][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.089731][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.092209][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.096096][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.101661][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.103167][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.104733][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.106284][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.108827][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.116925][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.124708][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.126410][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.137139][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.138766][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.145818][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.147343][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.149215][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.151639][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.162268][ T4329] device veth0_vlan entered promiscuous mode [ 32.166682][ T4328] device veth0_vlan entered promiscuous mode [ 32.168479][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.170235][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.173782][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.180911][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.186235][ T4329] device veth1_vlan entered promiscuous mode [ 32.192287][ T4328] device veth1_vlan entered promiscuous mode [ 32.205372][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.206953][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.208516][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.210140][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.215647][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.217110][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.224019][ T4335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.236276][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.237949][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.245062][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.246760][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.257664][ T4328] device veth0_macvtap entered promiscuous mode [ 32.260302][ T4328] device veth1_macvtap entered promiscuous mode [ 32.263012][ T4329] device veth0_macvtap entered promiscuous mode [ 32.264503][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.265899][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.267362][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.268995][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.270420][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.272375][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.273742][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.277122][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.282848][ T4337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.294380][ T4329] device veth1_macvtap entered promiscuous mode [ 32.303203][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.306156][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.307700][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.309404][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.314421][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.316589][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.318141][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.319867][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.331395][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.333772][ T4328] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.335132][ T4328] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.336576][ T4328] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.338018][ T4328] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.343475][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.345097][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.348977][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.351175][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.353403][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.355552][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.357185][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.358683][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.360311][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.369081][ T4335] device veth0_vlan entered promiscuous mode [ 32.371981][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.373889][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.376131][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.378972][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.380545][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.383089][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.384817][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.386559][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.388260][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.389960][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.391955][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.393485][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.394981][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.398065][ T4335] device veth1_vlan entered promiscuous mode [ 32.402461][ T4329] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.403853][ T4329] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.405279][ T4329] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.406614][ T4329] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.410064][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.411795][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.413346][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.414938][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.417233][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.418716][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.422620][ T4330] device veth0_vlan entered promiscuous mode [ 32.427917][ T4337] device veth0_vlan entered promiscuous mode [ 32.434058][ T4330] device veth1_vlan entered promiscuous mode [ 32.437368][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.439027][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.442862][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.445516][ T4335] device veth0_macvtap entered promiscuous mode [ 32.455206][ T4335] device veth1_macvtap entered promiscuous mode [ 32.457497][ T4337] device veth1_vlan entered promiscuous mode [ 