last executing test programs: 9.423001555s ago: executing program 3 (id=326): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x42981, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x80) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'], 0x1, 0x274, &(0x7f0000000000)="$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") r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r4, 0x29, 0x1a, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 9.380293095s ago: executing program 4 (id=328): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000001010102000000000ec00000000000090400198000000200800200000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000041}, 0x4884) 9.099602684s ago: executing program 0 (id=329): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x406, &(0x7f0000000280)={[{@sysvgroups}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@resgid}, {@dax}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") timerfd_create(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000600)={0x0, 0x8001, 0x9}, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x1, 0x2, &(0x7f0000000040)=0x9}) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r3, &(0x7f0000000000)="7800000018001f05b9409b0dffff000d0203be040205060506014007040012000f000000fac8388827a685a168d9a4c6040045653600648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902003a03", 0x5a, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000080)) 9.054765374s ago: executing program 4 (id=330): socket$inet6_udplite(0xa, 0x2, 0x88) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 7.98109859s ago: executing program 3 (id=335): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = io_uring_setup(0x7bda, &(0x7f0000000080)={0x0, 0xc44c, 0x0, 0x1000003, 0xfffffffe}) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x18, 0x20000009, r1) 7.569859408s ago: executing program 3 (id=338): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406a059000000000170001090224000100000000090400000103000000092100400001220b0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x22, 0xb, {[@local=@item_4={0x3, 0x2, 0x7, "96e1360f"}, @local=@item_012={0x0, 0x2, 0x4}, @global=@item_4={0x3, 0x1, 0x5, "fef7f28c"}]}}, 0x0}, 0x0) 7.073756346s ago: executing program 0 (id=341): openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x28a02, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000010000104000000000000000000480000", @ANYRES32=r2, @ANYBLOB="ae"], 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="d0187f0008021100000108041100000050505050505020000f", @ANYRES8=r0], 0x3c) 6.153888323s ago: executing program 2 (id=344): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019140)={0x11, 0x4, 0x0, &(0x7f0000019100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x7, r5, 0x1, 0x70bd2a, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) unshare(0x680) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000021c0)={'veth0_virt_wifi\x00', &(0x7f0000002180)=@ethtool_perm_addr}) r7 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000"], 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000019080)=@base={0x1f, 0x10000203, 0x4, 0xfffffffe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) gettid() ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x4, 0xd, 0x0, 0x1, 0x10, @local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x1, 0x4, 0xff}}) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) 5.893732482s ago: executing program 1 (id=346): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002207000000b268"], 0x0}, 0x0) 5.043961079s ago: executing program 4 (id=347): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000494000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001e4000/0x2000)=nil) 5.032821669s ago: executing program 2 (id=348): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x50, &(0x7f00000001c0)={[{@jqfmt_vfsv1}, {@stripe={'stripe', 0x3d, 0x4}}, {@dioread_nolock}, {@mblk_io_submit}, {@nogrpid}, {@usrjquota}]}, 0x1, 0x3ed, &(0x7f0000001240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xff10, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000080)={0x17c04, r0, 0x100100fff, 0x100100001, 0x0, 0x800}) 4.881884358s ago: executing program 0 (id=349): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001580)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 4.737815458s ago: executing program 0 (id=350): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mremap(&(0x7f0000494000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001e4000/0x2000)=nil) mlock(&(0x7f00003a1000/0x1000)=nil, 0x1000) remap_file_pages(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x98d1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}]]}, 0x44}}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r3}, 0x38) 4.455221017s ago: executing program 1 (id=351): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) unshare(0x2c060000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x6000, 0x0, 0x10}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@enum={0x3, 0x2, 0x0, 0xf, 0x9000000, [{0x5}, {0xd}]}, @volatile]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 2.758305661s ago: executing program 0 (id=352): unshare(0x22020600) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x7ff) 2.68561027s ago: executing program 2 (id=353): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000580)={'syz0\x00', {0x6ec6, 0x6, 0x4005, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5335, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x4, 0xf5, 0x9, 0x39, 0x747d5a13, 0x2, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x6, 0x5, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x623b, 0x0, 0x0, 0x1fc, 0x80008000, 0x1, 0x3, 0xd, 0x4, 0xba51, 0x8da8, 0x2, 0x200, 0x4, 0x8, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0xffffffff, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x1, 0x9, 0x7, 0x1], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffa, 0x8, 0x7fff, 0x72c, 0xc32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x40001, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x2, 0x0, 0x4, 0x0, 0x1, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x7ff, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x7], [0x401, 0xc584, 0xffff, 0xcd2, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x7, 0xffffffff, 0xfffffff8, 0x2, 0x10001, 0x1, 0xfffffff9, 0xe57, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x7, 0x2, 0x5, 0x5, 0x9, 0x9, 0x48, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x5, 0x8, 0x8001, 0xbf23, 0x6, 0x9, 0x8, 0x0, 0x403, 0x9, 0x8, 0x10000, 0x5, 0x5, 0x5, 0xee, 0x20009, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0xd, 0x5], [0x1090, 0x7fff, 0x3, 0x4, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x40763, 0x9, 0x401, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x2, 0x4, 0xe47, 0x3, 0x3, 0x400004, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x2, 0xa80a, 0x6, 0x4, 0x8, 0x8a8, 0x2, 0x1000040, 0x7, 0x2, 0x3, 0x4, 0x4, 0x0, 0x0, 0x4, 0x2, 0xfffffff8, 0x401, 0x1, 0x4, 0x200, 0x4edf, 0xfffffffd, 0x5, 0x14e2, 0x2, 0xe, 0x7f, 0x4000004, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) read(r1, &(0x7f0000000100)=""/78, 0x4e) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 2.68515271s ago: executing program 3 (id=354): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000800)={0x0, {0x1, 0x0, 0x4, 0x3, 0x3}}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 1.836294737s ago: executing program 0 (id=355): open(&(0x7f0000000300)='./file1/file0\x00', 0x64842, 0x86) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x82, 0x0, 0x9, 0x2}, 0x33fe0}, 0x1, 0x7}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x27b8, 0x1ed, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x2, "438ba30b"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) umount2(&(0x7f0000000140)='./file1\x00', 0xe) 1.789925407s ago: executing program 1 (id=356): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x2c, r1, 0x1, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_CONFIG={0x4}]}, 0x2c}}, 0x0) 1.649851467s ago: executing program 1 (id=357): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000100)) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x207, 0x161a81) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 1.582406787s ago: executing program 3 (id=358): iopl(0x3) fchdir(0xffffffffffffffff) r0 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmdt(r0) r1 = shmget(0x1, 0x1000, 0x400, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000300)=""/119) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000004000000e47f00000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000f5e8b742f6259c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r2}, 0x10) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r5, 0x5412, 0x0) setns(r4, 0x24020000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x400000) io_setup(0x2007, &(0x7f0000000200)=0x0) r8 = eventfd2(0xe2f4, 0x80801) io_submit(r7, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1, r8}]) dup2(r6, r8) shutdown(r6, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x3000040, &(0x7f0000000440)=ANY=[], 0x83, 0x1501, &(0x7f0000002180)="$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") openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) dup(r4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x1, &(0x7f0000000780)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) eventfd2(0x4, 0x80800) 1.558893036s ago: executing program 1 (id=359): openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x28a02, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000010000104000000000000000000480000", @ANYRES32=r2, @ANYBLOB="ae"], 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="d0187f0008021100000108041100000050505050505020000f", @ANYRES8=r0], 0x3c) 1.190951515s ago: executing program 2 (id=360): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019140)={0x11, 0x4, 0x0, &(0x7f0000019100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x7, r5, 0x1, 0x70bd2a, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) unshare(0x680) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000021c0)={'veth0_virt_wifi\x00', &(0x7f0000002180)=@ethtool_perm_addr}) r7 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000"], 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x4, 0xd, 0x0, 0x1, 0x10, @local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x1, 0x4, 0xff}}) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) 1.122914805s ago: executing program 4 (id=361): r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f000000f240)=[{{0x0, 