last executing test programs: 7.35463871s ago: executing program 2 (id=269): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f00000000c0)={[{@dioread_lock}, {@nouid32}, {@lazytime}, {@noblock_validity}]}, 0xfc, 0x564, &(0x7f0000000e40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}) write$cgroup_subtree(r1, 0x0, 0x47) syz_open_dev$MSR(0x0, 0x0, 0x0) open(0x0, 0x121342, 0x0) getpid() execve(&(0x7f0000000100)='./file2\x00', 0x0, 0x0) 6.561202168s ago: executing program 4 (id=279): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x5a, 0x47, 0x64, 0x40, 0x7392, 0xa611, 0x70dc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfc, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f00000000c0)={0x40, 0x11, 0x5, "1aeeb1de50"}, 0x0, 0x0}) 5.013117154s ago: executing program 2 (id=283): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000480)='./file0/file0\x00', 0x170) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000900)=""/4096) 3.997241131s ago: executing program 1 (id=288): ioperm(0x0, 0x2, 0x2) capset(&(0x7f0000000000)={0x19980330, 0xffffffffffffffff}, 0x0) 3.538341239s ago: executing program 3 (id=289): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000550001002bbd7000fddbdf2507000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="01030200e0030001000000000000000000000000080000403845ac240aa255f0b59afde7c2e3964403"], 0x38}, 0x1, 0xba01, 0x0, 0x4094}, 0x800) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 3.365207919s ago: executing program 1 (id=291): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x88, &(0x7f0000000580)={[{@nogrpid}, {@min_batch_time}, {@grpquota}, {@nobarrier}, {@nodiscard}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x2a96}}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, 0x0, 0x0, 0xf22, 0x0, 0x2}]) 3.318761949s ago: executing program 4 (id=292): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair(0x1, 0x20000000000001, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 3.303768169s ago: executing program 3 (id=293): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x2, 0x10, 0x9, 0x2, 0xa, 0x0, 0x70bd2b, 0x25dfdbfd, [@sadb_x_policy={0x8, 0x12, 0x4, 0x4, 0x0, 0x0, 0x80000000, {0x6, 0x32, 0x4, 0x4, 0x0, 0x3, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@empty}}]}, 0x50}}, 0x2000c800) io_uring_setup(0x39e5, &(0x7f0000000300)={0x0, 0x1d6, 0x80, 0x3, 0x2ab}) preadv(r0, 0x0, 0x0, 0x1239, 0x4b4a) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000000) 3.155145899s ago: executing program 3 (id=294): socket$packet(0x11, 0x2, 0x300) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0xed, 0x0, 0x7}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) semtimedop(0x0, &(0x7f0000000180), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) 3.124276149s ago: executing program 4 (id=295): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x40200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 2.971977998s ago: executing program 3 (id=296): syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x2, 0x10, 0x9, 0x2, 0xa, 0x0, 0x70bd2b, 0x25dfdbfd, [@sadb_x_policy={0x8, 0x12, 0x4, 0x4, 0x0, 0x0, 0x80000000, {0x6, 0x32, 0x4, 0x4, 0x0, 0x3, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@empty}}]}, 0x50}}, 0x2000c800) 2.893216278s ago: executing program 1 (id=297): r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000680)=""/184, 0xb8) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000740)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 2.799129848s ago: executing program 2 (id=298): r0 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000000800)=""/196, 0x26, 0xc4, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x10, 0x4, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, r5, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) close(r0) 2.762858127s ago: executing program 4 (id=299): r0 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000000800)=""/196, 0x26, 0xc4, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x10, 0x4, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, r5, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) close(r0) 2.674585267s ago: executing program 1 (id=300): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x10000, &(0x7f0000000180)={[{@bsdgroups}, {@grpquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@grpjquota}, {@nomblk_io_submit}]}, 0x1, 0xbcf, &(0x7f0000001800)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 2.533095317s ago: executing program 3 (id=301): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000400000003"], 0xffffffffffffffff, 0x3e, 0x0, 0x2, 0x0, 0x0, @void, @value}, 0x28) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000950fe508f60d760091410000000109021200010000000003041502"], 0x0) 2.188083186s ago: executing program 1 (id=302): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x84515000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) 1.266521263s ago: executing program 0 (id=304): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 1.122058673s ago: executing program 0 (id=305): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x2, 0x10, 0x9, 0x2, 0xa, 0x0, 0x70bd2b, 0x25dfdbfd, [@sadb_x_policy={0x8, 0x12, 0x4, 0x4, 0x0, 0x0, 0x80000000, {0x6, 0x32, 0x4, 0x4, 0x0, 0x3, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@empty}}]}, 0x50}}, 0x2000c800) io_uring_setup(0x39e5, &(0x7f0000000300)={0x0, 0x1d6, 0x80, 0x3, 0x2ab}) preadv(r0, 0x0, 0x0, 0x1239, 0x4b4a) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000000) 1.022660163s ago: executing program 2 (id=306): socket$packet(0x11, 0x2, 0x300) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0xed, 0x0, 0x7}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) semtimedop(0x0, &(0x7f0000000180), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) 1.007413273s ago: executing program 0 (id=307): openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = syz_open_dev$loop(0x0, 0xd79, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x9, {0x2a00, 0x80010000, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89d0080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x3]}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fchown(0xffffffffffffffff, 0x0, 0x0) 905.167383ms ago: executing program 3 (id=308): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000480)='./file0/file0\x00', 0x170) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000900)=""/4096) 810.176962ms ago: executing program 2 (id=309): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x40200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 675.807202ms ago: executing program 4 (id=310): r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000680)=""/184, 0xb8) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000740)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 565.037242ms ago: executing program 0 (id=311): syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x2, 0x10, 0x9, 0x2, 0xa, 0x0, 0x70bd2b, 0x25dfdbfd, [@sadb_x_policy={0x8, 0x12, 0x4, 0x4, 0x0, 0x0, 0x80000000, {0x6, 0x32, 0x4, 0x4, 0x0, 0x3, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@empty}}]}, 0x50}}, 0x2000c800) 533.362592ms ago: executing program 2 (id=312): sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x12) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f0000000340)='\b', 0x1, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25) 353.526341ms ago: executing program 4 (id=313): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000002c0)={[{@mb_optimize_scan}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@auto_da_alloc}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) r0 = creat(&(0x7f0000000140)='./file2\x00', 0x1ad) unlink(&(0x7f0000000180)='./file1\x00') close(r0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) listxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000200)=""/109, 0x6d) 320.099361ms ago: executing program 0 (id=314): syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340), &(0x7f0000000280)) r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xd001b) 76.99263ms ago: executing program 0 (id=315): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000200)=[{0x24}, {0x6, 0x0, 0x0, 0x7ffffdbd}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x14008, &(0x7f0000001200)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@stripe={'stripe', 0x3d, 0x7}}, {@noblock_validity}, {@noinit_itable}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000280)='./bus/file0\x00', 0x0) renameat2(r3, &(0x7f00000001c0)='./bus/file0\x00', r3, &(0x7f0000000140)='./file0\x00', 0x4) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00001009040000022a3e740009058bff7f0040101109050b362f"], 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x4000000000008000, 0x0) syz_usb_disconnect(r5) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r6, 0xc0405519, 0x0) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x100c007, &(0x7f0000000080)=ANY=[@ANYBLOB="676c0c367900214607524ea23c9135358d8ae48c0885b06a795b7afd400645903687b97cc4c10f59927c283db2925c7a80a4cbd7e24cd86590108480dd8079ed32d88655c1682a414cf49089721cb910c7642dff415867eb376a4690336c4fd190b94bd1bd", @ANYRESDEC=0x0, @ANYBLOB=',rootdir=00000000000000000003,adinicb,adinicb\x00noadinicb,lastblock=00000000000000047665,partition=00000000000000000004,session=00000000000000000009,dmode=00000000000000000002007,\x00'], 0xfd, 0xc2f, &(0x7f0000000280)="$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") ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000240)={0x2, &(0x7f00000001c0)=[{0x20ed, 