last executing test programs: 13.184735973s ago: executing program 3 (id=311): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1800, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42402, 0x14a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x21, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x440c, 0x4}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000480)="05", 0x1, 0x4009, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 10.688170251s ago: executing program 3 (id=318): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x10008, &(0x7f0000000140)=ANY=[], 0xfb, 0x6b6, &(0x7f00000009c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x80202, 0x18f) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 10.130499637s ago: executing program 2 (id=319): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000100"/16], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000080), 0x1) 9.994796459s ago: executing program 2 (id=321): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) pwrite64(r0, 0x0, 0x0, 0x9) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = semget(0x2, 0x4, 0x39c) semop(r5, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/protocols\x00') read$FUSE(r6, &(0x7f0000000d80)={0x2020}, 0x2020) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r6, 0x4068aea3, &(0x7f00000000c0)) semtimedop(r5, 0x0, 0x0, 0x0) 9.840042161s ago: executing program 4 (id=323): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x4810, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@noauto_da_alloc}, {@nomblk_io_submit}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@nouid32}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@noauto_da_alloc}]}, 0x0, 0x501, &(0x7f0000000b80)="$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") ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @aes256, 0x1, @desc1}) 9.839839001s ago: executing program 0 (id=324): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file5\x00', 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus\x00') io_uring_setup(0x2a69, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x1c) creat(&(0x7f0000000100)='./bus\x00', 0x38) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 8.419691906s ago: executing program 0 (id=325): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x24, r2, 0x401, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x886) 8.331460377s ago: executing program 3 (id=326): prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 8.024512371s ago: executing program 1 (id=327): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r2, 0x4161, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) io_setup(0x2, &(0x7f0000001700)=0x0) r6 = eventfd2(0x0, 0x0) io_submit(r5, 0x1, &(0x7f00000028c0)=[&(0x7f00000025c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0}]) alarm(0x6) 7.983933801s ago: executing program 3 (id=328): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1800, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42402, 0x14a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x21, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x440c, 0x4}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000480)="05", 0x1, 0x4009, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 6.533013358s ago: executing program 1 (id=329): setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f0000002c80)=[{0x0}, {&(0x7f0000001980)=""/233, 0x94}], 0x2}, 0x10001}], 0x1, 0x40000000, 0x0) 6.368584149s ago: executing program 4 (id=330): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f000097a000/0x1000)=nil, 0x1000, 0x1) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) getsockopt(r3, 0x0, 0x16, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) setitimer(0x3, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r5, 0x26, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 4.278718502s ago: executing program 3 (id=331): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000580)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x2) 4.278607212s ago: executing program 4 (id=332): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 4.277671562s ago: executing program 0 (id=341): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1800, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42402, 0x14a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x21, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x440c, 0x4}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000480)="05", 0x1, 0x4009, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.277321203s ago: executing program 2 (id=333): bpf$MAP_CREATE(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40000182, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 4.203761233s ago: executing program 2 (id=334): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170479a60f60eb8dc258ded60aee45b04a15db386", 0x30) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = accept$alg(r0, 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)=""/216, 0xd8}], 0x1}, 0x100}], 0x1, 0x20, 0x0) 2.639285531s ago: executing program 2 (id=335): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file5\x00', 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus\x00') io_uring_setup(0x2a69, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x1c) unlink(&(0x7f0000000000)='./bus\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 2.639142231s ago: executing program 4 (id=336): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4c4ac000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x88000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000940)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r4 = socket(0x10, 0x3, 0x4) r5 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) r6 = syz_open_procfs(r5, 0x0) pread64(r6, &(0x7f0000000140)=""/15, 0xf, 0x4) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x24, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xfff1, 0x5}, {0x6, 0x8}}}, 0x24}}, 0x8000) 2.618482871s ago: executing program 2 (id=337): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x700}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.614136551s ago: executing program 1 (id=338): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) sendfile(r0, r0, 0x0, 0x5) 2.528613422s ago: executing program 1 (id=339): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 2.409959653s ago: executing program 1 (id=340): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x1d, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.246680936s ago: executing program 4 (id=342): mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) unshare(0xc060200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) unshare(0x8000000) unshare(0x28000400) 1.246485226s ago: executing program 0 (id=343): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f00000001c0)=[{}], 0x1, 0x5) 1.215093817s ago: executing program 3 (id=344): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0xc0102, 0x0) syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c00f7a98a6f3da4519f4b38d9450092aac2c7cefa"], 0x1, 0x1cf, &(0x7f00000002c0)="$eJzKKC4s5mdgYPj7sSaZQYABDBgZeBguMDAysDAwMKgzQsQYmCDUeij/BZSeCZW2gfKbofRCKF1xS3vdmlN+Z0566motk2VmaPXUlkcWk0vtMXKTXMwjwcwQmnpkUXFlVXZiTk5qUfFChopbyUkVp08wsFy3v6bSLMHp8EeewyFJ00GH6YiPR9aMxhLOSVKaYmxsmQpnz3yQX8emcYTh0QrmjXWeeY11halT89LykqqyqrLmTZy4cWZjZ2Pjyol1UWl+qxhbUlw2NXUyMjlsURPYzGyoPslGe8K79lUPkxxYezz8mk8ZK71OZb5kvLBI6tSKqpkTvijNZjT8znCHp2yFhIaGk8QVCYsGE4YjdbYNriAnpjQwpCmEMSapsYm1bTkzJ4SZn81tgUJL8gmm0KMcS2dKWBwQqjr501LzrUOi24xtTx3YzvAcPs6zpqBP0Oi4BIPTQsH/MiBjEhoayjTWMi21XfClSOOvhNdqY6cMBnd7pmWwAGVpAJEroTxZsJ6E5BUeOpqaRinJCQ2bJBKS3AoMlRm27uFcLdDAgBRtKgwMDNsZYXELAddgjFEwCkbBKBgFo2AUjIJRMApGwSgYBSMCAAIAAP//wHCY0w==") syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 108.592839ms ago: executing program 0 (id=345): bpf$MAP_CREATE(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40000182, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 108.403589ms ago: executing program 1 (id=346): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) syz_usb_connect$uac2(0x0, 0x98, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100300000010351212824000010203010902860003010d5003080b00010108209809040000000101200009240106000626006e0c240303010105030251c70011240202"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 81.337999ms ago: executing program 4 (id=347): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) 0s ago: executing program 0 (id=348): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file5\x00', 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus\x00') io_uring_setup(0x2a69, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x1c) unlink(&(0x7f0000000000)='./bus\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.182' (ED25519) to the list of known hosts. [ 67.099517][ T4176] cgroup: Unknown subsys name 'net' [ 67.240917][ T4176] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.818982][ T4176] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 70.339100][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 70.359912][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 70.403608][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 70.442788][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 70.486923][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.494916][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.503517][ T4197] device bridge_slave_0 entered promiscuous mode [ 70.516606][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.523804][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.531889][ T4197] device bridge_slave_1 entered promiscuous mode [ 70.565124][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 70.622527][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.663025][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.672487][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.680232][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.688712][ T4191] device bridge_slave_0 entered promiscuous mode [ 70.701554][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.709002][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.717652][ T4191] device bridge_slave_1 entered promiscuous mode [ 70.761143][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.768506][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.776882][ T4189] device bridge_slave_0 entered promiscuous mode [ 70.784629][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.791739][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.800421][ T4196] device bridge_slave_0 entered promiscuous mode [ 70.826657][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.834001][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.841839][ T4189] device bridge_slave_1 entered promiscuous mode [ 70.849748][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.857298][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.865606][ T4196] device bridge_slave_1 entered promiscuous mode [ 70.874589][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.887437][ T4197] team0: Port device team_slave_0 added [ 70.896700][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.933166][ T4197] team0: Port device team_slave_1 added [ 70.961337][ T4191] team0: Port device team_slave_0 added [ 70.981963][ T4191] team0: Port device team_slave_1 added [ 70.988098][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.995640][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.004030][ T4190] device bridge_slave_0 entered promiscuous mode [ 71.020565][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.032002][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.049715][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.057102][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.065754][ T4190] device bridge_slave_1 entered promiscuous mode [ 