last executing test programs: 7.145297389s ago: executing program 4 (id=158): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mlock2(&(0x7f00003ee000/0x4000)=nil, 0x4000, 0x0) syz_clone(0x40000400, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000b13000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000800000/0x4000)=nil) munlockall() 5.83794031s ago: executing program 1 (id=172): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_getnetconf={0x14, 0x52, 0x311}, 0x14}}, 0x0) read(r0, &(0x7f0000000200)=""/4090, 0xffa) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x5, &(0x7f0000000180), 0x43) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000880)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1c00000000000000008e1445c7000000", @ANYRES32=r1, @ANYBLOB="ac1414bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x0) 5.456493195s ago: executing program 1 (id=174): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mremap(&(0x7f0000340000/0x4000)=nil, 0x4017, 0x3000, 0x3, &(0x7f0000001000/0x3000)=nil) 5.252181798s ago: executing program 0 (id=175): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0xd0f785e2fc518d55, "00004fbe"}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @main=@item_4={0x3, 0x0, 0x8, "b775e7cd"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 4.995721422s ago: executing program 4 (id=176): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) listen(r0, 0x80080400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xc4, &(0x7f0000000000), &(0x7f0000000240)=0x4) 4.622502358s ago: executing program 4 (id=178): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)}, 0x8000) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000140)='./bus\x00', 0x300000a, &(0x7f0000000080)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@nodiscard}, {@compress_force}, {@acl}, {@nobarrier}, {@max_inline={'max_inline', 0x3d, [0x36, 0x78, 0x30, 0x74, 0x34, 0x70]}}, {@nodiscard}, {@enospc_debug}, {@ssd_spread}, {@nodatacow}]}, 0x23, 0x55a3, &(0x7f000000e0c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0xc400941b, &(0x7f0000000000)={0x1}) 4.298818633s ago: executing program 2 (id=179): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x7, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="3f030e00031b1200000000fcf0ad0000000000120f008100000081", 0x1b, 0x0, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05030500d3fc030000004788031c09101128", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.286887313s ago: executing program 1 (id=180): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x1, 0xff, 0x1f}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r0, 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x88000, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) 3.963876689s ago: executing program 1 (id=182): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@getqdisc={0x24, 0x26, 0x705, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0x7, 0x8}, {0x4, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x40188de}, 0x0) 3.897922309s ago: executing program 2 (id=183): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x15) 3.678423913s ago: executing program 1 (id=185): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0844123, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) 3.296238589s ago: executing program 3 (id=186): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000000)={0x0}) 3.173226011s ago: executing program 2 (id=187): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') read$FUSE(r1, &(0x7f00000007c0)={0x2020}, 0x2020) 2.984433274s ago: executing program 3 (id=188): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$UHID_CREATE2(r0, &(0x7f00000004c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000)) 2.497835521s ago: executing program 3 (id=189): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in6=@private0}, 0x0, @in=@local}}, 0xe8) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x18) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2.217177226s ago: executing program 4 (id=190): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e26, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, 0x2}, 0x1c) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000000c0)={0x14, 0x5, 0xd}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008a02"]) 2.199953176s ago: executing program 2 (id=191): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "ecf0ff19", "4e67cb72f328ac2f"}, 0x28) 2.038958289s ago: executing program 3 (id=192): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x2) write$dsp(r0, &(0x7f0000000000)="81", 0x1) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x401d031, 0xffffffffffffffff, 0x0) close(r0) 1.89866652s ago: executing program 0 (id=193): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x4) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000340000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r2, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r1}, 0x20) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x8000, &(0x7f0000001380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 1.243119851s ago: executing program 3 (id=194): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "020037e0"}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x100004, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) ppoll(&(0x7f0000000340)=[{r0, 0x1}], 0x1, 0x0, 0x0, 0x0) 1.128755852s ago: executing program 2 (id=195): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xfd, 0x1bf, &(0x7f0000000300)="$eJzs3TGL02AYB/Cn9bzmnG4TRCHg4nSon+BEThADgtJBJ4XT5SqCt0SX9mP4Af0A0qmLRGrSxkaHWmxS6++39En/edvnHZp26ZNXN99dnL+/fPvl+udIkl70T+M0Zr04jn4sTAIA2CezooivRanrXgCAdqzx/f+t5ZYAgC17/uLlkwdZdvYsTZOI6SQf5sPyscwfPc7O7qY/HNerpnk+vLLM76XN3w7z/Gpcq/L75fp0NT+MO7fLfJ49fJo18kGcb3frAAAAAAAAAAAAAAAAAAAAAADQmVuRLvx2vs/JSTM/qvLy6Kf5QI35PQdx46A6rMcDFeM2NgUAAAAAAAAAAAAAAAAAAAD/mMuPny5ej0ZvPtTFICJWn/mTole98IbL2y76sRNtKP5qke5GG6MNPwWHEbGtxmZFUax1cn2NGHR1cQIAAAAAAAAAAAAAAAAAgP9M/affX7Oki4YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAP1/f83KMYRscbJyzc76nSrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHvAQAA///DgjXa") mount$nfs(&(0x7f0000000100)='.5.', 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 778.652068ms ago: executing program 4 (id=196): socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000200)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f0000000200), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000500), &(0x7f0000000540)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r1, &(0x7f0000000180)}, 0x20) 778.371968ms ago: executing program 0 (id=197): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0x6}, 0x1) sendto$inet6(r0, &(0x7f0000000180)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x7, @loopback, 0xffffffff}, 0x1c) close(0x3) 681.667689ms ago: executing program 2 (id=198): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x1f0, &(0x7f0000000240)="$eJzs3cFqE1EUANCbmiYTcdGdIAgjLnRV1C+oSAUxIFSy0J2gK7NqN6mb9jP8Bf/LD5CuspEncSadGNMYBjKj9ZxN7uS+l/fuDJlkk5sUha+3P0eWdWLnIA5i2om92Im58wAArpNpSvEtFdreCwDQjA0+/783vCUAYMtev3n78ulweHiU51nExflkNBkVj0X++Yvh4aP8p71q1sVkMrpxmX+cL393mOV342aZf1LMzy/TvYgY9eLh/SI/yz17Ncx/nd+P91uuHQAAAAAAAAAAAAAAAAAAAAAA2nI38rmV/X3295fzgzJfHC30B1rq39ONO93ysGoPlM6aKAoAAAAAAAAAAAAAAAAAAAD+MSennz6+G48/HFdBPyIWn+muGHN10ClfeKPB7Qc7UW/6oCyzxqKd8hRtt8DB6ou7SRDdv+Xq1A3yBtYarD29Kc2C1e+CeVuMK6f3ImL96g+O6m5+mlIaf7l3fHIaae3g6h7Rb/SOBAAAAAAAAAAAAAAAAAAA/6+FX33/JmtjQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQgur//2sEZxFxK/44eL7WbmTtFgsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC19SMAAP//j3Mj5w==") r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 644.88991ms ago: executing program 4 (id=199): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) fstat(r0, 0x0) lchown(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000200)='./file2\x00', 0x1) unlink(&(0x7f0000000180)='./file1\x00') 578.464371ms ago: executing program 0 (id=200): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000300)={[{0xfffffffd, 0x8000, 0xe0, 0x8, 0x2, 0x13, 0x5, 0x1, 0x0, 0x2, 0x20, 0x8, 0x400001}, {0x0, 0x0, 0xff, 0x2, 0x4, 0x0, 0x81, 0x1, 0x20, 0x4, 0x0, 0x4, 0x8000000000}, {0x9, 0x5, 0x0, 0x1, 0x45, 0x9, 0x6, 0x4, 0xfd, 0x0, 0x0, 0x4, 0x1e0ee}], 0x200}) 436.831883ms ago: executing program 1 (id=201): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) openat(0xffffffffffffff9c, 0x0, 0x107042, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000100)=ANY=[], 0x835, 0x0) sync() getxattr(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000100)=@known='trusted.overlay.upper\x00', &(0x7f00000010c0)=""/4096, 0x1000) 291.975215ms ago: executing program 0 (id=202): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0) 22.548159ms ago: executing program 0 (id=203): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x4048000000000000, 0x10f282) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n 1 [ 106.396592][ T4263] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 106.418571][ T4263] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 106.435595][ T4263] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 106.446462][ T4263] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 106.456714][ T4265] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 106.460455][ T4263] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 106.469654][ T4265] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 106.480799][ T4263] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 106.499612][ T4265] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 106.504223][ T4263] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 106.518354][ T4265] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 106.525148][ T4263] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 106.532585][ T4265] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 