last executing test programs: 18.871170002s ago: executing program 0 (id=57): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x200, 0x2}, 0x0) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000240)="03", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r0}, &(0x7f00000005c0)=""/66, 0x42, &(0x7f0000000340)={&(0x7f0000000280)={'crc32c-generic\x00'}, &(0x7f0000000000)="da84f3ae0710669dac31c3dbf65e97c8e35b3a1af664caec8c35021882", 0x1d}) 18.538255852s ago: executing program 0 (id=59): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38099}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 18.173202283s ago: executing program 0 (id=64): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) 16.932475565s ago: executing program 0 (id=74): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 16.698101999s ago: executing program 0 (id=76): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='yeah', 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000815, &(0x7f0000b63fe4)={0xa, 0x2, 0x5}, 0x1c) 16.223541866s ago: executing program 0 (id=81): r0 = syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f01000800000000000000042402000905810310"], 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) 15.683319378s ago: executing program 32 (id=81): r0 = syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f01000800000000000000042402000905810310"], 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) 7.106715097s ago: executing program 3 (id=119): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000100)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x10007ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)="fccb", 0x2}], 0x1}}], 0x1, 0x4000085) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x82, &(0x7f00000002c0)="1a00000002000000", 0x8) 6.789235675s ago: executing program 3 (id=121): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000080)={0x2, 0xfffb, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_int(r0, 0x0, 0xa, &(0x7f0000000000)=0x100000, 0x4) 3.566835292s ago: executing program 4 (id=126): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x208402, &(0x7f00000021c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000002240)={0x30, 0x5, 0x0, {0x0, 0x1, 0x2, 0x101}}, 0x30) umount2(&(0x7f0000000180)='./file0\x00', 0xb) 3.566555612s ago: executing program 3 (id=127): sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) migrate_pages(r0, 0x2, 0x0, &(0x7f00000000c0)=0x14064bb) 3.564870582s ago: executing program 2 (id=135): syz_open_dev$video4linux(&(0x7f0000000080), 0x3ff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 3.324436046s ago: executing program 1 (id=128): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000300)='./file2\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0xabd, &(0x7f0000000e00)="$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") creat(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f0000000000)) unlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.324269386s ago: executing program 2 (id=129): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x3e, 0xfff7ffeb, 0x7c, 0x40, 0x0, 0x7, 0xc, 0x38, 0x1, 0xfffe, 0x2, 0x4}, [{0x3, 0xf97, 0xb, 0xd, 0x0, 0xe5, 0xffffffffffffffff, 0xb}], "e36b99c649b6a70487edb1870d4e0171d3224be57d391f7510eaf250cf64fed54da349036f5f6f97658b46b02088baacf8b73097c3d91b001f95257218fc97464da63282924a4a9f593b40ddcbf3e798a2b94684357f1ec619c4d526081077eac9f7150f19053156acb86d107f1b485c2489476966c63cf5"}, 0xf0) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x1000) 2.433076978s ago: executing program 3 (id=130): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000400), 0x2000011a) recvmmsg(r0, &(0x7f0000004000)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/73, 0x49}], 0x1, &(0x7f0000000040)=""/24, 0x18}, 0xa}], 0x1, 0x20, 0x0) 2.426177008s ago: executing program 4 (id=140): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x1, r1, 0x0, 0x20003, 0xfffffffffffffffe}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000001340)={0x28, 0x2, r1, 0x0, &(0x7f00007fd000/0x800000)=nil, 0x800000, 0x80}) 2.425411799s ago: executing program 2 (id=131): syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x800080, &(0x7f0000000ec0)=ANY=[@ANYBLOB], 0x9, 0x19e, &(0x7f0000000340)="$eJzs0D1rFEEcx/Hvf2buIUKUU7GI4C0YPDdE7yFqYeNhFWEXLGwsDj0uZy54p172moQE0kggRPMWtNJSBS1EBME6WAgWujZ2ki1SiYVE1h3zJjKfYn/7G/67w0wvGkYF4M/uSocm/2gO8wnBAGXJ1pTK8o3tP21uZcFV2zfLWT63fSJaWr7b7ve7i95lj9L+grHfeboE+zPRS04oEqGJfNld6bTldshek4GaC8kHTD1Ctxj6j5kw4xy/hWavIlxTDKUSwJHqaPCgGi0tn1sYtOe78917jWDmUu5CrXaxUb2z0O/WXiP+hiiesIofUggZ81fJtXi4bQ4xLYjfU7HGJHgttrb12dPTCcrfUYiBSkLhGz1P3eAMxSvpgWY5JjxFh0wGjCkMxexocl29krr5bH7lFMU1rc937vfn1m8q+Z0vIDtFebuRTU7VmUmvhqN8YD1mMmY25lnMj++U5V26y6a9T7OWPl/YdpJTkIf2aLRYz8NHMSGNSkijBOOIHQvSP7y3xQZf/784juM4juM4juM4B8DfAAAA//+Z3Vor") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)={0x29, 0x4, 0x0, {0x1, 0xfffffffffffffffb, 0x1, 0x0, [0x0]}}, 0x29) 2.203488022s ago: executing program 4 (id=132): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x1}}, {@barrier}, {@delalloc}, {@i_version}, {@lazytime}, {@nodiscard}, {@grpjquota}, {@block_validity}, {@errors_remount}]}, 0x1, 0x549, &(0x7f0000000540)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 1.970702765s ago: executing program 1 (id=133): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)=',', 0x1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="f90f4b74fce0274e595ec6", 0xb) 1.926026228s ago: executing program 2 (id=136): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000020000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c56f0979bd10b97163c1d6d0e196bf02f46c7e81eb72c00000000d0d26b5069f8a98f7dc8f76b74635fde9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346b1004006000000e1ffff8816326d7d25c32aac1c7d5b5be399f6609876b5887437a172fbc02a74067529194e533583412dff048f000000008b260000b2728a0481e9f0da43bb6cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13caec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bf1339454c13ad3e328a100000000b515a1000000000000000eb2e9c15b6c8f6198282df27badac8507bc7d202e0990e0"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) 1.644183054s ago: executing program 4 (id=137): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000340)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000040)={0x0, 0x3, 0x0, 0xff}) 1.572997938s ago: executing program 2 (id=138): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x8001, 0x3, 0xe, 0x2}, 0x14) 1.432052736s ago: executing program 3 (id=139): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010025bd7000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="380306004002020024001280110001006272696467655f736c617665000000000c00058008002a"], 0x44}, 0x1, 0x0, 0x0, 0x80c5}, 0x40040c4) 1.348853531s ago: executing program 2 (id=141): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x258a, 0x33, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000002c0)={0x20, 0x5, 0x9, {0x9, 0x21, "17c36041ab85a1"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.254139516s ago: executing program 4 (id=142): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="60000000020605000000000000000000000000001400078008000640200000000800134000000000050001"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1.247853547s ago: executing program 1 (id=143): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x125) close(r0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x1000000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.147427903s ago: executing program 3 (id=144): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) truncate(&(0x7f0000000000)='./file1\x00', 0x42dc) sendfile(r0, r0, 0x0, 0xfffe82) 973.835443ms ago: executing program 4 (id=145): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000300)='./file2\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0xabd, &(0x7f0000000e00)="$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") creat(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f0000000000)) unlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 262.035864ms ago: executing program 1 (id=146): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x9, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 104.211273ms ago: executing program 1 (id=147): r0 = userfaultfd(0x80801) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x7}) 0s ago: executing program 1 (id=148): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000400), 0x2000011a) recvmmsg(r0, &(0x7f0000004000)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/73, 0x49}], 0x1, &(0x7f0000000040)=""/24, 0x18}, 0xa}], 0x1, 0x20, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.52' (ED25519) to the list of known hosts. [ 63.564725][ T5750] cgroup: Unknown subsys name 'net' [ 63.697306][ T5750] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.084830][ T5750] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.471033][ T5764] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.484799][ T5768] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.493609][ T5768] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.502660][ T5768] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.511645][ T5768] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.519399][ T5768] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.526852][ T5768] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.539385][ T5769] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.543633][ T5083] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.547968][ T5769] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.563326][ T5769] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.563518][ T5083] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.579331][ T5083] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.588231][ T5083] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.590367][ T5769] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.597377][ T5083] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.613583][ T5083] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.621111][ T5776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.630013][ T5776] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.637235][ T5083] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.644645][ T5776] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.652516][ T5083] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.664775][ T5083] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.672413][ T5083] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.041852][ T5761] chnl_net:caif_netlink_parms(): no params data found [ 67.142262][ T5765] chnl_net:caif_netlink_parms(): no params data found [ 67.179159][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 67.271017][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 67.287550][ T5761] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.295874][ T5761] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.303646][ T5761] bridge_slave_0: entered allmulticast mode [ 67.310722][ T5761] bridge_slave_0: entered promiscuous mode [ 67.348604][ T5761] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.356057][ T5761] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.363819][ T5761] bridge_slave_1: entered allmulticast mode [ 67.370726][ T5761] bridge_slave_1: entered promiscuous mode [ 67.444060][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.451328][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.458463][ T5773] bridge_slave_0: entered allmulticast mode [ 67.466068][ T5773] bridge_slave_0: entered promiscuous mode [ 67.484780][ T5761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.498371][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.507172][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.514702][ T5765] bridge_slave_0: entered allmulticast mode [ 67.522098][ T5765] bridge_slave_0: entered promiscuous mode [ 67.529343][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.536642][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.543988][ T5773] bridge_slave_1: entered allmulticast mode [ 67.551302][ T5773] bridge_slave_1: entered promiscuous mode [ 67.567085][ T5761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.603856][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.611262][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.618476][ T5765] bridge_slave_1: entered allmulticast mode [ 67.625395][ T5765] bridge_slave_1: entered promiscuous mode [ 67.645918][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.666696][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.674022][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.681499][ T5766] bridge_slave_0: entered allmulticast mode [ 67.688470][ T5766] bridge_slave_0: entered promiscuous mode [ 67.696449][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.703677][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.710946][ T5766] bridge_slave_1: entered allmulticast mode [ 67.717659][ T5766] bridge_slave_1: entered promiscuous mode [ 67.754199][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.775558][ T5761] team0: Port device team_slave_0 added [ 67.795253][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.817078][ T5761] team0: Port device team_slave_1 added [ 67.834466][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.848469][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.861224][ T5773] team0: Port device team_slave_0 added [ 67.877841][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.898353][ T5773] team0: Port device team_slave_1 added [ 67.907653][ T5761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.914845][ T5761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.940840][ T5761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.954371][ T5761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.961529][ T5761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.987838][ T5761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.041239][ T5766] team0: Port device team_slave_0 added [ 68.056914][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.064501][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.091025][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.115687][ T5766] team0: Port device team_slave_1 added [ 68.134731][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.141853][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.167988][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.189069][ T5765] team0: Port device team_slave_0 added [ 68.214360][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.221563][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.247864][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.263030][ T5765] team0: Port device team_slave_1 added [ 68.276948][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.284439][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.310753][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.350365][ T5761] hsr_slave_0: entered promiscuous mode [ 68.356661][ T5761] hsr_slave_1: entered promiscuous mode [ 68.394083][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.401383][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.427570][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.451675][ T5766] hsr_slave_0: entered promiscuous mode [ 68.458028][ T5766] hsr_slave_1: entered promiscuous mode [ 68.465192][ T5766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.473175][ T5766] Cannot create hsr debugfs directory [ 68.490786][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.497777][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.523754][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.538021][ T5773] hsr_slave_0: entered promiscuous mode [ 68.545213][ T5773] hsr_slave_1: entered promiscuous mode [ 68.551464][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.559031][ T5773] Cannot create hsr debugfs directory [ 68.650868][ T5764] Bluetooth: hci0: command tx timeout [ 68.729859][ T5768] Bluetooth: hci2: command tx timeout [ 68.735610][ T5768] Bluetooth: hci1: command tx timeout [ 68.741842][ T5764] Bluetooth: hci3: command tx timeout [ 68.772585][ T5765] hsr_slave_0: entered promiscuous mode [ 68.779104][ T5765] hsr_slave_1: entered promiscuous mode [ 68.785457][ T5765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.793122][ T5765] Cannot create hsr debugfs directory [ 69.022726][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.045938][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.058770][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.068783][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.133351][ T5761] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.154644][ T5761] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.164996][ T5761] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.176585][ T5761] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.251386][ T5766] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.263253][ T5766] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.273496][ T5766] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.283241][ T5766] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.428749][ T5765] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.438476][ T5765] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.465744][ T5765] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.475164][ T5765] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.500664][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.539050][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.577939][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.585321][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.605398][ T5761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.625406][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.643105][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.650383][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.673817][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.697508][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.704714][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.716799][ T5761] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.752410][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.759546][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.801635][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.808790][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.846985][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.854177][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.919556][ T5766] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.933469][ T5766] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.952703][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.067640][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.096020][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.103250][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.153363][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.160585][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.328377][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.488632][ T5766] veth0_vlan: entered promiscuous mode [ 70.522524][ T5761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.544803][ T5766] veth1_vlan: entered promiscuous mode [ 70.573975][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.662548][ T5761] veth0_vlan: entered promiscuous mode [ 70.676792][ T5766] veth0_macvtap: entered promiscuous mode [ 70.686505][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.702555][ T5761] veth1_vlan: entered promiscuous mode [ 70.719374][ T5766] veth1_macvtap: entered promiscuous mode [ 70.729874][ T5768] Bluetooth: hci0: command tx timeout [ 70.784334][ T5773] veth0_vlan: entered promiscuous mode [ 70.802105][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.811474][ T5768] Bluetooth: hci1: command tx timeout [ 70.817324][ T5764] Bluetooth: hci3: command tx timeout [ 70.823271][ T5083] Bluetooth: hci2: command tx timeout [ 70.839069][ T5773] veth1_vlan: entered promiscuous mode [ 70.855702][ T5761] veth0_macvtap: entered promiscuous mode [ 70.866156][ T5761] veth1_macvtap: entered promiscuous mode [ 70.895720][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.912649][ T5766] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.922854][ T5766] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.932895][ T5766] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.941963][ T5766] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.959074][ T5761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.972369][ T5761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.984876][ T5761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.005615][ T5765] veth0_vlan: entered promiscuous mode [ 71.023844][ T5761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.034565][ T5761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.047306][ T5761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.076870][ T5765] veth1_vlan: entered promiscuous mode [ 71.110988][ T5761] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.121840][ T5761] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.131803][ T5761] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.140572][ T5761] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.166065][ T5773] veth0_macvtap: entered promiscuous mode [ 71.196692][ T5773] veth1_macvtap: entered promiscuous mode [ 71.265998][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.281156][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.316980][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.330314][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.344757][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.355605][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.367186][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.407141][ T5765] veth0_macvtap: entered promiscuous mode [ 71.417926][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.429992][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.439959][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.450756][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.462289][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.483702][ T5765] veth1_macvtap: entered promiscuous mode [ 71.496062][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.504194][ T5773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.514940][ T5773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.518281][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.523883][ T5773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.548782][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.549940][ T5773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.555587][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.576361][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.597262][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.615233][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.625995][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.635930][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.646998][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.656947][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.667897][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.679148][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.715360][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.724147][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.735079][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.749116][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.759466][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.771060][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.780980][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.791831][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.804233][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.854130][ T5765] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.873522][ T5765] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.889899][ T5765] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.898948][ T5765] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.163066][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.185586][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.218195][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.229131][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.311210][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.319169][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.355722][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.380508][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.598101][ T5862] input: syz0 as /devices/virtual/input/input5 [ 72.810974][ T5764] Bluetooth: hci0: command tx timeout [ 72.890266][ T5764] Bluetooth: hci3: command tx timeout [ 72.895746][ T5764] Bluetooth: hci1: command tx timeout [ 72.901742][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 72.902313][ T5872] syz.0.11[5872]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 72.912159][ T5768] Bluetooth: hci2: command tx timeout [ 73.115770][ T23] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 73.159055][ T23] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 73.189518][ T23] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 73.211908][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.251864][ T5864] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 73.287624][ T23] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 73.600648][ T5883] loop2: detected capacity change from 0 to 512 [ 73.611107][ T5872] loop0: detected capacity change from 0 to 32768 [ 73.688932][ T5883] EXT4-fs error (device loop2): ext4_orphan_get:1398: inode #15: comm syz.2.16: inode has both inline data and extents flags [ 73.763822][ T5883] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.16: couldn't read orphan inode 15 (err -117) [ 73.785635][ T5872] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 73.907512][ T5883] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.968677][ T9] usb 4-1: USB disconnect, device number 2 [ 73.980334][ T5872] XFS (loop0): Ending clean mount [ 74.077612][ T5872] XFS (loop0): Quotacheck needed: Please wait. [ 74.200542][ T27] audit: type=1800 audit(1770161067.141:2): pid=5883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.16" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 74.272426][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.295301][ T5872] XFS (loop0): Quotacheck: Done. [ 74.548074][ T5773] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 74.890139][ T5764] Bluetooth: hci0: command tx timeout [ 74.969932][ T5764] Bluetooth: hci1: command tx timeout [ 74.975494][ T5764] Bluetooth: hci2: command tx timeout [ 74.981269][ T5083] Bluetooth: hci3: command tx timeout [ 75.213937][ T5922] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 75.604251][ T5932] loop0: detected capacity change from 0 to 128 [ 75.605030][ T5914] loop3: detected capacity change from 0 to 32768 [ 75.642504][ T5932] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 75.675324][ T5932] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 75.687099][ T5914] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.25 (5914) [ 75.742449][ T5914] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 75.770452][ T5914] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 75.793151][ T5914] BTRFS info (device loop3): enabling disk space caching [ 75.803018][ T5934] warning: `syz.2.32' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 75.812367][ T5914] BTRFS info (device loop3): force clearing of disk cache [ 75.838809][ T5914] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 75.852768][ T5914] BTRFS info (device loop3): use zstd compression, level 3 [ 75.891295][ T5914] BTRFS info (device loop3): disk space caching is enabled [ 76.180022][ T5914] BTRFS info (device loop3): enabling ssd optimizations [ 76.187073][ T5914] BTRFS info (device loop3): auto enabling async discard [ 76.310744][ T5914] BTRFS info (device loop3): rebuilding free space tree [ 76.482478][ T5914] BTRFS info (device loop3): disabling free space tree [ 76.506079][ T5965] loop2: detected capacity change from 0 to 64 [ 76.520513][ T5914] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 