71.073585][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.081233][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.107472][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.121382][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.130991][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.138267][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.164446][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.178430][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.222728][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.240694][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.258814][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.266034][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.292260][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.328566][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.335165][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.356688][ T4190] team0: Port device team_slave_0 added [ 71.363230][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.370525][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.396902][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.411130][ T4189] team0: Port device team_slave_0 added [ 71.419642][ T4196] team0: Port device team_slave_0 added [ 71.432601][ T4197] device hsr_slave_0 entered promiscuous mode [ 71.439840][ T4197] device hsr_slave_1 entered promiscuous mode [ 71.448514][ T4190] team0: Port device team_slave_1 added [ 71.462671][ T4189] team0: Port device team_slave_1 added [ 71.474715][ T4196] team0: Port device team_slave_1 added [ 71.495254][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.502264][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.528667][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.541844][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.549254][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.575784][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.639788][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.647163][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.673444][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.692108][ T4191] device hsr_slave_0 entered promiscuous mode [ 71.699162][ T4191] device hsr_slave_1 entered promiscuous mode [ 71.706023][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.713945][ T4191] Cannot create hsr debugfs directory [ 71.726513][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.733504][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.759596][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.771621][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.778918][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.805238][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.839433][ T4190] device hsr_slave_0 entered promiscuous mode [ 71.846740][ T4190] device hsr_slave_1 entered promiscuous mode [ 71.853451][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.862096][ T4190] Cannot create hsr debugfs directory [ 71.868487][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.875909][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.902483][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.964601][ T4201] Bluetooth: hci4: command 0x0409 tx timeout [ 71.964601][ T1108] Bluetooth: hci3: command 0x0409 tx timeout [ 71.966354][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 72.020684][ T4189] device hsr_slave_0 entered promiscuous mode [ 72.027792][ T4189] device hsr_slave_1 entered promiscuous mode [ 72.034889][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.042482][ T4189] Cannot create hsr debugfs directory [ 72.048211][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 72.054661][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 72.116300][ T4196] device hsr_slave_0 entered promiscuous mode [ 72.123479][ T4196] device hsr_slave_1 entered promiscuous mode [ 72.130651][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.138383][ T4196] Cannot create hsr debugfs directory [ 72.401798][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.418703][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.427995][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.444743][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.472643][ T4197] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.495987][ T4197] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.506005][ T4197] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.519760][ T4197] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.563293][ T4190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.590033][ T4190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.618821][ T4190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.641714][ T4190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.665707][ T4196] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.701752][ T4196] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.732835][ T4196] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.762660][ T4196] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.773128][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.791058][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.816817][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.842959][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.857106][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.871241][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.887522][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.898327][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.909682][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.927024][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.935403][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.956260][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.966768][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.976720][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.984276][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.994790][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.003560][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.013016][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.020143][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.031521][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.042846][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.052735][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.091052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.100304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.111192][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.118313][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.127970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.137396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.176137][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.186408][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.196710][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.206033][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.216358][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.225745][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.235444][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.244270][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.251347][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.259740][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.289577][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.300350][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.312839][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.323192][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.333957][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.342478][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.351380][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.369544][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.383538][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.393364][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.417487][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.427237][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.442396][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.460435][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.471095][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.480946][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.491137][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.507149][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.520019][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.546860][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.560729][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.570158][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.580842][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.589153][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.597628][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.606563][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.619300][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.627954][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.637137][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.646903][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.661213][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.676618][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.709961][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.724135][ T4245] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.731257][ T4245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.748707][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.780955][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.795144][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.814245][ T1277] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.821368][ T1277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.829346][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.838239][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.847257][ T1277] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.854394][ T1277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.862208][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.871638][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.880617][ T1277] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.887755][ T1277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.896473][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.906571][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.917033][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.925891][ T1277] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.932979][ T1277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.941598][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.950545][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.959126][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.970828][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.980075][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.989362][ T1277] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.996521][ T1277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.015261][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.029905][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.047890][ T2304] Bluetooth: hci0: command 0x041b tx timeout [ 74.063603][ T2304] Bluetooth: hci4: command 0x041b tx timeout [ 74.093979][ T2304] Bluetooth: hci3: command 0x041b tx timeout [ 74.100807][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.115965][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.123516][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.132039][ T4241] Bluetooth: hci1: command 0x041b tx timeout [ 74.139110][ T4241] Bluetooth: hci2: command 0x041b tx timeout [ 