106.545392][ T4263] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 106.578760][ T4263] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 106.579293][ T4265] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 106.589698][ T4263] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 106.603881][ T4265] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 106.613161][ T4263] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 106.621562][ T4265] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 106.637838][ T4263] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 106.644014][ T4265] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 106.662476][ T4267] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 106.679191][ T4265] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 106.698463][ T4265] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 106.706777][ T4265] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.748906][ T4263] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 106.766741][ T4267] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 106.797353][ T47] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 107.446326][ T4260] chnl_net:caif_netlink_parms(): no params data found [ 107.537506][ T4249] chnl_net:caif_netlink_parms(): no params data found [ 107.679791][ T4251] chnl_net:caif_netlink_parms(): no params data found [ 107.743469][ T4260] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.758247][ T4260] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.771308][ T4260] device bridge_slave_0 entered promiscuous mode [ 107.790138][ T4260] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.800408][ T4260] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.812738][ T4260] device bridge_slave_1 entered promiscuous mode [ 107.838610][ T4250] chnl_net:caif_netlink_parms(): no params data found [ 107.892180][ T4248] chnl_net:caif_netlink_parms(): no params data found [ 107.960604][ T4249] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.969550][ T4249] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.978899][ T4249] device bridge_slave_0 entered promiscuous mode [ 108.004447][ T4260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.021475][ T4260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.046332][ T4249] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.060942][ T4249] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.075571][ T4249] device bridge_slave_1 entered promiscuous mode [ 108.199493][ T4260] team0: Port device team_slave_0 added [ 108.219176][ T4249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.258987][ T4260] team0: Port device team_slave_1 added [ 108.285109][ T4249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.311446][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.320680][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.330040][ T4250] device bridge_slave_0 entered promiscuous mode [ 108.341042][ T4251] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.353541][ T4251] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.362650][ T4251] device bridge_slave_0 entered promiscuous mode [ 108.378336][ T4251] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.386538][ T4251] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.399257][ T4251] device bridge_slave_1 entered promiscuous mode [ 108.446414][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.458670][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.468683][ T4250] device bridge_slave_1 entered promiscuous mode [ 108.506106][ T4248] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.520474][ T4248] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.535438][ T4248] device bridge_slave_0 entered promiscuous mode [ 108.546531][ T4249] team0: Port device team_slave_0 added [ 108.558425][ T4249] team0: Port device team_slave_1 added [ 108.585335][ T4260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.594517][ T4260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.625470][ T4260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.641320][ T4248] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.655523][ T4248] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.665897][ T4248] device bridge_slave_1 entered promiscuous mode [ 108.698282][ T4251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.713892][ T4251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.727009][ T4260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.738571][ T4260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.776163][ T4262] Bluetooth: hci2: command 0x0409 tx timeout [ 108.776550][ T4260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.831400][ T4250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.854840][ T4262] Bluetooth: hci0: command 0x0409 tx timeout [ 108.858936][ T4258] Bluetooth: hci4: command 0x0409 tx timeout [ 108.862336][ T4262] Bluetooth: hci1: command 0x0409 tx timeout [ 108.869496][ T4268] Bluetooth: hci3: command 0x0409 tx timeout [ 108.906194][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.917640][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.950861][ T4249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.965104][ T4250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.005971][ T4251] team0: Port device team_slave_0 added [ 109.018816][ T4251] team0: Port device team_slave_1 added [ 109.029334][ T4248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.042752][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.052965][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.085805][ T4249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.119467][ T4250] team0: Port device team_slave_0 added [ 109.146830][ T4248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.180976][ T4250] team0: Port device team_slave_1 added [ 109.257293][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.264735][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.303774][ T4251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.323026][ T4248] team0: Port device team_slave_0 added [ 109.353423][ T4260] device hsr_slave_0 entered promiscuous mode [ 109.363807][ T4260] device hsr_slave_1 entered promiscuous mode [ 109.385703][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.399166][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.436721][ T4251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.455135][ T4248] team0: Port device team_slave_1 added [ 109.472392][ T4249] device hsr_slave_0 entered promiscuous mode [ 109.481619][ T4249] device hsr_slave_1 entered promiscuous mode [ 109.493706][ T4249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.502121][ T4249] Cannot create hsr debugfs directory [ 109.538221][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.547159][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.585198][ T4250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.661056][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.669770][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.712864][ T4250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.757556][ T4248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.766889][ T4248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.810909][ T4248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.879551][ T4248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.886939][ T4248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.926434][ T4248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.983881][ T4251] device hsr_slave_0 entered promiscuous mode [ 109.995823][ T4251] device hsr_slave_1 entered promiscuous mode [ 110.003408][ T4251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.017544][ T4251] Cannot create hsr debugfs directory [ 110.082087][ T4248] device hsr_slave_0 entered promiscuous mode [ 110.089383][ T4248] device hsr_slave_1 entered promiscuous mode [ 110.097495][ T4248] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.105960][ T4248] Cannot create hsr debugfs directory [ 110.185647][ T4250] device hsr_slave_0 entered promiscuous mode [ 110.195537][ T4250] device hsr_slave_1 entered promiscuous mode [ 110.202872][ T4250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.215711][ T4250] Cannot create hsr debugfs directory [ 110.663789][ T4249] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 110.709575][ T4249] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 110.736541][ T4249] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 110.763101][ T4249] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 110.840671][ T4260] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 110.858796][ T4268] Bluetooth: hci2: command 0x041b tx timeout [ 110.905277][ T4260] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 110.922693][ T4260] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 110.934601][ T4268] Bluetooth: hci1: command 0x041b tx timeout [ 110.937796][ T4258] Bluetooth: hci0: command 0x041b tx timeout [ 110.947136][ T4262] Bluetooth: hci3: command 0x041b tx timeout [ 110.954064][ T4258] Bluetooth: hci4: command 0x041b tx timeout [ 111.001183][ T4260] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 111.040358][ T4250] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 111.091434][ T4250] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 111.141365][ T4250] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 111.155828][ T4250] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 111.266921][ T4248] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 111.321031][ T4248] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 111.362876][ T4251] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 111.384054][ T4248] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 111.402482][ T4248] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 