last executing test programs: 42.861352183s ago: executing program 4 (id=5): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000240), 0x1, 0x553, &(0x7f0000000800)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000002c0)=0x2, 0xb, 0x2, &(0x7f0000000300)={0x77359400}, &(0x7f00000004c0)=0x1, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x5, 0xc9, @any, 0x2, 0x0, 0x3, 0xaa1, 0x9e16, 0x7}}}, 0x14) ustat(0xfffffffeffffffff, 0x0) 27.112134791s ago: executing program 32 (id=5): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000240), 0x1, 0x553, &(0x7f0000000800)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000002c0)=0x2, 0xb, 0x2, &(0x7f0000000300)={0x77359400}, &(0x7f00000004c0)=0x1, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x5, 0xc9, @any, 0x2, 0x0, 0x3, 0xaa1, 0x9e16, 0x7}}}, 0x14) ustat(0xfffffffeffffffff, 0x0) 12.141068456s ago: executing program 0 (id=74): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close_range(r0, 0xffffffffffffffff, 0x0) 12.007998626s ago: executing program 2 (id=75): openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000740)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_CLASS_OF_DEV={{}, 0xc}}}, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/4\x00') mknodat$null(r0, 0x0, 0x400, 0x103) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, 0x0, 0x0) r2 = memfd_create(&(0x7f0000001ac0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\xfe\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\t\x00\x00\x00\x00\x00\x00\x00sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\x0f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x80\xd2\xd5\xd2@z9\xf4Ef\xc0\xa1\x14\xff\xf7\xfc\x92u\x99\xdaH:\xcchd\x8e\xaad\xfc<\xac\x98u#!t\x97\xdb\x13\x005*C\xc0qe\x88\x176\xc4>\xc07\x18\xeb\xe0\x96\xa6\x11[E\xea\x1en\xcdQ\xac\xa5\xab\'n\x80\x917\x1d\xc6!|\xbd\x96\x18\xa6\xd3\xa9*(\xb0\xbem\x1dN\x8dr\x87\xcf\xa5^\x1b6D\x00\x00\x00\x00\x00\xa8\xfe\x9d\xbbr\x83\xa5\xd6\x9f\x10\xb1\xd0\vR\x06\xa7}\x97v\x8e\xb7\xf4\aS\x97\x18\xd4\xd2\xc8\x92\xfa\x96z5\xb4\xa8\x16\xc4\x10\x16_\xfb\x94}\a\x99n\x9b\xa5_\xdbQ\tU\"G3\xe2\xeff\xf3Pg\x7f0\xf9x\x7fTg\xd3\xc0\xdb\xcc\xc0\x8dI\x8b.Y\x97\x0eh\xb4', 0x2) pwrite64(r2, 0x0, 0x0, 0x88e6) fcntl$addseals(r2, 0x409, 0x7) ftruncate(r2, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff) 10.539328958s ago: executing program 2 (id=78): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x200, &(0x7f00000002c0)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0xfffffffffffffffe, 0x4, 0x20000e695, 0x9, 0x400, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000200d1, 0xfffffffffffffffc, 0x6, 0x4, 0x0, 0xfffffffffffffe], 0x0, 0x8340}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x7d, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000000)={0x50003, 0x0, [0x4, 0x1557, 0x8c6e, 0x5, 0xfffffffffffffffc, 0x1, 0x100000000, 0x400]}) 10.161040891s ago: executing program 0 (id=82): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000140), 0x2, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) 8.808722341s ago: executing program 3 (id=83): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r0, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x13}, 0x80002) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) syz_clone(0x3004000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1}}], 0x1, 0x4044805) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8.13637484s ago: executing program 2 (id=84): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f30216000000001c00000000000002001b0008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fcff000020030005"], 0xb0}, 0x1, 0x7}, 0x0) 8.118943775s ago: executing program 0 (id=93): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000140), 0x2, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) 7.755490295s ago: executing program 1 (id=85): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nouid32}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 6.879004775s ago: executing program 3 (id=86): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x40, &(0x7f0000000140)={[{@cache_strategy_disabled}, {@noacl}, {@noacl}, {}, {@nouser_xattr}]}, 0x1, 0x177, &(0x7f0000000240)="$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") llistxattr(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) 6.875775097s ago: executing program 2 (id=87): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000200000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = creat(0x0, 0xf4) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x1800, 0x2, &(0x7f0000000080)="bdc5", 0x78, 0x2, 0x581, 0x7, 0x2, 0x2, 0x1, 'syz0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xd) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0x8080000, 0x1d000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000080)={0x8000000, 0x3000, 0x1}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000040)={0xdddd0000, 0x10000}) 6.298349512s ago: executing program 0 (id=88): openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000740)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_CLASS_OF_DEV={{}, 0xc}}}, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/4\x00') mknodat$null(r0, 0x0, 0x400, 0x103) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, 0x0, 0x0) r2 = memfd_create(&(0x7f0000001ac0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\xfe\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\t\x00\x00\x00\x00\x00\x00\x00sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\x0f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x80\xd2\xd5\xd2@z9\xf4Ef\xc0\xa1\x14\xff\xf7\xfc\x92u\x99\xdaH:\xcchd\x8e\xaad\xfc<\xac\x98u#!t\x97\xdb\x13\x005*C\xc0qe\x88\x176\xc4>\xc07\x18\xeb\xe0\x96\xa6\x11[E\xea\x1en\xcdQ\xac\xa5\xab\'n\x80\x917\x1d\xc6!|\xbd\x96\x18\xa6\xd3\xa9*(\xb0\xbem\x1dN\x8dr\x87\xcf\xa5^\x1b6D\x00\x00\x00\x00\x00\xa8\xfe\x9d\xbbr\x83\xa5\xd6\x9f\x10\xb1\xd0\vR\x06\xa7}\x97v\x8e\xb7\xf4\aS\x97\x18\xd4\xd2\xc8\x92\xfa\x96z5\xb4\xa8\x16\xc4\x10\x16_\xfb\x94}\a\x99n\x9b\xa5_\xdbQ\tU\"G3\xe2\xeff\xf3Pg\x7f0\xf9x\x7fTg\xd3\xc0\xdb\xcc\xc0\x8dI\x8b.Y\x97\x0eh\xb4', 0x2) pwrite64(r2, 0x0, 0x0, 0x88e6) fcntl$addseals(r2, 0x409, 0x7) ftruncate(r2, 0x3) 5.591274796s ago: executing program 3 (id=89): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close_range(r0, 0xffffffffffffffff, 0x0) 5.542413362s ago: executing program 1 (id=99): openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000001040)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000029c0)='/proc/asound/seq/clients\x00', 0x41, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1d0) syz_mount_image$fuse(0x0, 0x0, 0x9520a1, 0x0, 0xff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x208801, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x104000, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0x103800, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, 