74.146454][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.157106][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.166800][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.176022][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.185472][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.194487][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.203367][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.212916][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.221577][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.230439][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.239370][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.248236][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.259021][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.267895][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.276897][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.286112][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.294753][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.303284][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.312510][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.321480][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.329781][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.340035][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.355445][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.366551][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.387230][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.397356][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.406156][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.415063][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.427089][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.443478][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.455735][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.463284][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.478502][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.492032][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.555777][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.572484][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.614606][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.626448][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.645505][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.679278][ T4197] device veth0_vlan entered promiscuous mode [ 74.697555][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.708660][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.723234][ T4191] device veth0_vlan entered promiscuous mode [ 74.734747][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.743310][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.758411][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.771755][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.787912][ T4197] device veth1_vlan entered promiscuous mode [ 74.809942][ T4191] device veth1_vlan entered promiscuous mode [ 74.824786][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.843785][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.851872][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.865786][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.923181][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.932412][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.941829][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.953941][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.972809][ T4197] device veth0_macvtap entered promiscuous mode [ 74.992396][ T4197] device veth1_macvtap entered promiscuous mode [ 75.006121][ T4191] device veth0_macvtap entered promiscuous mode [ 75.014272][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.022636][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.034746][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.045803][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.054270][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.061799][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.071682][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.079790][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.088181][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.107784][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.132256][ T4191] device veth1_macvtap entered promiscuous mode [ 75.153065][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.168871][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.182028][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.191787][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.206502][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.218271][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.230129][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.251031][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.262719][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.275845][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.288071][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.305462][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.319354][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.342354][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.352551][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.368652][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.381709][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.398492][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.420640][ T4197] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.430048][ T4197] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.438951][ T4197] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.447825][ T4197] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.462747][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.470520][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.479866][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.492176][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.501899][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.514453][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.523548][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.533430][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.542905][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.638253][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.656098][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.673359][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.681552][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.696204][ T4189] device veth0_vlan entered promiscuous mode [ 75.712037][ T4189] device veth1_vlan entered promiscuous mode [ 75.753157][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.768281][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.777866][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.787962][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.818968][ T4189] device veth0_macvtap entered promiscuous mode [ 75.839962][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.849138][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.858471][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.867946][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.877504][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.916064][ T4189] device veth1_macvtap entered promiscuous mode [ 75.952807][ T4245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.962895][ T4245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.967476][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.981839][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.992525][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.002545][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.017330][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.025755][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.044556][ T4190] device veth0_vlan entered promiscuous mode [ 76.056210][ T4196] device veth0_vlan entered promiscuous mode [ 76.064948][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.072826][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.087374][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.099753][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.110179][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.120998][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.125038][ T4238] Bluetooth: hci3: command 0x040f tx timeout [ 76.138088][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.147262][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.147429][ T4238] Bluetooth: hci4: command 0x040f tx timeout [ 76.158892][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.169980][ T4238] Bluetooth: hci0: command 0x040f tx timeout [ 76.171148][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.185274][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.194558][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.204434][ T4238] Bluetooth: hci2: command 0x040f tx timeout [ 76.210735][ T4238] Bluetooth: hci1: command 0x040f tx timeout [ 76.215951][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.225533][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.246076][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.259490][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.270119][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.281112][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.295840][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.319227][ T4190] device veth1_vlan entered promiscuous mode [ 76.333979][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.343087][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.353917][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.371442][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.381681][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.391001][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.400959][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.423157][ T4196] device veth1_vlan entered promiscuous mode [ 76.440343][ T4245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.454571][ T4245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.463480][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.472931][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.483192][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.491756][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.501335][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.513306][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.558758][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.576909][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.588038][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.612967][ T4196] device veth0_macvtap entered promiscuous mode [ 76.664086][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.687387][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.710169][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.731672][ T4190] device veth0_macvtap entered promiscuous mode [ 76.741768][ T4196] device veth1_macvtap entered promiscuous mode [ 76.789519][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.803555][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.819538][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.831045][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.854482][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.874356][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.892120][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.921214][ T1277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.940282][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.986113][ T1277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.003884][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.015501][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.026666][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.037098][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.048038][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.060601][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.071442][ T4190] device veth1_macvtap entered promiscuous mode [ 77.085689][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.098189][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.127531][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.137686][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.154027][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.163354][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.176885][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.192723][ T4196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.208348][ T4196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.217983][ T4196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.228214][ T4196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.298415][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.310277][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.320230][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.339327][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.368840][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.397361][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.425517][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.447222][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.459507][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.473543][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.673699][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 78.243739][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 78.253717][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 78.263720][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 78.273719][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 78.283720][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 78.293719][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 78.303715][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 78.313721][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 78.323712][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 79.284270][ T2304] Bluetooth: hci0: command 0x0419 tx timeout [ 79.291697][ T2304] Bluetooth: hci4: command 0x0419 tx timeout [ 79.300349][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.308809][ T2304] Bluetooth: hci3: command 0x0419 tx timeout [ 79.317209][ T2304] Bluetooth: hci1: command 0x0419 tx timeout [ 79.328295][ T2304] Bluetooth: hci2: command 0x0419 tx timeout [ 79.337406][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.347978][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.364608][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.385437][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.413742][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.449272][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.464027][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.485984][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.514020][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.532485][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.563709][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.585502][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.630208][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.642085][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.689745][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.714059][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.733044][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.753625][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.882926][ T4245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.920007][ T4245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.945811][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.005020][ T4245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.012901][ T4245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.050838][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.087311][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.114365][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.157270][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.171491][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.186788][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.211985][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.234212][ T4237] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 80.310503][ T4290] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.572451][ T4296] loop1: detected capacity change from 0 to 256 [ 80.943802][ T4237] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.985571][ T4237] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 81.134016][ T4237] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 81.144445][ T4237] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 81.152734][ T4237] usb 1-1: SerialNumber: syz [ 81.664527][ T4303] loop2: detected capacity change from 0 to 256 [ 82.612769][ T4237] usb 1-1: 0:2 : does not exist [ 82.713685][ C1] sched: RT throttling activated [ 82.728935][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 82.749019][ T4237] usb 1-1: USB disconnect, device number 2 [ 82.901907][ T4303] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 83.129998][ T4182] udevd[4182]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 83.206170][ T7] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 83.243781][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.280971][ T4314] loop2: detected capacity change from 0 to 256 [ 83.292979][ T7] usb 5-1: config 0 descriptor?? [ 83.298362][ T4238] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 83.383257][ T4314] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 83.501822][ T4314] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 83.558518][ T4314] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 83.771030][ T4319] input: syz1 as /devices/virtual/input/input5 [ 84.104317][ T4238] usb 2-1: unable to get BOS descriptor or descriptor too short [ 84.554470][ T4238] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.567264][ T4238] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 84.577413][ T4238] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 84.589506][ T4238] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 84.603293][ T4238] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 84.619732][ T4238] usb 2-1: config 1 interface 1 has no altsetting 0 [ 84.832798][ T4326] loop0: detected capacity change from 0 to 1024 [ 84.864310][ T4238] usb 2-1: string descriptor 0 read error: -22 [ 84.877044][ T4238] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 84.886717][ T4238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.900450][ T4326] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (23577!=28264) [ 84.913960][ T4326] EXT4-fs (loop0): group descriptors corrupted! [ 84.920687][ T4329] device wlan0 entered promiscuous mode [ 84.935048][ T4331] loop3: detected capacity change from 0 to 256 [ 84.970171][ T4329] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 85.014414][ T4331] ======================================================= [ 85.014414][ T4331] WARNING: The mand mount option has been deprecated and [ 85.014414][ T4331] and is ignored by this kernel. Remove the mand [ 85.014414][ T4331] option from the mount to silence this warning. [ 85.014414][ T4331] ======================================================= [ 85.158628][ T4331] exfat: Bad value for 'uid' [ 86.775628][ T1325] cfg80211: failed to load regulatory.db [ 86.865335][ T2304] usb 5-1: USB disconnect, device number 2 [ 88.363892][ T4238] usb 2-1: cannot get ctl value: req = 0x82, wValue = 0x201, wIndex = 0x200, type = 4 [ 88.393775][ T4238] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 88.473089][ T4238] usb 2-1: USB disconnect, device number 2 [ 88.805255][ T4347] loop2: detected capacity change from 0 to 2048 [ 89.869640][ T4347] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,nombcache,,errors=continue. Quota mode: none. [ 89.897265][ T4356] loop3: detected capacity change from 0 to 256 [ 89.905582][ T4311] udevd[4311]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 90.137439][ T26] audit: type=1326 audit(1778414690.767:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4358 comm="syz.1.25" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1147099dd9 code=0x0 [ 92.297163][ T4371] loop2: detected capacity change from 0 to 16 [ 92.367049][ T4372] loop1: detected capacity change from 0 to 2048 [ 92.835662][ T4378] device wlan0 entered promiscuous mode [ 92.871543][ T4378] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 92.977629][ T4380] loop3: detected capacity change from 0 to 8 [ 93.113966][ T4237] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 93.185640][ T4371] erofs: (device loop2): mounted with root inode @ nid 36. [ 93.277418][ T4372] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 93.323230][ T26] audit: type=1800 audit(1778414693.947:3): pid=4380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.31" name="file1" dev="loop3" ino=1 res=0 errno=0 [ 93.403802][ T4380] SQUASHFS error: Failed to read block 0x285: -5 [ 93.410439][ T4380] SQUASHFS error: Unable to read metadata cache entry [283] [ 93.439717][ T4380] SQUASHFS error: read_indexes: reading block [283:0] [ 93.459263][ T4380] SQUASHFS error: Unable to read metadata cache entry [283] [ 93.481242][ T4380] SQUASHFS error: read_indexes: reading block [283:0] [ 93.500854][ T4380] SQUASHFS error: Unable to read metadata cache entry [283] [ 93.535279][ T4380] SQUASHFS error: read_indexes: reading block [283:0] [ 93.549287][ T4237] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.570996][ T4237] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 93.592299][ T4380] SQUASHFS error: Unable to read metadata cache entry [283] [ 93.603305][ T4380] SQUASHFS error: read_indexes: reading block [283:0] [ 93.614665][ T4380] SQUASHFS error: Unable to read metadata cache entry [283] [ 93.622144][ T4380] SQUASHFS error: read_indexes: reading block [283:0] [ 93.634183][ T4380] SQUASHFS error: Unable to read metadata cache entry [283] [ 93.641705][ T4380] SQUASHFS error: read_indexes: reading block [283:0] [ 93.657347][ T4380] SQUASHFS error: Unable to read metadata cache entry [283] [ 93.675473][ T4380] SQUASHFS error: read_indexes: reading block [283:0] [ 93.682746][ T4380] SQUASHFS error: Unable to read metadata cache entry [283] [ 93.696230][ T4380] SQUASHFS error: read_indexes: reading block [283:0] [ 93.703508][ T4380] SQUASHFS error: Unable to read metadata cache entry [283] [ 93.711649][ T4237] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 93.727088][ T4380] SQUASHFS error: read_indexes: reading block [283:0] [ 93.727369][ T4387] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 93.744730][ T4237] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 93.753004][ T4237] usb 5-1: SerialNumber: syz [ 93.760190][ T4385] loop2: detected capacity change from 0 to 4096 [ 93.767572][ T4380] SQUASHFS error: Unable to read metadata cache entry [283] [ 93.787825][ T4380] SQUASHFS error: read_indexes: reading block [283:0] [ 93.795504][ T4380] SQUASHFS error: Unable to read metadata cache entry [283] [ 93.803054][ T4380] SQUASHFS error: read_indexes: reading block [283:0] [ 93.810838][ T4387] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 93.825431][ T4385] EXT4-fs (loop2): inline encryption not supported [ 93.851846][ T4385] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0003] [ 93.864206][ T4385] System zones: 0-5 [ 93.908262][ T4385] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,mb_optimize_scan=0x0000000000000000,inlinecrypt,nobarrier,errors=continue,errors=continue,delalloc,nouid32,,errors=continue. Quota mode: writeback. [ 94.053948][ T4393] capability: warning: `syz.3.36' uses deprecated v2 capabilities in a way that may be insecure [ 94.078007][ T4237] usb 5-1: 0:2 : does not exist [ 94.123805][ T4393] loop3: detected capacity change from 0 to 1024 [ 94.153954][ T4396] loop1: detected capacity change from 0 to 256 [ 94.174723][ T4237] usb 5-1: USB disconnect, device number 3 [ 94.455028][ T4398] loop2: detected capacity change from 0 to 128 [ 94.501137][ T4182] udevd[4182]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.154507][ T4405] loop0: detected capacity change from 0 to 8 [ 95.915113][ T4405] unable to read id index table [ 96.022979][ T4409] loop3: detected capacity change from 0 to 2048 [ 96.252418][ T4409] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 96.260730][ T4409] UDF-fs: Scanning with blocksize 512 failed [ 96.278599][ T4409] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.284498][ T4398] loop_set_status: loop2 () has still dirty pages (nrpages=16) [ 97.097687][ T4419] loop1: detected capacity change from 0 to 2048 [ 97.417337][ T4439] loop4: detected capacity change from 0 to 256 [ 97.531197][ T4442] loop1: detected capacity change from 