111.418716][ T4251] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 111.449923][ T4249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.466201][ T4251] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 111.483335][ T4251] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 111.577372][ T4249] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.591650][ T4260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.604832][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.618416][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.653058][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.663797][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.680058][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.688357][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.712846][ T4260] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.726123][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 111.741635][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.751218][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.763193][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.776562][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.790215][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.798617][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.851037][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.863255][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.873758][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.883288][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.896838][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.910630][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.920873][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.929160][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.940145][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 111.949990][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 111.961494][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 111.998727][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.012341][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.067166][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 112.079261][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 112.090980][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 112.103319][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.118672][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.129215][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.143298][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.182756][ T4250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.203586][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 112.219252][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.232325][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.243318][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 112.257005][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 112.312323][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 112.323816][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 112.341671][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 112.354716][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 112.364093][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 112.373791][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 112.402604][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 112.434933][ T4248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.442943][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 112.465469][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 112.481348][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 112.494865][ T4250] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.520137][ T4251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.563752][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 112.586890][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 112.602417][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 112.623671][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 112.642454][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.651416][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.673139][ T4248] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.716357][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 112.730426][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 112.745895][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 112.772822][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.781199][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.800879][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 112.830963][ T4251] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.883285][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 112.893093][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 112.921050][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 112.944314][ T4258] Bluetooth: hci2: command 0x040f tx timeout [ 112.995818][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.016060][ T4258] Bluetooth: hci1: command 0x040f tx timeout [ 113.016111][ T4262] Bluetooth: hci3: command 0x040f tx timeout [ 113.022893][ T4258] Bluetooth: hci0: command 0x040f tx timeout [ 113.030086][ T4268] Bluetooth: hci4: command 0x040f tx timeout [ 113.033352][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.055905][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.065982][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 113.079155][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 113.090309][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 113.103121][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.116796][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 113.176596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 113.188054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.199210][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.208272][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.221066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.231636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.242322][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.250144][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.261069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 113.273447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 113.285216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.295691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.306621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.318412][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.325935][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.338551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 113.349923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 113.359814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.368699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.385051][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 113.397619][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 113.424052][ T4260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.461109][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 113.479263][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 113.490886][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 113.503951][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 113.519552][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 113.535576][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 113.571577][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 113.592398][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 113.606972][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 113.620570][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 113.631679][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 113.641883][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.652860][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 113.670045][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.683681][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 113.698411][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 113.709152][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 113.729873][ T4248] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.744560][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 113.779313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 113.790664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 113.801709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 113.817190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.826963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 113.839233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 113.856622][ T4249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.873188][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 113.895417][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 113.965982][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 114.025049][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 114.097515][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 114.132417][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 114.190711][ T4249] device veth0_vlan entered promiscuous mode [ 114.220196][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 114.245893][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 114.293503][ T4260] device veth0_vlan entered promiscuous mode [ 114.321734][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 114.345011][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 114.365624][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 114.398109][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 114.411757][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 114.424866][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 