0x7}, {0x0, 0x1}]}) 0s ago: executing program 1 (id=316): r0 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000000800)=""/196, 0x26, 0xc4, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x10, 0x4, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, r5, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) close(r0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.112' (ED25519) to the list of known hosts. [ 50.117373][ T4231] cgroup: Unknown subsys name 'net' [ 50.232084][ T4231] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.454665][ T4231] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 52.838100][ T4251] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.850878][ T4260] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.859545][ T4260] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.860204][ T4253] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.867352][ T4261] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.875477][ T4253] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.882782][ T4261] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.888571][ T4253] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.895622][ T4261] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.903146][ T4253] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.910287][ T4261] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.923099][ T4253] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.924353][ T4261] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.930954][ T4253] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 52.939127][ T4261] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.945342][ T4253] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 52.952607][ T4261] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.958390][ T4253] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.965544][ T4261] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 52.979466][ T4253] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 52.987695][ T4261] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 52.994783][ T4262] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.002796][ T4253] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.008730][ T4260] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.010481][ T4253] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 53.024829][ T4253] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.033182][ T4263] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 53.079831][ T4262] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 53.095834][ T4262] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 53.103204][ T4262] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 53.381900][ T4252] chnl_net:caif_netlink_parms(): no params data found [ 53.498544][ T4245] chnl_net:caif_netlink_parms(): no params data found [ 53.574097][ T4254] chnl_net:caif_netlink_parms(): no params data found [ 53.586070][ T4249] chnl_net:caif_netlink_parms(): no params data found [ 53.625288][ T4252] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.633062][ T4252] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.641428][ T4252] device bridge_slave_0 entered promiscuous mode [ 53.673217][ T4245] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.680463][ T4245] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.688331][ T4245] device bridge_slave_0 entered promiscuous mode [ 53.696235][ T4246] chnl_net:caif_netlink_parms(): no params data found [ 53.714658][ T4252] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.721841][ T4252] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.730307][ T4252] device bridge_slave_1 entered promiscuous mode [ 53.753167][ T4245] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.760441][ T4245] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.769121][ T4245] device bridge_slave_1 entered promiscuous mode [ 53.827147][ T4245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.842135][ T4252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.856949][ T4252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.869946][ T4245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.949284][ T4249] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.956571][ T4249] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.964171][ T4249] device bridge_slave_0 entered promiscuous mode [ 53.974040][ T4245] team0: Port device team_slave_0 added [ 53.987993][ T4254] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.995070][ T4254] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.003278][ T4254] device bridge_slave_0 entered promiscuous mode [ 54.013499][ T4252] team0: Port device team_slave_0 added [ 54.020011][ T4249] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.027241][ T4249] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.034947][ T4249] device bridge_slave_1 entered promiscuous mode [ 54.042917][ T4245] team0: Port device team_slave_1 added [ 54.049032][ T4246] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.056272][ T4246] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.063886][ T4246] device bridge_slave_0 entered promiscuous mode [ 54.072441][ T4252] team0: Port device team_slave_1 added [ 54.087149][ T4254] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.094260][ T4254] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.102066][ T4254] device bridge_slave_1 entered promiscuous mode [ 54.124252][ T4246] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.131451][ T4246] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.139998][ T4246] device bridge_slave_1 entered promiscuous mode [ 54.180553][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.187615][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.213704][ T4252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.232688][ T4249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.242372][ T4245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.249410][ T4245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.275792][ T4245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.294907][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.302144][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.328630][ T4252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.341630][ T4254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.353677][ T4254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.364774][ T4249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.374483][ T4245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.381582][ T4245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.407683][ T4245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.420633][ T4246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.456654][ T4246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.504997][ T4246] team0: Port device team_slave_0 added [ 54.512961][ T4254] team0: Port device team_slave_0 added [ 54.520717][ T4249] team0: Port device team_slave_0 added [ 54.542329][ T4246] team0: Port device team_slave_1 added [ 54.559931][ T4254] team0: Port device team_slave_1 added [ 54.575566][ T4249] team0: Port device team_slave_1 added [ 54.591605][ T4252] device hsr_slave_0 entered promiscuous mode [ 54.598502][ T4252] device hsr_slave_1 entered promiscuous mode [ 54.637045][ T4245] device hsr_slave_0 entered promiscuous mode [ 54.643702][ T4245] device hsr_slave_1 entered promiscuous mode [ 54.650368][ T4245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.658162][ T4245] Cannot create hsr debugfs directory [ 54.666766][ T4246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.673719][ T4246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.699903][ T4246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.712557][ T4246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.719893][ T4246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.746335][ T4246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.758003][ T4254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.764969][ T4254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.790991][ T4254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.802443][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.809544][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.835637][ T4249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.848009][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.854958][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.880980][ T4249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.909413][ T4254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.916475][ T4254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.942877][ T4254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.042075][ T4249] device hsr_slave_0 entered promiscuous mode [ 55.048858][ T4262] Bluetooth: hci1: command 0x0409 tx timeout [ 55.051361][ T4259] Bluetooth: hci2: command 0x0409 tx timeout [ 55.062925][ T4249] device hsr_slave_1 entered promiscuous mode [ 55.069737][ T4249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.077519][ T4249] Cannot create hsr debugfs directory [ 55.096976][ T4246] device hsr_slave_0 entered promiscuous mode [ 55.103752][ T4246] device hsr_slave_1 entered promiscuous mode [ 55.111200][ T4246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.118885][ T4262] Bluetooth: hci4: command 0x0409 tx timeout [ 55.119048][ T4262] Bluetooth: hci3: command 0x0409 tx timeout [ 55.124919][ T4246] Cannot create hsr