0 to 8 [ 97.610227][ T4442] SQUASHFS error: Unable to read directory block [1d0:62] [ 97.639451][ T4442] netlink: 'syz.1.51': attribute type 1 has an invalid length. [ 97.757317][ T4442] netlink: 56 bytes leftover after parsing attributes in process `syz.1.51'. [ 98.345269][ T4178] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 99.561686][ T4464] device wlan0 entered promiscuous mode [ 99.593042][ T4464] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 99.656375][ T4460] loop_set_status: loop4 () has still dirty pages (nrpages=32) [ 99.694067][ T4178] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.723120][ T4178] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.834144][ T4178] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 99.857262][ T4178] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 99.877045][ T4178] usb 4-1: SerialNumber: syz [ 100.912111][ T4471] fuse: Bad value for 'user_id' [ 101.817471][ T4178] usb 4-1: 0:2 : does not exist [ 101.828683][ T4476] loop4: detected capacity change from 0 to 512 [ 101.877952][ T4485] loop3: detected capacity change from 0 to 256 [ 101.884315][ T4178] usb 4-1: USB disconnect, device number 2 [ 102.012483][ T4476] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 2: comm syz.4.64: invalid block [ 102.026917][ T4489] loop2: detected capacity change from 0 to 256 [ 102.067199][ T4476] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.64: invalid indirect mapped block 10 (level 1) [ 102.147220][ T4476] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.64: invalid indirect mapped block 8 (level 1) [ 102.363337][ T4311] udevd[4311]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.384453][ T4476] EXT4-fs (loop4): 1 truncate cleaned up [ 102.390163][ T4476] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 105.185791][ T2304] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 105.394096][ T26] audit: type=1326 audit(1778414705.937:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4514 comm="syz.4.74" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc61b930dd9 code=0x0 [ 106.177684][ T2304] usb 3-1: Using ep0 maxpacket: 32 [ 106.223457][ T4523] loop1: detected capacity change from 0 to 2048 [ 106.287795][ T4311] loop1: p2 p3 < > p4 < p5 > [ 106.293259][ T4311] loop1: partition table partially beyond EOD, truncated [ 106.301085][ T2304] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 106.309530][ T2304] usb 3-1: config 0 has no interface number 0 [ 106.328796][ T2304] usb 3-1: config 0 interface 184 has no altsetting 0 [ 106.341015][ T4311] loop1: p2 start 53543428 is beyond EOD, truncated [ 106.361558][ T4311] loop1: p3 start 4284289 is beyond EOD, truncated [ 106.392915][ T4311] loop1: p5 start 53543428 is beyond EOD, truncated [ 106.454438][ T4523] loop1: p2 p3 < > p4 < p5 > [ 106.484888][ T4523] loop1: partition table partially beyond EOD, truncated [ 106.504209][ T4523] loop1: p2 start 53543428 is beyond EOD, truncated [ 106.518375][ T2304] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 106.522792][ T4523] loop1: p3 start 4284289 is beyond EOD, [ 106.542457][ T2304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.581525][ T2304] usb 3-1: Product: syz [ 106.597221][ T2304] usb 3-1: Manufacturer: syz [ 106.606538][ T4523] truncated [ 106.618557][ T2304] usb 3-1: SerialNumber: syz [ 106.697419][ T4523] loop1: p5 start 53543428 is beyond EOD, truncated [ 106.705405][ T2304] usb 3-1: config 0 descriptor?? [ 106.778442][ T2304] smsc75xx v1.0.0 [ 106.783369][ T3561] loop1: p2 p3 < > p4 < p5 > [ 106.792962][ T3561] loop1: partition table partially beyond EOD, truncated [ 106.807425][ T3561] loop1: p2 start 53543428 is beyond EOD, truncated [ 106.814165][ T3561] loop1: p3 start 4284289 is beyond EOD, truncated [ 107.224306][ T2304] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 107.243869][ T3561] loop1: p5 start 53543428 is beyond EOD, truncated [ 107.301596][ T2304] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 107.553994][ T2304] usb 3-1: USB disconnect, device number 2 [ 107.792004][ T4541] loop0: detected capacity change from 0 to 8 [ 107.858999][ T4311] udevd[4311]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 107.902323][ T4543] loop2: detected capacity change from 0 to 2048 [ 107.927971][ T4547] loop1: detected capacity change from 0 to 256 [ 107.936685][ T26] audit: type=1800 audit(1778414708.567:5): pid=4541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.82" name="file1" dev="loop0" ino=1 res=0 errno=0 [ 107.961761][ T4541] SQUASHFS error: Failed to read block 0x285: -5 [ 107.979328][ T4541] SQUASHFS error: Unable to read metadata cache entry [283] [ 108.022009][ T4541] SQUASHFS error: read_indexes: reading block [283:0] [ 108.043928][ T4541] SQUASHFS error: Unable to read metadata cache entry [283] [ 108.051909][ T4541] SQUASHFS error: read_indexes: reading block [283:0] [ 108.069138][ T4543] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 108.094893][ T4541] SQUASHFS error: Unable to read metadata cache entry [283] [ 108.134009][ T4543] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.170505][ T4541] SQUASHFS error: read_indexes: reading block [283:0] [ 108.294318][ T4541] SQUASHFS error: Unable to read metadata cache entry [283] [ 108.323790][ T4541] SQUASHFS error: read_indexes: reading block [283:0] [ 108.439790][ T4541] SQUASHFS error: Unable to read metadata cache entry [283] [ 109.013353][ T4541] SQUASHFS error: read_indexes: reading block [283:0] [ 109.021499][ T4541] SQUASHFS error: Unable to read metadata cache entry [283] [ 109.047740][ T4541] SQUASHFS error: read_indexes: reading block [283:0] [ 109.096078][ T4563] usb usb8: usbfs: process 4563 (syz.4.88) did not claim interface 0 before use [ 109.114593][ T4541] SQUASHFS error: Unable to read metadata cache entry [283] [ 109.121993][ T4541] SQUASHFS error: read_indexes: reading block [283:0] [ 109.153162][ T4541] SQUASHFS error: Unable to read metadata cache entry [283] [ 109.183830][ T2304] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 109.193743][ T4541] SQUASHFS error: read_indexes: reading block [283:0] [ 109.200663][ T4541] SQUASHFS error: Unable to read metadata cache entry [283] [ 110.682127][ T4541] SQUASHFS error: read_indexes: reading block [283:0] [ 110.713833][ T4541] SQUASHFS error: Unable to read metadata cache entry [283] [ 110.756617][ T4541] SQUASHFS error: read_indexes: reading block [283:0] [ 110.791541][ T4572] loop1: detected capacity change from 0 to 128 [ 110.815732][ T4311] udevd[4311]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 110.836628][ T4572] FAT-fs (loop1): Unrecognized mount option "shortn" or missing value [ 110.963867][ T2304] usb 4-1: Using ep0 maxpacket: 8 [ 111.084057][ T2304] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 111.102622][ T2304] usb 4-1: config 179 has no interface number 0 [ 111.131370][ T2304] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 111.182860][ T2304] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 111.214441][ T4580] syz.1.95 uses obsolete (PF_INET,SOCK_PACKET) [ 111.245325][ T2304] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 111.334338][ T2304] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 111.401994][ T2304] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 111.424097][ T2304] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 111.437631][ T2304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.489107][ T2304] usb 4-1: can't set config #179, error -71 [ 111.501993][ T2304] usb 4-1: USB disconnect, device number 3 [ 111.958763][ T4587] loop3: detected capacity change from 0 to 1024 [ 112.056190][ T4593] loop4: detected capacity change from 0 to 256 [ 113.547226][ T4587] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 113.566936][ T4594] loop1: detected capacity change from 0 to 2048 [ 113.576516][ T4587] jbd2_journal_init_inode: Cannot locate journal superblock [ 113.587511][ T4587] EXT4-fs (loop3): Could not load journal inode [ 113.679942][ T4594] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 113.754185][ T4594] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.180895][ T4612] loop1: detected capacity change from 0 to 8 [ 115.262824][ T4611] loop2: detected capacity change from 0 to 2048 [ 115.321776][ T4611] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.340735][ T26] audit: type=1800 audit(1778414715.967:6): pid=4612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.105" name="file1" dev="loop1" ino=1 res=0 errno=0 [ 115.370520][ T4612] SQUASHFS error: Failed to read block 0x285: -5 [ 115.424059][ T4612] SQUASHFS error: Unable to read metadata cache entry [283] [ 115.472500][ T4614] loop3: detected capacity change from 0 to 4096 [ 115.482341][ T4612] SQUASHFS error: read_indexes: reading block [283:0] [ 115.549829][ T4614] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 115.574935][ T4612] SQUASHFS error: Unable to read metadata cache entry [283] [ 115.600866][ T4612] SQUASHFS error: read_indexes: reading block [283:0] [ 115.660381][ T4612] SQUASHFS error: Unable to read metadata cache entry [283] [ 115.718806][ T4612] SQUASHFS error: read_indexes: reading block [283:0] [ 115.733961][ T4612] SQUASHFS error: Unable to read metadata cache entry [283] [ 115.741322][ T4612] SQUASHFS error: read_indexes: reading block [283:0] [ 115.904019][ T4612] SQUASHFS error: Unable to read metadata cache entry [283] [ 115.923978][ T4612] SQUASHFS error: read_indexes: reading block [283:0] [ 115.977486][ T4612] SQUASHFS error: Unable to read metadata cache entry [283] [ 116.056483][ T4612] SQUASHFS error: read_indexes: reading block [283:0] [ 116.063380][ T4612] SQUASHFS error: Unable to read metadata cache entry [283] [ 116.079867][ T4612] SQUASHFS error: read_indexes: reading block [283:0] [ 116.087164][ T4612] SQUASHFS error: Unable to read metadata cache entry [283] [ 116.112393][ T4623] loop3: detected capacity change from 0 to 512 [ 116.126429][ T4612] SQUASHFS error: read_indexes: reading block [283:0] [ 116.160159][ T4612] SQUASHFS error: Unable to read metadata cache entry [283] [ 116.175772][ T4623] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 116.208971][ T4612] SQUASHFS error: read_indexes: reading block [283:0] [ 116.264220][ T4612] SQUASHFS error: Unable to read metadata cache entry [283] [ 117.636226][ T4623] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 117.694445][ T4612] SQUASHFS error: read_indexes: reading block [283:0] [ 117.712305][ T4623] EXT4-fs (loop3): 1 truncate cleaned up [ 117.733790][ T4623] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 117.968401][ T4634] loop4: detected capacity change from 0 to 2048 [ 118.080384][ T4639] loop1: detected capacity change from 0 to 256 [ 118.495563][ T4648] loop1: detected capacity change from 0 to 16 [ 118.528677][ T4648] erofs: (device loop1): mounted with root inode @ nid 36. [ 119.234967][ T4651] loop3: detected capacity change from 0 to 2048 [ 119.387507][ T4651] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 119.413891][ T4651] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.491166][ T4659] loop4: detected capacity change from 0 to 1024 [ 120.270611][ T154] hfsplus: b-tree write err: -5, ino 25 [ 121.654003][ T154] hfsplus: b-tree write err: -5, ino 4 [ 121.685905][ T154] hfsplus: b-tree write err: -5, ino 2 [ 121.715405][ T26] audit: type=1326 audit(1778414722.347:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4670 comm="syz.0.111" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0838358dd9 code=0x7ffc0000 [ 121.824966][ T26] audit: type=1326 audit(1778414722.347:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4670 comm="syz.0.111" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0838358dd9 code=0x7ffc0000 [ 121.896841][ T4673] input: syz1 as /devices/virtual/input/input6 [ 121.944700][ T26] audit: type=1326 audit(1778414722.357:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4670 comm="syz.0.111" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0838358dd9 code=0x7ffc0000 [ 123.599464][ T26] audit: type=1326 audit(1778414722.357:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4670 comm="syz.0.111" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0838358dd9 