0xfffffffffffffffe, 0x63) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x2c}}, 0x0) 5.377979739s ago: executing program 2 (id=90): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) fallocate(r0, 0x3, 0x1, 0x8000c62) 5.178519339s ago: executing program 0 (id=91): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0xfffffffc, 0x0, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0xf}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x8000}]}, 0x24}}, 0x44004) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r1, @ANYBLOB='\x00\x00g\x00\b\x00\b'], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4.462444368s ago: executing program 1 (id=92): io_uring_setup(0x19b4, &(0x7f0000000000)={0x0, 0x709f, 0x8, 0x2, 0xeb}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvfrom$inet6(r0, &(0x7f00000000c0)=""/53, 0x35, 0x40010102, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 4.04070592s ago: executing program 3 (id=94): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') r1 = fanotify_init(0x40, 0x40000) fanotify_mark(r1, 0x1, 0x40001019, r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netfilter\x00') getdents(r2, &(0x7f0000001480)=""/199, 0xc7) 3.950358043s ago: executing program 0 (id=95): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xe2a7b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) unshare(0x2c020400) msgget$private(0x0, 0x0) r4 = fsopen(&(0x7f0000000040)='ecryptfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 3.706314231s ago: executing program 2 (id=96): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x47, 0xc11, &(0x7f0000000d00)="$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") mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.228498662s ago: executing program 1 (id=97): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x400, &(0x7f00000000c0)=ANY=[], 0x1, 0x692, &(0x7f0000000340)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0xbdf5) syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000180)='./file1\x00', 0x1004000, &(0x7f0000000200)=ANY=[@ANYRES16=0x0], 0x1, 0xc34, &(0x7f0000001bc0)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x169) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 3.1116708s ago: executing program 3 (id=98): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000140), 0x2, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) 1.318079064s ago: executing program 1 (id=100): r0 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x4}, @in=@local, 0x0, 0x0, 0x4, 0x5, 0x2}, {0xfffffffffffffff7, 0x4, 0x913d, 0x2, 0x0, 0xf42, 0x8}, {0x0, 0x0, 0xa7, 0xfffefffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x4}, {{@in6=@loopback, 0x0, 0x33}, 0x0, @in=@multicast1, 0x34ff, 0x0, 0x3, 0x4, 0xfffffffb, 0x0, 0x21}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 739.452655ms ago: executing program 3 (id=101): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x3000000, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0x1, 0x5d8, &(0x7f00000006c0)="$eJzs3U1vG8cdB+Df0rJsuoDDJHaSFi0q2IcWMWqLYuLoUKBuURQ6BEWAXnLJQbDpWDCtBBJTKEFR2H299hskPcjnnnooejCQnvsVBPSQQ4HedXOxyyXFWIoixbJIJc8DDGeGszs78/fuiLuEwQDfWEtv5/SjFFm68uZGWd/a7PS2Njv3huUkZ5I0kplBlmI1KT5NbmSQ8u3yzbq74ouO887Hbyx+1n74YFCbqVO1fWO//Q7mfp0yl+RUnR9Vfzefur9iNMMyYJeHgYNJe7zL/cPs/pTXLTANisHfzV1aybkkZ+vPAalXh8bxju7oHWqVAwAAgBPque1sZyPnJz0OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOEnq3/8v6tQYludSDH//f7Z+L3X5RHs06QEAAAAAAAAAwBH4/na2s5Hzw/rjovrO/1JVuVC9fisfZD3drOVqNrKcfvpZSztJa6yj2Y3lfn+tfYA9F/bcc+F45gsAAAAAAAAAX1O/y9LO9/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADANiuTUIKvShWG5lcZMkrNJZsvt7if/HJZPskeTHgAAAAAcg+e2s52NnB/WHxfVPf9L1X3/2XyQ1fSzkn566eZW9SxgcNff2Nrs9LY2O/fKtLvfn/7vUMOoeszg2cPeR56vtrg42mMpv8ivciVzeStrWcmvs5x+upnLz6vScoq06qcXreE49x7vjc/V3vqysb5SjaSZ21mpxnY1N/NeermVRjWHapv9j/igjE7xk9oBY3SrzssZ/aXOp0OrisjpUUTm69iX0Xh+/0gc8jx58kjtNEbPoC48g5ifq/My1n+a6pgvjJ19L+0fieTSf7739zu91bt3bq9fmZ4pfUVPRqIzFomXv1GRmK2jMVhFD7daXqr2PZ+V/DLv5Va6eT2LeT0LeS2vZT6LuT4W14sHuNYah7vWLv+wLjST/LnOp0MZ1+fH4jq+0rWqtvF3dqL0wtGvSDPfqQvlMX5f59PhyUi0xyLx4v6R+Ovj8nW9t3p37c7y+wc83g/qvLxs/zhVa3N5vrxQ/mNVtc+fHWXbi3u2tau2C6O2xq62i6O2L7tSZ+vPcLt7WqjaXt6zrVO1vTLWttenHACm3rlXz802/9v8d/OT5h+ad5pvnv3ZmcUz353N6X/N/OPU3xoPGz8uXs0n+e3O/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDVrX/40d3lXq+7pqCgoDAqTHplAp61a/17719b//CjH63cW363+253tdNpX19YvL64cP3a7ZVed37wOulhAs/Azh/9SY8EAAAAAAAAAAAAOKjj+O8Ek54jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLItvZ3Tj1KkPX91vqxvbXZ6ZRqWd7acSdJIUvwmKT5NbmSQ0hrrrvii47zz8RuLn7UfPtjpa2a4fWO//Q7mfp0yl+RUnR9Vfzefur9iNMMyYJeHgYNJ+38AAAD//+NBDmE=") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f00000006c0)=""/165, 0xa5) mkdir(&(0x7f0000000140)='./control\x00', 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00) rmdir(&(0x7f0000000100)='./control\x00') 0s ago: executing program 1 (id=102): openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000740)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_CLASS_OF_DEV={{}, 0xc}}}, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/4\x00') mknodat$null(r0, 0x0, 0x400, 0x103) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, 0x0, 0x0) r2 = memfd_create(&(0x7f0000001ac0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\xfe\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\t\x00\x00\x00\x00\x00\x00\x00sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\x0f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x80\xd2\xd5\xd2@z9\xf4Ef\xc0\xa1\x14\xff\xf7\xfc\x92u\x99\xdaH:\xcchd\x8e\xaad\xfc<\xac\x98u#!t\x97\xdb\x13\x005*C\xc0qe\x88\x176\xc4>\xc07\x18\xeb\xe0\x96\xa6\x11[E\xea\x1en\xcdQ\xac\xa5\xab\'n\x80\x917\x1d\xc6!|\xbd\x96\x18\xa6\xd3\xa9*(\xb0\xbem\x1dN\x8dr\x87\xcf\xa5^\x1b6D\x00\x00\x00\x00\x00\xa8\xfe\x9d\xbbr\x83\xa5\xd6\x9f\x10\xb1\xd0\vR\x06\xa7}\x97v\x8e\xb7\xf4\aS\x97\x18\xd4\xd2\xc8\x92\xfa\x96z5\xb4\xa8\x16\xc4\x10\x16_\xfb\x94}\a\x99n\x9b\xa5_\xdbQ\tU\"G3\xe2\xeff\xf3Pg\x7f0\xf9x\x7fTg\xd3\xc0\xdb\xcc\xc0\x8dI\x8b.Y\x97\x0eh\xb4', 0x2) pwrite64(r2, 0x0, 0x0, 0x88e6) fcntl$addseals(r2, 0x409, 0x7) ftruncate(r2, 0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.221' (ED25519) to the list of known hosts. [ 198.278711][ T5794] cgroup: Unknown subsys name 'net' [ 198.417464][ T5794] cgroup: Unknown subsys name 'cpuset' [ 198.434385][ T5794] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 205.083363][ T5794] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 209.421439][ T5812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 209.430812][ T5812] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 209.460334][ T5816] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 209.469796][ T5816] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 209.491979][ T5819] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 209.493883][ T5821] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 