debugfs directory [ 55.131310][ T4259] Bluetooth: hci0: command 0x0409 tx timeout [ 55.160104][ T4254] device hsr_slave_0 entered promiscuous mode [ 55.167022][ T4254] device hsr_slave_1 entered promiscuous mode [ 55.173546][ T4254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.181285][ T4254] Cannot create hsr debugfs directory [ 55.456151][ T4252] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.466637][ T4252] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.481212][ T4252] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.491101][ T4252] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.517164][ T4245] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.543004][ T4245] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.561665][ T4245] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.570969][ T4245] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.587048][ T4246] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.627198][ T4246] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.636813][ T4246] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.667959][ T4246] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.703619][ T4249] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.737458][ T4249] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.746802][ T4249] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.772085][ T4249] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.812163][ T4252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.824442][ T4254] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.834595][ T4254] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.870601][ T4254] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.880972][ T4254] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.908351][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.919167][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.934669][ T4245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.949647][ T4252] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.967809][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.979704][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.989705][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.996988][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.014637][ T4246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.034743][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.043281][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.051861][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.060473][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.070586][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.079511][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.086706][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.094524][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.102619][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.116212][ T4245] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.148857][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.158110][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.169653][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.179793][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.186918][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.194883][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.216321][ T4249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.225838][ T4246] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.257811][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.266771][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.276864][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.283941][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.291788][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.301589][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.310983][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.319861][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.326960][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.334791][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.346188][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.354795][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.364783][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.373536][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.382108][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.389191][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.397710][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.406622][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.414981][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.423837][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.432423][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.446481][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.454591][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.463019][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.474145][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.482145][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.504184][ T4252] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.516453][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.546998][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.556781][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.565052][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.573865][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.584192][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.593425][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.602310][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.618499][ T4249] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.644336][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.654938][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.670600][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.681288][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.694556][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.705275][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.721559][ T4246] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.733704][ T4246] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.751739][ T4254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.774703][ T4254] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.781775][ T4245] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.794868][ T4245] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.807869][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.819454][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.830544][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.839593][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.848531][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.857809][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.866705][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.877723][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.886330][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.894834][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.903713][ T4296] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.910832][ T4296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.918994][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.927874][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.936774][ T4296] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.943843][ T4296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.951596][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.959845][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.967960][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.975972][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.983607][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.017016][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.026741][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.044153][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.053113][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.060281][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.076246][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.085093][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.101920][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.111163][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.118298][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.125983][ T4259] Bluetooth: hci2: command 0x041b tx timeout [ 57.127258][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.131992][ T4259] Bluetooth: hci1: command 0x041b tx timeout [ 57.148490][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.156893][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.166004][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.196440][ T4259] Bluetooth: hci3: command 0x041b tx timeout [ 57.196452][ T4262] Bluetooth: hci0: command 0x041b tx timeout [ 57.196484][ T4262] Bluetooth: hci4: command 0x041b tx timeout [ 57.223448][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.234208][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.258934][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.279630][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.317766][ T4252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.326745][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.341666][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.351803][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.367913][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.377688][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.387006][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.401520][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.410875][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.433430][ T4249] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.446560][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.475336][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.483260][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.499161][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.511913][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.521883][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.530961][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.540240][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.549241][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.556913][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.564303][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.573870][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.590114][ T4246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.644983][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.653374][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.662190][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.680046][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.689663][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.697803][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.708632][ T4245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.722731][ T4252] device veth0_vlan entered promiscuous mode [ 57.763397][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.781313][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.809120][ T4252] device veth1_vlan entered promiscuous mode [ 57.830726][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.849174][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.862725][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.892545][ T4249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.905974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.914696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.936928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.945820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.965997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.980859][ T4246] device veth0_vlan entered promiscuous mode [ 58.010461][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.027819][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.039791][ T4252] device veth0_macvtap entered promiscuous mode [ 58.062310][ T4246] device veth1_vlan entered promiscuous mode [ 58.084195][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.092911][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.108378][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.121327][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.133844][ T4252] device veth1_macvtap entered promiscuous mode [ 58.167500][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.176041][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.183908][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.192967][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.206530][ T4249] device veth0_vlan entered promiscuous mode [ 58.220711][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.229504][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.237964][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.246307][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.273014][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.282202][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.291863][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.303065][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.311863][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.321022][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.330127][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.343339][ T4246] device veth0_macvtap entered promiscuous mode [ 58.358973][ T4249] device veth1_vlan entered promiscuous mode [ 58.370826][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.380177][ T4246] device veth1_macvtap entered promiscuous mode [ 58.391012][ T4254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.402778][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.411472][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.420062][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.429619][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.438351][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.464543][ T4252] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.473557][ T4252] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.484008][ T4252] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.493095][ T4252] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.518649][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.528248][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.537096][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.546147][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.554554][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.565765][ T4245] device veth0_vlan entered promiscuous mode [ 58.576239][ T4246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.587150][ T4246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.598718][ T4246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.608098][ T4249] device veth0_macvtap entered promiscuous mode [ 58.622436][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.631406][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.639682][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.648891][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.657566][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.669844][ T4245] device veth1_vlan entered promiscuous mode [ 58.682478][ T4249] device veth1_macvtap entered promiscuous mode [ 58.694783][ T4246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.707248][ T4246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.718801][ T4246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.742956][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.759499][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.770383][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.781867][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.793516][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.804152][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.813047][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.822220][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.831446][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.840408][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.849835][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.860516][ T4246] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.870799][ T4246] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.880714][ T4246] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.889655][ T4246] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.915825][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.927609][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.937592][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.948154][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.960580][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.980567][ T4249] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.997630][ T4249] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.007938][ T4249] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.016727][ T4249] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.029714][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.039885][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.055058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.064595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.089304][ T4254] device veth0_vlan entered promiscuous mode [ 59.100736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.108775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.119549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.128359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.151863][ T4245] device veth0_macvtap entered promiscuous mode [ 59.170928][ T4254] device veth1_vlan entered promiscuous mode [ 59.191344][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.191880][ T4245] device veth1_macvtap entered promiscuous mode [ 59.200074][ T4262] Bluetooth: hci2: command 0x040f tx timeout [ 59.206368][ T4263] Bluetooth: hci1: command 0x040f tx timeout [ 59.247915][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.259282][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.271168][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.277223][ T4263] Bluetooth: hci4: command 0x040f tx timeout [ 59.279420][ T4259] Bluetooth: hci3: command 0x040f tx timeout [ 59.284606][ T4262] Bluetooth: hci0: command 0x040f tx timeout [ 59.291855][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.305331][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.313286][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.368381][ T4245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.380075][ T4245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.390850][ T4245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.401775][ T4245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.411663][ T4245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.422301][ T4245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.433699][ T4245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.442555][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.451351][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.460245][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.468827][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.478196][ T4315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.488459][ T4254] device veth0_macvtap entered promiscuous mode [ 59.490730][ T4315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.503410][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.504300][ T4254] device veth1_macvtap entered promiscuous mode [ 59.520648][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.541931][ T4245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.553119][ T4245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.563748][ T4245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.574437][ T4245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.584916][ T4245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.596877][ T4245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.608870][ T4245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.617025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.627656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.636325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.644189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.652101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.663459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.701235][ T4245] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.713031][ T4245] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.722525][ T4245] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.731470][ T4245] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.770608][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.787621][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.797855][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.808530][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.818603][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.829306][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.842788][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.853484][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.865292][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.896961][ T4315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.904911][ T4315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.905309][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.927675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.941732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.952602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.960425][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.966460][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.984146][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.006205][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.017352][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.027958][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.038740][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.048947][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.059952][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.075042][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.144736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.154042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.169452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.252376][ T4254] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.261434][ T4254] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.271608][ T4254] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.281448][ T4254] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.310983][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.321807][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.371438][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.687629][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.700977][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.263013][ T27] audit: type=1326 audit(1736684135.937:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4337 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0cfd85d29 code=0x7ffc0000 [ 61.310133][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.318514][ T4262] Bluetooth: hci2: command 0x0419 tx timeout [ 61.325304][ T4262] Bluetooth: hci1: command 0x0419 tx timeout [ 61.347752][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.357443][ T4263] Bluetooth: hci0: command 0x0419 tx timeout [ 61.365160][ T4262] Bluetooth: hci4: command 0x0419 tx timeout [ 61.372259][ T4263] Bluetooth: hci3: command 0x0419 tx timeout [ 61.429060][ T27] audit: type=1326 audit(1736684135.967:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4337 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0cfd85d29 code=0x7ffc0000 [ 61.604247][ T27] audit: type=1326 audit(1736684135.967:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4337 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa0cfd85d29 code=0x7ffc0000 [ 61.652355][ T27] audit: type=1326 audit(1736684135.967:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4337 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0cfd85d29 code=0x7ffc0000 [ 61.690610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.707839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.772529][ T27] audit: type=1326 audit(1736684135.967:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4337 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0cfd85d29 code=0x7ffc0000 [ 61.829583][ T4296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.831823][ T4347] device syzkaller0 entered promiscuous mode [ 61.887531][ T4296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.955442][ T4329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.025207][ T27] audit: type=1326 audit(1736684135.967:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4337 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa0cfd85d29 code=0x7ffc0000 [ 62.025313][ T4329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.058154][ T27] audit: type=1326 audit(1736684135.967:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4337 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0cfd85d29 code=0x7ffc0000 [ 62.065181][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.147743][ T4356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7'. [ 62.845838][ T27] audit: type=1326 audit(1736684135.967:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4337 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0cfd85d29 code=0x7ffc0000 [ 62.887924][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.910467][ T4359] loop4: detected capacity change from 0 to 2048 [ 62.975985][ T27] audit: type=1326 audit(1736684135.967:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4337 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa0cfd85d29 code=0x7ffc0000 [ 62.993146][ T4341] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 63.018785][ T4361] loop0: detected capacity change from 0 to 512 [ 63.030257][ T4358] loop4: detected capacity change from 0 to 128 [ 63.045394][ T4341] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 63.083778][ T4263] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 63.110337][ T4341] Buffer I/O error on dev loop4, logical block 0, async page read [ 63.153338][ T27] audit: type=1326 audit(1736684135.967:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4337 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0cfd85d29 code=0x7ffc0000 [ 63.178586][ T4361] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 63.187568][ T4361] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.231478][ T4358] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 63.473478][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 64.018124][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 64.120550][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 64.325389][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 64.333730][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 64.334454][ T4374] loop3: detected capacity change from 0 to 512 [ 64.342013][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 64.348776][ T4374] ======================================================= [ 64.348776][ T4374] WARNING: The mand mount option has been deprecated and [ 64.348776][ T4374] and is ignored by this kernel. Remove the mand [ 64.348776][ T4374] option from the mount to silence this warning. [ 64.348776][ T4374] ======================================================= [ 64.356464][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 64.409951][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18!!! [ 64.418246][ T0] NOHZ tick-stop error: local softirq work is pending, handler #21a!!! [ 64.428147][ T0] NOHZ tick-stop error: local softirq work is pending, handler #31a!!! [ 64.436520][ T0] NOHZ tick-stop error: local softirq work is pending, handler #31a!!! [ 64.451638][ T4374] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 65.069041][ T4374] EXT4-fs (loop3): failed to open journal device unknown-block(4,137) -6 [ 66.810707][ T4400] loop1: detected capacity change from 0 to 1024 [ 67.001542][ T4402] loop0: detected capacity change from 0 to 512 [ 67.101936][ T4402] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.19: bad orphan inode 13 [ 67.162112][ T4402] ext4_test_bit(bit=12, block=4) = 1 [ 67.186720][ T4402] is_bad_inode(inode)=0 [ 67.206856][ T4402] NEXT_ORPHAN(inode)=0 [ 67.210966][ T4402] max_ino=32 [ 67.246563][ T4402] i_nlink=1 [ 67.249800][ T4402] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 67.431247][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 67.915288][ T4263] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 68.200231][ T4418] Zero length message leads to an empty skb [ 68.246131][ T75] hfsplus: b-tree write err: -5, ino 3 [ 69.612856][ T27] kauditd_printk_skb: 20 callbacks suppressed [ 69.612871][ T27] audit: type=1326 audit(1736684144.287:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4432 comm="syz.2.