code=0x7ffc0000 [ 123.681932][ T26] audit: type=1326 audit(1778414722.357:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4670 comm="syz.0.111" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f0838358dd9 code=0x7ffc0000 [ 123.833948][ T26] audit: type=1326 audit(1778414722.357:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4670 comm="syz.0.111" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0838358dd9 code=0x7ffc0000 [ 123.858520][ T26] audit: type=1326 audit(1778414722.357:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4670 comm="syz.0.111" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0838358dd9 code=0x7ffc0000 [ 123.970832][ T4690] loop0: detected capacity change from 0 to 512 [ 124.064553][ T4690] EXT4-fs (loop0): Unrecognized mount option "obj_role='];]" or missing value [ 125.155094][ T4696] loop3: detected capacity change from 0 to 1024 [ 125.299660][ T4701] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 125.332845][ T26] audit: type=1800 audit(1778414725.957:14): pid=4696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.131" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 125.445014][ T154] hfsplus: b-tree write err: -5, ino 25 [ 125.450823][ T154] hfsplus: b-tree write err: -5, ino 4 [ 125.465555][ T154] hfsplus: b-tree write err: -5, ino 2 [ 125.564889][ T4705] loop3: detected capacity change from 0 to 512 [ 125.608729][ T4705] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #2: block 3: comm syz.3.133: lblock 0 mapped to illegal pblock 3 (length 1) [ 125.658264][ T4705] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.133: error -117 reading directory block [ 125.699974][ T4705] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 125.721923][ T4705] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,nodelalloc,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,nolazytime,grpjquota=.journal_async_commit,resuid=0x0000000000000000,barrier=0x0000000000001000,grpid,,,errors=continue. Quota mode: writeback. [ 126.024984][ T4705] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #2: block 3: comm syz.3.133: lblock 0 mapped to illegal pblock 3 (length 1) [ 126.173812][ T4705] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.133: error -117 reading directory block [ 127.615387][ T4722] loop4: detected capacity change from 0 to 256 [ 127.878687][ T4713] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #2: block 3: comm syz.3.133: lblock 0 mapped to illegal pblock 3 (length 1) [ 127.943758][ T4713] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.133: error -117 reading directory block [ 128.131863][ T4722] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 128.292973][ T4728] loop0: detected capacity change from 0 to 2048 [ 128.350592][ T4728] loop0: p2 p3 < > p4 < p5 > [ 128.361135][ T4705] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #2: block 3: comm syz.3.133: lblock 0 mapped to illegal pblock 3 (length 1) [ 128.378718][ T4705] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.133: error -117 reading directory block [ 128.403802][ T4728] loop0: partition table partially beyond EOD, truncated [ 128.411073][ T4728] loop0: p2 start 53543428 is beyond EOD, truncated [ 128.439286][ T4728] loop0: p3 start 4284289 is beyond EOD, truncated [ 128.457373][ T4728] loop0: p5 start 53543428 is beyond EOD, truncated [ 129.883735][ T4707] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set [ 129.931026][ T3561] loop0: p2 p3 < > p4 < p5 > [ 129.966312][ T3561] loop0: partition table partially beyond EOD, truncated [ 130.019819][ T3561] loop0: p2 start 53543428 is beyond EOD, truncated [ 130.062316][ T3561] loop0: p3 start 4284289 is beyond EOD, truncated [ 130.089659][ T3561] loop0: p5 start 53543428 is beyond EOD, truncated [ 130.183329][ T4738] loop3: detected capacity change from 0 to 1024 [ 130.237157][ T4182] udevd[4182]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 130.288031][ T26] audit: type=1800 audit(1778414730.917:15): pid=4738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.144" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 130.392732][ T4743] loop2: detected capacity change from 0 to 256 [ 130.422970][ T4322] hfsplus: b-tree write err: -5, ino 25 [ 130.439507][ T4322] hfsplus: b-tree write err: -5, ino 4 [ 130.459562][ T4322] hfsplus: b-tree write err: -5, ino 2 [ 130.481997][ T4745] loop0: detected capacity change from 0 to 1024 [ 130.540749][ T4745] hfsplus: invalid length 32517 has been corrected to 255 [ 130.610321][ T4743] input: syz1 as /devices/virtual/input/input7 [ 130.622939][ T4745] hfsplus: invalid length 32517 has been corrected to 255 [ 130.635260][ T4311] udevd[4311]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 130.658954][ T4745] hfsplus: invalid length 32517 has been corrected to 255 [ 130.751505][ T155] hfsplus: b-tree write err: -5, ino 25 [ 130.772978][ T155] hfsplus: b-tree write err: -5, ino 4 [ 130.788723][ T155] hfsplus: b-tree write err: -5, ino 2 [ 131.083534][ T4755] loop1: detected capacity change from 0 to 2048 [ 131.113835][ T4178] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 131.240829][ T4758] loop4: detected capacity change from 0 to 512 [ 131.429595][ T4762] loop1: detected capacity change from 0 to 256 [ 131.537879][ T4762] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 131.560213][ T4764] loop3: detected capacity change from 0 to 512 [ 131.604412][ T4178] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.943961][ T4178] usb 3-1: string descriptor 0 read error: -22 [ 131.950292][ T4178] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 131.985449][ T4764] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 132.021926][ T4777] loop0: detected capacity change from 0 to 256 [ 132.029186][ T4178] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.125382][ T4764] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.239549][ T4764] device syzkaller0 entered promiscuous mode [ 132.261140][ T4777] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 132.334585][ T4777] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 132.637008][ T4777] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 132.880277][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.887040][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.919042][ T4751] loop2: detected capacity change from 0 to 512 [ 133.009442][ T4178] usb 3-1: bad CDC descriptors [ 133.088429][ T4751] EXT4-fs (loop2): Ignoring removed oldalloc option [ 133.159924][ T4751] EXT4-fs (loop2): mounted filesystem without journal. Opts: acl,nodiscard,oldalloc,,errors=continue. Quota mode: none. [ 133.181032][ T4785] loop1: detected capacity change from 0 to 1024 [ 134.602632][ T26] audit: type=1800 audit(1778414735.227:16): pid=4785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.158" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 134.645482][ T1277] hfsplus: b-tree write err: -5, ino 25 [ 134.658108][ T1277] hfsplus: b-tree write err: -5, ino 4 [ 134.670247][ T1277] hfsplus: b-tree write err: -5, ino 2 [ 134.671411][ T4751] fscrypt (loop2, inode 18): Can't use IV_INO_LBLK_32 policy with contents mode other than AES-256-XTS [ 134.865844][ T4311] udevd[4311]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 134.989588][ T1108] usb 3-1: USB disconnect, device number 3 [ 135.206852][ T4810] loop0: detected capacity change from 0 to 1024 [ 135.266721][ T4810] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 135.266721][ T4810] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 135.266721][ T4810] [ 135.323843][ T4810] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 135.344281][ T4810] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 135.344281][ T4810] [ 135.710258][ T4815] loop2: detected capacity change from 0 to 512 [ 135.776508][ T4815] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 135.790265][ T4815] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 135.800070][ T4815] System zones: 0-1, 15-15, 18-18, 34-34 [ 135.810771][ T4818] loop4: detected capacity change from 0 to 256 [ 135.817344][ T4815] EXT4-fs (loop2): orphan cleanup on readonly fs [ 135.829165][ T4815] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 135.841295][ T4815] EXT4-fs warning (device loop2): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 135.857160][ T4815] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 135.885663][ T4818] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 135.889007][ T4815] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.168: bg 0: block 40: padding at end of block bitmap is not set [ 135.911813][ T4818] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 135.922224][ T4818] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 135.930324][ T4818] UDF-fs: Scanning with blocksize 512 failed [ 135.938209][ T4818] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 135.950408][ T4818] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.017854][ T4815] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 136.034395][ T4815] EXT4-fs (loop2): 1 truncate cleaned up [ 136.046943][ T4815] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 136.145480][ T4820] device syzkaller0 entered promiscuous mode [ 136.318613][ T4826] loop0: detected capacity change from 0 to 2048 [ 136.388377][ T4311] loop0: p2 p3 < > p4 < p5 > [ 136.393241][ T4311] loop0: partition table partially beyond EOD, truncated [ 136.408974][ T4311] loop0: p2 start 53543428 is beyond EOD, truncated [ 136.420554][ T4311] loop0: p3 start 4284289 is beyond EOD, truncated [ 136.456818][ T4311] loop0: p5 start 53543428 is beyond EOD, truncated [ 136.472035][ T4826] loop0: p2 p3 < > p4 < p5 > [ 136.478111][ T4826] loop0: partition table partially beyond EOD, truncated [ 136.486487][ T4826] loop0: p2 start 53543428 is beyond EOD, truncated [ 136.494554][ T4826] loop0: p3 start 4284289 is beyond EOD, truncated [ 136.502662][ T4826] loop0: p5 start 53543428 is beyond EOD, truncated [ 136.757615][ T4311] udevd[4311]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 136.767982][ T4838] loop4: detected capacity change from 0 to 512 [ 136.846454][ T4838] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 136.893502][ T4838] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.963920][ T7] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 137.053968][ T4178] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 137.256551][ T4857] process 'syz.1.186' launched './file0' with NULL argv: empty string added [ 137.302200][ T4178] usb 1-1: Using ep0 maxpacket: 32 [ 137.383792][ T4588] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 137.486990][ T4178] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.530714][ T4178] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.563276][ T4178] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 137.574093][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.586191][ T4178] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.654283][ T4588] usb 5-1: Using ep0 maxpacket: 32 [ 137.767380][ T4178] usb 1-1: config 0 descriptor?? [ 137.774390][ T4588] usb 5-1: config 0 has an invalid interface number: 37 but max is 1 [ 137.783415][ T4588] usb 5-1: config 0 has no interface number 1 [ 137.924645][ T7] usb 4-1: string descriptor 0 read error: -22 [ 137.959164][ T7] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 137.993847][ T4588] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 137.994250][ T4178] hub 1-1:0.0: USB hub found [ 138.020081][ T4588] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 138.023996][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.047764][ T4588] usb 5-1: Product: syz [ 138.060954][ T4588] usb 5-1: Manufacturer: syz [ 138.076297][ T4588] usb 5-1: SerialNumber: syz [ 138.091780][ T4588] usb 5-1: config 0 descriptor?? [ 138.124960][ T7] usb 4-1: bad CDC descriptors [ 138.153953][ T4178] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 138.355308][ T4836] loop3: detected capacity change from 0 to 512 [ 138.388883][ T4836] EXT4-fs (loop3): Ignoring removed oldalloc option [ 138.417636][ T4588] usb 5-1: Could not set interface, error -71 [ 138.431077][ T4588] usb 5-1: USB disconnect, device