0x0, 0x0}, 0x44d}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/237, 0xed}, 0x1}], 0x2, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x21, 0x0) 934.432704ms ago: executing program 4 (id=362): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000004280)={0x0, 0x0, &(0x7f0000004240)={&(0x7f0000000040)={0x38, 0x3, 0x8, 0x3, 0x0, 0x0, {0x7}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DCCP_REQUEST={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 185.647462ms ago: executing program 3 (id=363): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mremap(&(0x7f0000494000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001e4000/0x2000)=nil) mlock(&(0x7f00003a1000/0x1000)=nil, 0x1000) remap_file_pages(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x98d1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}]]}, 0x44}}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r3}, 0x38) 185.242011ms ago: executing program 1 (id=364): syz_read_part_table(0x1050, &(0x7f0000000000)="$eJzsz82pAkEQBODav8e8g5mYgmAOYiQmsCdPRmIURmBKIzKrG4GI8H2X7ilqDh2+q89m99ovbfwtzzHJ/ZZkPyW11no+rf+GLv1zlmnNxqQkU590S3L4n9syZ5sM72Zp7eP1g5cBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwM94BAAA//8okQpo") setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x0, &(0x7f0000000480)}, 0x10) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x10) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 183.768961ms ago: executing program 4 (id=365): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1000000000, 0x0, &(0x7f0000000040)=0x1) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"4ed53c21a0e371d637458b309525bd9b08ae8adaf6e958866bdd1aaa6b19d9ce"}) lstat(&(0x7f0000000100)='./file0\x00', 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$key(0xf, 0x3, 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x28011, r3, 0x0) 112.211331ms ago: executing program 2 (id=366): unshare(0x22020600) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x7ff) 0s ago: executing program 2 (id=367): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, 0x0, 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x9c) rename(&(0x7f00000000c0)='\x00', &(0x7f0000000140)='./file0\x00') setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x310, 0x25, 0x148, 0x310, 0x60, 0x3e0, 0x2a8, 0x2a8, 0x3e0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2c8, 0x310, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@socket2={{0x28}, 0x3}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4d8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='cgroup.controllers\x00', 0x275a, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000100)="d6", 0x1}], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a80)=ANY=[@ANYBLOB='8', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) socket(0x21, 0x2, 0x67e) r5 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000f40000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r7}, 0x10) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) socket$key(0xf, 0x3, 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.2' (ED25519) to the list of known hosts. [ 58.631312][ T4155] cgroup: Unknown subsys name 'net' [ 58.770360][ T4155] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.242190][ T4155] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 62.120892][ T4178] chnl_net:caif_netlink_parms(): no params data found [ 62.159867][ T4167] chnl_net:caif_netlink_parms(): no params data found [ 62.190255][ T4166] chnl_net:caif_netlink_parms(): no params data found [ 62.253588][ T4173] chnl_net:caif_netlink_parms(): no params data found [ 62.358000][ T4166] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.365200][ T4166] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.374040][ T4166] device bridge_slave_0 entered promiscuous mode [ 62.412079][ T4166] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.419356][ T4166] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.430473][ T4166] device bridge_slave_1 entered promiscuous mode [ 62.438328][ T4178] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.445619][ T4178] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.453604][ T4178] device bridge_slave_0 entered promiscuous mode [ 62.461702][ T4167] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.469266][ T4167] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.477781][ T4167] device bridge_slave_0 entered promiscuous mode [ 62.503995][ T4178] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.511113][ T4178] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.519701][ T4178] device bridge_slave_1 entered promiscuous mode [ 62.526826][ T4167] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.535608][ T4167] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.543778][ T4167] device bridge_slave_1 entered promiscuous mode [ 62.585030][ T4177] chnl_net:caif_netlink_parms(): no params data found [ 62.601565][ T4173] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.608907][ T4173] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.617109][ T4173] device bridge_slave_0 entered promiscuous mode [ 62.627331][ T4166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.649902][ T4167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.664010][ T4173] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.671095][ T4173] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.679504][ T4173] device bridge_slave_1 entered promiscuous mode [ 62.688470][ T4166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.699526][ T4178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.719189][ T4167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.746071][ T4178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.801215][ T4173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.822711][ T4166] team0: Port device team_slave_0 added [ 62.835272][ T4167] team0: Port device team_slave_0 added [ 62.842761][ T4173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.854738][ T4178] team0: Port device team_slave_0 added [ 62.861882][ T4166] team0: Port device team_slave_1 added [ 62.877081][ T4167] team0: Port device team_slave_1 added [ 62.898223][ T4178] team0: Port device team_slave_1 added [ 62.925711][ T4177] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.932801][ T4177] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.941136][ T4177] device bridge_slave_0 entered promiscuous mode [ 62.960149][ T4173] team0: Port device team_slave_0 added [ 62.980726][ T4177] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.988175][ T4177] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.996244][ T4177] device bridge_slave_1 entered promiscuous mode [ 63.013420][ T4173] team0: Port device team_slave_1 added [ 63.020006][ T4178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.027013][ T4178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.053004][ T4178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.065352][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.072315][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.098343][ T4166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.110274][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.117348][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.144082][ T4167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.171658][ T4178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.178829][ T4178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.204885][ T4178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.224557][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.231524][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.258503][ T4166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.270166][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.277472][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.303767][ T4167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.349922][ T4177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.359727][ T4173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.366781][ T4173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.393636][ T4173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.406724][ T4173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.413962][ T4173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.440003][ T4173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.468615][ T4177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.493151][ T4166] device hsr_slave_0 entered promiscuous mode [ 63.500031][ T4166] device hsr_slave_1 entered promiscuous mode [ 63.532959][ T4178] device hsr_slave_0 entered promiscuous mode [ 63.539906][ T4178] device hsr_slave_1 entered promiscuous mode [ 63.546687][ T4178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.555123][ T4178] Cannot create hsr debugfs directory [ 63.571269][ T4167] device hsr_slave_0 entered promiscuous mode [ 63.578528][ T4167] device hsr_slave_1 entered promiscuous mode [ 63.585307][ T4167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.592860][ T4167] Cannot create hsr debugfs directory [ 63.610262][ T4177] team0: Port device team_slave_0 added [ 63.646154][ T4177] team0: Port device team_slave_1 added [ 63.674230][ T4173] device hsr_slave_0 entered promiscuous mode [ 63.681102][ T4173] device hsr_slave_1 entered promiscuous mode [ 63.688060][ T4173] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.695750][ T4173] Cannot create hsr debugfs directory [ 63.779227][ T4177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.786456][ T4177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.794575][ T4180] Bluetooth: hci0: command 0x0409 tx timeout [ 63.812652][ T1107] Bluetooth: hci3: command 0x0409 tx timeout [ 63.825226][ T4177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.825359][ T4180] Bluetooth: hci1: command 0x0409 tx timeout [ 63.842063][ T4177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.849432][ T4177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.851592][ T4180] Bluetooth: hci2: command 0x0409 tx timeout [ 63.875806][ T4177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.883424][ T4180] Bluetooth: hci4: command 0x0409 tx timeout [ 64.034488][ T4177] device hsr_slave_0 entered promiscuous mode [ 64.041767][ T4177] device hsr_slave_1 entered promiscuous mode [ 64.048432][ T4177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.056623][ T4177] Cannot create hsr debugfs directory [ 64.193675][ T4166] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.205376][ T4166] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.224450][ T4166] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.234215][ T4166] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.282289][ T4178] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.297352][ T4178] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.307657][ T4178] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.321903][ T4178] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.396797][ T4173] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.421295][ T4173] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.430943][ T4173] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.462894][ T4173] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.481723][ T4166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.551777][ T4178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.559921][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.570535][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.583969][ T4167] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.596841][ T4166] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.620788][ T4167] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.631431][ T4167] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.661428][ T4167] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.674795][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.685190][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.709391][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.721109][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.731105][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.738376][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.751079][ T4178] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.762422][ T4177] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.772789][ T4177] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.782921][ T4177] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.792617][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.802840][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.813973][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.822380][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.829573][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.842945][ T4177] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.868799][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.877657][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.890422][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.897522][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.905778][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.915276][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.924420][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.934879][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.952003][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.960389][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.995158][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.004675][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.013101][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.020201][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.029125][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.052922][ T4166] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.064450][ T4166] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.089546][ T4173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.098219][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.109562][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.118370][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.127800][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.136670][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.146629][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.155550][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.165101][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.175115][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.184031][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.191810][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.239639][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.249602][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.258787][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.269309][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.279985][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.289551][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.330208][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.339185][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.350132][ T4173] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.376743][ T4167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.416026][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.428732][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.458279][ T4218] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.465750][ T4218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.494460][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.503937][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.512827][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.523744][ T4218] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.530815][ T4218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.539286][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.559688][ T4167] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.570620][ T4177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.584284][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.593930][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.601926][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.611341][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.620969][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.647967][ T4178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.656198][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.664625][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.672130][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.680152][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.689217][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.702622][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.711050][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.724777][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.732353][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.740840][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.750616][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.762692][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.772966][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.782309][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.789493][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.802155][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.814715][ T4177] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.824949][ T4166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.842197][ T4173] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.854178][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.863075][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.872057][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.880250][ T4210] Bluetooth: hci1: command 0x041b tx timeout [ 65.890239][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.899621][ T4210] Bluetooth: hci3: command 0x041b tx timeout [ 65.900650][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.905880][ T4210] Bluetooth: hci0: command 0x041b tx timeout [ 65.921349][ T4218] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.928469][ T4218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.936529][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.945458][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.954628][ T4218] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.961292][ T4210] Bluetooth: hci4: command 0x041b tx timeout [ 65.961694][ T4218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.968261][ T4210] Bluetooth: hci2: command 0x041b tx timeout [ 66.004308][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.012863][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.026851][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.042632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.058352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.087354][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.097609][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.107302][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.114439][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.125908][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.135123][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.144169][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.152851][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.161643][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.170702][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.179333][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.192176][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.200719][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.208643][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.224493][ T4178] device veth0_vlan entered promiscuous mode [ 66.251199][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.260255][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.278461][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.291022][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.302593][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.311679][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.320541][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.330306][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.339540][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.348585][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.363127][ T4167] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.400147][ T4178] device veth1_vlan entered promiscuous mode [ 66.414784][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.432403][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.444984][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.452515][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.468775][ T4177] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.479708][ T4177] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.500920][ T4166] device veth0_vlan entered promiscuous mode [ 