114.441176][ T4249] device veth1_vlan entered promiscuous mode [ 114.505982][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 114.540842][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 114.551656][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.564741][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 114.589984][ T4250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.605253][ T4260] device veth1_vlan entered promiscuous mode [ 114.661551][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 114.683312][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 114.702973][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 114.729369][ T4249] device veth0_macvtap entered promiscuous mode [ 114.759643][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 114.798567][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.806472][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 114.849673][ T4248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.886433][ T4249] device veth1_macvtap entered promiscuous mode [ 114.922359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 114.953155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 114.971444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.982156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 115.018370][ T4262] Bluetooth: hci2: command 0x0419 tx timeout [ 115.025735][ T4260] device veth0_macvtap entered promiscuous mode [ 115.063107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 115.079191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 115.097231][ T4262] Bluetooth: hci3: command 0x0419 tx timeout [ 115.103974][ T4262] Bluetooth: hci4: command 0x0419 tx timeout [ 115.105575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 115.112379][ T4258] Bluetooth: hci1: command 0x0419 tx timeout [ 115.126734][ T4257] Bluetooth: hci0: command 0x0419 tx timeout [ 115.141763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 115.164827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 115.198325][ T4251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.240351][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.272553][ T4260] device veth1_macvtap entered promiscuous mode [ 115.292927][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 115.333589][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 115.352492][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 115.363430][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 115.388561][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 115.407482][ T4248] device veth0_vlan entered promiscuous mode [ 115.426475][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.450169][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 115.461365][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 115.476133][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 115.485647][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 115.522134][ T4249] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.537880][ T4249] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.549435][ T4249] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.562041][ T4249] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.614935][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.630697][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.646912][ T4260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.658727][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 115.669909][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 115.685080][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 115.699610][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 115.742852][ T4248] device veth1_vlan entered promiscuous mode [ 115.780749][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.797260][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.811475][ T4260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.823464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 115.839952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 115.850360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 115.863553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 115.876882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 115.893204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 115.904278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 115.938120][ T4260] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.956722][ T4260] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.970297][ T4260] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.986073][ T4260] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.003993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 116.021839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 116.056150][ T4251] device veth0_vlan entered promiscuous mode [ 116.132824][ T4251] device veth1_vlan entered promiscuous mode [ 116.179649][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 116.198001][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 116.213568][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 116.225103][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 116.259514][ T4250] device veth0_vlan entered promiscuous mode [ 116.322620][ T4250] device veth1_vlan entered promiscuous mode [ 116.358242][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.371681][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.385711][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 116.418537][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 116.435410][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 116.446609][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 116.483663][ T4248] device veth0_macvtap entered promiscuous mode [ 116.521208][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 116.542787][ T4251] device veth0_macvtap entered promiscuous mode [ 116.587452][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 116.601189][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.611689][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.631061][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 116.643865][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 116.658084][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 116.669561][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 116.686209][ T4251] device veth1_macvtap entered promiscuous mode [ 116.705767][ T4248] device veth1_macvtap entered promiscuous mode [ 116.763995][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.783409][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.825894][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 116.839160][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 116.859347][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 116.870023][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 116.885826][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 116.905269][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.923401][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.940410][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.954632][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.984495][ T4248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.999446][ T4250] device veth0_macvtap entered promiscuous mode [ 117.020749][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.033565][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.050959][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.068049][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.091347][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.114304][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.135363][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.147166][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 117.163345][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 117.176835][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 117.198781][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 117.217329][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 117.232693][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.247088][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.261188][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.278280][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.298372][ T4248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.324007][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.324473][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.357574][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.363218][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.387027][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.414907][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.442038][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.498254][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.531882][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.559673][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 117.587493][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 117.602460][ T4332] vivid-000: disconnect [ 117.619543][ T4331] vivid-000: reconnect [ 117.649877][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.683429][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 117.717364][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 117.754344][ T4248] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.769808][ T4248] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.781714][ T4248] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.797979][ T4248] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.822086][ T4250] device veth1_macvtap entered promiscuous mode [ 117.842268][ T4251] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.859704][ T4251] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.879014][ T4251] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.902987][ T4251] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.138055][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.174547][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.202488][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.239228][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.262613][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.265982][ T4338] loop0: detected capacity change from 0 to 512 [ 118.278453][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.302928][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.331705][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.346258][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.361265][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.376084][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.389687][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.410101][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.426941][ T4338] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 118.432360][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.446723][ T4338] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.494393][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.507880][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.525870][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.544559][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.585453][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 118.623483][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 118.638511][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 118.649905][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 118.675423][ T27] audit: type=1800 audit(1744314916.173:2): pid=4338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1" name="file1" dev="overlay" ino=15 res=0 errno=0 [ 118.710790][ T4250] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.729721][ T4250] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.741192][ T4250] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.755294][ T4250] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.918471][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.943895][ T4260] EXT4-fs (loop0): unmounting filesystem. [ 118.944537][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.984106][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.011430][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 119.036006][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.119925][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 119.166004][ T4304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.220172][ T4304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.298418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 119.323185][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.393242][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.397464][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.483432][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.534507][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 119.556170][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 119.638662][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.681458][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.733082][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 120.024103][ T4360] device wlan0 entered promiscuous mode [ 120.291948][ T4367] loop3: detected capacity change from 0 to 1024 [ 120.421217][ T4367] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 120.728285][ T4248] EXT4-fs (loop3): unmounting filesystem. [ 120.762672][ T4378] loop2: detected capacity change from 0 to 4096 [ 120.956843][ T4386] capability: warning: `syz.3.21' uses deprecated v2 capabilities in a way that may be insecure [ 121.408975][ T4251] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 121.441444][ T4251] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 121.926549][ T4384] loop1: detected capacity change from 0 to 32768 [ 121.944313][ T22] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 121.963875][ T4384] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.22 (4384) [ 122.041063][ T4384] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 122.063708][ T4384] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 122.083105][ T4384] BTRFS info (device loop1): setting nodatacow, compression disabled [ 122.092918][ T4384] BTRFS info (device loop1): max_inline at 0 [ 122.109289][ T4384] BTRFS info (device loop1): enabling disk space caching [ 122.128980][ T4384] BTRFS info (device loop1): turning off barriers [ 122.141311][ T4384] BTRFS info (device loop1): turning on flush-on-commit [ 122.154469][ T22] usb 4-1: Using ep0 maxpacket: 8 [ 122.159903][ T4384] BTRFS info (device loop1): doing ref verification [ 122.168488][ T4393] loop0: detected capacity change from 0 to 32768 [ 122.170547][ T4384] BTRFS info (device loop1): force clearing of disk cache [ 122.185992][ T22] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 122.186082][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.231244][ T4393] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.24 (4393) [ 122.259060][ T22] usb 4-1: config 0 descriptor?? [ 122.264989][ T4384] BTRFS info (device loop1): enabling ssd optimizations [ 122.265041][ T4384] BTRFS info (device loop1): max_inline at 4096 [ 122.315868][ T4384] BTRFS info (device loop1): disk space caching is enabled [ 122.358399][ T4393] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 122.401615][ T4393] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 122.424550][ T4393] BTRFS info (device loop0): using free space tree [ 122.536080][ T22] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 122.639777][ T4384] BTRFS info (device loop1): rebuilding free space tree [ 122.672603][ T4393] BTRFS info (device loop0): enabling ssd optimizations [ 122.845580][ T4384] BTRFS info (device loop1): disabling free space tree [ 122.879766][ T4384] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 122.901791][ T4384] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 122.977973][ T4398] loop3: detected capacity change from 0 to 1024 [ 123.113055][ T4401] loop2: detected capacity change from 0 to 40427 [ 123.142112][ T4260] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 123.183568][ T4401] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff [ 123.261723][ T4401] F2FS-fs (loop2): invalid crc value [ 123.327140][ T22] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 123.363492][ T4401] F2FS-fs (loop2): Found nat_bits in checkpoint [ 123.383931][ T22] asix: probe of 4-1:0.0 failed with error -71 [ 123.485751][ T22] usb 4-1: USB disconnect, device number 2 [ 123.665641][ T4401] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 123.942952][ T4251] syz-executor: attempt to access beyond end of device [ 123.942952][ T4251] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 124.006108][ T4249] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 124.214597][ T4457] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 124.466632][ T4457] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.515500][ T4457] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.547439][ T4457] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 124.614396][ T4457] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 124.624118][ T4457] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.726002][ T4457] usb 5-1: config 0 descriptor?? [ 125.002556][ T4479] netlink: 104 bytes leftover after parsing attributes in process `syz.2.34'. [ 125.021122][ T4475] loop1: detected capacity change from 0 to 2048 [ 125.117982][ T4475] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 125.164507][ T4475] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.202572][ T4457] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 125.211499][ T4478] loop0: detected capacity change from 0 to 4096 [ 125.246629][ T4457] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 125.280010][ T4478] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 125.327178][ T27] audit: type=1800 audit(1744314922.833:3): pid=4475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.31" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 125.358567][ T4475] fs-verity: sha512 using implementation "sha512-avx2" [ 125.497128][ T4475] syz.1.31 (4475) used greatest stack depth: 19696 bytes left [ 125.587728][ T4488] loop2: detected capacity change from 0 to 8192 [ 125.648059][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 126.306047][ T4498] loop0: detected capacity change from 0 to 2048 [ 126.352612][ T4498] EXT4-fs: Ignoring removed mblk_io_submit option [ 126.434931][ T4458] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 126.459996][ T4498] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 126.626373][ T27] audit: type=1800 audit(1744314924.133:4): pid=4498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.43" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 126.679429][ T4498] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.43: bg 0: block 234: padding at end of block bitmap is not set [ 126.703281][ T4458] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 126.720593][ T4458] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 126.760386][ T4458] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 126.781217][ T27] audit: type=1804 audit(1744314924.283:5): pid=4509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.43" name="/newroot/10/file0/file1" dev="loop0" ino=15 res=1 errno=0 [ 126.781922][ T4498] EXT4-fs (loop0): Remounting filesystem read-only [ 126.820004][ T4458] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 126.860788][ T4458] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 126.899771][ T4458] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 126.917420][ T4458] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 126.936354][ T4458] usb 3-1: Product: syz [ 126.940877][ T4458] usb 3-1: Manufacturer: syz [ 126.956462][ T4498] syz.0.43 (4498) used greatest stack depth: 19648 bytes left [ 126.985573][ T4458] cdc_wdm 3-1:1.0: skipping garbage [ 127.004500][ T4458] cdc_wdm 3-1:1.0: skipping garbage [ 127.036718][ T4458] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 127.043466][ T4458] cdc_wdm 3-1:1.0: Unknown control protocol [ 127.123299][ T4260] EXT4-fs (loop0): unmounting filesystem. [ 127.478182][ T126] usb 5-1: USB disconnect, device number 2 [ 127.946376][ T4524] syz.1.52 uses obsolete (PF_INET,SOCK_PACKET) [ 128.771769][ T4538] netlink: 'syz.3.57': attribute type 1 has an invalid length. [ 128.930547][ T4538] bond1 (unregistering): Released all slaves [ 129.122967][ T4543] binder: 4542:4543 ioctl c0306201 0 returned -14 [ 129.158200][ T4516] loop4: detected capacity change from 0 to 40427 [ 129.200753][ T4544] binder: 4542:4544 ioctl c0306201 200000000480 returned -14 [ 129.246743][ T4516] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff [ 129.286403][ T4295] usb 3-1: USB disconnect, device number 2 [ 129.366670][ T4516] F2FS-fs (loop4): invalid crc value [ 129.430215][ T4516] F2FS-fs (loop4): Found nat_bits in checkpoint [ 129.697843][ T4516] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 129.884490][ T4458] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 130.102338][ T4541] loop1: detected capacity change from 0 to 40427 [ 130.132509][ T4458] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 130.132591][ T4541] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 130.160569][ T4250] syz-executor: attempt to access beyond end of device [ 130.160569][ T4250] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 130.166889][ T4458] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 130.181429][ T4541] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 130.211816][ T4458] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 130.226920][ T4458] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.253019][ T4552] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 130.303023][ T4541] F2FS-fs (loop1): Found nat_bits in checkpoint [ 130.424255][ T4457] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 130.531902][ T4541] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 130.541341][ T4541] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 130.609896][ T4458] usb 1-1: USB disconnect, device number 2 [ 130.639479][ T4457] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 130.662156][ T4457] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 130.700169][ T4457] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 130.773594][ T4457] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 130.883224][ T4457] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 130.922714][ T4457] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 130.990872][ T4457] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 131.037505][ T4457] usb 3-1: Product: syz [ 131.059504][ T4457] usb 3-1: Manufacturer: syz [ 131.111217][ T4457] cdc_wdm 3-1:1.0: skipping garbage [ 131.130540][ T4457] cdc_wdm 3-1:1.0: skipping garbage [ 131.190362][ T4457] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 131.217025][ T4457] cdc_wdm 3-1:1.0: Unknown control protocol [ 131.347847][ T4573] loop3: detected capacity change from 0 to 1024 [ 131.799598][ T4573] EXT4-fs (loop3): Test dummy encryption mode enabled [ 131.852468][ T4573] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 131.924276][ T4466] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 132.003720][ T4458] usb 3-1: USB disconnect, device number 3 [ 132.124256][ T4466] usb 5-1: Using ep0 maxpacket: 16 [ 132.144048][ T4466] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 132.170020][ T4466] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.221816][ T4466] usb 5-1: config 0 has no interface number 0 [ 132.261640][ T4248] EXT4-fs (loop3): unmounting filesystem. [ 132.274689][ T4466] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 132.296951][ T4466] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.317551][ T4466] usb 5-1: Product: syz [ 132.359661][ T4466] usb 5-1: Manufacturer: syz [ 132.382353][ T4466] usb 5-1: SerialNumber: syz [ 132.387054][ T4592] loop3: detected capacity change from 0 to 47 [ 132.402775][ T4592] ======================================================= [ 132.402775][ T4592] WARNING: The mand mount option has been deprecated and [ 132.402775][ T4592] and is ignored by this kernel. Remove the mand [ 132.402775][ T4592] option from the mount to silence this warning. [ 132.402775][ T4592] ======================================================= [ 132.416436][ T4466] usb 5-1: config 0 descriptor?? [ 132.793245][ T7] usb 5-1: USB disconnect, device number 3 [ 133.104260][ T4466] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 133.320731][ T4466] usb 3-1: Using ep0 maxpacket: 8 [ 133.344970][ T4466] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.405590][ T4466] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 133.434909][ T4466] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.484609][ T4466] usb 3-1: config 0 descriptor?? [ 133.506421][ T4466] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 133.546477][ T4268] block nbd1: Receive control failed (result -32) [ 133.563504][ T4596] block nbd1: shutting down sockets [ 134.719669][ T4466] gspca_vc032x: reg_w err -71 [ 134.726817][ T4466] vc032x: probe of 3-1:0.0 failed with error -71 [ 134.798639][ T4466] usb 3-1: USB disconnect, device number 4 [ 134.983245][ T4635] input: syz1 as /devices/virtual/input/input6 [ 136.004325][ T4458] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 136.246662][ T4458] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 136.283759][ T4458] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.326160][ T4458] usb 3-1: config 0 descriptor?? [ 136.346020][ T4661] device bridge0 entered promiscuous mode [ 136.395687][ T4661] bridge0: port 3(macsec1) entered blocking state [ 136.420540][ T4661] bridge0: port 3(macsec1) entered disabled state [ 136.482712][ T4661] device bridge0 left promiscuous mode [ 136.791572][ T4458] elan 0003:04F3:0755.0002: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 136.807216][ T4457] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 137.015533][ T4295] usb 3-1: USB disconnect, device number 5 [ 137.024443][ T4457] usb 1-1: Using ep0 maxpacket: 8 [ 137.028380][ T4675] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 137.050387][ T4457] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 137.090217][ T4457] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 137.122942][ T4457] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.161940][ T4457] usb 1-1: config 0 descriptor?? [ 137.401073][ T4457] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 137.665321][ T4295] usb 1-1: USB disconnect, device number 3 [ 137.674890][ C0] iowarrior 1-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 138.379981][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.390186][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.575079][ T4295] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 138.766334][ T4295] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 138.792676][ T4295] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 138.815918][ T4295] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 138.827715][ T4295] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 138.843714][ T4295] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 138.863304][ T4295] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 138.874284][ T4295] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 138.892974][ T4295] usb 5-1: Product: syz [ 138.901446][ T4295] usb 5-1: Manufacturer: syz [ 138.928398][ T4295] cdc_wdm 5-1:1.0: skipping garbage [ 138.952911][ T4295] cdc_wdm 5-1:1.0: skipping garbage [ 139.007181][ T4295] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 139.051922][ T4295] cdc_wdm 5-1:1.0: Unknown control protocol [ 139.118705][ T4724] vcan0: tx drop: invalid da for name 0x0000000006fffff9 [ 139.387948][ T4295] usb 5-1: USB disconnect, device number 4 [ 139.471366][ T4733] Bluetooth: MGMT ver 1.22 [ 140.577483][ T4466] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 140.590084][ T27] audit: type=1804 audit(1744314938.093:6): pid=4756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.130" name="bus" dev="ramfs" ino=35377 res=1 errno=0 [ 140.796724][ T4466] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.824271][ T4466] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 140.885323][ T4466] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 140.899222][ T4766] netlink: 'syz.0.134': attribute type 4 has an invalid length. [ 140.922227][ T4466] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.944860][ T4466] usb 3-1: Product: syz [ 140.952354][ T4466] usb 3-1: Manufacturer: syz [ 140.959195][ T4466] usb 3-1: SerialNumber: syz [ 141.040347][ T4771] netlink: 'syz.0.134': attribute type 4 has an invalid length. [ 141.197978][ T4466] usb 3-1: 0:2 : does not exist [ 141.222439][ T4466] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 141.335979][ T4466] usb 3-1: USB disconnect, device number 6 [ 141.424301][ T126] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 141.606597][ T4485] udevd[4485]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.645435][ T126] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 141.682905][ T126] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 141.744920][ T126] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 141.785009][ T126] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 