number 4 [ 138.551054][ T4836] EXT4-fs (loop3): mounted filesystem without journal. Opts: acl,nodiscard,oldalloc,,errors=continue. Quota mode: none. [ 138.573908][ T2304] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 138.818761][ T4836] fscrypt (loop3, inode 18): Can't use IV_INO_LBLK_32 policy with contents mode other than AES-256-XTS [ 138.831551][ T2304] usb 2-1: Using ep0 maxpacket: 8 [ 138.994482][ T2304] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 139.082605][ T2304] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 139.156076][ T2304] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 139.182998][ T2304] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 139.207391][ T4876] loop4: detected capacity change from 0 to 512 [ 139.219629][ T2304] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 139.267064][ T2304] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 139.286931][ T4876] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 139.311983][ T2304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.327229][ T4876] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.357965][ T2304] usb 2-1: config 0 descriptor?? [ 139.583341][ T4876] device syzkaller0 entered promiscuous mode [ 139.595196][ T4205] Bluetooth: hci5: urb ffff888023991c00 submission failed (90) [ 139.622779][ T21] usb 2-1: USB disconnect, device number 3 [ 139.818448][ T4178] hid-generic 0003:046D:C31C.0001: unknown main item tag 0x0 [ 141.200751][ T4178] hid-generic 0003:046D:C31C.0001: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 141.251256][ T21] usb 4-1: USB disconnect, device number 4 [ 141.324224][ T4178] usb 1-1: USB disconnect, device number 3 [ 141.528355][ T4884] fido_id[4884]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 142.164075][ T4893] futex_wake_op: syz.3.199 tries to shift op by 32; fix this program [ 143.043901][ T21] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 143.137352][ T4897] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 143.234443][ T4897] netlink: 'syz.4.201': attribute type 4 has an invalid length. [ 143.353851][ T4898] loop4: detected capacity change from 0 to 736 [ 143.445874][ T21] usb 2-1: unable to get BOS descriptor or descriptor too short [ 143.524100][ T21] usb 2-1: config 127 has an invalid interface number: 52 but max is 0 [ 143.538957][ T21] usb 2-1: config 127 has no interface number 0 [ 143.560187][ T21] usb 2-1: config 127 interface 52 altsetting 252 has an invalid endpoint with address 0x80, skipping [ 143.591942][ T21] usb 2-1: config 127 interface 52 altsetting 252 endpoint 0x8 is Bulk; changing to Interrupt [ 143.621056][ T21] usb 2-1: config 127 interface 52 has no altsetting 0 [ 143.903952][ T21] usb 2-1: string descriptor 0 read error: -22 [ 143.910266][ T21] usb 2-1: New USB device found, idVendor=0403, idProduct=e0f0, bcdDevice=be.da [ 143.933975][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.994287][ T4890] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 144.015147][ T21] ftdi_sio 2-1:127.52: FTDI USB Serial Device converter detected [ 144.055609][ T21] usb 2-1: Detected FT-X [ 144.211440][ T4906] loop2: detected capacity change from 0 to 1024 [ 144.233980][ T21] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 144.266731][ T21] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 144.314742][ T21] ftdi_sio 2-1:127.52: GPIO initialisation failed: -71 [ 144.340471][ T21] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 144.385068][ T21] usb 2-1: USB disconnect, device number 4 [ 144.429285][ T21] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 144.447975][ T21] ftdi_sio 2-1:127.52: device disconnected [ 146.695511][ T7] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 146.841339][ T4926] loop3: detected capacity change from 0 to 512 [ 147.052861][ T4926] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 147.102615][ T4926] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.132952][ T4936] loop4: detected capacity change from 0 to 1024 [ 147.194061][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.490354][ T7] usb 1-1: string descriptor 0 read error: -22 [ 147.517117][ T7] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 148.584254][ T4955] loop2: detected capacity change from 0 to 1764 [ 149.196607][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.585917][ T4955] loop2: detected capacity change from 0 to 256 [ 150.636605][ T4959] loop3: detected capacity change from 0 to 256 [ 150.653851][ T7] usb 1-1: can't set config #1, error -71 [ 150.686253][ T4955] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d) [ 150.699153][ T7] usb 1-1: USB disconnect, device number 4 [ 151.187665][ T4962] exFAT-fs (loop2): error, broken FAT chain. [ 151.197464][ T4962] exFAT-fs (loop2): Filesystem has been set read-only [ 151.205068][ T4962] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805f97e2e0 iblock : 0, err : -5) [ 151.219961][ T4962] exFAT-fs (loop2): error, broken FAT chain. [ 151.226289][ T4962] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805f97e2e0 iblock : 0, err : -5) [ 151.236736][ T4962] exFAT-fs (loop2): error, broken FAT chain. [ 151.243144][ T4962] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805f97e2e0 iblock : 1, err : -5) [ 151.253343][ T4962] exFAT-fs (loop2): error, broken FAT chain. [ 151.259681][ T4962] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805f97e2e0 iblock : 2, err : -5) [ 151.270005][ T4962] exFAT-fs (loop2): error, broken FAT chain. [ 151.276552][ T4962] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805f97e2e0 iblock : 3, err : -5) [ 151.286875][ T4962] exFAT-fs (loop2): error, broken FAT chain. [ 151.293285][ T4962] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805f97e2e0 iblock : 4, err : -5) [ 151.303693][ T4962] exFAT-fs (loop2): error, broken FAT chain. [ 151.310053][ T4962] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805f97e2e0 iblock : 5, err : -5) [ 151.322133][ T4962] exFAT-fs (loop2): error, broken FAT chain. [ 151.328820][ T4962] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805f97e2e0 iblock : 6, err : -5) [ 151.339398][ T4962] exFAT-fs (loop2): error, broken FAT chain. [ 151.345588][ T4962] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805f97e2e0 iblock : 7, err : -5) [ 151.355869][ T4962] exFAT-fs (loop2): error, broken FAT chain. [ 151.362079][ T4962] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805f97e2e0 iblock : 0, err : -5) [ 151.372869][ T4962] exFAT-fs (loop2): error, broken FAT chain. [ 151.379065][ T4962] exFAT-fs (loop2): error, broken FAT chain. [ 151.385377][ T4962] exFAT-fs (loop2): error, broken FAT chain. [ 151.391569][ T4962] exFAT-fs (loop2): error, broken FAT chain. [ 151.419035][ T4962] exFAT-fs (loop2): error, broken FAT chain. [ 151.433849][ T4962] exFAT-fs (loop2): error, broken FAT chain. [ 151.440259][ T4962] exFAT-fs (loop2): error, broken FAT chain. [ 151.457432][ T26] audit: type=1800 audit(2000000000.530:17): pid=4962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.221" name="file0" dev="loop2" ino=1048655 res=0 errno=0 [ 153.270633][ T4975] loop2: detected capacity change from 0 to 512 [ 153.405754][ T4975] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 153.449890][ T4979] loop3: detected capacity change from 0 to 2048 [ 153.457726][ T4975] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.507008][ T4182] loop3: p2 p3 < > p4 < p5 > [ 153.511768][ T4182] loop3: partition table partially beyond EOD, truncated [ 153.547175][ T4182] loop3: p2 start 53543428 is beyond EOD, truncated [ 153.594179][ T4182] loop3: p3 start 4284289 is beyond EOD, truncated [ 153.620255][ T4182] loop3: p5 start 53543428 is beyond EOD, truncated [ 155.021284][ T4979] loop3: p2 p3 < > p4 < p5 > [ 155.033908][ T4979] loop3: partition table partially beyond EOD, truncated [ 155.063923][ T4979] loop3: p2 start 53543428 is beyond EOD, truncated [ 155.070717][ T4979] loop3: p3 start 4284289 is beyond EOD, truncated [ 155.124487][ T4979] loop3: p5 start 53543428 is beyond EOD, truncated [ 155.459686][ T4311] udevd[4311]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 155.554995][ T4311] udevd[4311]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 156.970173][ T2304] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 157.143762][ T4242] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 157.393760][ T4242] usb 4-1: Using ep0 maxpacket: 8 [ 157.513912][ T4242] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 158.883682][ T2304] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.894672][ T4242] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 158.904865][ T4242] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 158.914865][ T4242] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 158.926284][ T4242] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 158.936639][ T4242] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 158.946411][ T4242] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.965362][ T4242] usb 4-1: config 0 descriptor?? [ 158.987825][ T4242] usb 4-1: can't set config #0, error -71 [ 159.003373][ T4242] usb 4-1: USB disconnect, device number 5 [ 159.066727][ T5022] binder: 5021:5022 ioctl 4018620d 0 returned -22 [ 159.093967][ T2304] usb 5-1: string descriptor 0 read error: -71 [ 159.101049][ T2304] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 159.173892][ T5022] binder: 5021:5022 ioctl 4018620d 0 returned -22 [ 159.242225][ T2304] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.393814][ T2304] usb 5-1: can't set config #1, error -71 [ 159.412555][ T2304] usb 5-1: USB disconnect, device number 5 [ 159.453935][ T5031] loop3: detected capacity change from 0 to 1024 [ 159.483289][ T5033] loop4: detected capacity change from 0 to 512 [ 159.556282][ T5035] netlink: 68 bytes leftover after parsing attributes in process `syz.2.248'. [ 160.187669][ T5031] hfsplus: invalid catalog entry type [ 160.205873][ T5033] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 160.273427][ T5033] ext4 filesystem being mounted at /52/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.350736][ T4205] Bluetooth: unknown link type 188 [ 160.361826][ T5042] loop2: detected capacity change from 0 to 1024 [ 160.390714][ T1277] hfsplus: b-tree write err: -5, ino 3 [ 162.166581][ T5054] loop3: detected capacity change from 0 to 1024 [ 162.363853][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 162.503505][ T5061] loop3: detected capacity change from 0 to 512 [ 162.636239][ T5061] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 162.673326][ T5061] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.814545][ T5070] loop2: detected capacity change from 0 to 1764 [ 167.304886][ T5102] loop4: detected capacity change from 0 to 1024 [ 167.326644][ T5100] loop3: detected capacity change from 0 to 1024 [ 167.328713][ T5102] hfsplus: unable to parse mount options [ 167.387899][ T5100] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 167.484859][ T5100] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,bsddf,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 169.296147][ T5117] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 170.949504][ T5137] loop2: detected capacity change from 0 to 128 [ 171.505788][ T4178] kernel write not supported for file /vcs (pid: 4178 comm: kworker/0:3) [ 171.763064][ T5137] EXT4-fs (loop2): Test dummy encryption mode enabled [ 171.791934][ T5137] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 171.805808][ T5137] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 171.958857][ T5137] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 173.446006][ T5163] fscrypt (loop2): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 179.843094][ T26] audit: type=1326 audit(2000000028.920:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5220 comm="syz.3.301" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f91f6cc3dd9 code=0x0 [ 180.842236][ T5244] loop3: detected capacity change from 0 to 512 [ 181.000379][ T5244] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 182.393827][ T5244] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.750449][ T21] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 