66.508759][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.525928][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.540595][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.552333][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.561644][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.570483][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.579074][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.587033][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.595915][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.615909][ T4173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.672415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.693821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.701430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.717419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.731067][ T4166] device veth1_vlan entered promiscuous mode [ 66.746374][ T4178] device veth0_macvtap entered promiscuous mode [ 66.768949][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.817470][ T4178] device veth1_macvtap entered promiscuous mode [ 66.832783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.843922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.852132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.861334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.870633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.879871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.895230][ T4166] device veth0_macvtap entered promiscuous mode [ 66.917060][ T4166] device veth1_macvtap entered promiscuous mode [ 66.941147][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.956378][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.966489][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.975169][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.982700][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.993040][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.012169][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.024187][ T4177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.035587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.045943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.056628][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.070651][ T4178] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.082057][ T4178] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.092010][ T4178] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.101323][ T4178] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.125630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.134766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.144188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.152447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.161944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.171612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.183761][ T4167] device veth0_vlan entered promiscuous mode [ 67.215502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.224198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.232567][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.245763][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.258065][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.269893][ T4167] device veth1_vlan entered promiscuous mode [ 67.300477][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.308959][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.320552][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.332727][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.341447][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.350062][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.359653][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.368596][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.376670][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.386532][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.397786][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.409443][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.438474][ T4177] device veth0_vlan entered promiscuous mode [ 67.451792][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.461788][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.474867][ T4166] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.484784][ T4166] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.494524][ T4166] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.503558][ T4166] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.526562][ T4177] device veth1_vlan entered promiscuous mode [ 67.561056][ T4173] device veth0_vlan entered promiscuous mode [ 67.589119][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.599755][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.638253][ T4173] device veth1_vlan entered promiscuous mode [ 67.654741][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.662898][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.671146][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.706051][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.709116][ T4177] device veth0_macvtap entered promiscuous mode [ 67.721240][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.746448][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.760260][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.769864][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.779005][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.789382][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.799299][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.810131][ T4167] device veth0_macvtap entered promiscuous mode [ 67.822709][ T4167] device veth1_macvtap entered promiscuous mode [ 67.833659][ T4177] device veth1_macvtap entered promiscuous mode [ 67.848459][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.856862][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.868330][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.877347][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.910287][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.921393][ T616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.922034][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.930317][ T616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.949034][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.959732][ T1110] Bluetooth: hci0: command 0x040f tx timeout [ 67.959855][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.965841][ T1110] Bluetooth: hci3: command 0x040f tx timeout [ 67.965925][ T1110] Bluetooth: hci1: command 0x040f tx timeout [ 67.990214][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.026929][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.035008][ T1110] Bluetooth: hci2: command 0x040f tx timeout [ 68.041112][ T1110] Bluetooth: hci4: command 0x040f tx timeout [ 68.044314][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.057328][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.066255][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.075982][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.087054][ T4173] device veth0_macvtap entered promiscuous mode [ 68.095547][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.106023][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.117359][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.128576][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.138778][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.149586][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.161339][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.192663][ T616] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.194822][ T4173] device veth1_macvtap entered promiscuous mode [ 68.210005][ T616] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.218290][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.226989][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.236103][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.245234][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.254840][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.265262][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.276371][ T616] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.276391][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.284927][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.303821][ T616] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.306309][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.326998][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.335405][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.346349][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.357492][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.368265][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.378426][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.389206][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.400802][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.424478][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.432781][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.444514][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.454788][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.464034][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.476150][ T4167] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.487120][ T4167] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.496288][ T4167] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.505993][ T4167] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.526018][ T4177] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.535770][ T4177] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.544965][ T4177] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.554033][ T4177] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.566804][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.577843][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.588337][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.599923][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.610288][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.621370][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.631515][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.642299][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.661216][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.705771][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.718511][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.729266][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.741688][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.751635][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.764775][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.774720][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.785468][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.795855][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.806424][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.817702][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.844298][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.852995][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.892151][ T4243] capability: warning: `syz.2.3' uses 32-bit capabilities (legacy support in use) [ 68.904880][ T4173] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.914633][ T4173] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.932474][ T4173] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.958399][ T4173] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.038423][ T4248] loop1: detected capacity change from 0 to 512 [ 69.077557][ T4248] EXT4-fs (loop1): Ignoring removed nobh option [ 69.094914][ T4248] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 69.158809][ T616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.175729][ T616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.177099][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.213647][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.227965][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.230609][ T4248] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nobh,max_batch_time=0x00000000000003ff,nojournal_checksum,usrquota,dioread_nolock,nodiscard,. Quota mode: writeback. [ 69.250979][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.262310][ T4248] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.273349][ T616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.281483][ T616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.292111][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.309583][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.332815][ T616] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.353077][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.362352][ T616] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.375313][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.379930][ T4213] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 69.386017][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.420735][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.445339][ T4248] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2: bg 0: block 224: padding at end of block bitmap is not set [ 69.462584][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.480310][ T4248] EXT4-fs (loop1): Remounting filesystem read-only [ 69.481640][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.495005][ T4248] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 69.504895][ T4248] EXT4-fs (loop1): Remounting filesystem read-only [ 69.732133][ T4256] loop0: detected capacity change from 0 to 1024 [ 69.802363][ T4256] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 69.863626][ T4213] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.896924][ T4256] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e12d, mo2=0002] [ 69.907712][ T4256] System zones: 0-1, 2-3, 4-36, 98-101, 102-102 [ 69.927178][ T4256] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,errors=remount-ro,. Quota mode: writeback. [ 70.054219][ T4207] Bluetooth: hci1: command 0x0419 tx timeout [ 70.060940][ T4207] Bluetooth: hci3: command 0x0419 tx timeout [ 70.067679][ T4207] Bluetooth: hci0: command 0x0419 tx timeout [ 70.102253][ T4213] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.116276][ T4210] Bluetooth: hci4: command 0x0419 tx timeout [ 70.131831][ T4210] Bluetooth: hci2: command 0x0419 tx timeout [ 70.223514][ T4213] usb 3-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 70.536966][ T4213] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.569342][ T4213] usb 3-1: config 0 descriptor?? [ 70.991318][ T4264] loop3: detected capacity change from 0 to 4096 [ 71.067115][ T4264] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 71.123219][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 71.133232][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 71.143218][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 71.152284][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 71.161296][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 71.170257][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 71.179266][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 71.188403][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 71.197390][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 71.206334][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 71.327877][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.334553][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.337062][ T4275] loop0: detected capacity change from 0 to 512 [ 71.349268][ T4213] wacom 0003:056A:0023.0001: unknown main item tag 0x0 [ 71.422302][ T4278] mmap: syz.4.9 (4278) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 71.458650][ T4247] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 71.487247][ T4213] wacom 0003:056A:0023.0001: Unknown device_type for 'HID 056a:0023'. Assuming pen. [ 71.511976][ T4213] wacom 0003:056A:0023.0001: hidraw0: USB HID v0.00 Device [HID 056a:0023] on usb-dummy_hcd.2-1/input0 [ 71.531694][ T4213] input: Wacom Intuos 12x12 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0023.0001/input/input5 [ 72.220358][ T4241] usb 3-1: USB disconnect, device number 2 [ 72.236823][ T4247] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 72.255746][ T4247] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.271847][ T4247] usb 2-1: config 0 descriptor?? [ 72.441851][ T4275] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 72.458623][ T4275] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 72.469513][ T4275] System zones: 0-2, 18-18, 34-35 [ 72.479660][ T4275] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,noinit_itable,debug,,errors=continue. Quota mode: writeback. [ 72.592644][ T4286] loop3: detected capacity change from 0 to 512 [ 72.644094][ T4247] [drm] vendor descriptor length:c3 data:c3 0e b7 96 f7 a9 2c be e4 2a 86 [ 72.654589][ T4247] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 72.713354][ T4288] EXT4-fs (loop0): shut down requested (0) [ 72.719790][ T4286] ======================================================= [ 72.719790][ T4286] WARNING: The mand mount option has been deprecated and [ 72.719790][ T4286] and is ignored by this kernel. Remove the mand [ 72.719790][ T4286] option from the mount to silence this warning. [ 72.719790][ T4286] ======================================================= [ 72.884214][ T4247] [drm:udl_init] *ERROR* Selecting channel failed [ 73.135907][ T4247] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 73.170118][ T4247] [drm] Initialized udl on minor 2 [ 73.299082][ T4247] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 73.299867][ T4286] Quota error (device loop3): dq_insert_tree: Quota tree root isn't allocated! [ 73.338634][ T4286] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 73.366757][ T4286] EXT4-fs error (device loop3): ext4_acquire_dquot:6197: comm syz.3.10: Failed to acquire dquot type 0 [ 73.448561][ T4247] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 73.459405][ T4286] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.10: bg 0: block 64: padding at end of block bitmap is not set [ 73.475941][ T4247] usb 2-1: USB disconnect, device number 2 [ 73.505636][ T4286] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 73.544953][ T4286] EXT4-fs (loop3): 1 truncate cleaned up [ 73.562220][ T4297] loop2: detected capacity change from 0 to 2048 [ 73.580706][ T4286] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=continue,,errors=continue. Quota mode: writeback. [ 73.596496][ T4286] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.635512][ T4297] GPT:first_usable_lbas don't match. [ 73.645054][ T4297] GPT:34 != 290 [ 73.648560][ T4297] GPT: Use GNU Parted to correct GPT errors. [ 73.673379][ T4297] loop2: p1 p2 p3 [ 73.865353][ T4180] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 73.924674][ T3545] GPT:first_usable_lbas don't match. [ 73.930215][ T3545] GPT:34 != 290 [ 73.933881][ T3545] GPT: Use GNU Parted to correct GPT errors. [ 73.940765][ T3545] loop2: p1 p2 p3 [ 74.004749][ T4305] loop1: detected capacity change from 0 to 128 [ 74.049991][ T4305] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 74.092878][ T4305] FAT-fs (loop1): FAT read failed (blocknr 128) [ 74.151801][ T4308] loop3: detected capacity change from 0 to 2048 [ 74.153425][ T4180] usb 5-1: Using ep0 maxpacket: 32 [ 74.236474][ T4308] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 74.293565][ T4180] usb 5-1: config 0 has an invalid interface number: 168 but max is 0 [ 74.306591][ T4180] usb 5-1: config 0 has no interface number 0 [ 74.395309][ T4311] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 74.513894][ T4180] usb 5-1: New USB device found, idVendor=07b8, idProduct=420a, bcdDevice=47.9b [ 74.536977][ T4180] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.577326][ T4180] usb 5-1: Product: syz [ 74.581534][ T4180] usb 5-1: Manufacturer: syz [ 74.601643][ T4180] usb 5-1: SerialNumber: syz [ 74.618116][ T4180] usb 5-1: config 0 descriptor?? [ 74.622470][ T4313] loop3: detected capacity change from 0 to 1024 [ 74.666740][ T4276] udevd[4276]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 74.671601][ T4303] udevd[4303]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 74.769374][ T4160] udevd[4160]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 74.804996][ T4317] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18'. [ 74.907812][ T4313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17'. [ 75.603644][ T4180] asix 5-1:0.168 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 75.682858][ T4180] asix: probe of 5-1:0.168 failed with error -71 [ 75.722496][ T4180] usb 5-1: USB disconnect, device number 2 [ 75.868368][ T4329] loop2: detected capacity change from 0 to 1024 [ 76.257989][ T4331] capability: warning: `syz.4.21' uses deprecated v2 capabilities in a way that may be insecure [ 77.533289][ T4247] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.611728][ T4329] EXT4-fs (loop2): Ignoring removed orlov option [ 77.695630][ T4329] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,data_err=abort,,errors=continue. Quota mode: none. [ 77.813267][ T4247] usb 