32.491612][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.493418][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.494872][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.496456][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.497990][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.499494][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.504059][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.509471][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.512198][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.513987][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.515820][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.518181][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.522600][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.523931][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.525129][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.525151][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.528565][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.530445][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.533205][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.538487][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.540252][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.543664][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.545162][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.546763][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.549403][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.552301][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.554315][ T4335] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.555783][ T4335] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.557336][ T4335] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.558898][ T4335] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.566919][ T4330] device veth0_macvtap entered promiscuous mode [ 32.569982][ T4330] device veth1_macvtap entered promiscuous mode [ 32.574926][ T4337] device veth0_macvtap entered promiscuous mode [ 32.580385][ T697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.581997][ T697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.588509][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.590065][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.592042][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.593501][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.596247][ T697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.597528][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.597549][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.597555][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.597560][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.597565][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.597570][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.599374][ T697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.602773][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.614239][ T4337] device veth1_macvtap entered promiscuous mode [ 32.624100][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.625619][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.627186][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.628836][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.638766][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.640216][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.645420][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.647282][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.649126][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.652085][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.653679][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.655386][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.658143][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.660753][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.662331][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.664047][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.670398][ T4387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.672322][ T4387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.673763][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.675660][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.677493][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.679235][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.685253][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.687049][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.688798][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.691120][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.693357][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.695408][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.697282][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.699088][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.701575][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.703303][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.705073][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.706746][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.708472][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.711264][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.713885][ T4330] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.715365][ T4330] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.716889][ T4330] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.718565][ T4330] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.721718][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.723403][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.724977][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.727038][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.728719][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.738896][ T4387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.740353][ T4387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.742357][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.751895][ T4337] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.753388][ T4337] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.755120][ T4337] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.756871][ T4337] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.766288][ T4413] process 'syz.0.1' launched './file0' with NULL argv: empty string added [ 32.835329][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.836747][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.838206][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.889189][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.890547][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.895497][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.897016][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.898314][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.899984][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.943511][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.944961][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.946878][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.006207][ T4426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.009428][ T4423] nvme nvme1: failed to connect socket: -111 [ 33.011809][ T4426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.041779][ T4416] loop1: detected capacity change from 0 to 32768 [ 33.083827][ T4416] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.2 (4416) [ 33.100727][ T4416] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 33.102500][ T4416] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 33.110391][ T4416] BTRFS info (device loop1): setting