141.810426][ T126] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 141.861550][ T126] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 141.884435][ T126] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 141.904286][ T126] usb 4-1: Product: syz [ 141.917527][ T126] usb 4-1: Manufacturer: syz [ 141.965773][ T126] cdc_wdm 4-1:1.0: skipping garbage [ 141.984228][ T126] cdc_wdm 4-1:1.0: skipping garbage [ 142.042063][ T126] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 142.057951][ T126] cdc_wdm 4-1:1.0: Unknown control protocol [ 142.272533][ T4795] netlink: 68 bytes leftover after parsing attributes in process `syz.0.144'. [ 142.440751][ T126] usb 4-1: USB disconnect, device number 3 [ 142.840329][ T4791] loop2: detected capacity change from 0 to 32768 [ 142.853754][ T4791] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.142 (4791) [ 142.944345][ T4791] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 142.983132][ T4791] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 143.012972][ T4791] BTRFS info (device loop2): force clearing of disk cache [ 143.056991][ T4791] BTRFS info (device loop2): setting nodatacow, compression disabled [ 143.087535][ T4791] BTRFS warning (device loop2): excessive commit interval 22877 [ 143.144463][ T4791] BTRFS info (device loop2): enabling auto defrag [ 143.201045][ T4791] BTRFS info (device loop2): max_inline at 0 [ 143.222731][ T4791] BTRFS info (device loop2): using free space tree [ 143.298259][ T4807] loop1: detected capacity change from 0 to 4096 [ 143.491653][ T4830] loop3: detected capacity change from 0 to 2048 [ 143.491734][ T4807] NILFS (loop1): invalid segment: Checksum error in segment payload [ 143.547067][ T4791] BTRFS info (device loop2): enabling ssd optimizations [ 143.556449][ T4830] Alternate GPT is invalid, using primary GPT. [ 143.563709][ T4830] loop3: p1 p2 p3 [ 143.576916][ T4807] NILFS (loop1): trying rollback from an earlier position [ 143.582271][ T4791] BTRFS info (device loop2): rebuilding free space tree [ 143.654042][ T3622] Alternate GPT is invalid, using primary GPT. [ 143.664325][ T4807] NILFS (loop1): recovery complete [ 143.686378][ T3622] loop3: p1 p2 p3 [ 143.721487][ T4833] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 144.186505][ T4330] udevd[4330]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 144.191684][ T4402] udevd[4402]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 144.263574][ T4485] udevd[4485]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 144.544865][ T4251] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 145.495714][ T4856] loop1: detected capacity change from 0 to 128 [ 145.598487][ T4856] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 145.618338][ T4856] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 145.685246][ T4864] device bond_slave_1 entered promiscuous mode [ 145.766097][ T4863] device bond_slave_1 left promiscuous mode [ 145.872946][ T4867] input: syz1 as /devices/virtual/input/input7 [ 145.994745][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 146.702426][ T27] audit: type=1326 audit(1744314944.203:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4879 comm="syz.2.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91dc78d169 code=0x7fc00000 [ 146.733616][ C1] vkms_vblank_simulate: vblank timer overrun [ 147.332132][ T27] audit: type=1326 audit(1744314944.833:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4879 comm="syz.2.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91dc78d169 code=0x7fc00000 [ 147.362479][ C1] vkms_vblank_simulate: vblank timer overrun [ 147.544521][ T4869] loop3: detected capacity change from 0 to 40427 [ 147.714342][ T4309] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 147.916479][ T4309] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.951171][ T4309] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.995049][ T4309] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 148.057492][ T4309] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 148.080950][ T4309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.132092][ T4309] usb 1-1: config 0 descriptor?? [ 148.612640][ T4309] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 148.665679][ T4309] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 149.054801][ T4906] loop4: detected capacity change from 0 to 32768 [ 149.072117][ T4906] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.178 (4906) [ 149.124804][ T4906] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 149.171150][ T4906] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 149.227756][ T4906] BTRFS info (device loop4): setting nodatacow, compression disabled [ 149.285400][ T4906] BTRFS info (device loop4): force zlib compression, level 3 [ 149.347924][ T4906] BTRFS info (device loop4): turning off barriers [ 149.380903][ T4906] BTRFS info (device loop4): max_inline at 6 [ 149.402673][ T4906] BTRFS info (device loop4): enabling ssd optimizations [ 149.430238][ T4906] BTRFS info (device loop4): using spread ssd allocation scheme [ 149.458234][ T4906] BTRFS info (device loop4): setting nodatacow [ 149.472482][ T4906] BTRFS info (device loop4): using free space tree [ 149.628269][ T4936] mmap: syz.2.187 (4936) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 149.808773][ T4906] BTRFS info (device loop4): scrub: started on devid 1 [ 149.861621][ T4906] BTRFS info (device loop4): left=0, need=98304, flags=2 [ 149.875479][ T4906] BTRFS info (device loop4): space_info SYSTEM has 0 free, is not full [ 149.886636][ T4906] BTRFS info (device loop4): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 149.907449][ T4906] BTRFS info (device loop4): global_block_rsv: size 1441792 reserved 1441792 [ 149.922344][ T4906] BTRFS info (device loop4): trans_block_rsv: size 0 reserved 0 [ 149.933601][ T4906] BTRFS info (device loop4): chunk_block_rsv: size 0 reserved 0 [ 149.944612][ T4906] BTRFS info (device loop4): delayed_block_rsv: size 0 reserved 0 [ 149.958821][ T4906] BTRFS info (device loop4): delayed_refs_rsv: size 0 reserved 0 [ 150.117900][ T4906] BTRFS info (device loop4): scrub: finished on devid 1 with status: 0 [ 150.261639][ T4250] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 150.355516][ T4955] tls_set_device_offload: netdev not found [ 150.764527][ T4453] usb 1-1: USB disconnect, device number 4 [ 151.572872][ T4981] loop2: detected capacity change from 0 to 256 [ 151.973754][ T4987] loop4: detected capacity change from 0 to 512 [ 152.018406][ T4987] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 152.115359][ T4987] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 152.170420][ T4987] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 152.226217][ T4987] EXT4-fs (loop4): 1 truncate cleaned up [ 152.240436][ T4996] loop1: detected capacity change from 0 to 2048 [ 152.257815][ T4987] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 152.296200][ T4997] loop2: detected capacity change from 0 to 256 [ 152.372124][ T4996] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 152.529713][ T5004] loop6: detected capacity change from 0 to 16384 [ 152.551007][ T4987] ================================================================== [ 152.559582][ T4987] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x909/0x1fa0 [ 152.570345][ T4987] Read of size 18446744073709551572 at addr ffff8880269b0850 by task syz.4.199/4987 [ 152.582544][ T4987] [ 152.585085][ T4987] CPU: 1 PID: 4987 Comm: syz.4.199 Not tainted 6.1.134-syzkaller #0 [ 152.597710][ T4987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 152.610220][ T4987] Call Trace: [ 152.613712][ T4987] [ 152.619151][ T4987] dump_stack_lvl+0x1e3/0x2cb [ 152.624230][ T4987] ? nf_tcp_handle_invalid+0x647/0x647 [ 152.630263][ T4987] ? panic+0x764/0x764 [ 152.635276][ T4987] ? _printk+0xd1/0x111 [ 152.640548][ T4987] ? __virt_addr_valid+0x17f/0x530 [ 152.646546][ T4987] ? __virt_addr_valid+0x17f/0x530 [ 152.653447][ T4987] print_report+0x15f/0x4f0 [ 152.658175][ T4987] ? __virt_addr_valid+0x17f/0x530 [ 152.663725][ T4987] ? __virt_addr_valid+0x17f/0x530 [ 152.669453][ T4987] ? __virt_addr_valid+0x45b/0x530 [ 152.676954][ T4987] ? __phys_addr+0xb6/0x170 [ 152.682110][ T4987] ? ext4_xattr_set_entry+0x909/0x1fa0 [ 152.688084][ T4987] kasan_report+0x136/0x160 [ 152.695295][ T4987] ? chown_common+0x5aa/0x900 [ 152.700985][ T4987] ? ext4_xattr_set_entry+0x909/0x1fa0 [ 152.707317][ T4987] ? ext4_xattr_set_entry+0x909/0x1fa0 [ 152.716304][ T4987] kasan_check_range+0x27f/0x290 [ 152.723317][ T4987] ? ext4_xattr_set_entry+0x909/0x1fa0 [ 152.730536][ T4987] memmove+0x25/0x60 [ 152.737329][ T4987] ext4_xattr_set_entry+0x909/0x1fa0 [ 152.743142][ T4987] ? ext4_xattr_inode_lookup_create+0x1ff0/0x1ff0 [ 152.750995][ T4987] ? ext4_xattr_block_set+0x7f4/0x3820 [ 152.758793][ T4987] ? kmemdup+0x41/0x60 [ 152.763282][ T4987] ? memcpy+0x3c/0x60 [ 152.767586][ T4987] ext4_xattr_block_set+0x97e/0x3820 [ 152.775764][ T4987] ? ext4_get_inode_loc+0x190/0x190 [ 152.781515][ T4987] ? ext4_xattr_block_find+0x2b0/0x2b0 [ 152.787465][ T4987] ? xattr_find_entry+0x24b/0x310 [ 152.792803][ T4987] ? ext4_xattr_block_find+0x23d/0x2b0 [ 152.798708][ T4987] ext4_expand_extra_isize_ea+0x10eb/0x1c40 [ 152.804851][ T4987] ? ext4_xattr_set+0x3d0/0x3d0 [ 152.811237][ T4987] ? rwsem_write_trylock+0x166/0x210 [ 152.819002][ T4987] ? clear_nonspinnable+0x60/0x60 [ 152.825267][ T4987] ? ext4_reserve_inode_write+0x2b3/0x360 [ 152.832938][ T4987] ? dquot_initialize_needed+0x128/0x320 [ 152.839427][ T4987] __ext4_expand_extra_isize+0x302/0x400 [ 152.845439][ T4987] __ext4_mark_inode_dirty+0x54f/0x920 [ 152.851617][ T4987] ? __lock_acquire+0x1f80/0x1f80 [ 152.858548][ T4987] ? ext4_blocks_for_truncate+0x270/0x270 [ 152.865193][ T4987] ? ext4_journal_check_start+0x179/0x240 [ 152.871808][ T4987] ? ext4_dirty_inode+0x8b/0x100 [ 152.878468][ T4987] ? __ext4_journal_start_sb+0x1f1/0x410 [ 152.884697][ T4987] ext4_dirty_inode+0xbf/0x100 [ 152.891091][ T4987] ? __ext4_expand_extra_isize+0x400/0x400 [ 152.897952][ T4987] __mark_inode_dirty+0x331/0xf80 [ 152.903303][ T4987] ext4_setattr+0x755/0x1a00 [ 152.908900][ T4987] ? evm_inode_setattr+0xfc/0x820 [ 152.914154][ T4987] ? bpf_lsm_inode_setattr+0x5/0x10 [ 152.920406][ T4987] ? ext4_write_inode+0x740/0x740 [ 152.926185][ T4987] notify_change+0xce3/0xfc0 [ 152.931319][ T4987] chown_common+0x5aa/0x900 [ 152.936446][ T4987] ? __ia32_sys_chmod+0x180/0x180 [ 152.942611][ T4987] ? rcu_read_lock_any_held+0xb3/0x160 [ 152.948455][ T4987] ? __mnt_want_write+0x222/0x2a0 [ 152.954756][ T4987] do_fchownat+0x169/0x240 [ 152.959696][ T4987] ? chown_common+0x900/0x900 [ 152.965256][ T4987] ? syscall_enter_from_user_mode+0x2e/0x230 [ 152.972149][ T4987] ? lockdep_hardirqs_on+0x94/0x130 [ 152.978669][ T4987] __x64_sys_lchown+0x81/0x90 [ 152.983779][ T4987] do_syscall_64+0x3b/0xb0 [ 152.988809][ T4987] ? clear_bhb_loop+0x45/0xa0 [ 152.995500][ T4987] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 153.002098][ T4987] RIP: 0033:0x7f4765d8d169 [ 153.007281][ T4987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.029507][ T4987] RSP: 002b:00007f4766cc9038 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 153.038608][ T4987] RAX: ffffffffffffffda RBX: 00007f4765fa5fa0 RCX: 00007f4765d8d169 [ 153.047592][ T4987] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 153.056866][ T4987] RBP: 00007f4765e0e730 R08: 0000000000000000 R09: 0000000000000000 [ 153.065519][ T4987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.075669][ T4987] R13: 0000000000000000 R14: 00007f4765fa5fa0 R15: 00007fffdc241bd8 [ 153.084734][ T4987] [ 153.088478][ T4987] [ 153.091172][ T4987] Allocated by task 4987: [ 153.097883][ T4987] kasan_set_track+0x4b/0x70 [ 153.103913][ T4987] __kasan_kmalloc+0x97/0xb0 [ 153.110049][ T4987] __kmalloc_node_track_caller+0xb1/0x220 [ 153.116504][ T4987] kmemdup+0x26/0x60 [ 153.120951][ T4987] ext4_xattr_block_set+0x7f4/0x3820 [ 153.126600][ T4987] ext4_expand_extra_isize_ea+0x10eb/0x1c40 [ 153.133325][ T4987] __ext4_expand_extra_isize+0x302/0x400 [ 153.139436][ T4987] __ext4_mark_inode_dirty+0x54f/0x920 [ 153.145073][ T4987] ext4_dirty_inode+0xbf/0x100 [ 153.151909][ T4987] __mark_inode_dirty+0x331/0xf80 [ 153.158528][ T4987] ext4_setattr+0x755/0x1a00 [ 153.163859][ T4987] notify_change+0xce3/0xfc0 [ 153.169215][ T4987] chown_common+0x5aa/0x900 [ 153.174921][ T4987] do_fchownat+0x169/0x240 [ 153.179546][ T4987] __x64_sys_lchown+0x81/0x90 [ 153.184680][ T4987] do_syscall_64+0x3b/0xb0 [ 153.193629][ T4987] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 153.200749][ T4987] [ 153.203357][ T4987] The buggy address belongs to the object at ffff8880269b0800 [ 153.203357][ T4987] which belongs to the cache kmalloc-1k of size 1024 [ 153.222229][ T4987] The buggy address is located 80 bytes inside of [ 153.222229][ T4987] 1024-byte region [ffff8880269b0800, ffff8880269b0c00) [ 153.238822][ T4987] [ 153.241412][ T4987] The buggy address belongs to the physical page: [ 153.248764][ T4987] page:ffffea00009a6c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x269b0 [ 153.260512][ T4987] head:ffffea00009a6c00 order:3 compound_mapcount:0 compound_pincount:0 [ 153.270221][ T4987] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 153.281047][ T4987] raw: 00fff00000010200 ffffea000068be00 dead000000000002 ffff888017c41dc0 [ 153.290623][ T4987] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 153.301006][ T4987] page dumped because: kasan: bad access detected [ 153.308829][ T4987] page_owner tracks the page as allocated [ 153.317400][ T4987] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2000(__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 75, tgid 75 (kworker/u4:4), ts 11359873282, free_ts 0 [ 153.339924][ T4987] post_alloc_hook+0x18d/0x1b0 [ 153.345404][ T4987] get_page_from_freelist+0x3731/0x38d0 [ 153.353969][ T4987] __alloc_pages+0x28d/0x770 [ 153.358886][ T4987] alloc_slab_page+0x59/0x150 [ 153.364466][ T4987] new_slab+0x84/0x2d0 [ 153.368669][ T4987] ___slab_alloc+0xc20/0x1270 [ 153.374169][ T4987] __kmem_cache_alloc_node+0x19f/0x260 [ 153.380493][ T4987] kmalloc_node_trace+0x23/0xe0 [ 153.385889][ T4987] blk_mq_alloc_and_init_hctx+0x18b/0xd60 [ 153.394144][ T4987] blk_mq_realloc_hw_ctxs+0x194/0x4a0 [ 153.402231][ T4987] blk_mq_init_allocated_queue+0x51c/0x1710 [ 153.410841][ T4987] blk_mq_init_queue+0xa1/0x120 [ 153.418719][ T4987] scsi_alloc_sdev+0x74b/0xb30 [ 153.423790][ T4987] scsi_probe_and_add_lun+0x1cf/0x4b70 [ 153.430276][ T4987] __scsi_scan_target+0x1fc/0x10b0 [ 153.437132][ T4987] scsi_scan_host_selected+0x37a/0x690 [ 153.443640][ T4987] page_owner free stack trace missing [ 153.449600][ T4987] [ 153.452215][ T4987] Memory state around the buggy address: [ 153.459180][ T4987] ffff8880269b0700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 153.467921][ T4987] ffff8880269b0780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 153.478066][ T4987] >ffff8880269b0800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 153.486759][ T4987] ^ [ 153.494130][ T4987] ffff8880269b0880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 153.502854][ T4987] ffff8880269b0900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 153.511398][ T4987] ================================================================== [ 153.694340][ T4987] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 153.702129][ T4987] CPU: 0 PID: 4987 Comm: syz.4.199 Not tainted 6.1.134-syzkaller #0 [ 153.710411][ T4987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 153.722285][ T4987] Call Trace: [ 153.725705][ T4987] [ 153.729020][ T4987] dump_stack_lvl+0x1e3/0x2cb [ 153.735447][ T4987] ? nf_tcp_handle_invalid+0x647/0x647 [ 153.742287][ T4987] ? panic+0x764/0x764 [ 153.747071][ T4987] ? preempt_schedule_common+0xa6/0xd0 [ 153.755904][ T4987] ? vscnprintf+0x59/0x80 [ 153.760997][ T4987] panic+0x318/0x764 [ 153.765069][ T4987] ? check_panic_on_warn+0x1d/0xa0 [ 153.770342][ T4987] ? memcpy_page_flushcache+0xfc/0xfc [ 153.778119][ T4987] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 153.785319][ T4987] ? _raw_spin_unlock+0x40/0x40 [ 153.791272][ T4987] check_panic_on_warn+0x7e/0xa0 [ 153.796726][ T4987] ? ext4_xattr_set_entry+0x909/0x1fa0 [ 153.803513][ T4987] end_report+0x66/0x110 [ 153.808664][ T4987] kasan_report+0x143/0x160 [ 153.814212][ T4987] ? chown_common+0x5aa/0x900 [ 153.820946][ T4987] ? ext4_xattr_set_entry+0x909/0x1fa0 [ 153.827699][ T4987] ? ext4_xattr_set_entry+0x909/0x1fa0 [ 153.833756][ T4987] kasan_check_range+0x27f/0x290 [ 153.839575][ T4987] ? ext4_xattr_set_entry+0x909/0x1fa0 [ 153.845327][ T4987] memmove+0x25/0x60 [ 153.850315][ T4987] ext4_xattr_set_entry+0x909/0x1fa0 [ 153.857370][ T4987] ? ext4_xattr_inode_lookup_create+0x1ff0/0x1ff0 [ 153.865036][ T4987] ? ext4_xattr_block_set+0x7f4/0x3820 [ 153.874514][ T4987] ? kmemdup+0x41/0x60 [ 153.880870][ T4987] ? memcpy+0x3c/0x60 [ 153.885229][ T4987] ext4_xattr_block_set+0x97e/0x3820 [ 153.893929][ T4987] ? ext4_get_inode_loc+0x190/0x190 [ 153.902085][ T4987] ? ext4_xattr_block_find+0x2b0/0x2b0 [ 153.907835][ T4987] ? xattr_find_entry+0x24b/0x310 [ 153.917391][ T4987] ? ext4_xattr_block_find+0x23d/0x2b0 [ 153.924347][ T4987] ext4_expand_extra_isize_ea+0x10eb/0x1c40 [ 153.932067][ T4987] ? ext4_xattr_set+0x3d0/0x3d0 [ 153.939125][ T4987] ? rwsem_write_trylock+0x166/0x210 [ 153.945258][ T4987] ? clear_nonspinnable+0x60/0x60 [ 153.952468][ T4987] ? ext4_reserve_inode_write+0x2b3/0x360 [ 153.960773][ T4987] ? dquot_initialize_needed+0x128/0x320 [ 153.967063][ T4987] __ext4_expand_extra_isize+0x302/0x400 [ 153.973735][ T4987] __ext4_mark_inode_dirty+0x54f/0x920 [ 153.981879][ T4987] ? __lock_acquire+0x1f80/0x1f80 [ 153.987733][ T4987] ? ext4_blocks_for_truncate+0x270/0x270 [ 153.994568][ T4987] ? ext4_journal_check_start+0x179/0x240 [ 154.001306][ T4987] ? ext4_dirty_inode+0x8b/0x100 [ 154.006825][ T4987] ? __ext4_journal_start_sb+0x1f1/0x410 [ 154.013686][ T4987] ext4_dirty_inode+0xbf/0x100 [ 154.019427][ T4987] ? __ext4_expand_extra_isize+0x400/0x400 [ 154.025873][ T4987] __mark_inode_dirty+0x331/0xf80 [ 154.031633][ T4987] ext4_setattr+0x755/0x1a00 [ 154.036336][ T4987] ? evm_inode_setattr+0xfc/0x820 [ 154.041913][ T4987] ? bpf_lsm_inode_setattr+0x5/0x10 [ 154.050226][ T4987] ? ext4_write_inode+0x740/0x740 [ 154.056325][ T4987] notify_change+0xce3/0xfc0 [ 154.061686][ T4987] chown_common+0x5aa/0x900 [ 154.066425][ T4987] ? __ia32_sys_chmod+0x180/0x180 [ 154.077418][ T4987] ? rcu_read_lock_any_held+0xb3/0x160 [ 154.083307][ T4987] ? __mnt_want_write+0x222/0x2a0 [ 154.091934][ T4987] do_fchownat+0x169/0x240 [ 154.097412][ T4987] ? chown_common+0x900/0x900 [ 154.104457][ T4987] ? syscall_enter_from_user_mode+0x2e/0x230 [ 154.113463][ T4987] ? lockdep_hardirqs_on+0x94/0x130 [ 154.120876][ T4987] __x64_sys_lchown+0x81/0x90 [ 154.125935][ T4987] do_syscall_64+0x3b/0xb0 [ 154.132626][ T4987] ? clear_bhb_loop+0x45/0xa0 [ 154.139503][ T4987] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 154.146224][ T4987] RIP: 0033:0x7f4765d8d169 [ 154.151372][ T4987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.177400][ T4987] RSP: 002b:00007f4766cc9038 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 154.186825][ T4987] RAX: ffffffffffffffda RBX: 00007f4765fa5fa0 RCX: 00007f4765d8d169 [ 154.196290][ T4987] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 154.204905][ T4987] RBP: 00007f4765e0e730 R08: 0000000000000000 R09: 0000000000000000 [ 154.216774][ T4987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.225352][ T4987] R13: 0000000000000000 R14: 00007f4765fa5fa0 R15: 00007fffdc241bd8 [ 154.236675][ T4987] [ 154.240665][ T4987] Kernel Offset: disabled [ 154.245359][ T4987] Rebooting in 86400 seconds..