1-1: Using ep0 maxpacket: 8 [ 77.959620][ T4345] xt_CT: You must specify a L4 protocol and not use inversions on it [ 77.989752][ T4247] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 78.025407][ T4247] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.050845][ T4247] usb 1-1: config 0 descriptor?? [ 78.071238][ T4354] loop3: detected capacity change from 0 to 256 [ 78.168116][ T4354] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 78.184186][ T4354] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 78.268097][ T4361] loop2: detected capacity change from 0 to 512 [ 78.343462][ T4247] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 78.392115][ T4361] EXT4-fs (loop2): Test dummy encryption mode enabled [ 78.414054][ T4361] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 78.428582][ T4361] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 78.615786][ T4361] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2816: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 78.721336][ T4361] EXT4-fs (loop2): 1 truncate cleaned up [ 78.740763][ T4361] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,max_dir_size_kb=0x0000000000000fff,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,test_dummy_encryption=v1,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 78.920989][ T4398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29'. [ 80.101236][ T4247] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 80.123008][ T4247] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 80.134196][ T4247] asix: probe of 1-1:0.0 failed with error -71 [ 80.154895][ T4247] usb 1-1: USB disconnect, device number 2 [ 80.367434][ T4413] loop4: detected capacity change from 0 to 1024 [ 80.452711][ T4413] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 80.508342][ T4413] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e12d, mo2=0002] [ 80.518225][ T4413] System zones: 0-1, 2-3, 4-36, 98-101, 102-102 [ 80.530326][ T4413] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,errors=remount-ro,. Quota mode: writeback. [ 82.159053][ T7] cfg80211: failed to load regulatory.db [ 82.280122][ T4422] loop3: detected capacity change from 0 to 1024 [ 82.308252][ T4425] loop4: detected capacity change from 0 to 2048 [ 82.361864][ T4422] EXT4-fs (loop3): Ignoring removed orlov option [ 82.385650][ T4425] GPT:first_usable_lbas don't match. [ 82.407850][ T4425] GPT:34 != 290 [ 82.412438][ T4425] GPT: Use GNU Parted to correct GPT errors. [ 82.441215][ T4422] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,data_err=abort,,errors=continue. Quota mode: none. [ 82.484628][ T4425] loop4: p1 p2 p3 [ 82.681809][ T4434] xt_CT: You must specify a L4 protocol and not use inversions on it [ 82.862959][ T4426] loop0: detected capacity change from 0 to 32768 [ 82.924969][ T4426] XFS: ikeep mount option is deprecated. [ 82.930947][ T4426] XFS: ikeep mount option is deprecated. [ 83.039063][ T4426] XFS (loop0): Mounting V5 Filesystem [ 83.271446][ T4447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.46'. [ 83.288585][ T4446] loop3: detected capacity change from 0 to 512 [ 83.306561][ T4449] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.333332][ T4426] XFS (loop0): Ending clean mount [ 83.388243][ T4426] XFS (loop0): Quotacheck needed: Please wait. [ 83.391218][ T4452] loop2: detected capacity change from 0 to 1024 [ 83.454692][ T4446] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 83.477949][ T4452] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 83.514949][ T4452] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x000000000000ee01,abort,discard,max_batch_time=0x0000000000000003,data=ordered,mblk_io_submit,usrquota,init_itable,errors=remount-ro,bsddf,auto_da_alloc,. Quota mode: writeback. [ 83.577090][ T4426] XFS (loop0): Quotacheck: Done. [ 83.886063][ T4177] XFS (loop0): Unmounting Filesystem [ 84.892849][ T4471] loop4: detected capacity change from 0 to 128 [ 86.254262][ T4471] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 86.277245][ T4471] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.631053][ T4484] input: syz0 as /devices/virtual/input/input8 [ 86.848639][ T4495] loop0: detected capacity change from 0 to 1024 [ 86.890145][ T4495] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 86.971857][ T4495] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e12d, mo2=0002] [ 86.982504][ T4495] System zones: 0-1, 2-3, 4-36, 98-101, 102-102 [ 86.995219][ T4495] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,errors=remount-ro,. Quota mode: writeback. [ 87.295576][ T4500] loop3: detected capacity change from 0 to 1024 [ 87.367646][ T4503] netlink: 48 bytes leftover after parsing attributes in process `syz.2.61'. [ 87.377727][ T4486] process 'syz.1.56' launched './file1' with NULL argv: empty string added [ 87.645898][ T4514] xt_CT: You must specify a L4 protocol and not use inversions on it [ 87.916861][ T4522] loop3: detected capacity change from 0 to 128 [ 87.975822][ T4524] input: syz0 as /devices/virtual/input/input9 [ 88.036726][ T4522] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.091722][ T4522] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.369171][ T4532] loop2: detected capacity change from 0 to 1024 [ 88.391850][ T4532] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 88.516209][ T4532] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e12d, mo2=0002] [ 88.525904][ T4532] System zones: 0-1, 2-3, 4-36, 98-101, 102-102 [ 88.538833][ T4532] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,errors=remount-ro,. Quota mode: writeback. [ 89.869943][ T4565] input: syz0 as /devices/virtual/input/input10 [ 90.977595][ T4582] loop3: detected capacity change from 0 to 1024 [ 91.109932][ T4582] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 91.181357][ T4582] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e12d, mo2=0002] [ 91.191229][ T4582] System zones: 0-1, 2-3, 4-36, 98-101, 102-102 [ 91.204634][ T4582] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,errors=remount-ro,. Quota mode: writeback. [ 92.316485][ T4611] loop4: detected capacity change from 0 to 128 [ 92.457166][ T4611] EXT4-fs (loop4): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 92.538360][ T4611] EXT4-fs error (device loop4): htree_dirblock_to_tree:1083: inode #2: comm syz.4.94: Directory block failed checksum [ 92.539267][ T4618] loop2: detected capacity change from 0 to 512 [ 92.607691][ T4618] EXT4-fs (loop2): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 92.623325][ T4618] EXT4-fs (loop2): can't mount with both data=journal and dax [ 92.654754][ T4620] input: syz0 as /devices/virtual/input/input11 [ 93.963473][ T4247] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 93.974288][ T1107] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.093401][ T4662] input: syz0 as /devices/virtual/input/input12 [ 94.323709][ T4247] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 94.341386][ T4247] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.350314][ T1107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.356147][ T4675] loop2: detected capacity change from 0 to 512 [ 94.373279][ T1107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.385948][ T4247] usb 1-1: config 0 descriptor?? [ 94.399078][ T1107] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 94.412899][ T1107] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.433747][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.433850][ T4675] EXT4-fs (loop2): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 94.450696][ T1107] usb 4-1: config 0 descriptor?? [ 94.457115][ T4675] EXT4-fs (loop2): can't mount with both data=journal and dax [ 94.883437][ T4247] [drm] vendor descriptor length:c3 data:c3 0e b7 96 f7 a9 2c be e4 2a 86 [ 94.892086][ T4247] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 94.947673][ T1107] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 94.986984][ T1107] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 95.020506][ T4702] loop4: detected capacity change from 0 to 128 [ 95.103573][ T4247] [drm:udl_init] *ERROR* Selecting channel failed [ 95.244103][ T4247] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 95.282191][ T4247] [drm] Initialized udl on minor 2 [ 95.445969][ T4247] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 95.539939][ T4247] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 95.654119][ T4247] usb 1-1: USB disconnect, device number 3 [ 95.756327][ T4702] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 95.836074][ T4697] FAT-fs (loop4): FAT read failed (blocknr 128) [ 96.089759][ T4719] binder: BINDER_SET_CONTEXT_MGR already set [ 96.096171][ T4719] binder: 4711:4719 ioctl 40046207 0 returned -16 [ 96.151836][ T4719] loop0: detected capacity change from 0 to 1024 [ 96.220479][ T4247] usb 4-1: USB disconnect, device number 2 [ 96.912027][ T4723] loop2: detected capacity change from 0 to 512 [ 96.945302][ T4726] loop3: detected capacity change from 0 to 128 [ 97.071096][ T4726] EXT4-fs (loop3): Ignoring removed nobh option [ 97.077617][ T4723] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 97.110080][ T4734] input: syz0 as /devices/virtual/input/input13 [ 97.122886][ T4726] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 97.174368][ T4723] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.137: invalid indirect mapped block 4294967295 (level 0) [ 97.243924][ T4726] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 97.276883][ T4723] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.137: invalid indirect mapped block 4294967295 (level 1) [ 97.332298][ T4723] EXT4-fs (loop2): 1 orphan inode deleted [ 97.338458][ T4723] EXT4-fs (loop2): 1 truncate cleaned up [ 97.347071][ T4723] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 97.365495][ T4723] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.137: iget: bad extra_isize 46 (inode size 256) [ 97.704929][ T4741] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.137: iget: bad extra_isize 46 (inode size 256) [ 99.490400][ T4770] input: syz0 as /devices/virtual/input/input14 [ 99.636829][ T4776] loop3: detected capacity change from 0 to 512 [ 99.848409][ T4789] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 99.882814][ T4776] EXT4-fs (loop3): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 99.922568][ T4776] EXT4-fs (loop3): can't mount with both data=journal and dax [ 101.476194][ T4801] loop0: detected capacity change from 0 to 16 [ 101.906151][ T4270] Bluetooth: hci2: command 0x2016 tx timeout [ 102.010788][ T4801] erofs: (device loop0): mounted with root inode @ nid 36. [ 