nodatasum [ 33.118885][ T4416] BTRFS info (device loop1): enabling auto defrag [ 33.120012][ T4416] BTRFS info (device loop1): disabling tree log [ 33.122043][ T4416] BTRFS info (device loop1): using free space tree [ 33.134240][ T4421] loop4: detected capacity change from 0 to 32768 [ 33.395078][ T4421] ======================================================= [ 33.395078][ T4421] WARNING: The mand mount option has been deprecated and [ 33.395078][ T4421] and is ignored by this kernel. Remove the mand [ 33.395078][ T4421] option from the mount to silence this warning. [ 33.395078][ T4421] ======================================================= [ 33.405631][ T4438] loop0: detected capacity change from 0 to 64 [ 33.409344][ T4438] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 33.431922][ T4421] JBD2: Ignoring recovery information on journal [ 33.466094][ T4416] BTRFS info (device loop1): enabling ssd optimizations [ 33.494039][ T4421] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 33.571888][ T4329] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 33.623175][ T4335] ocfs2: Unmounting device (7,4) on (node local) [ 33.771265][ T4345] Bluetooth: hci0: command 0x041b tx timeout [ 33.772428][ T4345] Bluetooth: hci4: command 0x041b tx timeout [ 33.773433][ T4345] Bluetooth: hci1: command 0x041b tx timeout [ 33.774500][ T4345] Bluetooth: hci2: command 0x041b tx timeout [ 33.775571][ T4345] Bluetooth: hci3: command 0x041b tx timeout [ 33.805794][ T4476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.805922][ T4476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.951657][ T4482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.953344][ T4482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.078621][ T4485] loop1: detected capacity change from 0 to 32768 [ 34.088889][ T4485] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.18 (4485) [ 34.104111][ T4485] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 34.107342][ T4485] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 34.109032][ T4485] BTRFS info (device loop1): using free space tree [ 34.226533][ T4485] BTRFS info (device loop1): enabling ssd optimizations [ 34.278443][ T4329] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 34.526673][ T4524] loop4: detected capacity change from 0 to 64 [ 34.567821][ T4524] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 34.625095][ T4530] loop1: detected capacity change from 0 to 1024 [ 34.648992][ T4530] EXT4-fs: Ignoring removed bh option [ 34.697431][ T4536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.703256][ T4530] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 34.735010][ T4536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.761265][ T4539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.769414][ T4539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.775726][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 34.822555][ T4541] loop1: detected capacity change from 0 to 512 [ 34.833454][ T4541] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #2: comm syz.1.30: missing EA_INODE flag [ 34.837425][ T4541] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.30: error while reading EA inode 2 err=-117 [ 34.843345][ T4541] EXT4-fs (loop1): 1 orphan inode deleted [ 34.844366][ T4541] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 34.962667][ T4544] loop0: detected capacity change from 0 to 32768 [ 34.968351][ T4544] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.31 (4544) [ 34.983873][ T4544] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 34.988651][ T4544] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 34.996103][ T4544] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 35.002154][ T4544] BTRFS info (device loop0): use zstd compression, level 3 [ 35.009307][ T4544] BTRFS info (device loop0): using free space tree [ 35.076167][ T4465] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.080911][ T4465] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 35.088973][ T4544] BTRFS info (device loop0): enabling ssd optimizations [ 35.123208][ T4328] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 35.208669][ T4561] syz.2.33 uses obsolete (PF_INET,SOCK_PACKET) [ 35.373365][ T4588] loop0: detected capacity change from 0 to 512 [ 35.412065][ T4588] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 35.492632][ T4328] EXT4-fs (loop0): unmounting filesystem. [ 35.850810][ T4339] Bluetooth: hci3: command 0x040f tx timeout [ 35.852143][ T4339] Bluetooth: hci2: command 0x040f tx timeout [ 35.853160][ T4339] Bluetooth: hci1: command 0x040f tx timeout [ 35.854233][ T4339] Bluetooth: hci4: command 0x040f tx timeout [ 35.855250][ T4339] Bluetooth: hci0: command 0x040f tx timeout [ 36.262459][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 36.318573][ T4608] using random self ethernet address [ 36.319515][ T4608] using random host ethernet address [ 36.648893][ T4608] using random self ethernet address [ 36.649854][ T4608] using random host ethernet address [ 36.698968][ T4620] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 36.700442][ T4620] FAULT_INJECTION: forcing a failure. [ 36.700442][ T4620] name failslab, interval 1, probability 0, space 0, times 1 [ 36.711710][ T4620] CPU: 0 PID: 4620 Comm: syz.0.53 Not tainted syzkaller #0 [ 36.713006][ T4620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 36.714821][ T4620] Call trace: [ 36.715466][ T4620] dump_backtrace+0x1c4/0x1f0 [ 36.716443][ T4620] show_stack+0x2c/0x3c [ 36.717303][ T4620] __dump_stack+0x30/0x40 [ 36.718182][ T4620] dump_stack_lvl+0xf4/0x15c [ 36.719118][ T4620] dump_stack+0x1c/0x5c [ 36.719968][ T4620] should_fail_ex+0x3cc/0x524 [ 36.720920][ T4620] __should_failslab+0xc0/0x11c [ 36.721876][ T4620] should_failslab+0x10/0x28 [ 36.722749][ T4620] __kmem_cache_alloc_node+0x7c/0x318 [ 36.723765][ T4620] __kmalloc+0xc4/0x180 [ 36.724561][ T4620] usb_hcd_submit_urb+0x6c8/0x16c4 [ 36.725498][ T4620] usb_submit_urb+0xe10/0x1510 [ 36.726393][ T4620] proc_do_submiturb+0x1eb8/0x2cc8 [ 36.727395][ T4620] proc_submiturb+0x194/0x230 [ 36.728253][ T4620] usbdev_ioctl+0xd74/0x1a94 [ 36.729107][ T4620] __arm64_sys_ioctl+0x14c/0x1c8 [ 36.730042][ T4620] invoke_syscall+0x98/0x290 [ 36.730908][ T4620] el0_svc_common+0x13c/0x258 [ 36.731776][ T4620] do_el0_svc+0x5c/0x134 [ 36.732551][ T4620] el0_svc+0x58/0x128 [ 36.733302][ T4620] el0t_64_sync_handler+0x84/0xf0 [ 36.734250][ T4620] el0t_64_sync+0x18c/0x190 [ 36.753305][ T4625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.755125][ T4625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.190164][ T4639] loop3: detected capacity change from 0 to 256 [ 37.193486][ T4639] exfat: Deprecated parameter 'namecase' [ 37.194546][ T4639] exfat: Deprecated parameter 'namecase' [ 37.195534][ T4639] exfat: Unknown parameter 'zero_size_dir' [ 37.214934][ T4318] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 37.462838][ T4664] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 37.931765][ T4334] Bluetooth: hci1: command 0x0419 tx timeout [ 37.931774][ T4345] Bluetooth: hci0: command 0x0419 tx timeout [ 37.932835][ T4334] Bluetooth: hci3: command 0x0419 tx timeout [ 37.933999][ T4339] Bluetooth: hci4: command 0x0419 tx timeout [ 38.309578][ T4690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.79'. [ 38.315609][ T4690] netlink: 48 bytes leftover after parsing attributes in process `syz.0.79'. [ 38.318743][ T4690] device geneve2 entered promiscuous mode [ 38.451615][ T4345] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 38.454846][ T4345] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 38.456613][ T4345] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 38.458851][ T4345] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 38.463171][ T4345] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 38.464743][ T4345] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 38.612759][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.665282][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.752259][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.845325][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.941934][ T4694] chnl_net:caif_netlink_parms(): no params data found [ 39.043820][ T4694] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.050267][ T4694] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.066036][ T4694] device bridge_slave_0 entered promiscuous mode [ 39.087655][ T4694] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.089044][ T4694] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.094375][ T4694] device bridge_slave_1 entered promiscuous mode [ 39.144487][ T4694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.156737][ T4694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.229075][ T4693] syz.0.81 (4693): drop_caches: 2 [ 39.334912][ T4694] team0: Port device team_slave_0 added [ 39.338423][ T4694] team0: Port device team_slave_1 added [ 39.380234][ T4736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.382183][ T4736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.386515][ T4694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.387832][ T4694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.401766][ T4694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.410225][ T4694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.414649][ T4694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.420096][ T4694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.845259][ T4694] device hsr_slave_0 entered promiscuous mode [ 39.870794][ T4694] device hsr_slave_1 entered promiscuous mode [ 39.913298][ T4694] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.914643][ T4694] Cannot create hsr debugfs directory [ 40.094700][ T4770] Cannot find add_set index 0 as target [ 40.234626][ T4773] set_capacity_and_notify: 2 callbacks suppressed [ 40.234636][ T4773] loop0: detected capacity change from 0 to 512 [ 40.291888][ T4773] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 40.314456][ T4763] loop2: detected capacity change from 0 to 32768 [ 40.328008][ T4763] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.92 (4763) [ 40.330474][ T4773] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 40.388584][ T4694] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 40.398389][ T4773] EXT4-fs (loop0): 1 truncate cleaned up [ 40.404966][ T4773] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 40.418206][ T4782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.437358][ T4782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.479645][ T4694] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 40.490640][ T4339] Bluetooth: hci2: command 0x0409 tx timeout [ 40.532964][ T4694] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 40.535294][ T4763] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 40.537341][ T4763] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 40.539149][ T4763] BTRFS info (device loop2): using free space tree [ 40.697441][ T4694] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 40.792309][ T4763] BTRFS info (device loop2): enabling ssd optimizations [ 40.879001][ T4330] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 40.976019][ T4823] loop2: detected capacity change from 0 to 256 [ 40.977579][ T4823] exfat: Deprecated parameter 'namecase' [ 40.978625][ T4823] exfat: Deprecated parameter 'namecase' [ 40.979655][ T4823] exfat: Deprecated parameter 'namecase' [ 41.004658][ T4328] EXT4-fs (loop0): unmounting filesystem. [ 41.038679][ T4823] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 41.097108][ T4694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.148283][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.149851][ T697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.310460][ T4836] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.312430][ T4836] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.569372][ T4867] udc dummy_udc.0: failed to start g1: -19 [ 41.572000][ T4867] UDC core: g1: couldn't find an available UDC or it's busy [ 41.968490][ T4877] Zero length message leads to an empty skb [ 42.031026][ T4836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.049002][ T4836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.327734][ T4836] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.329457][ T4836] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.331150][ T4836] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.334409][ T4836] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.371944][ T27] audit: type=1326 audit(42.350:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4878 comm="syz.1.118" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db782e8 code=0x7ffc0000 [ 42.377699][ T27] audit: type=1326 audit(42.350:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4878 comm="syz.1.118" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db782e8 code=0x7ffc0000 [ 42.382639][ T27] audit: type=1326 audit(42.350:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4878 comm="syz.1.118" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=287 compat=0 ip=0xffff8db782e8 code=0x7ffc0000 [ 42.387071][ T27] audit: type=1326 audit(42.350:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4878 comm="syz.1.118" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db782e8 code=0x7ffc0000 [ 42.415575][ T27] audit: type=1326 audit(42.350:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4878 comm="syz.1.118" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db782e8 code=0x7ffc0000 [ 42.573741][ T4339] Bluetooth: hci2: command 0x041b tx timeout [ 42.583369][ T4694] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.870331][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.872271][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.873809][ T4636] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.875436][ T4636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.880201][ T4874] tipc: Started in network mode [ 42.881207][ T4874] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 42.882544][ T4874] tipc: Enabled bearer , priority 0 [ 42.905837][ T4883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.907716][ T4883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.937983][ T9] device hsr_slave_0 left promiscuous mode [ 42.971252][ T9] device hsr_slave_1 left promiscuous mode [ 