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba7985d29 code=0x7ffc0000 [ 69.683306][ T27] audit: type=1326 audit(1736684144.327:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4432 comm="syz.2.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1ba7985d29 code=0x7ffc0000 [ 69.716384][ T27] audit: type=1326 audit(1736684144.327:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4432 comm="syz.2.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba7985d29 code=0x7ffc0000 [ 69.769810][ T4438] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 69.774810][ T27] audit: type=1326 audit(1736684144.327:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4432 comm="syz.2.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ba7985d29 code=0x7ffc0000 [ 69.812190][ T27] audit: type=1326 audit(1736684144.327:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4432 comm="syz.2.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba7985d29 code=0x7ffc0000 [ 69.923153][ T4445] loop4: detected capacity change from 0 to 512 [ 69.943322][ T4446] loop3: detected capacity change from 0 to 512 [ 69.984661][ T4445] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 70.025592][ T4445] EXT4-fs (loop4): orphan cleanup on readonly fs [ 70.051650][ T27] audit: type=1326 audit(1736684144.327:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4432 comm="syz.2.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1ba7985d29 code=0x7ffc0000 [ 70.433103][ T4446] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 70.481175][ T27] audit: type=1326 audit(1736684144.337:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4432 comm="syz.2.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba7985d29 code=0x7ffc0000 [ 70.971228][ C0] Illegal XDP return value 16128 on prog (id 6) dev bond_slave_1, expect packet loss! [ 71.031538][ T4446] EXT4-fs (loop3): orphan cleanup on readonly fs [ 71.119445][ T4445] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 71.130649][ T4446] Quota error (device loop3): find_block_dqentry: Quota for id 0 referenced but not present [ 71.190561][ T4445] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 71.205547][ T4446] EXT4-fs error (device loop3): ext4_acquire_dquot:6794: comm syz.3.34: Failed to acquire dquot type 1 [ 71.253447][ T4445] EXT4-fs error (device loop4): ext4_acquire_dquot:6794: comm syz.4.35: Failed to acquire dquot type 1 [ 71.295903][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.302658][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.324515][ T4459] loop0: detected capacity change from 0 to 8 [ 71.332439][ T4446] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.34: bg 0: block 40: padding at end of block bitmap is not set [ 71.397197][ T4263] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 71.416122][ T4445] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.35: bg 0: block 40: padding at end of block bitmap is not set [ 71.522075][ T4446] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 71.548108][ T4459] SQUASHFS error: Failed to read block 0x4de: -5 [ 71.601217][ T4445] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 71.622102][ T4446] EXT4-fs (loop3): 1 truncate cleaned up [ 71.691627][ T4445] EXT4-fs (loop4): 1 truncate cleaned up [ 71.717093][ T4446] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 71.727882][ T4445] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 71.741569][ T4459] SQUASHFS error: Failed to read block 0x4de: -5 [ 71.910051][ T4465] loop1: detected capacity change from 0 to 1024 [ 72.032238][ T4459] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 72.039013][ T4459] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 72.064324][ T4462] SQUASHFS error: Unable to read directory block [631:26] [ 72.104205][ T4462] fuse: Unknown parameter '0x000000000000000d' [ 72.126064][ T4252] EXT4-fs (loop3): unmounting filesystem. [ 72.131974][ T4459] vhci_hcd vhci_hcd.0: Device attached [ 72.146457][ T4468] vhci_hcd: connection closed [ 72.148420][ T4315] vhci_hcd: stop threads [ 72.157637][ T4471] loop2: detected capacity change from 0 to 128 [ 72.187545][ T4315] vhci_hcd: release socket [ 72.205080][ T4315] vhci_hcd: disconnect device [ 72.236933][ T4471] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 72.273401][ T4245] EXT4-fs (loop4): unmounting filesystem. [ 72.288246][ T4471] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 72.294265][ T4473] loop3: detected capacity change from 0 to 256 [ 72.299665][ T4471] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 72.313903][ T4471] UDF-fs: Scanning with blocksize 512 failed [ 72.379586][ T4471] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 72.401405][ T4473] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 72.414363][ T4471] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 72.465023][ T4471] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 72.956819][ T4471] UDF-fs: Scanning with blocksize 1024 failed [ 72.974750][ T4471] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 73.062430][ T4471] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 73.138508][ T4471] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 73.178173][ T4471] UDF-fs: Scanning with blocksize 2048 failed [ 73.390464][ T4471] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 73.848518][ T4491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.44'. [ 74.544404][ T4471] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 74.625232][ T4471] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 74.632919][ T4471] UDF-fs: Scanning with blocksize 4096 failed [ 74.725242][ T4471] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 74.964554][ T4496] loop0: detected capacity change from 0 to 4096 [ 75.005064][ T4496] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 75.444648][ T4505] tc_dump_action: action bad kind [ 75.933485][ T4503] loop2: detected capacity change from 0 to 512 [ 76.147467][ T4503] EXT4-fs (loop2): orphan cleanup on readonly fs [ 76.175861][ T4503] EXT4-fs error (device loop2): ext4_quota_enable:6985: comm syz.2.48: inode #65535: comm syz.2.48: iget: illegal inode # [ 76.265718][ T4503] EXT4-fs error (device loop2): ext4_quota_enable:6988: comm syz.2.48: Bad quota inode: 65535, type: 2 [ 76.266161][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 76.280256][ T4511] loop3: detected capacity change from 0 to 128 [ 76.296687][ T4503] EXT4-fs warning (device loop2): ext4_enable_quotas:7029: Failed to enable quota tracking (type=2, err=-117, ino=65535). Please run e2fsck to fix. [ 76.329881][ T4503] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 76.351019][ T4503] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 76.416001][ T952] cfg80211: failed to load regulatory.db [ 76.479432][ T4512] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz.2.48: deleted inode referenced: 12 [ 76.910802][ T4263] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 77.016383][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 77.063591][ T4494] hfsplus: b-tree write err: -5, ino 3 [ 77.216105][ T4518] netlink: 100 bytes leftover after parsing attributes in process `syz.0.53'. [ 77.681491][ T4527] loop0: detected capacity change from 0 to 512 [ 77.760397][ T4527] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 77.857217][ T4527] EXT4-fs (loop0): orphan cleanup on readonly fs [ 77.913297][ T4527] __quota_error: 20 callbacks suppressed [ 77.913323][ T4527] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 77.945658][ T4527] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 77.962668][ T4527] EXT4-fs error (device loop0): ext4_acquire_dquot:6794: comm syz.0.55: Failed to acquire dquot type 1 [ 78.004921][ T4527] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.55: bg 0: block 40: padding at end of block bitmap is not set [ 78.080442][ T4527] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 78.160376][ T4527] EXT4-fs (loop0): 1 truncate cleaned up [ 78.230977][ T4527] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 78.343839][ T4532] loop1: detected capacity change from 0 to 1024 [ 78.356692][ T4534] loop2: detected capacity change from 0 to 512 [ 78.369104][ T4534] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 78.993722][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 79.019887][ T4534] EXT4-fs (loop2): failed to open journal device unknown-block(4,137) -6 [ 79.672861][ T4547] loop0: detected capacity change from 0 to 1024 [ 81.035364][ T4547] EXT4-fs: Ignoring removed i_version option [ 81.053652][ T4547] EXT4-fs (loop0): Test dummy encryption mode enabled [ 81.189476][ T4547] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 81.281954][ T4573] loop4: detected