102.061225][ T4808] loop2: detected capacity change from 0 to 1764 [ 105.224209][ T4850] "syz.2.177" (4850) uses obsolete ecb(arc4) skcipher [ 105.247885][ T4850] loop2: detected capacity change from 0 to 1024 [ 105.437429][ T4859] loop3: detected capacity change from 0 to 512 [ 106.271868][ T4864] loop0: detected capacity change from 0 to 512 [ 106.287488][ T4859] EXT4-fs (loop3): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 106.296782][ T4859] EXT4-fs (loop3): can't mount with both data=journal and dax [ 106.310014][ T26] audit: type=1804 audit(1737716639.232:2): pid=4850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.177" name="/newroot/39/file0/bus" dev="loop2" ino=25 res=1 errno=0 [ 106.332953][ T4864] EXT4-fs (loop0): Ignoring removed oldalloc option [ 106.353981][ T4864] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 106.625706][ T4864] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 106.681320][ T4864] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=b846c01c, mo2=0002] [ 106.765304][ T4864] System zones: 0-2, 18-18, 34-34 [ 106.921561][ T4864] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 107.120647][ T4864] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.183: bad orphan inode 15 [ 107.224924][ T4864] ext4_test_bit(bit=14, block=18) = 1 [ 107.230472][ T4864] is_bad_inode(inode)=0 [ 107.276609][ T4864] NEXT_ORPHAN(inode)=2264924160 [ 107.281645][ T4864] max_ino=32 [ 107.303541][ T4864] i_nlink=0 [ 107.313903][ T4864] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 107.362978][ T4864] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.183: bg 0: block 80: padding at end of block bitmap is not set [ 107.392183][ T4864] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 107.407879][ T4864] EXT4-fs (loop0): mounted filesystem without journal. Opts: abort,usrjquota=.,init_itable,init_itable,inode_readahead_blks=0x0000000000800000,data_err=abort,oldalloc,jqfmt=vfsv0,min_batch_time=0x0000000000000003,acl,,errors=continue. Quota mode: writeback. [ 108.725006][ T4901] loop2: detected capacity change from 0 to 1024 [ 108.832715][ T4906] loop3: detected capacity change from 0 to 512 [ 109.839051][ T4901] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,stripe=0x0000000000000008,barrier=0x0000000000000003,norecovery,debug_want_extra_isize=0x0000000000000080,nodiscard,nodelalloc,acl,dioread_lock,,errors=continue. Quota mode: none. [ 109.900215][ T4906] EXT4-fs (loop3): Test dummy encryption mode enabled [ 109.976548][ T4906] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 110.045944][ T4906] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.197: bad orphan inode 131083 [ 110.059244][ T4906] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 110.582318][ T4922] loop0: detected capacity change from 0 to 2048 [ 110.627793][ T4927] loop2: detected capacity change from 0 to 512 [ 110.747358][ T4928] loop3: detected capacity change from 0 to 512 [ 110.780787][ T4927] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.200: Invalid inode bitmap blk 4 in block_group 0 [ 110.839575][ T4927] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,data_err=abort,noload,journal_ioprio=0x0000000000000005,lazytime,,errors=continue. Quota mode: none. [ 110.865896][ T4922] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 110.888255][ T4928] EXT4-fs (loop3): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 110.921646][ T4922] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.934171][ T4928] EXT4-fs (loop3): can't mount with both data=journal and dax [ 111.518645][ T4938] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 112.301687][ T4938] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.200: Invalid inode bitmap blk 4 in block_group 0 [ 112.319913][ T4938] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 113.341137][ T4953] loop2: detected capacity change from 0 to 256 [ 114.988850][ T4965] sched: RT throttling activated [ 116.291245][ T4953] FAT-fs (loop2): Directory bread(block 64) failed [ 116.343613][ T4953] FAT-fs (loop2): Directory bread(block 65) failed [ 116.381451][ T4953] FAT-fs (loop2): Directory bread(block 66) failed [ 116.427490][ T4977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.441916][ T4953] FAT-fs (loop2): Directory bread(block 67) failed [ 116.477796][ T4979] loop0: detected capacity change from 0 to 2048 [ 116.484592][ T4953] FAT-fs (loop2): Directory bread(block 68) failed [ 116.507118][ T4953] FAT-fs (loop2): Directory bread(block 69) failed [ 116.544693][ T4953] FAT-fs (loop2): Directory bread(block 70) failed [ 116.583403][ T4953] FAT-fs (loop2): Directory bread(block 71) failed [ 116.612794][ T4953] FAT-fs (loop2): Directory bread(block 72) failed [ 116.619567][ T4953] FAT-fs (loop2): Directory bread(block 73) failed [ 116.919501][ T4979] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.934169][ T4979] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.813671][ T4969] syz.3.211 (4969) used greatest stack depth: 18168 bytes left [ 120.828144][ T5023] binder: 5021:5023 ioctl 4018620d 0 returned -22 [ 120.885473][ T5023] binder: 5021:5023 ioctl c018620c 20000300 returned -1 [ 121.051194][ T5027] loop3: detected capacity change from 0 to 2048 [ 121.065736][ T5023] binder: 5021:5023 ioctl c00c620f 200000c0 returned -22 [ 122.829319][ T5031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.921939][ T5027] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 122.960606][ T5027] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.978005][ T5063] loop2: detected capacity change from 0 to 764 [ 124.120356][ T5063] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 124.442962][ T5072] loop3: detected capacity change from 0 to 2048 [ 124.654414][ T5072] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 124.671331][ T5072] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.016534][ T5086] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 125.953592][ T4270] Bluetooth: hci1: command 0x0409 tx timeout [ 126.057252][ T5094] Cannot find add_set index 0 as target [ 126.069262][ T5098] "syz.4.255" (5098) uses obsolete ecb(arc4) skcipher [ 126.184362][ T5104] netlink: 112 bytes leftover after parsing attributes in process `syz.3.258'. [ 126.192353][ T5105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.217332][ T5104] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 126.432614][ T5111] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 126.524651][ T5116] netlink: 16 bytes leftover after parsing attributes in process `syz.3.263'. [ 128.569490][ T5133] Cannot find add_set index 0 as target [ 128.619648][ T5135] input: syz0 as /devices/virtual/input/input15 [ 130.711175][ T5157] loop2: detected capacity change from 0 to 2048 [ 130.745180][ T5160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.831596][ T5157] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 130.863567][ T5157] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.424402][ T5180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.284'. [ 132.502283][ T5181] loop0: detected capacity change from 0 to 1024 [ 132.588552][ T5181] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 132.674604][ T5181] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e12d, mo2=0002] [ 132.684389][ T5181] System zones: 0-1, 2-3, 4-36, 98-101, 102-102 [ 132.703224][ T5181] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,errors=remount-ro,. Quota mode: writeback. [ 132.756988][ T5188] netlink: 'syz.2.288': attribute type 9 has an invalid length. [ 132.757184][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.772017][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.020600][ T5193] loop0: detected capacity change from 0 to 512 [ 133.056414][ T5198] loop2: detected capacity change from 0 to 128 [ 133.091914][ T5196] loop3: detected capacity change from 0 to 2048 [ 133.121572][ T5193] EXT4-fs (loop0): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 133.304746][ T5193] EXT4-fs (loop0): can't mount with both data=journal and dax [ 133.416761][ T5196] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 133.704580][ T5194] nfs: Unknown parameter '€' [ 133.860787][ T5210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.182582][ T5230] loop2: detected capacity change from 0 to 1024 [ 135.285513][ T5230] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 135.724848][ T5230] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e12d, mo2=0002] [ 135.735890][ T5230] System zones: 0-1, 2-3, 4-36, 98-101, 102-102 [ 135.750120][ T5230] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,errors=remount-ro,. Quota mode: writeback. [ 136.228803][ T5239] loop0: detected capacity change from 0 to 512 [ 136.464403][ T5239] EXT4-fs (loop0): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 136.561938][ T5239] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.728019][ T5256] loop3: detected capacity change from 0 to 512 [ 136.806201][ T5256] EXT4-fs (loop3): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 136.828966][ T5260] loop0: detected capacity change from 0 to 512 [ 136.846192][ T5256] EXT4-fs (loop3): can't mount with both data=journal and dax [ 136.968217][ T5260] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 137.068813][ T5260] EXT4-fs (loop0): 1 truncate cleaned up [ 137.099188][ T5260] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,jqfmt=vfsv0,nombcache,quota,,errors=continue. Quota mode: writeback. [ 138.320343][ T5280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.463100][ T5286] device wireguard0 entered promiscuous mode [ 138.549951][ T5292] loop0: detected capacity change from 0 to 128 [ 138.649734][ T5292] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 138.659637][ T5292] FAT-fs (loop0): Filesystem has been set read-only [ 138.778025][ T5301] loop3: detected capacity change from 0 to 512 [ 138.789532][ T5306] netlink: 48 bytes leftover after parsing attributes in process `syz.4.328'. [ 139.031153][ T5301] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 139.880332][ T5312] loop0: detected capacity change from 0 to 512 [ 140.080964][ T5312] EXT4-fs (loop0): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 140.141046][ T5312] EXT4-fs (loop0): can't mount with both data=journal and dax [ 140.549417][ T5329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.336'. [ 140.583400][ T5331] netlink: 20 bytes leftover after parsing attributes in process `syz.2.337'. [ 140.863319][ T4213] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 141.793702][ T4213] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 141.823056][ T4213] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.870055][ T5344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.923473][ T4213] usb 4-1: New USB device found, idVendor=056a, idProduct=0090, bcdDevice= 0.00 [ 141.933321][ T4213] usb 4-1: New USB device strings: Mfr=0, Product=23, SerialNumber=0 [ 141.941544][ T4213] usb 4-1: Product: syz [ 141.957137][ T4213] usb 4-1: config 0 descriptor?? [ 143.148505][ T5364] loop2: detected capacity change from 0 to 512 [ 143.221642][ T4213] wacom 0003:056A:0090.0003: hidraw0: USB HID v40.