43.050760][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.052253][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.054032][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.055442][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.056974][ T9] device bridge_slave_1 left promiscuous mode [ 43.059083][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.121379][ T9] device bridge_slave_0 left promiscuous mode [ 43.122772][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.260837][ T9] device veth1_macvtap left promiscuous mode [ 43.262252][ T9] device veth0_macvtap left promiscuous mode [ 43.263270][ T9] device veth1_vlan left promiscuous mode [ 43.264302][ T9] device veth0_vlan left promiscuous mode [ 43.589136][ T4920] loop2: detected capacity change from 0 to 32768 [ 43.676000][ T4942] binder: BINDER_SET_CONTEXT_MGR already set [ 43.677150][ T4942] binder: 4941:4942 ioctl 4018620d 20004a80 returned -16 [ 43.679129][ T4942] binder: tried to use weak ref as strong ref [ 43.680272][ T4942] binder: 4941:4942 Acquire 1 refcount change on invalid ref 0 ret -22 [ 43.682326][ T4942] binder: 4941:4942 got transaction to invalid handle, 3 [ 43.683609][ T4942] binder: 4942:4941 cannot find target node [ 43.684646][ T4942] binder: 4941:4942 transaction call to 0:0 failed 3/29201/-22, size 0-0 line 3062 [ 43.687195][ T4375] binder: undelivered TRANSACTION_ERROR: 29201 [ 43.703373][ T4381] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 43.718031][ T4948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.719624][ T4948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.727892][ T4948] loop2: detected capacity change from 0 to 256 [ 43.736035][ T4948] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 43.801916][ T4953] netlink: 84 bytes leftover after parsing attributes in process `syz.3.128'. [ 43.916062][ T4381] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 43.918111][ T4381] usb 1-1: config 0 has no interfaces? [ 43.919439][ T4381] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 43.922181][ T4381] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.928401][ T4381] usb 1-1: config 0 descriptor?? [ 44.148409][ T4375] usb 1-1: USB disconnect, device number 2 [ 44.645888][ T4978] loop0: detected capacity change from 0 to 1 [ 44.661263][ T4339] Bluetooth: hci2: command 0x040f tx timeout [ 44.681147][ T4978] ldm_validate_privheads(): Disk read failed. [ 44.682183][ T4978] loop0: [ 44.682656][ T4978] loop0: partition table partially beyond EOD, truncated [ 44.713275][ T4375] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 44.794302][ T4984] overlayfs: missing 'lowerdir' [ 45.103463][ T4375] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 45.105278][ T4375] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 45.222055][ T9] team0 (unregistering): Port device team_slave_1 removed [ 45.381045][ T9] team0 (unregistering): Port device team_slave_0 removed [ 45.541282][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.571383][ T4375] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 45.572921][ T4375] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.574208][ T4375] usb 1-1: Product: syz [ 45.574862][ T4375] usb 1-1: Manufacturer: syz [ 45.575603][ T4375] usb 1-1: SerialNumber: syz [ 45.720877][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.779292][ T4375] snd-usb-6fire 1-1:1.0: unknown device firmware state received from device: [ 45.780862][ T4375] eb aa 42 df 6a 6f 43 37 [ 45.781723][ T4375] snd-usb-6fire: probe of 1-1:1.0 failed with error -5 [ 46.730348][ T4339] Bluetooth: hci2: command 0x0419 tx timeout [ 47.000977][ T24] usb 1-1: USB disconnect, device number 3 [ 47.143028][ T4997] loop0: detected capacity change from 0 to 32768 [ 47.145076][ T4997] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.143 (4997) [ 47.148094][ T4997] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 47.152621][ T4997] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 47.154224][ T4997] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 47.155727][ T4997] BTRFS info (device loop0): use zstd compression, level 3 [ 47.156967][ T4997] BTRFS info (device loop0): using free space tree [ 47.182572][ T4997] BTRFS info (device loop0): enabling ssd optimizations [ 47.199281][ T4328] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 47.201429][ T9] bond0 (unregistering): Released all slaves [ 47.279206][ T4318] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop0 scanned by udevd (4318) [ 47.443161][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.444766][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.446776][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.448290][ T4636] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.449551][ T4636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.477443][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.479572][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.482210][ T4381] tipc: Node number set to 43690 [ 47.484852][ T4971] bridge0: port 1(bridge_slave_0) entered listening state [ 47.489628][ T4694] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 47.502656][ T4694] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.510537][ T4994] team0: No ports can be present during mode change [ 47.512114][ T4995] netlink: 'syz.3.142': attribute type 10 has an invalid length. [ 48.573905][ T4995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.576082][ T4995] team0: Port device bond0 added [ 48.591825][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.593757][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.595394][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.597176][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.608510][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.610711][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.616036][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.622470][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.639928][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.646376][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.843085][ T4694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.845014][ T4670] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.846437][ T4670] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.983586][ T5074] netlink: 24 bytes leftover after parsing attributes in process `syz.0.156'. [ 48.993748][ T5074] netlink: 24 bytes leftover after parsing attributes in process `syz.0.156'. [ 49.107065][ T5085] FAULT_INJECTION: forcing a failure. [ 49.107065][ T5085] name failslab, interval 1, probability 0, space 0, times 0 [ 49.120964][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.122937][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.135020][ T5085] CPU: 1 PID: 5085 Comm: syz.0.158 Not tainted syzkaller #0 [ 49.136324][ T5085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 49.138173][ T5085] Call trace: [ 49.138792][ T5085] dump_backtrace+0x1c4/0x1f0 [ 49.139674][ T5085] show_stack+0x2c/0x3c [ 49.140460][ T5085] __dump_stack+0x30/0x40 [ 49.141291][ T5085] dump_stack_lvl+0xf4/0x15c [ 49.142169][ T5085] dump_stack+0x1c/0x5c [ 49.142912][ T5085] should_fail_ex+0x3cc/0x524 [ 49.143772][ T5085] __should_failslab+0xc0/0x11c [ 49.144682][ T5085] should_failslab+0x10/0x28 [ 49.145655][ T5085] __kmem_cache_alloc_node+0x7c/0x318 [ 49.146775][ T5085] kmalloc_trace+0x48/0x94 [ 49.147690][ T5085] nf_tables_parse_netdev_hooks+0x198/0x5a8 [ 49.148916][ T5085] nft_flowtable_parse_hook+0x304/0x6ac [ 49.150069][ T5085] nf_tables_newflowtable+0xe64/0x1818 [ 49.151158][ T5085] nfnetlink_rcv+0xc7c/0x1c54 [ 49.152095][ T5085] netlink_unicast+0x5fc/0x80c [ 49.153055][ T5085] netlink_sendmsg+0x6f0/0x9d8 [ 49.154004][ T5085] ____sys_sendmsg+0x588/0x90c [ 49.154993][ T5085] __sys_sendmsg+0x288/0x374 [ 49.155884][ T5085] __arm64_sys_sendmsg+0x80/0x94 [ 49.156853][ T5085] invoke_syscall+0x98/0x290 [ 49.157809][ T5085] el0_svc_common+0x13c/0x258 [ 49.158752][ T5085] do_el0_svc+0x5c/0x134 [ 49.159604][ T5085] el0_svc+0x58/0x128 [ 49.160411][ T5085] el0t_64_sync_handler+0x84/0xf0 [ 49.161419][ T5085] el0t_64_sync+0x18c/0x190 [ 49.166826][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.168730][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.176497][ T4694] device veth0_vlan entered promiscuous mode [ 49.178525][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.182712][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.189937][ T4694] device veth1_vlan entered promiscuous mode [ 49.206584][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.208397][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.210371][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.212696][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.217665][ T4694] device veth0_macvtap entered promiscuous mode [ 49.221921][ T4694] device veth1_macvtap entered promiscuous mode [ 49.234308][ T4694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.238636][ T4694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.243176][ T4694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.247139][ T4694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.250992][ T4694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.254806][ T4694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.261084][ T4694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.264333][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.266362][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.267893][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.269462][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.278489][ T4694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.280849][ T4694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.282830][ T4694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.286050][ T4694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.289611][ T4694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.293742][ T4694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.298939][ T4694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.303210][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.304942][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.307341][ T4694] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.310504][ T4694] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.319237][ T4694] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.322468][ T4694] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.635088][ T5098] loop1: detected capacity change from 0 to 32768 [ 49.648482][ T5098] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.160 (5098) [ 49.684459][ T5096] loop0: detected capacity change from 0 to 131072 [ 49.688211][ T5096] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 49.689708][ T5096] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 49.690027][ T5098] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 49.693012][ T5098] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 49.694629][ T5098] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 49.696200][ T5098] BTRFS info (device loop1): use zstd compression, level 3 [ 49.697424][ T5098] BTRFS info (device loop1): force clearing of disk cache [ 49.698619][ T5098] BTRFS info (device loop1): enabling disk space caching [ 49.700004][ T5098] BTRFS info (device loop1): disk space caching is enabled [ 49.719866][ T5096] F2FS-fs (loop0): invalid crc value [ 49.823728][ T5098] BTRFS info (device loop1): enabling ssd optimizations [ 49.826447][ T5098] BTRFS info (device loop1): rebuilding free space tree [ 49.826944][ T5096] F2FS-fs (loop0): Found nat_bits in checkpoint [ 49.836199][ T4636] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.856790][ T4636] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.918437][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.107901][ T5098] BTRFS info (device loop1): disabling free space tree [ 50.109260][ T5098] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 50.112050][ T5098] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 50.117810][ T5096] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 50.119464][ T5096] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 50.185475][ T4616] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.187245][ T4616] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.188757][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.225157][ T4329] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 50.462650][ T5147] ip_tables: iptables: counters copy to user failed while replacing table [ 51.144925][ T5161] loop3: detected capacity change from 0 to 131072 [ 51.149002][ T5161] F2FS-fs (loop3): invalid crc value [ 51.204281][ T5161] F2FS-fs (loop3): Found nat_bits in checkpoint [ 51.212653][ T5161] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 51.264869][ T5186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.266427][ T5186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.267817][ T5161] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 51.289743][ T4337] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 51.293054][ T4337] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 51.294568][ T4337] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 51.295981][ T4337] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 51.297394][ T4337] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 51.299020][ T4337] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 51.311621][ T4337] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 51.313794][ T4337] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 51.324364][ T4337] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 51.325927][ T4337] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 51.327688][ T4337] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 51.329392][ T4337] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 51.341533][ T4337] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 51.343190][ T4337] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 51.345189][ T4337] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 51.405423][ T5177] loop2: detected capacity change from 0 to 32768 [ 51.408975][ T5177] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.175 (5177) [ 51.418361][ T5177] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 51.420469][ T5177] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 51.423605][ T5177] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 51.428784][ T5177] BTRFS info (device loop2): use zstd compression, level 3 [ 51.432600][ T5177] BTRFS info (device loop2): force clearing of disk cache [ 51.435242][ T5177] BTRFS info (device loop2): enabling disk space caching [ 51.437748][ T5177] BTRFS info (device loop2): disk space caching is enabled [ 51.536771][ T5221] loop3: detected capacity change from 0 to 2048 [ 51.552856][ T5177] BTRFS info (device loop2): enabling ssd optimizations [ 51.554749][ T5177] BTRFS info (device loop2): rebuilding free space tree [ 51.560497][ T5177] BTRFS info (device loop2): disabling free space tree [ 51.563394][ T5177] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 51.569891][ T5177] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 51.576516][ T5221] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 51.599654][ T5221] FAULT_INJECTION: forcing a failure. [ 51.599654][ T5221] name failslab, interval 1, probability 0, space 0, times 0 [ 51.605730][ T5221] CPU: 0 PID: 5221 Comm: syz.3.181 Not tainted syzkaller #0 [ 51.607158][ T5221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 51.609263][ T5221] Call trace: [ 51.609958][ T5221] dump_backtrace+0x1c4/0x1f0 [ 51.610933][ T5221] show_stack+0x2c/0x3c [ 51.611734][ T5221] __dump_stack+0x30/0x40 [ 51.612567][ T5221] dump_stack_lvl+0xf4/0x15c [ 51.613446][ T5221] dump_stack+0x1c/0x5c [ 51.614221][ T5221] should_fail_ex+0x3cc/0x524 [ 51.615243][ T5221] __should_failslab+0xc0/0x11c [ 51.616306][ T5221] should_failslab+0x10/0x28 [ 51.617225][ T5221] __kmem_cache_alloc_node+0x7c/0x318 [ 51.618247][ T5221] __kmalloc+0xc4/0x180 [ 51.619042][ T5221] ext4_find_extent+0x284/0xb60 [ 51.620077][ T5221] ext4_ext_map_blocks+0x268/0x563c [ 51.621170][ T5221] ext4_map_blocks+0x2dc/0x160c [ 51.622125][ T5221] ext4_convert_inline_data_nolock+0x360/0xa80 [ 51.623256][ T5221] ext4_convert_inline_data+0x39c/0x4fc [ 51.624386][ T5221] ext4_fallocate+0xf0/0x1b4c [ 51.625202][ T5221] vfs_fallocate+0x4a4/0x5fc [ 51.626047][ T5221] __arm64_sys_fallocate+0xc4/0x114 [ 51.627006][ T5221] invoke_syscall+0x98/0x290 [ 51.627888][ T5221] el0_svc_common+0x200/0x258 [ 51.628898][ T5221] do_el0_svc+0x5c/0x134 [ 51.629789][ T5221] el0_svc+0x58/0x128 [ 51.630571][ T5221] el0t_64_sync_handler+0x84/0xf0 [ 51.631534][ T5221] el0t_64_sync+0x18c/0x190 [ 51.663194][ T5221] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 51.669276][ T4330] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 51.744656][ T4337] EXT4-fs (loop3): unmounting filesystem. [ 51.843836][ T5241] loop1: detected capacity change from 0 to 512 [ 51.915147][ T5253] fuse: Bad value for 'fd' [ 52.326609][ T5266] capability: warning: `syz.0.187' uses deprecated v2 capabilities in a way that may be insecure [ 52.720074][ T5251] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 52.961764][ T27] audit: type=1326 audit(52.940:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5283 comm="syz.3.194" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff885782e8 code=0x7ffc0000 [ 53.034825][ T27] audit: type=1326 audit(52.940:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5283 comm="syz.3.194" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff885782e8 code=0x7ffc0000 [ 53.053044][ T27] audit: type=1326 audit(52.950:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5283 comm="syz.3.194" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff885782e8 code=0x7ffc0000 [ 53.109179][ T27] audit: type=1326 audit(52.950:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5283 comm="syz.3.194" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=449 compat=0 ip=0xffff885782e8 code=0x7ffc0000 [ 53.147031][ T27] audit: type=1326 audit(53.000:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5283 comm="syz.3.194" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff885782e8 code=0x7ffc0000 [ 53.264910][ T27] audit: type=1326 audit(53.000:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5283 comm="syz.3.194" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff88577fe0 code=0x7ffc0000 [ 53.688520][ T5300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.690985][ T5300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.712029][ T5305] kAFS: Invalid Command on /proc/fs/afs/cells file [ 53.722062][ T27] audit: type=1326 audit(53.000:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5283 comm="syz.3.194" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=226 compat=0 ip=0xffff8857804c code=0x7ffc0000 [ 53.726475][ T27] audit: type=1326 audit(53.000:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5283 comm="syz.3.194" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=135 compat=0 ip=0xffff88556ff8 code=0x7ffc0000 [ 53.796877][ T27] audit: type=1326 audit(53.000:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5283 comm="syz.3.194" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=435 compat=0 ip=0xffff885792e8 code=0x7ffc0000 [ 53.810945][ T27] audit: type=1326 audit(53.000:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5283 comm="syz.3.194" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=135 compat=0 ip=0xffff88557050 code=0x7ffc0000 [ 53.908880][ T5295] loop2: detected capacity change from 0 to 32768 [ 53.918962][ T5295] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.197 (5295) [ 53.936077][ T5295] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 53.937786][ T5295] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 53.939233][ T5295] BTRFS info (device loop2): using free space tree [ 54.194531][ T4465] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 54.299229][ T5338] capability: warning: `syz.3.207' uses 32-bit capabilities (legacy support in use) [ 54.364438][ T5295] BTRFS info (device loop2): enabling ssd optimizations [ 54.398073][ T4330] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 54.403423][ T4465] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 54.405405][ T4465] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 54.407319][ T4465] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 54.418590][ T4465] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 54.429969][ T4465] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 54.439391][ T4465] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.476340][ T5355] loop3: detected capacity change from 0 to 32768 [ 54.491771][ T4465] usb 1-1: config 0 descriptor?? [ 54.512410][ T5361] loop5: detected capacity change from 0 to 2048 [ 54.529092][ T5355] JBD2: Ignoring recovery information on journal [ 54.544264][ T5363] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 54.562594][ T5355] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 54.580607][ T5355] [ 54.581056][ T5355] ====================================================== [ 54.582342][ T5355] WARNING: possible circular locking dependency detected [ 54.583679][ T5355] syzkaller #0 Not tainted [ 54.584523][ T5355] ------------------------------------------------------ [ 54.585858][ T5355] syz.3.208/5355 is trying to acquire lock: [ 54.586988][ T5355] ffff0000f545eab8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_init_acl+0x264/0x61c [ 54.588769][ T5355] [ 54.588769][ T5355] but task