182.768137][ T5262] loop4: detected capacity change from 0 to 128 [ 182.841558][ T5262] EXT4-fs (loop4): Test dummy encryption mode enabled [ 182.848600][ T5260] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 182.869249][ T5260] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 182.893084][ T5262] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 182.919432][ T5262] ext4 filesystem being mounted at /63/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 182.936267][ T5260] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001057d, chksum : 0xc03cc181, utbl_chksum : 0xe619d30d) [ 183.003863][ T21] usb 2-1: Using ep0 maxpacket: 8 [ 183.204182][ T21] usb 2-1: unable to get BOS descriptor or descriptor too short [ 183.304258][ T21] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 183.316461][ T21] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 183.326939][ T21] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 183.429034][ T5262] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 183.494627][ T21] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 183.528325][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.582411][ T21] usb 2-1: Product: syz [ 183.600862][ T21] usb 2-1: Manufacturer: syz [ 183.622659][ T21] usb 2-1: SerialNumber: syz [ 183.881835][ T5273] loop3: detected capacity change from 0 to 1024 [ 184.003533][ T5281] mmap: syz.0.322 (5281): VmData 175874048 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 184.019214][ T21] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 184.033839][ T21] cdc_ncm 2-1:1.0: bind() failure [ 184.042214][ T21] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 184.063795][ T21] cdc_ncm 2-1:1.1: bind() failure [ 184.105201][ T21] usb 2-1: USB disconnect, device number 5 [ 184.112578][ T26] audit: type=1800 audit(2000000033.190:19): pid=5273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.318" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 185.534630][ T5272] hfsplus: invalid extended attribute record [ 185.565146][ T5291] loop4: detected capacity change from 0 to 512 [ 185.619018][ T5291] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 185.674533][ T4261] hfsplus: b-tree write err: -5, ino 8 [ 185.698259][ T5291] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.323: invalid indirect mapped block 8 (level 2) [ 185.803278][ T5291] EXT4-fs (loop4): 1 truncate cleaned up [ 185.809293][ T5291] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000003,noauto_da_alloc,nomblk_io_submit,auto_da_alloc=0x0000000000000002,nouid32,barrier=0x0000000000000009,noauto_da_alloc,,errors=continue. Quota mode: none. [ 185.856543][ T5291] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #2: block 5: comm syz.4.323: lblock 0 mapped to illegal pblock 5 (length 1) [ 185.949432][ T5291] EXT4-fs warning (device loop4): ext4_empty_dir:3139: inode #2: lblock 0: comm syz.4.323: error -117 reading directory block [ 187.294577][ T5293] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 361: padding at end of block bitmap is not set [ 187.495538][ T5303] loop3: detected capacity change from 0 to 512 [ 187.651195][ T5303] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 187.694149][ T5303] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.465008][ T5309] syz.4.330 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 189.833557][ T5325] loop3: detected capacity change from 0 to 128 [ 191.423377][ T5325] EXT4-fs (loop3): Test dummy encryption mode enabled [ 191.613406][ T5325] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 191.652114][ T5325] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 193.936524][ T5360] loop3: detected capacity change from 0 to 8 [ 194.003152][ T4205] Bluetooth: hci3: Unknown advertising packet type: 0xa43d [ 194.003394][ T4205] ================================================================== [ 194.019027][ T4205] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x1324/0x3c90 [ 194.026897][ T4205] Read of size 1 at addr ffff88805fc0d40a by task kworker/u5:6/4205 [ 194.034903][ T4205] [ 194.037272][ T4205] CPU: 1 PID: 4205 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 194.044852][ T4205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 194.054934][ T4205] Workqueue: hci3 hci_rx_work [ 194.059631][ T4205] Call Trace: [ 194.062909][ T4205] [ 194.065842][ T4205] dump_stack_lvl+0x188/0x250 [ 194.070529][ T4205] ? show_regs_print_info+0x20/0x20 [ 194.075733][ T4205] ? load_image+0x400/0x400 [ 194.080255][ T4205] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 194.085722][ T4205] print_address_description+0x60/0x2d0 [ 194.091273][ T4205] ? hci_le_meta_evt+0x1324/0x3c90 [ 194.096405][ T4205] kasan_report+0xdf/0x130 [ 194.100859][ T4205] ? hci_le_meta_evt+0x1324/0x3c90 [ 194.106006][ T4205] hci_le_meta_evt+0x1324/0x3c90 [ 194.111001][ T4205] ? hci_remote_host_features_evt+0x280/0x280 [ 194.117111][ T4205] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 194.122760][ T4205] ? mark_lock+0x94/0x320 [ 194.127103][ T4205] ? mutex_unlock+0x10/0x10 [ 194.131620][ T4205] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 194.137623][ T4205] ? lock_chain_count+0x20/0x20 [ 194.142514][ T4205] ? __rwlock_init+0x140/0x140 [ 194.147294][ T4205] hci_event_packet+0xe48/0x1370 [ 194.152250][ T4205] ? lockdep_hardirqs_on+0x94/0x140 [ 194.157467][ T4205] ? rcu_lock_release+0x20/0x20 [ 194.162327][ T4205] ? hci_send_to_monitor+0x9c/0x4a0 [ 194.167538][ T4205] hci_rx_work+0x255/0xa10 [ 194.171970][ T4205] process_one_work+0x85f/0x1010 [ 194.176923][ T4205] ? worker_detach_from_pool+0x240/0x240 [ 194.182557][ T4205] ? lockdep_hardirqs_off+0x70/0x100 [ 194.187866][ T4205] ? _raw_spin_lock_irq+0xb7/0xf0 [ 194.192907][ T4205] ? _raw_spin_lock_irqsave+0x100/0x100 [ 194.198627][ T4205] ? wq_worker_running+0x97/0x170 [ 194.203723][ T4205] worker_thread+0xaa6/0x1290 [ 194.208464][ T4205] kthread+0x436/0x520 [ 194.212613][ T4205] ? rcu_lock_release+0x20/0x20 [ 194.217475][ T4205] ? kthread_blkcg+0xd0/0xd0 [ 194.222102][ T4205] ret_from_fork+0x1f/0x30 [ 194.226569][ T4205] [ 194.229602][ T4205] [ 194.231928][ T4205] Allocated by task 5360: [ 194.236270][ T4205] __kasan_kmalloc+0xb5/0xf0 [ 194.240877][ T4205] __alloc_skb+0x22c/0x750 [ 194.245310][ T4205] vhci_write+0xbc/0x450 [ 194.249601][ T4205] vfs_write+0x745/0xd60 [ 194.253878][ T4205] ksys_write+0x152/0x260 [ 194.258241][ T4205] do_syscall_64+0x4c/0xa0 [ 194.262697][ T4205] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 194.268634][ T4205] [ 194.270992][ T4205] The buggy address belongs to the object at ffff88805fc0d000 [ 194.270992][ T4205] which belongs to the cache kmalloc-1k of size 1024 [ 194.285069][ T4205] The buggy address is located 10 bytes to the right of [ 194.285069][ T4205] 1024-byte region [ffff88805fc0d000, ffff88805fc0d400) [ 194.298873][ T4205] The buggy address belongs to the page: [ 194.304537][ T4205] page:ffffea00017f0200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5fc08 [ 194.314807][ T4205] head:ffffea00017f0200 order:3 compound_mapcount:0 compound_pincount:0 [ 194.323275][ T4205] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 194.331296][ T4205] raw: 00fff00000010200 0000000000000000 0000000100000001 ffff888016c41dc0 [ 194.340005][ T4205] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 194.348597][ T4205] page dumped because: kasan: bad access detected [ 194.355023][ T4205] page_owner tracks the page as allocated [ 194.360866][ T4205] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4237, ts 73157074536, free_ts 22604601996 [ 194.379554][ T4205] get_page_from_freelist+0x1bbd/0x1ca0 [ 194.385122][ T4205] __alloc_pages+0x1ee/0x480 [ 194.389723][ T4205] new_slab+0xc0/0x4b0 [ 194.393814][ T4205] ___slab_alloc+0x80a/0xdd0 [ 194.398440][ T4205] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 194.404287][ T4205] __alloc_skb+0x22c/0x750 [ 194.408727][ T4205] inet6_rt_notify+0xdd/0x290 [ 194.413431][ T4205] fib6_add+0x1d4d/0x3d40 [ 194.417772][ T4205] ip6_ins_rt+0xd3/0x130 [ 194.422025][ T4205] __ipv6_ifa_notify+0x4e4/0xe60 [ 194.426981][ T4205] addrconf_dad_completed+0x184/0xc80 [ 194.432373][ T4205] addrconf_dad_work+0xc8c/0x1540 [ 194.437416][ T4205] process_one_work+0x85f/0x1010 [ 194.442371][ T4205] worker_thread+0xaa6/0x1290 [ 194.447067][ T4205] kthread+0x436/0x520 [ 194.451169][ T4205] ret_from_fork+0x1f/0x30 [ 194.455594][ T4205] page last free stack trace: [ 194.460283][ T4205] free_unref_page_prepare+0x637/0x6c0 [ 194.465982][ T4205] free_unref_page+0x8f/0x2a0 [ 194.470696][ T4205] free_contig_range+0x96/0xf0 [ 194.475491][ T4205] destroy_args+0xf0/0xa00 [ 194.479919][ T4205] debug_vm_pgtable+0x321/0x380 [ 194.484775][ T4205] do_one_initcall+0x272/0x730 [ 194.489546][ T4205] do_initcall_level+0x137/0x1f0 [ 194.494496][ T4205] do_initcalls+0x4b/0x90 [ 194.498861][ T4205] kernel_init_freeable+0x3e9/0x570 [ 194.504188][ T4205] kernel_init+0x19/0x1b0 [ 194.508528][ T4205] ret_from_fork+0x1f/0x30 [ 194.512985][ T4205] [ 194.515313][ T4205] Memory state around the buggy address: [ 194.520981][ T4205] ffff88805fc0d300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 194.529354][ T4205] ffff88805fc0d380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 194.537422][ T4205] >ffff88805fc0d400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 194.545485][ T4205] ^ [ 194.549819][ T4205] ffff88805fc0d480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 194.557884][ T4205] ffff88805fc0d500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 194.565946][ T4205] ================================================================== [ 194.574001][ T4205] Disabling lock debugging due to kernel taint [ 194.587412][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.594411][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.602110][ T4205] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 194.609953][ T4205] CPU: 1 PID: 4205 Comm: kworker/u5:6 Tainted: G B syzkaller #0 [ 194.618914][ T4205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 194.628981][ T4205] Workqueue: hci3 hci_rx_work [ 194.633683][ T4205] Call Trace: [ 194.636978][ T4205] [ 194.639997][ T4205] dump_stack_lvl+0x188/0x250 [ 194.644713][ T4205] ? show_regs_print_info+0x20/0x20 [ 194.650028][ T4205] ? load_image+0x400/0x400 [ 194.654791][ T4205] panic+0x2e5/0x810 [ 194.658736][ T4205] ? bpf_jit_dump+0xd0/0xd0 [ 194.663255][ T4205] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 194.669367][ T4205] ? _raw_spin_unlock+0x40/0x40 [ 194.674262][ T4205] ? hci_le_meta_evt+0x1324/0x3c90 [ 194.679388][ T4205] check_panic_on_warn+0x80/0xa0 [ 194.684339][ T4205] ? hci_le_meta_evt+0x1324/0x3c90 [ 194.689459][ T4205] end_report+0x6d/0xf0 [ 194.693632][ T4205] kasan_report+0x102/0x130 [ 194.698291][ T4205] ? hci_le_meta_evt+0x1324/0x3c90 [ 194.703535][ T4205] hci_le_meta_evt+0x1324/0x3c90 [ 194.708493][ T4205] ? hci_remote_host_features_evt+0x280/0x280 [ 194.714573][ T4205] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 194.720241][ T4205] ? mark_lock+0x94/0x320 [ 194.724627][ T4205] ? mutex_unlock+0x10/0x10 [ 194.729138][ T4205] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 194.735129][ T4205] ? lock_chain_count+0x20/0x20 [ 194.739990][ T4205] ? __rwlock_init+0x140/0x140 [ 194.744783][ T4205] hci_event_packet+0xe48/0x1370 [ 194.749727][ T4205] ? lockdep_hardirqs_on+0x94/0x140 [ 194.754937][ T4205] ? rcu_lock_release+0x20/0x20 [ 194.759797][ T4205] ? hci_send_to_monitor+0x9c/0x4a0 [ 194.765118][ T4205] hci_rx_work+0x255/0xa10 [ 194.769546][ T4205] process_one_work+0x85f/0x1010 [ 194.774504][ T4205] ? worker_detach_from_pool+0x240/0x240 [ 194.780171][ T4205] ? lockdep_hardirqs_off+0x70/0x100 [ 194.785476][ T4205] ? _raw_spin_lock_irq+0xb7/0xf0 [ 194.790681][ T4205] ? _raw_spin_lock_irqsave+0x100/0x100 [ 194.796270][ T4205] ? wq_worker_running+0x97/0x170 [ 194.801323][ T4205] worker_thread+0xaa6/0x1290 [ 194.806017][ T4205] kthread+0x436/0x520 [ 194.810092][ T4205] ? rcu_lock_release+0x20/0x20 [ 194.814949][ T4205] ? kthread_blkcg+0xd0/0xd0 [ 194.819552][ T4205] ret_from_fork+0x1f/0x30 [ 194.823984][ T4205] [ 194.827378][ T4205] Kernel Offset: disabled [ 194.831741][ T4205] Rebooting in 86400 seconds..