capacity change from 0 to 512 [ 81.309375][ T4573] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 81.328001][ T4573] EXT4-fs (loop4): orphan cleanup on readonly fs [ 81.375622][ T4568] loop2: detected capacity change from 0 to 1024 [ 81.424688][ T4573] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 81.485579][ T4573] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 81.595465][ T4573] EXT4-fs error (device loop4): ext4_acquire_dquot:6794: comm syz.4.65: Failed to acquire dquot type 1 [ 81.626522][ T4573] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.65: bg 0: block 40: padding at end of block bitmap is not set [ 81.665426][ T4573] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 81.682487][ T4573] EXT4-fs (loop4): 1 truncate cleaned up [ 81.697302][ T4573] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 81.713600][ T4547] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 81.838014][ T4583] hfsplus: xattr search failed [ 81.863528][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 82.067147][ T4245] EXT4-fs (loop4): unmounting filesystem. [ 83.103193][ T4594] loop0: detected capacity change from 0 to 2048 [ 83.220363][ T4341] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 83.266001][ T4235] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 83.307891][ T4594] loop0: detected capacity change from 0 to 128 [ 83.383520][ T4594] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 83.416233][ T46] hfsplus: b-tree write err: -5, ino 3 [ 83.462244][ T27] audit: type=1800 audit(1736684158.137:58): pid=4594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.70" name="file0" dev="loop0" ino=1048597 res=0 errno=0 [ 83.496330][ T4235] usb 5-1: unable to get BOS descriptor or descriptor too short [ 83.536988][ T4235] usb 5-1: not running at top speed; connect to a high speed hub [ 83.568609][ T4235] usb 5-1: config 75 has an invalid interface number: 162 but max is 0 [ 83.583189][ T4235] usb 5-1: config 75 has no interface number 0 [ 83.590029][ T4235] usb 5-1: config 75 interface 162 altsetting 10 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 83.601456][ T4235] usb 5-1: config 75 interface 162 has no altsetting 0 [ 83.619053][ T4235] usb 5-1: New USB device found, idVendor=05a9, idProduct=2641, bcdDevice=84.4c [ 83.637763][ T4235] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.656232][ T4235] usb 5-1: Product: syz [ 83.665360][ T4235] usb 5-1: Manufacturer: syz [ 83.678275][ T4235] usb 5-1: SerialNumber: syz [ 83.702100][ T4595] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 83.919116][ T4593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.928436][ T4593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.238070][ T4235] usb 5-1: Found UVC 0.00 device syz (05a9:2641) [ 85.247491][ T4235] usb 5-1: No valid video chain found. [ 85.317883][ T4235] usb 5-1: USB disconnect, device number 2 [ 85.906390][ T4620] loop4: detected capacity change from 0 to 512 [ 85.923065][ T4620] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 86.323769][ T4620] EXT4-fs (loop4): failed to open journal device unknown-block(4,137) -6 [ 87.723313][ T4635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.78'. [ 88.741001][ T4639] loop1: detected capacity change from 0 to 512 [ 88.762920][ T4644] loop4: detected capacity change from 0 to 1024 [ 88.915891][ T4639] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 88.924962][ T4639] EXT4-fs (loop1): orphan cleanup on readonly fs [ 88.937322][ T4639] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 88.961325][ T4639] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 89.012448][ T4639] EXT4-fs error (device loop1): ext4_acquire_dquot:6794: comm syz.1.80: Failed to acquire dquot type 1 [ 89.026468][ T4648] loop3: detected capacity change from 0 to 1024 [ 89.081704][ T4639] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.80: bg 0: block 40: padding at end of block bitmap is not set [ 89.216405][ T4639] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 89.233854][ T4639] EXT4-fs (loop1): 1 truncate cleaned up [ 89.251409][ T4639] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 89.426576][ T4652] hfsplus: xattr search failed [ 90.686238][ T4246] EXT4-fs (loop1): unmounting filesystem. [ 90.950374][ T4663] device syzkaller0 entered promiscuous mode [ 92.749166][ T4677] loop2: detected capacity change from 0 to 2048 [ 92.833175][ T4677] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 92.984296][ T4677] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 93.003692][ T4677] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 93.016981][ T4677] EXT4-fs (loop2): This should not happen!! Data will be lost [ 93.016981][ T4677] [ 93.040767][ T4677] EXT4-fs (loop2): Total free blocks count 0 [ 93.054200][ T4677] EXT4-fs (loop2): Free/Dirty block details [ 93.061384][ T4632] hfsplus: b-tree write err: -5, ino 3 [ 93.110513][ T4677] EXT4-fs (loop2): free_blocks=2415919104 [ 93.142427][ T4677] EXT4-fs (loop2): dirty_blocks=64 [ 93.169125][ T4677] EXT4-fs (loop2): Block reservation details [ 93.201532][ T4677] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 93.232017][ T4684] loop4: detected capacity change from 0 to 512 [ 93.242203][ T4686] loop0: detected capacity change from 0 to 128 [ 93.317872][ T4684] EXT4-fs (loop4): orphan cleanup on readonly fs [ 93.327534][ T4677] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 10 with max blocks 23 with error 28 [ 93.370335][ T4684] EXT4-fs error (device loop4): ext4_quota_enable:6985: comm syz.4.90: inode #65535: comm syz.4.90: iget: illegal inode # [ 93.370755][ T4684] EXT4-fs error (device loop4): ext4_quota_enable:6988: comm syz.4.90: Bad quota inode: 65535, type: 2 [ 93.510161][ T4684] EXT4-fs warning (device loop4): ext4_enable_quotas:7029: Failed to enable quota tracking (type=2, err=-117, ino=65535). Please run e2fsck to fix. [ 93.565356][ T4684] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 93.580708][ T4684] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 93.734296][ T4689] loop0: detected capacity change from 0 to 128 [ 93.828622][ T4690] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz.4.90: deleted inode referenced: 12 [ 94.075440][ T4689] process 'syz.0.92' launched './file0' with NULL argv: empty string added [ 94.696582][ T4699] loop0: detected capacity change from 0 to 512 [ 94.737905][ T4699] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 95.533025][ T4699] EXT4-fs (loop0): failed to open journal device unknown-block(4,137) -6 [ 95.711133][ T4705] loop3: detected capacity change from 0 to 1024 [ 96.591416][ T4711] hfsplus: xattr search failed [ 98.926696][ T4245] EXT4-fs (loop4): unmounting filesystem. [ 99.405787][ T4254] EXT4-fs: 15 callbacks suppressed [ 99.405803][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 100.543819][ T4744] loop1: detected capacity change from 0 to 512 [ 100.551418][ T4744] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 100.697315][ T4747] loop2: detected capacity change from 0 to 8 [ 102.120175][ T4755] loop3: detected capacity change from 0 to 1024 [ 102.263570][ T4744] EXT4-fs (loop1): failed to open journal device unknown-block(4,137) -6 [ 102.305645][ T4761] loop2: detected capacity change from 0 to 1024 [ 103.815917][ T4765] hfsplus: xattr search failed [ 104.766362][ T4774] loop2: detected capacity change from 0 to 512 [ 104.789500][ T4774] EXT4-fs: Ignoring removed mblk_io_submit option [ 104.920059][ T4774] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 104.958975][ T4779] loop3: detected capacity change from 0 to 2048 [ 104.976516][ T4774] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 105.023158][ T4779] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 105.033248][ T4774] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.120: corrupted in-inode xattr [ 105.075589][ T4779] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.101521][ T4774] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.120: couldn't read orphan inode 15 (err -117) [ 105.136993][ T4774] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 105.818906][ T4252] EXT4-fs (loop3): unmounting filesystem. [ 105.829248][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 106.316355][ T4794] loop2: detected capacity change from 0 to 128 [ 106.395379][ T4798] loop3: detected capacity change from 0 to 512 [ 106.462979][ T4798] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.114: inode #1: comm syz.3.114: iget: illegal inode # [ 106.532534][ T4794] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 106.545558][ T4798] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.114: error while reading EA inode 1 err=-117 [ 106.550466][ T4794] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 106.576179][ T4794] EXT4-fs warning (device loop2): ext4_group_extend:1870: can't shrink FS - resize aborted [ 107.285660][ T4798] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 107.305459][ T4798] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.114: inode #1: comm syz.3.114: iget: illegal inode # [ 107.336597][ T4798] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.114: error while reading EA inode 1 err=-117 [ 107.472582][ T4798] EXT4-fs (loop3): 1 orphan inode deleted [ 107.494044][ T4798] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 107.507705][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 108.443803][ T4810] loop1: detected capacity change from 0 to 128 [ 108.450577][ T4811] capability: warning: `syz.2.117' uses deprecated v2 capabilities