is already holding lock: [ 54.590135][ T5355] ffff0000f278b8e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x38c/0x6f4 [ 54.591997][ T5355] [ 54.591997][ T5355] which lock already depends on the new lock. [ 54.591997][ T5355] [ 54.593799][ T5355] [ 54.593799][ T5355] the existing dependency chain (in reverse order) is: [ 54.595409][ T5355] [ 54.595409][ T5355] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 54.596934][ T5355] down_read+0x64/0x300 [ 54.597828][ T5355] ocfs2_start_trans+0x38c/0x6f4 [ 54.598873][ T5355] ocfs2_mknod+0xd2c/0x218c [ 54.599791][ T5355] ocfs2_create+0x19c/0x51c [ 54.600741][ T5355] path_openat+0xda8/0x27a0 [ 54.601676][ T5355] do_filp_open+0x198/0x38c [ 54.602621][ T5355] do_sys_openat2+0x134/0x3fc [ 54.603513][ T5355] __arm64_sys_openat+0x11c/0x150 [ 54.604504][ T5355] invoke_syscall+0x98/0x290 [ 54.605396][ T5355] el0_svc_common+0x13c/0x258 [ 54.606341][ T5355] do_el0_svc+0x5c/0x134 [ 54.607195][ T5355] el0_svc+0x58/0x128 [ 54.608030][ T5355] el0t_64_sync_handler+0x84/0xf0 [ 54.609045][ T5355] el0t_64_sync+0x18c/0x190 [ 54.609972][ T5355] [ 54.609972][ T5355] -> #2 (sb_internal#3){.+.+}-{0:0}: [ 54.611389][ T5355] ocfs2_start_trans+0x20c/0x6f4 [ 54.612437][ T5355] ocfs2_truncate_file+0x5ec/0x14dc [ 54.613530][ T5355] ocfs2_setattr+0x12a0/0x1950 [ 54.614687][ T5355] notify_change+0xb5c/0xe20 [ 54.615726][ T5355] do_truncate+0x188/0x20c [ 54.616744][ T5355] path_openat+0x21c8/0x27a0 [ 54.617741][ T5355] do_filp_open+0x198/0x38c [ 54.618713][ T5355] do_sys_openat2+0x134/0x3fc [ 54.619658][ T5355] __arm64_sys_openat+0x11c/0x150 [ 54.620682][ T5355] invoke_syscall+0x98/0x290 [ 54.621626][ T5355] el0_svc_common+0x13c/0x258 [ 54.622583][ T5355] do_el0_svc+0x5c/0x134 [ 54.623449][ T5355] el0_svc+0x58/0x128 [ 54.624284][ T5355] el0t_64_sync_handler+0x84/0xf0 [ 54.625304][ T5355] el0t_64_sync+0x18c/0x190 [ 54.626223][ T5355] [ 54.626223][ T5355] -> #1 (&oi->ip_alloc_sem){+.+.}-{3:3}: [ 54.627674][ T5355] down_write+0x5c/0x88 [ 54.628555][ T5355] ocfs2_try_remove_refcount_tree+0xb4/0x2e4 [ 54.629737][ T5355] ocfs2_truncate_file+0xce0/0x14dc [ 54.630805][ T5355] ocfs2_setattr+0x12a0/0x1950 [ 54.631786][ T5355] notify_change+0xb5c/0xe20 [ 54.632723][ T5355] do_truncate+0x188/0x20c [ 54.633639][ T5355] path_openat+0x21c8/0x27a0 [ 54.634586][ T5355] do_filp_open+0x198/0x38c [ 54.635475][ T5355] do_sys_openat2+0x134/0x3fc [ 54.636388][ T5355] __arm64_sys_openat+0x11c/0x150 [ 54.637355][ T5355] invoke_syscall+0x98/0x290 [ 54.638292][ T5355] el0_svc_common+0x13c/0x258 [ 54.639244][ T5355] do_el0_svc+0x5c/0x134 [ 54.640145][ T5355] el0_svc+0x58/0x128 [ 54.640988][ T5355] el0t_64_sync_handler+0x84/0xf0 [ 54.642034][ T5355] el0t_64_sync+0x18c/0x190 [ 54.642962][ T5355] [ 54.642962][ T5355] -> #0 (&oi->ip_xattr_sem){++++}-{3:3}: [ 54.644392][ T5355] __lock_acquire+0x2808/0x6634 [ 54.645365][ T5355] lock_acquire+0x20c/0x638 [ 54.646256][ T5355] down_read+0x64/0x300 [ 54.647107][ T5355] ocfs2_init_acl+0x264/0x61c [ 54.648085][ T5355] ocfs2_mknod+0x12b0/0x218c [ 54.649048][ T5355] ocfs2_mkdir+0x19c/0x51c [ 54.649980][ T5355] vfs_mkdir+0x314/0x4d8 [ 54.650857][ T5355] do_mkdirat+0x1b8/0x3ec [ 54.651725][ T5355] __arm64_sys_mkdirat+0x90/0xa8 [ 54.652736][ T5355] invoke_syscall+0x98/0x290 [ 54.653680][ T5355] el0_svc_common+0x13c/0x258 [ 54.654572][ T5355] do_el0_svc+0x5c/0x134 [ 54.655443][ T5355] el0_svc+0x58/0x128 [ 54.656265][ T5355] el0t_64_sync_handler+0x84/0xf0 [ 54.657239][ T5355] el0t_64_sync+0x18c/0x190 [ 54.658144][ T5355] [ 54.658144][ T5355] other info that might help us debug this: [ 54.658144][ T5355] [ 54.660009][ T5355] Chain exists of: [ 54.660009][ T5355] &oi->ip_xattr_sem --> sb_internal#3 --> &journal->j_trans_barrier [ 54.660009][ T5355] [ 54.662562][ T5355] Possible unsafe locking scenario: [ 54.662562][ T5355] [ 54.663969][ T5355] CPU0 CPU1 [ 54.664999][ T5355] ---- ---- [ 54.665955][ T5355] lock(&journal->j_trans_barrier); [ 54.666906][ T5355] lock(sb_internal#3); [ 54.668176][ T5355] lock(&journal->j_trans_barrier); [ 54.669639][ T5355] lock(&oi->ip_xattr_sem); [ 54.670492][ T5355] [ 54.670492][ T5355] *** DEADLOCK *** [ 54.670492][ T5355] [ 54.671992][ T5355] 8 locks held by syz.3.208/5355: [ 54.672886][ T5355] #0: ffff0000c3edc460 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 54.674654][ T5355] #1: ffff0000f545ed88 (&type->i_mutex_dir_key#9/1){+.+.}-{3:3}, at: filename_create+0x1b0/0x3a8 [ 54.676668][ T5355] #2: ffff0000e06409c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x110/0x3d40 [ 54.679161][ T5355] #3: ffff0000f545a648 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x110/0x3d40 [ 54.681698][ T5355] #4: ffff0000e0642648 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0xe4/0x2830 [ 54.684260][ T5355] #5: ffff0000c3edc650 (sb_internal#3){.+.+}-{0:0}, at: ocfs2_mknod+0xd2c/0x218c [ 54.685985][ T5355] #6: ffff0000f278b8e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x38c/0x6f4 [ 54.688006][ T5355] #7: ffff0000f5be2990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfec/0x125c [ 54.689842][ T5355] [ 54.689842][ T5355] stack backtrace: [ 54.690920][ T5355] CPU: 0 PID: 5355 Comm: syz.3.208 Not tainted syzkaller #0 [ 54.692273][ T5355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 54.694203][ T5355] Call trace: [ 54.694836][ T5355] dump_backtrace+0x1c4/0x1f0 [ 54.695764][ T5355] show_stack+0x2c/0x3c [ 54.696575][ T5355] __dump_stack+0x30/0x40 [ 54.697418][ T5355] dump_stack_lvl+0xf4/0x15c [ 54.698306][ T5355] dump_stack+0x1c/0x5c [ 54.699114][ T5355] print_circular_bug+0x148/0x1b0 [ 54.700058][ T5355] check_noncircular+0x264/0x2f8 [ 54.700992][ T5355] __lock_acquire+0x2808/0x6634 [ 54.701925][ T5355] lock_acquire+0x20c/0x638 [ 54.702781][ T5355] down_read+0x64/0x300 [ 54.703580][ T5355] ocfs2_init_acl+0x264/0x61c [ 54.704480][ T5355] ocfs2_mknod+0x12b0/0x218c [ 54.705292][ T5355] ocfs2_mkdir+0x19c/0x51c [ 54.706123][ T5355] vfs_mkdir+0x314/0x4d8 [ 54.706946][ T5355] do_mkdirat+0x1b8/0x3ec [ 54.707778][ T5355] __arm64_sys_mkdirat+0x90/0xa8 [ 54.708716][ T5355] invoke_syscall+0x98/0x290 [ 54.709593][ T5355] el0_svc_common+0x13c/0x258 [ 54.710490][ T5355] do_el0_svc+0x5c/0x134 [ 54.711311][ T5355] el0_svc+0x58/0x128 [ 54.712050][ T5355] el0t_64_sync_handler+0x84/0xf0 [ 54.712975][ T5355] el0t_64_sync+0x18c/0x190 [ 54.713818][ C0] vkms_vblank_simulate: vblank timer overrun [ 54.720400][ T5316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.721845][ T5316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.724947][ T4465] hdpvr 1-1:0.0: firmware version 0xff dated ¸@ [ 54.726172][ T4465] hdpvr 1-1:0.0: untested firmware, the driver might not work. [ 54.749732][ T4337] ocfs2: Unmounting device (7,3) on (node local) [ 55.130209][ T4465] ir-kbd-i2c 1-0071: IR for HDPVR is known to cause problems during recording, use enable_hdpvr modparam to enable [ 55.133188][ T4465] hdpvr 1-1:0.0: Could not setup controls [ 55.134387][ T4465] hdpvr 1-1:0.0: registering videodev failed [ 55.136980][ T4465] hdpvr: probe of 1-1:0.0 failed with error -71 [ 55.139925][ T4465] usb 1-1: USB disconnect, device number 4 [ 64.489664][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.490873][ T2064] ieee802154 phy1 wpan1: encryption failed: -22