209.503908][ T5819] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 209.512413][ T5821] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 209.526278][ T5821] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 209.535603][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 209.541775][ T5819] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 209.552069][ T5819] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 209.561546][ T5819] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 209.570976][ T5821] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 209.581464][ T5821] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 209.590827][ T5109] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 209.595539][ T5819] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 209.607256][ T5819] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 209.618875][ T5819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 209.630845][ T5109] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 209.632064][ T5819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 209.640264][ T5821] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 209.661332][ T5812] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 209.701480][ T5812] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 209.710587][ T5812] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 211.552542][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 211.590040][ T5815] Bluetooth: hci0: command tx timeout [ 211.748586][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 211.762438][ T5815] Bluetooth: hci4: command tx timeout [ 211.762697][ T5812] Bluetooth: hci1: command tx timeout [ 211.768382][ T5815] Bluetooth: hci2: command tx timeout [ 211.825507][ T5812] Bluetooth: hci3: command tx timeout [ 211.962353][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 211.988724][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 212.103518][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 212.905487][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.913121][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.921352][ T5813] bridge_slave_0: entered allmulticast mode [ 212.931722][ T5813] bridge_slave_0: entered promiscuous mode [ 213.387211][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.394934][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.403136][ T5813] bridge_slave_1: entered allmulticast mode [ 213.415430][ T5813] bridge_slave_1: entered promiscuous mode [ 213.430496][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.445099][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.453443][ T5820] bridge_slave_0: entered allmulticast mode [ 213.464031][ T5820] bridge_slave_0: entered promiscuous mode [ 213.646899][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.654751][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.662619][ T5820] bridge_slave_1: entered allmulticast mode [ 213.669859][ T5812] Bluetooth: hci0: command tx timeout [ 213.673116][ T5820] bridge_slave_1: entered promiscuous mode [ 213.774635][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.825414][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.833001][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.841031][ T5810] bridge_slave_0: entered allmulticast mode [ 213.848708][ T5812] Bluetooth: hci1: command tx timeout [ 213.851572][ T5810] bridge_slave_0: entered promiscuous mode [ 213.854527][ T5819] Bluetooth: hci2: command tx timeout [ 213.866231][ T5815] Bluetooth: hci4: command tx timeout [ 213.905492][ T5812] Bluetooth: hci3: command tx timeout [ 213.966646][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.014642][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.022471][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.030383][ T5810] bridge_slave_1: entered allmulticast mode [ 214.040265][ T5810] bridge_slave_1: entered promiscuous mode [ 214.051003][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.061464][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.069449][ T5814] bridge_slave_0: entered allmulticast mode [ 214.079343][ T5814] bridge_slave_0: entered promiscuous mode [ 214.188524][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.238187][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.245905][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.253626][ T5814] bridge_slave_1: entered allmulticast mode [ 214.263929][ T5814] bridge_slave_1: entered promiscuous mode [ 214.273001][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.280925][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.288964][ T5818] bridge_slave_0: entered allmulticast mode [ 214.299177][ T5818] bridge_slave_0: entered promiscuous mode [ 214.356594][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.490796][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.498825][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.506899][ T5818] bridge_slave_1: entered allmulticast mode [ 214.517531][ T5818] bridge_slave_1: entered promiscuous mode [ 214.536153][ T5813] team0: Port device team_slave_0 added [ 214.646787][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.669605][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.693233][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.749613][ T5813] team0: Port device team_slave_1 added [ 214.765652][ T5820] team0: Port device team_slave_0 added [ 214.825821][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.921716][ T5820] team0: Port device team_slave_1 added [ 215.062898][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.156255][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.163510][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.189949][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.257059][ T5810] team0: Port device team_slave_0 added [ 215.275104][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.293718][ T5814] team0: Port device team_slave_0 added [ 215.344807][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.352142][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.379487][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.393895][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.401575][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.428151][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.451403][ T5810] team0: Port device team_slave_1 added [ 215.506414][ T5814] team0: Port device team_slave_1 added [ 215.608591][ T5818] team0: Port device team_slave_0 added [ 215.647024][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.654136][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.680516][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.734300][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.741669][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.768154][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.779365][ T5812] Bluetooth: hci0: command tx timeout [ 215.791444][ T5818] team0: Port device team_slave_1 added [ 215.801553][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.808909][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.835792][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.905541][ T5812] Bluetooth: hci1: command tx timeout [ 215.911204][ T5812] Bluetooth: hci2: command tx timeout [ 215.919080][ T5812] Bluetooth: hci4: command tx timeout [ 215.985428][ T5819] Bluetooth: hci3: command tx timeout [ 216.045488][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.052651][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.079928][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.098521][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.106903][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.133253][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.248290][ T5813] hsr_slave_0: entered promiscuous mode [ 216.259252][ T5813] hsr_slave_1: entered promiscuous mode [ 216.339338][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.347233][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.373678][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.488099][ T5810] hsr_slave_0: entered promiscuous mode [ 216.498798][ T5810] hsr_slave_1: entered promiscuous mode [ 216.508014][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 216.513964][ T5810] Cannot create hsr debugfs directory [ 216.525634][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.532787][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.559290][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.674886][ T5820] hsr_slave_0: entered promiscuous mode [ 216.685500][ T5820] hsr_slave_1: entered promiscuous mode [ 216.694332][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 216.700394][ T5820] Cannot create hsr debugfs directory [ 216.852665][ T5814] hsr_slave_0: entered promiscuous mode [ 216.863427][ T5814] hsr_slave_1: entered promiscuous mode [ 216.872800][ T5814] debugfs: 'hsr0' already exists in 'hsr' [ 216.878888][ T5814] Cannot create hsr debugfs directory [ 217.339780][ T5818] hsr_slave_0: entered promiscuous mode [ 217.350902][ T5818] hsr_slave_1: entered promiscuous mode [ 217.360110][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 217.366229][ T5818] Cannot create hsr debugfs directory [ 217.825478][ T5819] Bluetooth: hci0: command tx timeout [ 217.986144][ T5819] Bluetooth: hci4: command tx timeout [ 217.991912][ T5812] Bluetooth: hci2: command tx timeout [ 217.999245][ T5819] Bluetooth: hci1: command tx timeout [ 218.067066][ T5812] Bluetooth: hci3: command tx timeout [ 218.739936][ T5813] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 218.805064][ T5813] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 218.829532][ T5813] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 218.871207][ T5813] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 218.967593][ T5814] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 218.994426][ T5814] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 219.097088][ T5814] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 219.131504][ T5814] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 219.253913][ T5810] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 219.308732][ T5810] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 219.400951][ T5810] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 219.463559][ T5820] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 219.506190][ T5820] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 219.540712][ T5810] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 219.568992][ T5820] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 219.619121][ T5820] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 219.942433][ T5818] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 220.000077][ T5818] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 220.032150][ T5818] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 220.076438][ T5818] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 220.803509][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.882837][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.039442][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.125777][ T196] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.133365][ T196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.160048][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.280707][ T196] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.288479][ T196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.435729][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.457107][ T196] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.464669][ T196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.502056][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.573822][ T196] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.581603][ T196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.853700][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.924931][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.961336][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.988649][ T196] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.996336][ T196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.137023][ T196] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.144743][ T196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.161674][ T196] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.169374][ T196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.271416][ T196] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.279101][ T196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.341991][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.503366][ T196] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.511044][ T196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.604948][ T196] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.612629][ T196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.059306][ T5820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.154913][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.796536][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.833409][ T5814] veth0_vlan: entered promiscuous mode [ 224.960932][ T5814] veth1_vlan: entered promiscuous mode [ 225.259314][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.282839][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.534431][ T5814] veth0_macvtap: entered promiscuous mode [ 225.579606][ T5813] veth0_vlan: entered promiscuous mode [ 225.676961][ T5814] veth1_macvtap: entered promiscuous mode [ 225.723035][ T5813] veth1_vlan: entered promiscuous mode [ 225.748938][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.913014][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.030073][ T5820] veth0_vlan: entered promiscuous mode [ 226.051466][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.221375][ T5820] veth1_vlan: entered promiscuous mode [ 226.308744][ T5813] veth0_macvtap: entered promiscuous mode [ 226.334866][ T3561] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.408499][ T3561] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.429172][ T5813] veth1_macvtap: entered promiscuous mode [ 226.456124][ T3561] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.536462][ T3561] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.652586][ T5818] veth0_vlan: entered promiscuous mode [ 226.681649][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.823015][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.845089][ T5818] veth1_vlan: entered promiscuous mode [ 226.877984][ T5820] veth0_macvtap: entered promiscuous mode [ 226.930745][ T5820] veth1_macvtap: entered promiscuous mode [ 227.002009][ T4483] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.104439][ T4483] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.166561][ T4483] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.210062][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.237288][ T3637] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.386892][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.449301][ T5818] veth0_macvtap: entered promiscuous mode [ 227.492650][ T3838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.537920][ T5818] veth1_macvtap: entered promiscuous mode [ 227.566861][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.605909][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.614967][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.763011][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.868349][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.953509][ T3754] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.059809][ T3754] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.098857][ T3754] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.153200][ T3637] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.882449][ T5810] veth0_vlan: entered promiscuous mode [ 229.091528][ T5810] veth1_vlan: entered promiscuous mode [ 229.508771][ T5810] veth0_macvtap: entered promiscuous mode [ 229.630725][ T5810] veth1_macvtap: entered promiscuous mode [ 229.853535][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.956574][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.055718][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.064833][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.166591][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.237513][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.722034][ T3637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.731524][ T3637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.829658][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 234.836796][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 234.927240][ T3637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.935860][ T3637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.015565][ T5099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.024901][ T5099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.123406][ T5099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.134237][ T5099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.590888][ T5813] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 235.622965][ T4642] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.631335][ T4642] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.988867][ T5099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.998032][ T5099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.092972][ T4642] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.101330][ T4642] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.136444][ T5999] loop1: detected capacity change from 0 to 1764 [ 236.371791][ T3561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.380011][ T3561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.580801][ T6002] loop3: detected capacity change from 0 to 1024 [ 236.663125][ T6002] ======================================================= [ 236.663125][ T6002] WARNING: The mand mount option has been deprecated and [ 236.663125][ T6002] and is ignored by this kernel. Remove the mand [ 236.663125][ T6002] option from the mount to silence this warning. [ 236.663125][ T6002] ======================================================= [ 236.699197][ T6002] EXT4-fs: inline encryption not supported [ 236.706169][ T6002] EXT4-fs: Ignoring removed bh option [ 236.913327][ T6002] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.175361][ T6001] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4: bg 0: block 32: padding at end of block bitmap is not set [ 237.250850][ T6001] EXT4-fs (loop3): Remounting filesystem read-only [ 237.283719][ T6012] loop2: detected capacity change from 0 to 128 [ 237.571843][ T6014] pim6reg1: entered promiscuous mode [ 237.577949][ T6014] pim6reg1: entered allmulticast mode [ 237.650976][ T5813] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.911656][ T5878] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 238.077081][ T4483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.085288][ T4483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.217005][ T5878] usb 3-1: Using ep0 maxpacket: 16 [ 238.266721][ T5878] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 238.276312][ T5878] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.286871][ T5878] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 238.329662][ T6019] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 238.360467][ T6020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8'. [ 238.399587][ T5878] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 238.410960][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.420162][ T5878] usb 3-1: Product: syz [ 238.424561][ T5878] usb 3-1: Manufacturer: syz [ 238.429651][ T5878] usb 3-1: SerialNumber: syz [ 238.477038][ T3838] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.482387][ T6020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8'. [ 238.485076][ T3838] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.765075][ T6023] loop0: detected capacity change from 0 to 512 [ 238.775825][ T6024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9'. [ 238.795267][ T6024] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.067504][ T6023] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 239.114059][ T6024] bridge_slave_1 (unregistering): left allmulticast mode [ 239.127058][ T6024] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.167872][ T6023] EXT4-fs (loop0): orphan cleanup on readonly fs [ 239.237468][ T6023] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 