76.549984][ T5914] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 76.792976][ T5968] Zero length message leads to an empty skb [ 77.167585][ T5765] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 77.182943][ T5972] loop2: detected capacity change from 0 to 2048 [ 77.308900][ T5973] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 77.330615][ T5767] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.555092][ T5973] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 77.563029][ T5767] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.603418][ T5973] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 77.610249][ T5767] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 77.660263][ T5767] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.668592][ T5973] Remounting filesystem read-only [ 77.679491][ T5767] usb 1-1: config 0 descriptor?? [ 77.685465][ T42] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 77.704909][ T5767] pwc: Askey VC010 type 2 USB webcam detected. [ 77.735856][ T42] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 77.765900][ T42] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 77.805335][ T42] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 77.830112][ T42] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 77.858383][ T42] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 77.878569][ T42] NILFS (loop2): discard dirty block: blocknr=18, size=1024 [ 77.888749][ T42] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 77.914138][ T42] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 77.938627][ T42] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 77.961431][ T42] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 77.968802][ T42] NILFS (loop2): discard dirty block: blocknr=41, size=1024 [ 78.004200][ T42] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 78.033057][ T42] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 78.048378][ T42] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 78.071584][ T5972] NILFS (loop2): mounting fs with errors [ 78.094380][ T5972] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 78.109288][ T5972] Remounting filesystem read-only [ 78.191135][ T5766] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 78.211184][ T5766] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 78.218147][ T5766] NILFS (loop2): discard dirty block: blocknr=35, size=1024 [ 78.233423][ T5766] NILFS (loop2): discard dirty block: blocknr=36, size=1024 [ 78.242671][ T5766] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 78.255709][ T5766] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 78.268893][ T5766] NILFS (loop2): discard dirty page: offset=0, ino=4 [ 78.278592][ T5766] NILFS (loop2): discard dirty block: blocknr=40, size=1024 [ 78.288875][ T5766] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 78.304372][ T5766] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 78.317170][ T5766] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 78.330963][ T5766] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 78.340143][ T5766] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 78.347984][ T5766] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 78.361680][ T5766] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 78.369125][ T5766] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 78.378969][ T5766] NILFS (loop2): discard dirty page: offset=196608, ino=3 [ 78.389100][ T5766] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 78.403718][ T5766] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 78.417916][ T5766] NILFS (loop2): discard dirty block: blocknr=49, size=1024 [ 78.431230][ T5766] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 78.562273][ T5767] pwc: recv_control_msg error -71 req 02 val 2c00 [ 78.578411][ T5767] pwc: recv_control_msg error -71 req 04 val 1000 [ 78.604944][ T5767] pwc: recv_control_msg error -71 req 04 val 1300 [ 78.612549][ T5983] loop1: detected capacity change from 0 to 32768 [ 78.634248][ T5767] pwc: recv_control_msg error -71 req 04 val 1400 [ 78.638832][ T5983] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop1 scanned by syz.1.47 (5983) [ 78.650097][ T5767] pwc: recv_control_msg error -71 req 02 val 2000 [ 78.690543][ T5767] pwc: recv_control_msg error -71 req 02 val 2100 [ 78.713397][ T5767] pwc: recv_control_msg error -71 req 04 val 1500 [ 78.725857][ T5983] BTRFS info (device loop1): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 78.736140][ T5767] pwc: recv_control_msg error -71 req 02 val 2500 [ 78.739214][ T5767] pwc: recv_control_msg error -71 req 02 val 2400 [ 78.763380][ T5767] pwc: recv_control_msg error -71 req 02 val 2600 [ 78.774582][ T5983] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 78.786332][ T5767] pwc: recv_control_msg error -71 req 02 val 2900 [ 78.800274][ T5983] BTRFS info (device loop1): using free space tree [ 78.800725][ T5767] pwc: recv_control_msg error -71 req 02 val 2800 [ 78.824416][ T5767] pwc: recv_control_msg error -71 req 04 val 1100 [ 78.848560][ T5767] pwc: recv_control_msg error -71 req 04 val 1200 [ 78.887161][ T5767] pwc: Registered as video103. [ 78.928817][ T5767] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 78.990848][ T5983] BTRFS info (device loop1): enabling ssd optimizations [ 78.997849][ T5983] BTRFS info (device loop1): auto enabling async discard [ 78.999040][ T5985] loop3: detected capacity change from 0 to 32768 [ 79.056894][ T5767] usb 1-1: USB disconnect, device number 2 [ 79.241738][ T5985] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 79.338871][ T6018] loop0: detected capacity change from 0 to 256 [ 79.358789][ T5761] BTRFS info (device loop1): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 79.365555][ T6018] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 79.409411][ T5985] XFS (loop3): Ending clean mount [ 79.483215][ T5985] XFS (loop3): Quotacheck needed: Please wait. [ 79.626506][ T5985] XFS (loop3): Quotacheck: Done. [ 79.714054][ T6018] exFAT-fs (loop0): error, invalid size(size(21523) > aligned(9223372036854777344) [ 79.714054][ T6018] [ 79.726061][ T6018] exFAT-fs (loop0): Filesystem has been set read-only [ 79.965714][ T5765] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 79.985852][ T6020] loop0: detected capacity change from 0 to 512 [ 79.987975][ T6006] loop2: detected capacity change from 0 to 32768 [ 80.100233][ T6020] EXT4-fs error (device loop0): ext4_iget_extra_inode:4732: inode #15: comm syz.0.54: corrupted in-inode xattr: invalid ea_ino [ 80.240301][ T6020] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.54: couldn't read orphan inode 15 (err -117) [ 80.299627][ T6020] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.545422][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.625451][ T6023] loop1: detected capacity change from 0 to 32768 [ 80.673946][ T6023] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.52 (6023) [ 80.744441][ T6023] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 80.791732][ T6023] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 80.847274][ T6023] BTRFS info (device loop1): setting nodatasum [ 80.877681][ T6023] BTRFS info (device loop1): use zlib compression, level 3 [ 80.910092][ T6023] BTRFS info (device loop1): using free space tree [ 81.024428][ T6023] BTRFS info (device loop1): enabling ssd optimizations [ 81.032106][ T6023] BTRFS info (device loop1): auto enabling async discard [ 81.218287][ T27] audit: type=1800 audit(1770161074.171:3): pid=6023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.52" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 81.514736][ T5761] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 81.581573][ T6069] netlink: 'syz.3.69': attribute type 27 has an invalid length. [ 81.610386][ T6069] netlink: 'syz.3.69': attribute type 1 has an invalid length. [ 81.723092][ T6072] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.805332][ T1189] cfg80211: failed to load regulatory.db [ 82.557119][ T6092] loop2: detected capacity change from 0 to 64 [ 82.636603][ T6092] hfs: request for non-existent node 131072 in B*Tree [ 82.650174][ T6092] hfs: request for non-existent node 131072 in B*Tree [ 82.964447][ T6082] loop3: detected capacity change from 0 to 40427 [ 83.005452][ T6082] F2FS-fs (loop3): Wrong segment_count / block_count (31 > 0) [ 83.033289][ T6082] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 83.068530][ T6082] F2FS-fs (loop3): invalid crc value [ 83.102970][ T6082] F2FS-fs (loop3): Found nat_bits in checkpoint [ 83.215553][ T42] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.292261][ T6082] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 83.320150][ T6082] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 83.345548][ T42] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.421824][ T27] audit: type=1800 audit(1770161076.381:4): pid=6082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.79" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 83.436425][ T6082] syz.3.79: attempt to access beyond end of device [ 83.436425][ T6082] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 83.498585][ T42] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.500626][ T6082] syz.3.79: attempt to access beyond end of device [ 83.500626][ T6082] loop3: rw=2049, sector=45128, nr_sectors = 16 limit=40427 [ 83.615323][ T5765] syz-executor: attempt to access beyond end of device [ 83.615323][ T5765] loop3: rw=2049, sector=45168, nr_sectors = 8 limit=40427 [ 83.658809][ T5765] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 83.706979][ T42] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.047425][ T6110] loop1: detected capacity change from 0 to 512 [ 84.116313][ T6110] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.86: bg 0: block 5: invalid block bitmap [ 84.164721][ T6108] loop2: detected capacity change from 0 to 8192 [ 84.201190][ T6110] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 84.210460][ T6108] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 84.245621][ T6108] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 84.264383][ T6110] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.86: invalid indirect mapped block 3 (level 2) [ 84.303275][ T6108] REISERFS (device loop2): using ordered data mode [ 84.326460][ T6110] EXT4-fs (loop1): 1 orphan inode deleted [ 84.352831][ T6108] reiserfs: using flush barriers [ 84.381976][ T6108] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 84.398745][ T6110] EXT4-fs (loop1): 1 truncate cleaned up [ 84.441036][ T6110] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.457291][ T6108] REISERFS (device loop2): checking transaction log (loop2) [ 84.627518][ T5768] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.646699][ T5768] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.655753][ T5768] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.672779][ T5768] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.690475][ T5768] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.698552][ T5768] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.710863][ T5761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.785243][ T6120] netlink: 12 bytes leftover after parsing attributes in process `syz.3.83'. [ 84.995446][ T6108] REISERFS (device loop2): Using tea hash to sort names [ 85.021485][ T6108] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 85.246820][ T6108] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3) [ 85.263267][ T6108] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3) [ 85.552510][ T6142] process 'syz.3.90' launched './file1' with NULL argv: empty string added [ 85.901617][ T6151] loop1: detected capacity change from 0 to 256 [ 85.947669][ T6151] exfat: Deprecated parameter 'namecase' [ 85.979586][ T6156] netlink: 'syz.2.91': attribute type 9 has an invalid length. [ 85.987950][ T6151] exfat: Deprecated parameter 'namecase' [ 86.030764][ T6151] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 86.170216][ T43] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 86.358134][ T6116] chnl_net:caif_netlink_parms(): no params data found [ 86.387607][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 86.400501][ T43] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 86.419813][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.438292][ T43] usb 4-1: Product: syz [ 86.448467][ T43] usb 4-1: Manufacturer: syz [ 86.458634][ T43] usb 4-1: SerialNumber: syz [ 86.472495][ T43] usb 4-1: config 0 descriptor?? [ 86.589812][ T5767] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 86.730771][ T5764] Bluetooth: hci3: command tx timeout [ 86.768872][ T43] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 003 [ 86.792793][ T5767] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 86.821392][ T5767] usb 3-1: config 0 interface 0 has no altsetting 0 [ 86.834392][ T5767] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 86.848921][ T5767] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 86.859428][ T5767] usb 3-1: Product: syz [ 86.863918][ T5767] usb 3-1: Manufacturer: syz [ 86.870691][ T5767] usb 3-1: SerialNumber: syz [ 86.894494][ T5767] usb 3-1: config 0 descriptor?? [ 86.906273][ T5767] usb 3-1: selecting invalid altsetting 0 [ 87.092455][ T6153] i2c i2c-1: adapter quirk: no zero length (addr 0x0000, size 0, read) [ 87.123466][ T5767] usb 4-1: USB disconnect, device number 3 [ 87.267087][ T787] usb 3-1: USB disconnect, device number 2 [ 87.421461][ T6116] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.428767][ T6116] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.440193][ T6116] bridge_slave_0: entered allmulticast mode [ 87.446947][ T6116] bridge_slave_0: entered promiscuous mode [ 87.461570][ T6116] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.468998][ T6116] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.477272][ T6116] bridge_slave_1: entered allmulticast mode [ 87.484482][ T6116] bridge_slave_1: entered promiscuous mode [ 87.511816][ T43] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 87.573908][ T6116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.593832][ T42] hsr_slave_0: left promiscuous mode [ 87.601714][ T42] hsr_slave_1: left promiscuous mode [ 87.610303][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.627035][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.650409][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.670206][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.694134][ T42] bridge_slave_1: left allmulticast mode [ 87.719774][ T42] bridge_slave_1: left promiscuous mode [ 87.727463][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.758761][ T43] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 87.767677][ T43] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 87.788317][ T43] usb 2-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 87.810076][ T43] usb 2-1: config 220 has no interface number 2 [ 87.812934][ T42] bridge_slave_0: left allmulticast mode [ 87.825102][ T43] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 87.837305][ T42] bridge_slave_0: left promiscuous mode [ 87.858797][ T43] usb 2-1: config 220 interface 0 has no altsetting 0 [ 87.865926][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.868345][ T43] usb 2-1: config 220 interface 76 has no altsetting 0 [ 87.902793][ T43] usb 2-1: config 220 interface 1 has no altsetting 0 [ 87.936239][ T43] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 87.950184][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.963928][ T42] veth1_macvtap: left promiscuous mode [ 87.972103][ T43] usb 2-1: Product: syz [ 87.980422][ T43] usb 2-1: Manufacturer: syz [ 87.987675][ T43] usb 2-1: SerialNumber: syz [ 87.990987][ T42] veth0_macvtap: left promiscuous mode [ 87.998203][ T42] veth1_vlan: left promiscuous mode [ 88.011970][ T42] veth0_vlan: left promiscuous mode [ 88.236575][ T43] uvcvideo 2-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 88.272897][ T43] usb 2-1: selecting invalid altsetting 0 [ 88.320742][ T43] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 88.358210][ T43] usb 2-1: No valid video chain found. [ 88.413225][ T43] usb 2-1: selecting invalid altsetting 0 [ 88.419113][ T43] usbtest: probe of 2-1:220.1 failed with error -22 [ 88.461923][ T43] usb 2-1: USB disconnect, device number 2 [ 88.809918][ T5764] Bluetooth: hci3: command tx timeout [ 89.465939][ T42] team0 (unregistering): Port device team_slave_1 removed [ 89.551596][ T42] team0 (unregistering): Port device team_slave_0 removed [ 89.640540][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.708417][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.775498][ T6210] Falling back ldisc for ptm0. [ 90.300358][ T42] bond0 (unregistering): Released all slaves [ 90.428400][ T6116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.470272][ T6222] netlink: 'syz.1.107': attribute type 9 has an invalid length. [ 90.599125][ T6116] team0: Port device team_slave_0 added [ 90.623122][ T6116] team0: Port device team_slave_1 added [ 90.704206][ T6116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.725116][ T6116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.791954][ T6116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.826043][ T6116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.851946][ T6116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.893665][ T5764] Bluetooth: hci3: command tx timeout [ 90.902715][ T6116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.008180][ T6116] hsr_slave_0: entered promiscuous mode [ 91.030549][ T6116] hsr_slave_1: entered promiscuous mode [ 91.037175][ T6116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.059768][ T6116] Cannot create hsr debugfs directory [ 91.655515][ T6116] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.674266][ T6116] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.700794][ T6116] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.756385][ T6116] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.994215][ T6278] loop3: detected capacity change from 0 to 128 [ 92.135503][ T6116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.197736][ T6116] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.220263][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 92.242851][ T994] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.250157][ T994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.274919][ T994] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.282153][ T994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.428993][ T8] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 92.434955][ T6116] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.458199][ T8] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 92.495862][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 92.547179][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 