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 143.286195][ T5364] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 143.345796][ T5364] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,stripe=0x0000000000000004,dioread_nolock,mblk_io_submit,nogrpid,usrjquota=,,errors=continue. Quota mode: none. [ 143.419163][ T4213] usb 4-1: USB disconnect, device number 3 [ 145.073350][ T26] audit: type=1800 audit(1737716677.971:3): pid=5364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.348" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 145.635254][ T26] audit: type=1800 audit(1737716677.981:4): pid=5376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.348" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 146.195251][ T5387] input: syz1 as /devices/virtual/input/input19 [ 146.446626][ T5390] input: syz0 as /devices/virtual/input/input20 [ 147.003269][ T4210] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 147.028456][ T5405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.193598][ T4210] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.213398][ T4210] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.239821][ T5425] Cannot find add_set index 0 as target [ 148.243262][ T4210] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 148.271316][ T4172] Bluetooth: hci1: Unknown advertising packet type: 0xff00 [ 148.271591][ T4172] ================================================================== [ 148.287226][ T4172] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x11f1/0x3f50 [ 148.295058][ T4172] Read of size 1 at addr ffff88802037d408 by task kworker/u5:3/4172 [ 148.303028][ T4172] [ 148.305348][ T4172] CPU: 0 PID: 4172 Comm: kworker/u5:3 Not tainted 5.15.177-syzkaller #0 [ 148.313686][ T4172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 148.323752][ T4172] Workqueue: hci1 hci_rx_work [ 148.328435][ T4172] Call Trace: [ 148.331706][ T4172] [ 148.334630][ T4172] dump_stack_lvl+0x1e3/0x2d0 [ 148.339351][ T4172] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 148.344979][ T4172] ? _printk+0xd1/0x120 [ 148.349133][ T4172] ? __wake_up_klogd+0xcc/0x100 [ 148.353984][ T4172] ? panic+0x860/0x860 [ 148.358048][ T4172] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 148.363514][ T4172] print_address_description+0x63/0x3b0 [ 148.369074][ T4172] ? hci_le_meta_evt+0x11f1/0x3f50 [ 148.374184][ T4172] kasan_report+0x16b/0x1c0 [ 148.378687][ T4172] ? hci_le_meta_evt+0x11f1/0x3f50 [ 148.383795][ T4172] hci_le_meta_evt+0x11f1/0x3f50 [ 148.388747][ T4172] ? __lock_acquire+0x1ff0/0x1ff0 [ 148.393799][ T4172] ? hci_remote_host_features_evt+0x280/0x280 [ 148.399965][ T4172] ? __mutex_unlock_slowpath+0x218/0x750 [ 148.405613][ T4172] ? hci_event_packet+0x3b4/0x1550 [ 148.411073][ T4172] ? mutex_unlock+0x10/0x10 [ 148.415576][ T4172] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 148.421555][ T4172] ? print_irqtrace_events+0x210/0x210 [ 148.427009][ T4172] hci_event_packet+0xc41/0x1550 [ 148.431949][ T4172] ? rcu_lock_release+0x20/0x20 [ 148.436803][ T4172] ? hci_send_to_monitor+0x99/0x4d0 [ 148.442007][ T4172] hci_rx_work+0x237/0xa10 [ 148.446428][ T4172] process_one_work+0x8a1/0x10c0 [ 148.451377][ T4172] ? worker_detach_from_pool+0x260/0x260 [ 148.457008][ T4172] ? _raw_spin_lock_irqsave+0x120/0x120 [ 148.462552][ T4172] ? kthread_data+0x4e/0xc0 [ 148.467054][ T4172] ? wq_worker_running+0x97/0x170 [ 148.472076][ T4172] worker_thread+0xaca/0x1280 [ 148.476773][ T4172] kthread+0x3f6/0x4f0 [ 148.480838][ T4172] ? rcu_lock_release+0x20/0x20 [ 148.485685][ T4172] ? kthread_blkcg+0xd0/0xd0 [ 148.490274][ T4172] ret_from_fork+0x1f/0x30 [ 148.494704][ T4172] [ 148.497718][ T4172] [ 148.500032][ T4172] Allocated by task 5426: [ 148.504345][ T4172] ____kasan_kmalloc+0xba/0xf0 [ 148.509108][ T4172] __kmalloc_node_track_caller+0x195/0x390 [ 148.514911][ T4172] __alloc_skb+0x12c/0x590 [ 148.519339][ T4172] vhci_write+0xbc/0x430 [ 148.523593][ T4172] vfs_write+0xacd/0xe50 [ 148.527861][ T4172] ksys_write+0x1a2/0x2c0 [ 148.532189][ T4172] do_syscall_64+0x3b/0xb0 [ 148.536609][ T4172] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 148.542526][ T4172] [ 148.544845][ T4172] The buggy address belongs to the object at ffff88802037d000 [ 148.544845][ T4172] which belongs to the cache kmalloc-1k of size 1024 [ 148.558901][ T4172] The buggy address is located 8 bytes to the right of [ 148.558901][ T4172] 1024-byte region [ffff88802037d000, ffff88802037d400) [ 148.572609][ T4172] The buggy address belongs to the page: [ 148.578249][ T4172] page:ffffea000080de00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20378 [ 148.588562][ T4172] head:ffffea000080de00 order:3 compound_mapcount:0 compound_pincount:0 [ 148.597039][ T4172] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 148.605119][ T4172] raw: 00fff00000010200 ffffea00018d1e00 0000000600000006 ffff888017441dc0 [ 148.613700][ T4172] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 148.622272][ T4172] page dumped because: kasan: bad access detected [ 148.628699][ T4172] page_owner tracks the page as allocated [ 148.634405][ T4172] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3983, ts 39977666840, free_ts 39281866318 [ 148.653505][ T4172] get_page_from_freelist+0x3b78/0x3d40 [ 148.659063][ T4172] __alloc_pages+0x272/0x700 [ 148.663666][ T4172] new_slab+0xbb/0x4b0 [ 148.667739][ T4172] ___slab_alloc+0x6f6/0xe10 [ 148.672323][ T4172] __kmalloc_node_track_caller+0x1f6/0x390 [ 148.678124][ T4172] __alloc_skb+0x12c/0x590 [ 148.682533][ T4172] alloc_skb_with_frags+0xa3/0x780 [ 148.687653][ T4172] sock_alloc_send_pskb+0x915/0xa50 [ 148.692847][ T4172] packet_sendmsg+0x386a/0x5e90 [ 148.697712][ T4172] sock_write_iter+0x39b/0x530 [ 148.702475][ T4172] do_iter_readv_writev+0x594/0x7a0 [ 148.707773][ T4172] do_iter_write+0x1e6/0x760 [ 148.712387][ T4172] do_writev+0x281/0x470 [ 148.716642][ T4172] do_syscall_64+0x3b/0xb0 [ 148.721061][ T4172] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 148.726975][ T4172] page last free stack trace: [ 148.731649][ T4172] free_unref_page_prepare+0xc34/0xcf0 [ 148.737119][ T4172] free_unref_page+0x95/0x2d0 [ 148.741799][ T4172] __unfreeze_partials+0x1b7/0x210 [ 148.746912][ T4172] put_cpu_partial+0x132/0x1a0 [ 148.751675][ T4172] ___cache_free+0xe3/0x100 [ 148.756203][ T4172] qlist_free_all+0x36/0x90 [ 148.760726][ T4172] kasan_quarantine_reduce+0x162/0x180 [ 148.766179][ T4172] __kasan_slab_alloc+0x2f/0xc0 [ 148.771023][ T4172] slab_post_alloc_hook+0x53/0x380 [ 148.776144][ T4172] __kmalloc_node+0x151/0x390 [ 148.780826][ T4172] kvmalloc_node+0x80/0x140 [ 148.785323][ T4172] proc_sys_call_handler+0x3d0/0x8a0 [ 148.790608][ T4172] vfs_read+0xa93/0xe10 [ 148.794760][ T4172] ksys_read+0x1a2/0x2c0 [ 148.798995][ T4172] do_syscall_64+0x3b/0xb0 [ 148.803415][ T4172] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 148.809302][ T4172] [ 148.811617][ T4172] Memory state around the buggy address: [ 148.817235][ T4172] ffff88802037d300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 148.825393][ T4172] ffff88802037d380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 148.833448][ T4172] >ffff88802037d400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 148.841498][ T4172] ^ [ 148.845819][ T4172] ffff88802037d480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 148.853871][ T4172] ffff88802037d500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 148.861919][ T4172] ================================================================== [ 148.869966][ T4172] Disabling lock debugging due to kernel taint [ 148.877907][ T4210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.886028][ T4172] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 148.893232][ T4172] CPU: 0 PID: 4172 Comm: kworker/u5:3 Tainted: G B 5.15.177-syzkaller #0 [ 148.902962][ T4172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 148.913039][ T4172] Workqueue: hci1 hci_rx_work [ 148.917862][ T4172] Call Trace: [ 148.921170][ T4172] [ 148.924112][ T4172] dump_stack_lvl+0x1e3/0x2d0 [ 148.928817][ T4172] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 148.934486][ T4172] ? panic+0x860/0x860 [ 148.938574][ T4172] ? rcu_is_watching+0x11/0xa0 [ 148.943361][ T4172] ? preempt_schedule_common+0xa6/0xd0 [ 148.948896][ T4172] panic+0x318/0x860 [ 148.952813][ T4172] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 148.958983][ T4172] ? check_panic_on_warn+0x1d/0xa0 [ 148.964115][ T4172] ? fb_is_primary_device+0xd0/0xd0 [ 148.969336][ T4172] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 148.975332][ T4172] ? _raw_spin_unlock+0x40/0x40 [ 148.980254][ T4172] check_panic_on_warn+0x7e/0xa0 [ 148.985209][ T4172] ? hci_le_meta_evt+0x11f1/0x3f50 [ 148.990338][ T4172] end_report+0x6d/0xf0 [ 148.994502][ T4172] kasan_report+0x18e/0x1c0 [ 148.999024][ T4172] ? hci_le_meta_evt+0x11f1/0x3f50 [ 149.004174][ T4172] hci_le_meta_evt+0x11f1/0x3f50 [ 149.009127][ T4172] ? __lock_acquire+0x1ff0/0x1ff0 [ 149.014171][ T4172] ? hci_remote_host_features_evt+0x280/0x280 [ 149.020257][ T4172] ? __mutex_unlock_slowpath+0x218/0x750 [ 149.025906][ T4172] ? hci_event_packet+0x3b4/0x1550 [ 149.031243][ T4172] ? mutex_unlock+0x10/0x10 [ 149.035936][ T4172] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 149.041948][ T4172] ? print_irqtrace_events+0x210/0x210 [ 149.047433][ T4172] hci_event_packet+0xc41/0x1550 [ 149.052396][ T4172] ? rcu_lock_release+0x20/0x20 [ 149.057268][ T4172] ? hci_send_to_monitor+0x99/0x4d0 [ 149.062487][ T4172] hci_rx_work+0x237/0xa10 [ 149.066925][ T4172] process_one_work+0x8a1/0x10c0 [ 149.071887][ T4172] ? worker_detach_from_pool+0x260/0x260 [ 149.077542][ T4172] ? _raw_spin_lock_irqsave+0x120/0x120 [ 149.083208][ T4172] ? kthread_data+0x4e/0xc0 [ 149.087729][ T4172] ? wq_worker_running+0x97/0x170 [ 149.092777][ T4172] worker_thread+0xaca/0x1280 [ 149.097482][ T4172] kthread+0x3f6/0x4f0 [ 149.101563][ T4172] ? rcu_lock_release+0x20/0x20 [ 149.106409][ T4172] ? kthread_blkcg+0xd0/0xd0 [ 149.111003][ T4172] ret_from_fork+0x1f/0x30 [ 149.115420][ T4172] [ 149.118719][ T4172] Kernel Offset: disabled [ 149.123038][ T4172] Rebooting in 86400 seconds..