239.417287][ T6023] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 239.469944][ T6023] EXT4-fs error (device loop0): __ext4_iget:5464: inode #16: block 127754: comm syz.0.8: invalid block [ 239.545860][ T6023] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.8: couldn't read orphan inode 16 (err -117) [ 239.624251][ T6023] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 240.102293][ T6020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8'. [ 240.626184][ T6031] loop4: detected capacity change from 0 to 1024 [ 240.686060][ T6031] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 240.723589][ T5818] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.975665][ T6035] loop3: detected capacity change from 0 to 512 [ 241.049246][ T6035] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 241.242552][ T6035] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.12: invalid block [ 241.333702][ T6035] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.12: invalid indirect mapped block 4294967295 (level 1) [ 241.393500][ T6035] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.12: invalid indirect mapped block 4294967295 (level 1) [ 241.456281][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 241.478718][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 241.541706][ T6035] EXT4-fs (loop3): 2 truncates cleaned up [ 241.550469][ T6035] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.645664][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 241.697687][ T5878] usb 3-1: 0:2 : does not exist [ 241.838110][ T5878] usb 3-1: USB disconnect, device number 2 [ 241.877653][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 241.991920][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 242.017066][ T6044] loop1: detected capacity change from 0 to 256 [ 242.096861][ T6044] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 242.110274][ T6044] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 242.514602][ T6044] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 242.567847][ T5813] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.633590][ T6046] loop2: detected capacity change from 0 to 512 [ 242.675796][ T30] audit: type=1800 audit(1757925549.415:2): pid=6044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.14" name="file1" dev="loop1" ino=1048605 res=0 errno=0 [ 242.710892][ T6046] EXT4-fs: Ignoring removed i_version option [ 242.753154][ T6046] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 242.769114][ T6046] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 242.783960][ T6048] loop0: detected capacity change from 0 to 1024 [ 242.868997][ T6048] EXT4-fs: Ignoring removed nomblk_io_submit option [ 242.993267][ T6046] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 243.057442][ T6046] EXT4-fs (loop2): 1 truncate cleaned up [ 243.068293][ T6046] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.136176][ T6048] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.277054][ T6051] netlink: 'syz.3.17': attribute type 4 has an invalid length. [ 243.356950][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 243.439559][ T6051] netlink: 'syz.3.17': attribute type 4 has an invalid length. [ 243.732286][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 243.813055][ T6004] udevd[6004]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 243.884134][ T6057] loop1: detected capacity change from 0 to 8 [ 243.975049][ T5820] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.169049][ T6057] SQUASHFS error: Failed to read block 0x6e6: -5 [ 244.175950][ T6057] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 244.183450][ T6057] SQUASHFS error: Unable to read directory block [631:26] [ 244.737283][ T5818] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.946620][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 244.957683][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 244.986404][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 245.539351][ T6065] loop0: detected capacity change from 0 to 512 [ 245.655974][ T6065] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.669598][ T6065] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.452206][ T6065] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.226569][ T6077] loop0: detected capacity change from 0 to 2048 [ 247.294441][ T6077] udf: Unknown parameter 'fdinfo/4' [ 248.210018][ T6088] loop2: detected capacity change from 0 to 256 [ 248.423426][ T6088] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 248.444748][ T6088] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 248.700206][ T6088] exFAT-fs (loop2): error, invalid access to FAT free cluster (entry 0x00000006) [ 248.710015][ T6088] exFAT-fs (loop2): Filesystem has been set read-only [ 248.858978][ T6092] loop3: detected capacity change from 0 to 2048 [ 249.090079][ T6092] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 249.452113][ T6092] UDF-fs: error (device loop3): udf_truncate_tail_extent: Extent after EOF in inode 1368 [ 252.289488][ T6123] syzkaller0: entered promiscuous mode [ 252.295582][ T6123] syzkaller0: entered allmulticast mode [ 256.712252][ T6142] loop3: detected capacity change from 0 to 2048 [ 256.969871][ T6142] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 257.892287][ T5819] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 257.907014][ T5819] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 257.927318][ T5819] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 257.944508][ T5819] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 257.957774][ T5819] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 258.878301][ T6152] loop0: detected capacity change from 0 to 1024 [ 260.084012][ T5819] Bluetooth: hci5: command tx timeout [ 261.142774][ T6148] chnl_net:caif_netlink_parms(): no params data found [ 262.146598][ T5819] Bluetooth: hci5: command tx timeout [ 263.767590][ T6148] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.775563][ T6148] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.783298][ T6148] bridge_slave_0: entered allmulticast mode [ 263.792260][ T6148] bridge_slave_0: entered promiscuous mode [ 263.950713][ T6181] loop0: detected capacity change from 0 to 2048 [ 263.987231][ T6148] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.994888][ T6148] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.007411][ T6148] bridge_slave_1: entered allmulticast mode [ 264.017145][ T6148] bridge_slave_1: entered promiscuous mode [ 264.147770][ T6181] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 264.225537][ T5819] Bluetooth: hci5: command tx timeout [ 264.672125][ T6148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.680658][ T6181] UDF-fs: error (device loop0): udf_truncate_tail_extent: Extent after EOF in inode 1368 [ 264.819813][ T6148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.500293][ T6148] team0: Port device team_slave_0 added [ 265.553745][ T6148] team0: Port device team_slave_1 added [ 265.809350][ T6148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.816989][ T6148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.844386][ T6148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.113918][ T6148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.121878][ T6148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.148738][ T6148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.309572][ T5819] Bluetooth: hci5: command tx timeout [ 266.354107][ T6148] hsr_slave_0: entered promiscuous mode [ 266.367961][ T6148] hsr_slave_1: entered promiscuous mode [ 266.376176][ T6148] debugfs: 'hsr0' already exists in 'hsr' [ 266.382058][ T6148] Cannot create hsr debugfs directory [ 266.641433][ T6192] loop1: detected capacity change from 0 to 2048 [ 266.720203][ T6192] udf: Unknown parameter 'fdinfo/4' [ 267.157950][ T6200] loop2: detected capacity change from 0 to 512 [ 267.369991][ T6200] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.387198][ T6200] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.676470][ T5819] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 267.685798][ T5819] Bluetooth: hci2: Injecting HCI hardware error event [ 267.708216][ T5812] Bluetooth: hci2: hardware error 0x00 [ 267.781203][ T3754] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 267.878909][ T3754] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 267.893033][ T3754] EXT4-fs (loop2): This should not happen!! Data will be lost [ 267.893033][ T3754] [ 267.906303][ T3754] EXT4-fs (loop2): Total free blocks count 0 [ 267.913645][ T3754] EXT4-fs (loop2): Free/Dirty block details [ 267.920282][ T3754] EXT4-fs (loop2): free_blocks=65280 [ 267.926058][ T3754] EXT4-fs (loop2): dirty_blocks=33 [ 267.931381][ T3754] EXT4-fs (loop2): Block reservation details [ 267.937735][ T3754] EXT4-fs (loop2): i_reserved_data_blocks=33 [ 268.170930][ T6200] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.755857][ T6148] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 268.882507][ T6148] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 268.911235][ T6211] loop2: detected capacity change from 0 to 1024 [ 268.979584][ T6211] EXT4-fs: Ignoring removed nomblk_io_submit option [ 269.004826][ T6148] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 269.143432][ T6148] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 269.200403][ T6211] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.265844][ T5819] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 269.274599][ T5819] Bluetooth: hci1: Injecting HCI hardware error event [ 269.282147][ T5819] Bluetooth: hci1: hardware error 0x00 [ 269.911194][ T5812] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 270.152640][ T5812] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 270.164601][ T5812] Bluetooth: hci3: Injecting HCI hardware error event [ 270.173356][ T5812] Bluetooth: hci3: hardware error 0x00 [ 270.633809][ T5820] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.090286][ T6229] pim6reg1: entered promiscuous mode [ 271.096205][ T6229] pim6reg1: entered allmulticast mode [ 271.426606][ T5819] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 271.663776][ T6148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.001058][ T6148] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.122140][ T3838] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.130570][ T3838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.235762][ T5812] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 272.301192][ T3838] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.309236][ T3838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.737656][ T6240] loop2: detected capacity change from 0 to 16 [ 272.872454][ T6240] erofs (device loop2): mounted with root inode @ nid 36. [ 273.182627][ T6246] loop1: detected capacity change from 0 to 512 [ 273.253542][ T6240] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 273.474815][ T6246] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.489291][ T6246] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.024966][ T6246] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.515425][ T5812] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 275.524030][ T5812] Bluetooth: hci4: Injecting HCI hardware error event [ 275.534009][ T6266] loop1: detected capacity change from 0 to 1024 [ 275.536645][ T5812] Bluetooth: hci4: hardware error 0x00 [ 275.687356][ T6266] EXT4-fs: Ignoring removed nomblk_io_submit option [ 275.848739][ T6266] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.951915][ T6273] loop3: detected capacity change from 0 to 16 [ 276.132968][ T6273] erofs (device loop3): mounted with root inode @ nid 36. [ 276.348781][ T6148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.894933][ T5814] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.589806][ T6284] pim6reg1: entered promiscuous mode [ 277.595780][ T6284] pim6reg1: entered allmulticast mode [ 277.617630][ T6285] loop2: detected capacity change from 0 to 512 [ 277.680346][ T5812] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 277.692079][ T6285] EXT4-fs: Ignoring removed oldalloc option [ 277.712615][ T5099] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.793319][ T6285] EXT4-fs (loop2): 1 truncate cleaned up [ 277.802630][ T6285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.006660][ T5099] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.302374][ T5099] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.601446][ T5099] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.958003][ T5820] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.044908][ T6301] loop0: detected capacity change from 0 to 128 [ 279.343952][ T5099] bridge_slave_1: left allmulticast mode [ 279.350187][ T5099] bridge_slave_1: left promiscuous mode [ 279.357274][ T5099] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.385039][ T5099] bridge_slave_0: left allmulticast mode [ 279.392273][ T6301] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 279.393361][ T5099] bridge_slave_0: left promiscuous mode [ 279.411753][ T5099] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.534763][ T6301] ext4 filesystem being mounted at /23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 279.986614][ T6306] loop1: detected capacity change from 0 to 1024 [ 280.321732][ T6307] loop2: detected capacity change from 0 to 2048 [ 280.448051][ T6307] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 280.707585][ T6307] cgroup: Unknown subsys name 'cpuset' [ 280.874004][ T30] audit: type=1800 audit(1757925587.595:3): pid=6306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.97" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 281.021091][ T5099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.078051][ T5099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.149352][ T5099] bond0 (unregistering): Released all slaves [ 282.494959][ T6319] loop3: detected capacity change from 0 to 1024 [ 282.579703][ T5099] hsr_slave_0: left promiscuous mode [ 282.599321][ T5099] hsr_slave_1: left promiscuous mode [ 282.616121][ T5099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.623754][ T5099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.731581][ T5099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.739499][ T5099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.837597][ T6319] ===================================================== [ 282.850702][ T6319] BUG: KMSAN: uninit-value in hfsplus_delete_cat+0x1195/0x13d0 [ 282.861724][ T6319] hfsplus_delete_cat+0x1195/0x13d0 [ 282.867933][ T6319] hfsplus_rmdir+0x13c/0x310 [ 282.872796][ T6319] vfs_rmdir+0x5b3/0x800 [ 282.877651][ T6319] do_rmdir+0x7d6/0xdc0 [ 282.882039][ T6319] __ia32_sys_rmdir+0x70/0xa0 [ 282.887144][ T6319] ia32_sys_call+0x32c4/0x4310 [ 282.892637][ T6319] __do_fast_syscall_32+0xb0/0x150 [ 282.898219][ T6319] do_fast_syscall_32+0x38/0x80 [ 282.903276][ T6319] do_SYSENTER_32+0x1f/0x30 [ 282.908267][ T6319] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 282.915746][ T6319] [ 282.918289][ T6319] Uninit was stored to memory at: [ 282.923567][ T6319] hfsplus_create_cat+0x18fb/0x1910 [ 282.929260][ T6319] hfsplus_mknod+0x208/0x560 [ 282.934193][ T6319] hfsplus_mkdir+0x5a/0x80 [ 282.940649][ T6319] vfs_mkdir+0x4ea/0x850 [ 282.951779][ T6319] do_mkdirat+0x41a/0xf30 [ 282.958443][ T6319] __ia32_sys_mkdir+0x9a/0xf0 [ 282.963371][ T6319] ia32_sys_call+0x1b3a/0x4310 [ 282.968611][ T6319] __do_fast_syscall_32+0xb0/0x150 [ 282.973951][ T6319] do_fast_syscall_32+0x38/0x80 [ 282.979199][ T6319] do_SYSENTER_32+0x1f/0x30 [ 282.983998][ T6319] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 282.990790][ T6319] [ 282.993233][ T6319] Uninit was created at: [ 282.998159][ T6319] __alloc_frozen_pages_noprof+0x689/0xf00 [ 283.004605][ T6319] alloc_pages_mpol+0x328/0x860 [ 283.009947][ T6319] alloc_frozen_pages_noprof+0xf7/0x200 [ 283.015957][ T6319] allocate_slab+0x24d/0x1220 [ 283.020851][ T6319] ___slab_alloc+0xff3/0x3470 [ 283.025908][ T6319] kmem_cache_alloc_lru_noprof+0x922/0xed0 [ 283.031972][ T6319] hfsplus_alloc_inode+0x5a/0xd0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 283.037389][ T6319] alloc_inode+0x8a/0x4a0 [ 283.041955][ T6319] iget_locked+0x239/0x12d0 [ 283.046920][ T6319] hfsplus_iget+0x5c/0xb80 [ 283.057678][ T6319] hfsplus_btree_open+0x128/0x1cf0 [ 283.063248][ T6319] hfsplus_fill_super+0x1161/0x2730 [ 283.071119][ T6319] get_tree_bdev_flags+0x6e3/0x920 [ 283.076695][ T6319] get_tree_bdev+0x38/0x50 [ 283.081354][ T6319] hfsplus_get_tree+0x35/0x40 [ 283.086386][ T6319] vfs_get_tree+0xb0/0x5c0 [ 283.091042][ T6319] do_new_mount+0x733/0x1420 [ 283.096119][ T6319] path_mount+0x6db/0x1e90 [ 283.100776][ T6319] __se_sys_mount+0x6eb/0x7d0 [ 283.106041][ T6319] __ia32_sys_mount+0xe2/0x150 [ 283.111070][ T6319] ia32_sys_call+0x2c16/0x4310 [ 283.116240][ T6319] __do_fast_syscall_32+0xb0/0x150 [ 283.121562][ T6319] do_fast_syscall_32+0x38/0x80 [ 283.126824][ T6319] do_SYSENTER_32+0x1f/0x30 [ 283.131568][ T6319] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 283.138854][ T6319] [ 283.141371][ T6319] CPU: 1 UID: 0 PID: 6319 Comm: syz.3.101 Not tainted syzkaller #0 PREEMPT(none) [ 283.156949][ T6319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 283.170127][ T6319] ===================================================== [ 283.177400][ T6319] Disabling lock debugging due to kernel taint [ 283.184085][ T6319] Kernel panic - not syncing: kmsan.panic set ... [ 283.190803][ T6319] CPU: 1 UID: 0 PID: 6319 Comm: syz.3.101 Tainted: G B syzkaller #0 PREEMPT(none) [ 283.202106][ T6319] Tainted: [B]=BAD_PAGE [ 283.206385][ T6319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 283.216628][ T6319] Call Trace: [ 283.220055][ T6319] [ 283.223199][ T6319] __dump_stack+0x26/0x30 [ 283.227795][ T6319] dump_stack_lvl+0x53/0x270 [ 283.232636][ T6319] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 283.238915][ T6319] dump_stack+0x1e/0x25 [ 283.243350][ T6319] vpanic+0x361/0xc50 [ 283.247601][ T6319] panic+0x15d/0x160 [ 283.251827][ T6319] kmsan_report+0x31c/0x320 [ 283.256571][ T6319] ? __msan_warning+0x1b/0x30 [ 283.261471][ T6319] ? hfsplus_delete_cat+0x1195/0x13d0 [ 283.267104][ T6319] ? hfsplus_rmdir+0x13c/0x310 [ 283.272109][ T6319] ? vfs_rmdir+0x5b3/0x800 [ 283.276811][ T6319] ? do_rmdir+0x7d6/0xdc0 [ 283.281379][ T6319] ? __ia32_sys_rmdir+0x70/0xa0 [ 283.286477][ T6319] ? ia32_sys_call+0x32c4/0x4310 [ 283.291652][ T6319] ? __do_fast_syscall_32+0xb0/0x150 [ 283.297261][ T6319] ? do_fast_syscall_32+0x38/0x80 [ 283.302519][ T6319] ? do_SYSENTER_32+0x1f/0x30 [ 283.307451][ T6319] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 283.314417][ T6319] ? kmsan_get_metadata+0xfb/0x160 [ 283.319776][ T6319] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 283.325845][ T6319] ? hfsplus_bnode_dump+0x50a/0x560 [ 283.331333][ T6319] ? kmsan_get_metadata+0xfb/0x160 [ 283.336799][ T6319] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 283.342950][ T6319] ? hfsplus_brec_remove+0x92f/0xa60 [ 283.348538][ T6319] ? kmsan_get_metadata+0xfb/0x160 [ 283.353907][ T6319] __msan_warning+0x1b/0x30 [ 283.358618][ T6319] hfsplus_delete_cat+0x1195/0x13d0 [ 283.364159][ T6319] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 283.370230][ T6319] ? kmsan_get_metadata+0xfb/0x160 [ 283.375721][ T6319] hfsplus_rmdir+0x13c/0x310 [ 283.380634][ T6319] ? __pfx_hfsplus_rmdir+0x10/0x10 [ 283.386240][ T6319] vfs_rmdir+0x5b3/0x800 [ 283.390767][ T6319] do_rmdir+0x7d6/0xdc0 [ 283.395293][ T6319] __ia32_sys_rmdir+0x70/0xa0 [ 283.400231][ T6319] ia32_sys_call+0x32c4/0x4310 [ 283.405227][ T6319] __do_fast_syscall_32+0xb0/0x150 [ 283.410563][ T6319] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 283.416744][ T6319] do_fast_syscall_32+0x38/0x80 [ 283.421905][ T6319] do_SYSENTER_32+0x1f/0x30 [ 283.426619][ T6319] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 283.433204][ T6319] RIP: 0023:0xf7fa2539 [ 283.437461][ T6319] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 283.457286][ T6319] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000028 [ 283.465929][ T6319] RAX: ffffffffffffffda RBX: 0000000080000100 RCX: 0000000000000000 [ 283.474087][ T6319] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 283.482224][ T6319] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 283.490381][ T6319] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 283.498553][ T6319] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 283.507080][ T6319] [ 283.510759][ T6319] Kernel Offset: disabled [ 283.515181][ T6319] Rebooting in 86400 seconds..