92.578816][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 92.606080][ T8] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 92.616728][ T8] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 92.631597][ T8] usb 2-1: Product: syz [ 92.635832][ T8] usb 2-1: Manufacturer: syz [ 92.658114][ T8] cdc_wdm 2-1:1.0: skipping garbage [ 92.692047][ T8] cdc_wdm 2-1:1.0: skipping garbage [ 92.734260][ T8] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 92.764640][ T8] cdc_wdm 2-1:1.0: Unknown control protocol [ 92.970077][ T5764] Bluetooth: hci3: command tx timeout [ 93.087778][ T6116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.748552][ T6116] veth0_vlan: entered promiscuous mode [ 93.770067][ T43] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 93.779246][ T6116] veth1_vlan: entered promiscuous mode [ 93.840518][ T6116] veth0_macvtap: entered promiscuous mode [ 93.857036][ T6116] veth1_macvtap: entered promiscuous mode [ 93.892787][ T6116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.908404][ T6116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.921153][ T6116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.932679][ T6116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.943429][ T6116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.957551][ T6116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.973514][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 93.986637][ T43] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 93.996011][ T6116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.003458][ T43] usb 3-1: config 179 has no interface number 0 [ 94.025602][ T43] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 94.027122][ T6116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.049153][ T43] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 94.066006][ T43] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 94.077582][ T6116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.088091][ T43] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 94.100335][ T6116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.111275][ T43] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 94.126164][ T6116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.136558][ T43] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 94.146085][ T6116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.156772][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.165333][ T6116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.180868][ T6312] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 94.192865][ T6116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.254687][ T6116] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.265646][ T6116] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.276026][ T6116] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.286117][ T6116] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.449351][ T994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.490311][ T994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.574370][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.601976][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.655310][ T5767] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input7 [ 94.936175][ T5767] usb 2-1: USB disconnect, device number 3 [ 94.993314][ T43] usb 3-1: USB disconnect, device number 3 [ 94.999227][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 94.999334][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 95.048104][ T43] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 95.364272][ T6333] loop4: detected capacity change from 0 to 32768 [ 95.393839][ T6333] ======================================================= [ 95.393839][ T6333] WARNING: The mand mount option has been deprecated and [ 95.393839][ T6333] and is ignored by this kernel. Remove the mand [ 95.393839][ T6333] option from the mount to silence this warning. [ 95.393839][ T6333] ======================================================= [ 95.497996][ T6333] JBD2: Ignoring recovery information on journal [ 95.589288][ T6333] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 95.867763][ T6116] ocfs2: Unmounting device (7,4) on (node local) [ 96.213679][ T6364] loop1: detected capacity change from 0 to 2048 [ 96.250753][ T6367] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.396101][ T6367] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 96.437092][ T6367] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 96.484954][ T6367] Remounting filesystem read-only [ 96.523222][ T994] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 96.541389][ T994] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 96.569770][ T994] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 96.602058][ T994] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 96.625486][ T994] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 96.659885][ T994] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 96.686244][ T994] NILFS (loop1): discard dirty block: blocknr=18, size=1024 [ 96.701401][ T994] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 96.715663][ T994] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 96.735994][ T994] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 96.754417][ T994] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 96.776606][ T994] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 96.799832][ T994] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 96.808755][ T994] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 96.829765][ T994] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 96.838733][ T994] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 96.850216][ T994] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 96.857656][ T994] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 96.866739][ T994] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 96.874459][ T994] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 96.887712][ T994] NILFS (loop1): discard dirty page: offset=196608, ino=3 [ 96.895454][ T994] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 96.904624][ T994] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 96.914311][ T994] NILFS (loop1): discard dirty block: blocknr=49, size=1024 [ 96.921979][ T994] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 96.932098][ T994] NILFS (loop1): discard dirty page: offset=0, ino=4 [ 96.979846][ T994] NILFS (loop1): discard dirty block: blocknr=40, size=1024 [ 96.988608][ T994] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 97.016722][ T6382] loop2: detected capacity change from 0 to 8 [ 97.028127][ T994] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 97.063204][ T994] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 97.088335][ T6382] SQUASHFS error: lzo decompression failed, data probably corrupt [ 97.089001][ T6364] NILFS (loop1): mounting fs with errors [ 97.128308][ T6382] SQUASHFS error: Failed to read block 0x91: -5 [ 97.146149][ T6382] SQUASHFS error: Unable to read metadata cache entry [8f] [ 97.169806][ T6382] SQUASHFS error: Unable to read inode 0x11f [ 97.222018][ T6364] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 97.257526][ T6364] Remounting filesystem read-only [ 97.277915][ T6389] loop4: detected capacity change from 0 to 512 [ 97.312351][ T6389] EXT4-fs: Ignoring removed i_version option [ 97.381948][ T6389] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 97.414837][ T5761] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 97.447407][ T5761] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 97.457135][ T5761] NILFS (loop1): discard dirty block: blocknr=35, size=1024 [ 97.510265][ T5761] NILFS (loop1): discard dirty block: blocknr=36, size=1024 [ 97.517881][ T5761] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 97.527722][ T5761] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 97.543279][ T6389] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.556056][ T6389] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.768753][ T6116] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.278345][ T6414] netlink: 48 bytes leftover after parsing attributes in process `syz.4.142'. [ 98.302330][ T6414] netlink: 48 bytes leftover after parsing attributes in process `syz.4.142'. [ 98.429770][ T787] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 98.533725][ T6421] loop4: detected capacity change from 0 to 2048 [ 98.585869][ T6423] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.640011][ T787] usb 3-1: Using ep0 maxpacket: 32 [ 98.647296][ T6423] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 98.665479][ T6423] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 98.677148][ T787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.693125][ T787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.706812][ T6423] Remounting filesystem read-only [ 98.718665][ T787] usb 3-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 98.718681][ T42] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 98.729396][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.753507][ T787] usb 3-1: config 0 descriptor?? [ 98.764998][ T42] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 98.774019][ T42] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 98.786652][ T42] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 98.804202][ T42] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 98.811185][ T6416] loop3: detected capacity change from 0 to 32768 [ 98.829554][ T42] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 98.838785][ T42] NILFS (loop4): discard dirty block: blocknr=18, size=1024 [ 98.856229][ T42] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 98.868218][ T42] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 98.880304][ T42] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 98.882314][ T6416] (syz.3.144,6416,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 98.890918][ T42] NILFS (loop4): discard dirty page: offset=0, ino=5 [ 98.911060][ T6416] (syz.3.144,6416,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 98.911883][ T42] NILFS (loop4): discard dirty block: blocknr=41, size=1024 [ 98.936967][ T42] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 98.962211][ T42] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 98.973969][ T6416] JBD2: Ignoring recovery information on journal [ 98.994902][ T42] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 99.018379][ T42] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 99.025867][ T42] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 99.028901][ T6416] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 99.043145][ T42] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 99.082580][ T42] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 99.092141][ T42] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 99.157546][ T42] NILFS (loop4): discard dirty page: offset=196608, ino=3 [ 99.197095][ T787] glorious 0003:258A:0033.0001: item fetching failed at offset 2/3 [ 99.209829][ T42] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 99.230446][ T42] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 99.243916][ T787] glorious: probe of 0003:258A:0033.0001 failed with error -22 [ 99.252979][ T42] NILFS (loop4): discard dirty block: blocknr=49, size=1024 [ 99.266755][ T42] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 99.275970][ T42] NILFS (loop4): discard dirty page: offset=0, ino=4 [ 99.282962][ T42] NILFS (loop4): discard dirty block: blocknr=40, size=1024 [ 99.291668][ T42] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 99.302302][ T42] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 99.320267][ T42] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 99.337585][ T6421] NILFS (loop4): mounting fs with errors [ 99.374008][ T6421] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 99.389660][ T6416] [ 99.392117][ T6416] ====================================================== [ 99.399144][ T6416] WARNING: possible circular locking dependency detected [ 99.406190][ T6416] syzkaller #0 Not tainted [ 99.410618][ T6416] ------------------------------------------------------ [ 99.417649][ T6416] syz.3.144/6416 is trying to acquire lock: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 99.423561][ T6416] ffff8880590fce38 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_init_acl+0x30a/0x770 [ 99.432945][ T6416] [ 99.432945][ T6416] but task is already holding lock: [ 99.439844][ T6421] Remounting filesystem read-only [ 99.440301][ T6416] ffff88805dca94e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a8/0x6f0 [ 99.455635][ T6416] [ 99.455635][ T6416] which lock already depends on the new lock. [ 99.455635][ T6416] [ 99.466087][ T6416] [ 99.466087][ T6416] the existing dependency chain (in reverse order) is: [ 99.475109][ T6416] [ 99.475109][ T6416] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 99.483659][ T6416] down_read+0x46/0x2e0 [ 99.488375][ T6416] ocfs2_start_trans+0x3a8/0x6f0 [ 99.493922][ T6416] ocfs2_reserve_suballoc_bits+0x7ad/0x44c0 [ 99.500388][ T6416] ocfs2_reserve_new_inode+0x4f9/0xcd0 [ 99.506407][ T6416] ocfs2_mknod+0x840/0x2300 [ 99.511455][ T6416] ocfs2_create+0x196/0x430 [ 99.516494][ T6416] path_openat+0x12a0/0x3230 [ 99.521634][ T6416] do_filp_open+0x1f5/0x430 [ 99.526685][ T6416] do_sys_openat2+0x134/0x1d0 [ 99.531919][ T6416] __x64_sys_openat+0x139/0x160 [ 99.537320][ T6416] do_syscall_64+0x55/0xa0 [ 99.542290][ T6416] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.548740][ T6416] [ 99.548740][ T6416] -> #2 (sb_internal#5){.+.+}-{0:0}: [ 99.554022][ T787] usb 3-1: USB disconnect, device number 4 [ 99.556226][ T6416] ocfs2_start_trans+0x2a9/0x6f0 [ 99.567518][ T6416] ocfs2_write_begin_nolock+0x205e/0x43f0 [ 99.573800][ T6416] ocfs2_write_begin+0x1c6/0x320 [ 99.579308][ T6416] generic_perform_write+0x2fe/0x5c0 [ 99.585145][ T6416] ocfs2_file_write_iter+0x167a/0x1e80 [ 99.591162][ T6416] vfs_write+0x46c/0x990 [ 99.595958][ T6416] ksys_write+0x150/0x260 [ 99.600840][ T6416] do_syscall_64+0x55/0xa0 [ 99.605813][ T6416] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.612262][ T6416] [ 99.612262][ T6416] -> #1 (&oi->ip_alloc_sem){++++}-{3:3}: [ 99.620111][ T6416] down_write+0x97/0x200 [ 99.624903][ T6416] ocfs2_try_remove_refcount_tree+0xb7/0x340 [ 99.631429][ T6416] ocfs2_truncate_file+0xde5/0x1440 [ 99.637176][ T6416] ocfs2_setattr+0x158d/0x1bc0 [ 99.642487][ T6416] notify_change+0xb0d/0xe10 [ 99.647637][ T6416] do_truncate+0x1b0/0x240 [ 99.652604][ T6416] path_openat+0x2a32/0x3230 [ 99.657742][ T6416] do_filp_open+0x1f5/0x430 [ 99.662789][ T6416] do_sys_openat2+0x134/0x1d0 [ 99.668129][ T6416] __x64_sys_open+0x11f/0x140 [ 99.673347][ T6416] do_syscall_64+0x55/0xa0 [ 99.678306][ T6416] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.684753][ T6416] [ 99.684753][ T6416] -> #0 (&oi->ip_xattr_sem){++++}-{3:3}: [ 99.692683][ T6416] __lock_acquire+0x2df1/0x7d40 [ 99.698081][ T6416] lock_acquire+0x19e/0x420 [ 99.703125][ T6416] down_read+0x46/0x2e0 [ 99.707818][ T6416] ocfs2_init_acl+0x30a/0x770 [ 99.713033][ T6416] ocfs2_mknod+0x140f/0x2300 [ 99.718151][ T6416] ocfs2_create+0x196/0x430 [ 99.723267][ T6416] path_openat+0x12a0/0x3230 [ 99.728380][ T6416] do_filp_open+0x1f5/0x430 [ 99.733392][ T6416] do_sys_openat2+0x134/0x1d0 [ 99.738578][ T6416] __x64_sys_openat+0x139/0x160 [ 99.743938][ T6416] do_syscall_64+0x55/0xa0 [ 99.748886][ T6416] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.755683][ T6416] [ 99.755683][ T6416] other info that might help us debug this: [ 99.755683][ T6416] [ 99.765919][ T6416] Chain exists of: [ 99.765919][ T6416] &oi->ip_xattr_sem --> sb_internal#5 --> &journal->j_trans_barrier [ 99.765919][ T6416] [ 99.779826][ T6416] Possible unsafe locking scenario: [ 99.779826][ T6416] [ 99.787276][ T6416] CPU0 CPU1 [ 99.792714][ T6416] ---- ---- [ 99.798065][ T6416] rlock(&journal->j_trans_barrier); [ 99.803434][ T6416] lock(sb_internal#5); [ 99.810213][ T6416] lock(&journal->j_trans_barrier); [ 99.818016][ T6416] rlock(&oi->ip_xattr_sem); [ 99.822694][ T6416] [ 99.822694][ T6416] *** DEADLOCK *** [ 99.822694][ T6416] [ 99.830847][ T6416] 8 locks held by syz.3.144/6416: [ 99.835855][ T6416] #0: ffff888021afa418 (sb_writers#24){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 99.845078][ T6416] #1: ffff8880590fd118 (&type->i_mutex_dir_key#18){+.+.}-{3:3}, at: path_openat+0x7dc/0x3230 [ 99.855431][ T6416] #2: ffff88805910ed98 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 99.869099][ T6416] #3: ffff88805910df58 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 99.882757][ T6416] #4: ffff888059111818 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x120/0x2600 [ 99.896686][ T6416] #5: ffff888021afa608 (sb_internal#5){.+.+}-{0:0}, at: ocfs2_mknod+0xf1d/0x2300 [ 99.905995][ T6416] #6: ffff88805dca94e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a8/0x6f0 [ 99.916680][ T6416] #7: ffff888024a98990 (jbd2_handle#2){.+.+}-{0:0}, at: start_this_handle+0x1f7a/0x21c0 [ 99.926597][ T6416] [ 99.926597][ T6416] stack backtrace: [ 99.932506][ T6416] CPU: 0 PID: 6416 Comm: syz.3.144 Not tainted syzkaller #0 [ 99.939872][ T6416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 99.950050][ T6416] Call Trace: [ 99.953433][ T6416] [ 99.956354][ T6416] dump_stack_lvl+0x18c/0x250 [ 99.961029][ T6416] ? load_image+0x400/0x400 [ 99.965521][ T6416] ? show_regs_print_info+0x20/0x20 [ 99.970703][ T6416] ? print_circular_bug+0x12b/0x1a0 [ 99.975884][ T6416] check_noncircular+0x2fc/0x400 [ 99.980824][ T6416] ? print_deadlock_bug+0x5d0/0x5d0 [ 99.986025][ T6416] ? _find_first_zero_bit+0xd3/0x100 [ 99.991295][ T6416] ? add_lock_to_list+0x191/0x280 [ 99.996303][ T6416] __lock_acquire+0x2df1/0x7d40 [ 100.001146][ T6416] ? verify_lock_unused+0x140/0x140 [ 100.006342][ T6416] ? __lock_acquire+0x7d40/0x7d40 [ 100.011360][ T6416] ? do_raw_spin_lock+0x11f/0x2c0 [ 100.016458][ T6416] lock_acquire+0x19e/0x420 [ 100.020994][ T6416] ? ocfs2_init_acl+0x30a/0x770 [ 100.025854][ T6416] ? __might_sleep+0xe0/0xe0 [ 100.030458][ T6416] ? read_lock_is_recursive+0x20/0x20 [ 100.035817][ T6416] ? trace_ocfs2_claim_new_inode_at_loc+0x1c0/0x1c0 [ 100.042404][ T6416] ? dquot_alloc_inode+0x772/0xa40 [ 100.047508][ T6416] down_read+0x46/0x2e0 [ 100.051654][ T6416] ? ocfs2_init_acl+0x30a/0x770 [ 100.056499][ T6416] ocfs2_init_acl+0x30a/0x770 [ 100.061187][ T6416] ? ocfs2_mknod_locked+0x159/0x290 [ 100.066402][ T6416] ? ocfs2_acl_chmod+0x330/0x330 [ 100.071332][ T6416] ? dquot_alloc_inode+0x8ac/0xa40 [ 100.076431][ T6416] ? dquot_alloc_inode+0x15e/0xa40 [ 100.081534][ T6416] ? ocfs2_block_signals+0x9b/0xe0 [ 100.086642][ T6416] ? ocfs2_init_security_get+0x139/0x1a0 [ 100.092267][ T6416] ocfs2_mknod+0x140f/0x2300 [ 100.096850][ T6416] ? ocfs2_mkdir+0x430/0x430 [ 100.101547][ T6416] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 100.107432][ T6416] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 100.113330][ T6416] ? ocfs2_inode_unlock+0xa5/0x140 [ 100.118431][ T6416] ? __lock_acquire+0x7d40/0x7d40 [ 100.123442][ T6416] ? __rwlock_init+0x150/0x150 [ 100.128194][ T6416] ? do_raw_spin_unlock+0x121/0x230 [ 100.133379][ T6416] ? rcu_is_watching+0x15/0xb0 [ 100.138186][ T6416] ? ocfs2_lookup+0x494/0x950 [ 100.142855][ T6416] ocfs2_create+0x196/0x430 [ 100.147341][ T6416] ? ocfs2_update_inode_fsync_trans+0x240/0x240 [ 100.153563][ T6416] ? from_kgid+0x16d/0x690 [ 100.157972][ T6416] ? ocfs2_lookup+0x950/0x950 [ 100.162635][ T6416] ? HAS_UNMAPPED_ID+0x11a/0x180 [ 100.167708][ T6416] ? inode_permission+0xf3/0x480 [ 100.172656][ T6416] ? bpf_lsm_inode_create+0x9/0x10 [ 100.177758][ T6416] ? security_inode_create+0xb7/0x100 [ 100.183145][ T6416] ? ocfs2_lookup+0x950/0x950 [ 100.187813][ T6416] path_openat+0x12a0/0x3230 [ 100.192393][ T6416] ? do_filp_open+0x430/0x430 [ 100.197141][ T6416] ? __virt_addr_valid+0x18c/0x540 [ 100.202252][ T6416] do_filp_open+0x1f5/0x430 [ 100.206759][ T6416] ? vfs_tmpfile+0x490/0x490 [ 100.211334][ T6416] ? _raw_spin_unlock+0x28/0x40 [ 100.216169][ T6416] ? alloc_fd+0x58f/0x630 [ 100.220510][ T6416] do_sys_openat2+0x134/0x1d0 [ 100.225227][ T6416] ? do_sys_open+0xe0/0xe0 [ 100.229805][ T6416] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 100.235767][ T6416] ? lock_chain_count+0x20/0x20 [ 100.240610][ T6416] __x64_sys_openat+0x139/0x160 [ 100.245476][ T6416] do_syscall_64+0x55/0xa0 [ 100.249889][ T6416] ? clear_bhb_loop+0x40/0x90 [ 100.254568][ T6416] ? clear_bhb_loop+0x40/0x90 [ 100.259253][ T6416] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 100.265142][ T6416] RIP: 0033:0x7f0d46f9aeb9 [ 100.269672][ T6416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.289371][ T6416] RSP: 002b:00007f0d47e5d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 100.297946][ T6416] RAX: ffffffffffffffda RBX: 00007f0d47215fa0 RCX: 00007f0d46f9aeb9 [ 100.305912][ T6416] RDX: 00000000000c4042 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 100.313898][ T6416] RBP: 00007f0d47008c1f R08: 0000000000000000 R09: 0000000000000000 [ 100.321885][ T6416] R10: 00000000000001ff R11: 0000000000000246 R12: 0000000000000000 [ 100.329852][ T6416] R13: 00007f0d47216038 R14: 00007f0d47215fa0 R15: 00007ffc30d2c338 [ 100.337839][ T6416] [ 100.349553][ T6116] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 100.369325][ T27] audit: type=1800 audit(1770161093.321:5): pid=6416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.144" name="file1" dev="loop3" ino=16978 res=0 errno=0 [ 100.383596][ T6116] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 100.396494][ T6116] NILFS (loop4): discard dirty block: blocknr=35, size=1024 [ 100.414396][ T6116] NILFS (loop4): discard dirty block: blocknr=36, size=1024 [ 100.423689][ T6116] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 100.431315][ T6116] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 101.006792][ T1087] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.063749][ T1087] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.149452][ T1087] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.181086][ T6416] ocfs2: Unmounting device (7,3) on (node local) [ 101.214446][ T1087] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.957598][ T1087] hsr_slave_0: left promiscuous mode [ 101.966541][ T1087] hsr_slave_1: left promiscuous mode [ 101.975179][ T1087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.982888][ T1087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.992511][ T1087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.003851][ T1087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.013888][ T1087] bridge_slave_1: left allmulticast mode [ 102.020440][ T1087] bridge_slave_1: left promiscuous mode [ 102.026267][ T1087] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.036739][ T1087] bridge_slave_0: left allmulticast mode [ 102.042746][ T1087] bridge_slave_0: left promiscuous mode [ 102.048519][ T1087] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.063645][ T1087] veth1_macvtap: left promiscuous mode [ 102.069221][ T1087] veth0_macvtap: left promiscuous mode [ 102.078052][ T1087] veth1_vlan: left promiscuous mode [ 102.083481][ T1087] veth0_vlan: left promiscuous mode [ 102.304138][ T1087] team0 (unregistering): Port device team_slave_1 removed [ 102.334285][ T1087] team0 (unregistering): Port device team_slave_0 removed [ 102.362764][ T1087] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.388983][ T1087] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.453486][ T1087] bond0 (unregistering): Released all slaves [ 102.843014][ T1087] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.899993][ T1087] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.957195][ T1087] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.016625][ T1087] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.132169][ T1087] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.156563][ T1087] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.215383][ T1087] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.266451][ T1087] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.355143][ T1087] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.446049][ T1087] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.496044][ T1087] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.555508][ T1087] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.752973][ T1087] hsr_slave_0: left promiscuous mode [ 104.758880][ T1087] hsr_slave_1: left promiscuous mode [ 104.767398][ T1087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.776217][ T1087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.784876][ T1087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.793519][ T1087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.801628][ T1087] bridge_slave_1: left promiscuous mode [ 104.807364][ T1087] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.817515][ T1087] bridge_slave_0: left allmulticast mode [ 104.823560][ T1087] bridge_slave_0: left promiscuous mode [ 104.829274][ T1087] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.844890][ T1087] hsr_slave_0: left promiscuous mode [ 104.851954][ T1087] hsr_slave_1: left promiscuous mode [ 104.857948][ T1087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.867832][ T1087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.876802][ T1087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.884521][ T1087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.892543][ T1087] bridge_slave_1: left allmulticast mode [ 104.898219][ T1087] bridge_slave_1: left promiscuous mode [ 104.904175][ T1087] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.912642][ T1087] bridge_slave_0: left allmulticast mode [ 104.918285][ T1087] bridge_slave_0: left promiscuous mode [ 104.924269][ T1087] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.934992][ T1087] hsr_slave_0: left promiscuous mode [ 104.940933][ T1087] hsr_slave_1: left promiscuous mode [ 104.946659][ T1087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.955001][ T1087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.963091][ T1087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.970555][ T1087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.978054][ T1087] bridge_slave_1: left allmulticast mode [ 104.985039][ T1087] bridge_slave_1: left promiscuous mode [ 104.990827][ T1087] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.998902][ T1087] bridge_slave_0: left allmulticast mode [ 105.004740][ T1087] bridge_slave_0: left promiscuous mode [ 105.010547][ T1087] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.022008][ T1087] veth1_macvtap: left promiscuous mode [ 105.027491][ T1087] veth0_macvtap: left promiscuous mode [ 105.033553][ T1087] veth1_vlan: left promiscuous mode [ 105.038786][ T1087] veth0_vlan: left promiscuous mode [ 105.044862][ T1087] veth1_macvtap: left promiscuous mode [ 105.050472][ T1087] veth0_macvtap: left promiscuous mode [ 105.055993][ T1087] veth1_vlan: left promiscuous mode [ 105.062602][ T1087] veth0_vlan: left promiscuous mode [ 105.068848][ T1087] veth1_macvtap: left promiscuous mode [ 105.074880][ T1087] veth0_macvtap: left promiscuous mode [ 105.080591][ T1087] veth1_vlan: left promiscuous mode [ 105.085837][ T1087] veth0_vlan: left promiscuous mode [ 105.348935][ T1087] team0 (unregistering): Port device team_slave_1 removed [ 105.362874][ T1087] team0 (unregistering): Port device team_slave_0 removed [ 105.388853][ T1087] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.417374][ T1087] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.473678][ T1087] bond0 (unregistering): Released all slaves [ 105.619122][ T1087] team0 (unregistering): Port device team_slave_1 removed [ 105.649382][ T1087] team0 (unregistering): Port device team_slave_0 removed [ 105.671861][ T1087] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.702167][ T1087] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.762184][ T1087] bond0 (unregistering): Released all slaves [ 105.927297][ T1087] team0 (unregistering): Port device team_slave_1 removed [ 105.941756][ T1087] team0 (unregistering): Port device team_slave_0 removed [ 105.967086][ T1087] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.994714][ T1087] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.047943][ T1087] bond0 (unregistering): Released all slaves