in a way that may be insecure [ 108.566406][ T4252] EXT4-fs (loop3): unmounting filesystem. [ 109.708580][ T4824] loop3: detected capacity change from 0 to 1024 [ 109.749412][ T4827] loop4: detected capacity change from 0 to 512 [ 109.816744][ T4827] EXT4-fs: Ignoring removed mblk_io_submit option [ 110.044530][ T4827] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 110.304306][ T4827] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.125: corrupted in-inode xattr [ 110.349389][ T4827] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.125: couldn't read orphan inode 15 (err -117) [ 110.363787][ T4827] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 110.439358][ T4842] hfsplus: xattr search failed [ 110.772528][ T4245] EXT4-fs (loop4): unmounting filesystem. [ 112.718090][ T4860] loop0: detected capacity change from 0 to 8 [ 112.748628][ T4860] SQUASHFS error: Corrupted symlink [ 114.547151][ T4871] loop2: detected capacity change from 0 to 164 [ 115.647793][ T4880] loop2: detected capacity change from 0 to 128 [ 117.094410][ T4895] loop3: detected capacity change from 0 to 256 [ 117.141783][ T4895] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 117.258310][ T4895] exFAT-fs (loop3): hint_cluster is invalid (17) [ 117.303250][ T27] audit: type=1800 audit(1736684191.977:59): pid=4899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.142" name="file1" dev="loop3" ino=1048639 res=0 errno=0 [ 117.333723][ T4895] exFAT-fs (loop3): error, broken FAT chain. [ 117.370261][ T4895] exFAT-fs (loop3): error, failed to bmap (inode : ffff888070f48e60 iblock : 8, err : -5) [ 117.703614][ T4903] loop2: detected capacity change from 0 to 1024 [ 118.621036][ T4494] hfsplus: b-tree write err: -5, ino 3 [ 118.891712][ T4263] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 119.936718][ T4925] loop3: detected capacity change from 0 to 128 [ 120.388776][ T4925] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 120.397615][ T4925] ext4 filesystem being mounted at /34/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 120.565772][ T4252] EXT4-fs (loop3): unmounting filesystem. [ 120.725473][ T4931] loop2: detected capacity change from 0 to 1024 [ 122.228397][ T4939] hfsplus: xattr search failed [ 123.810967][ T4953] loop4: detected capacity change from 0 to 1024 [ 124.737508][ T9] hfsplus: b-tree write err: -5, ino 3 [ 125.242774][ T4263] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 126.714166][ T4983] loop0: detected capacity change from 0 to 1024 [ 127.619221][ T4983] loop0: detected capacity change from 0 to 1024 [ 127.709711][ T4991] loop3: detected capacity change from 0 to 1024 [ 127.820665][ T4994] Bluetooth: MGMT ver 1.22 [ 128.543086][ T75] hfsplus: b-tree write err: -5, ino 4 [ 128.585822][ T4263] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 128.781325][ T75] hfsplus: b-tree write err: -5, ino 3 [ 129.879919][ T5023] loop0: detected capacity change from 0 to 1024 [ 130.508737][ T5035] hfsplus: xattr search failed [ 130.655151][ T7] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 131.088307][ T7] usb 4-1: unable to get BOS descriptor or descriptor too short [ 131.108603][ T7] usb 4-1: not running at top speed; connect to a high speed hub [ 131.119303][ T7] usb 4-1: config 75 has an invalid interface number: 162 but max is 0 [ 131.135318][ T7] usb 4-1: config 75 has no interface number 0 [ 131.141535][ T7] usb 4-1: config 75 interface 162 altsetting 10 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 131.165188][ T7] usb 4-1: config 75 interface 162 has no altsetting 0 [ 131.188234][ T7] usb 4-1: New USB device found, idVendor=05a9, idProduct=2641, bcdDevice=84.4c [ 131.197961][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.206404][ T7] usb 4-1: Product: syz [ 131.210581][ T7] usb 4-1: Manufacturer: syz [ 131.215528][ T7] usb 4-1: SerialNumber: syz [ 131.232708][ T5036] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 131.469816][ T7] usb 4-1: Found UVC 0.00 device syz (05a9:2641) [ 131.485278][ T7] usb 4-1: No valid video chain found. [ 131.514874][ T7] usb 4-1: USB disconnect, device number 2 [ 131.576953][ T5047] loop1: detected capacity change from 0 to 1764 [ 132.071629][ T4263] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 132.209246][ T5051] loop4: detected capacity change from 0 to 1024 [ 132.260916][ T5051] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 133.209773][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.216159][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.427190][ T5073] loop4: detected capacity change from 0 to 128 [ 133.651808][ T4263] Bluetooth: hci4: unknown advertising packet type: 0x14 [ 134.151888][ T4263] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 135.135403][ T7] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 135.708429][ T7] usb 4-1: unable to get BOS descriptor or descriptor too short [ 135.739457][ T7] usb 4-1: not running at top speed; connect to a high speed hub [ 135.778993][ T7] usb 4-1: config 75 has an invalid interface number: 162 but max is 0 [ 135.826420][ T7] usb 4-1: config 75 has no interface number 0 [ 135.881009][ T7] usb 4-1: config 75 interface 162 altsetting 10 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 135.946967][ T7] usb 4-1: config 75 interface 162 has no altsetting 0 [ 135.998461][ T7] usb 4-1: New USB device found, idVendor=05a9, idProduct=2641, bcdDevice=84.4c [ 136.049622][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.097570][ T7] usb 4-1: Product: syz [ 136.125518][ T7] usb 4-1: Manufacturer: syz [ 136.151030][ T7] usb 4-1: SerialNumber: syz [ 136.221845][ T5101] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 136.595090][ T4263] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 137.190345][ T5129] loop4: detected capacity change from 0 to 128 [ 137.321240][ T5129] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 137.347831][ T5133] loop1: detected capacity change from 0 to 1024 [ 137.358018][ T5129] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 137.573652][ T7] usb 4-1: Found UVC 0.00 device syz (05a9:2641) [ 137.580164][ T7] usb 4-1: No valid video chain found. [ 137.598720][ T7] usb 4-1: USB disconnect, device number 3 [ 137.764411][ T4245] EXT4-fs (loop4): unmounting filesystem. [ 138.426970][ T9] hfsplus: b-tree write err: -5, ino 3 [ 138.569111][ T5145] loop2: detected capacity change from 0 to 128 [ 139.082657][ T4263] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 139.477229][ T5160] loop3: detected capacity change from 0 to 1764 [ 139.611062][ T4341] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 140.121787][ T4294] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 140.241563][ T5172] loop1: detected capacity change from 0 to 164 [ 140.311791][ T4341] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 140.403175][ T4294] usb 3-1: unable to get BOS descriptor or descriptor too short [ 140.422813][ T5177] loop0: detected capacity change from 0 to 128 [ 140.431904][ T4294] usb 3-1: not running at top speed; connect to a high speed hub [ 140.506754][ T4294] usb 3-1: config 75 has an invalid interface number: 162 but max is 0 [ 140.535297][ T4294] usb 3-1: config 75 has no interface number 0 [ 140.559352][ T4294] usb 3-1: config 75 interface 162 altsetting 10 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 140.591414][ T4294] usb 3-1: config 75 interface 162 has no altsetting 0 [ 140.623930][ T4294] usb 3-1: New USB device found, idVendor=05a9, idProduct=2641, bcdDevice=84.4c [ 140.647090][ T4294] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.813843][ T4294] usb 3-1: Product: syz [ 140.835374][ T4294] usb 3-1: Manufacturer: syz [ 140.840027][ T4294] usb 3-1: SerialNumber: syz [ 140.859298][ T5168] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 141.667379][ T5192] loop3: detected capacity change from 0 to 128 [ 141.938084][ T4263] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 142.812471][ T4294] usb 3-1: Found UVC 0.00 device syz (05a9:2641) [ 142.905379][ T4294] usb 3-1: No valid video chain found. [ 143.016840][ T4294] usb 3-1: USB disconnect, device number 2 [ 143.525943][ T5206] loop3: detected capacity change from 0 to 1024 [ 143.546075][ T5206] EXT4-fs: Ignoring removed nomblk_io_submit option [ 143.615254][ T5206] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 143.778724][ T5215] loop3: detected capacity change from 0 to 128 [ 143.798569][ T5215] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 143.822272][ T5215] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.445875][ T5222] netlink: 84 bytes leftover after parsing attributes in process `syz.3.246'. [ 144.494938][ T5222] netlink: 72 bytes leftover after parsing attributes in process `syz.3.246'. [ 144.743488][ T4263] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 146.094171][ T5252] netlink: 20 bytes leftover after parsing attributes in process `syz.1.255'. [ 146.215250][ T4295] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 146.272095][ T5255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.257'. [ 146.408233][ T4295] usb 5-1: unable to get BOS descriptor or descriptor too short [ 146.425802][ T4295] usb 5-1: not running at top speed; connect to a high speed hub [ 146.465503][ T4295] usb 5-1: config 75 has an invalid interface number: 162 but max is 0 [ 146.473893][ T4295] usb 5-1: config 75 has no interface number 0 [ 146.535359][ T4295] usb 5-1: config 75 interface 162 altsetting 10 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 146.595969][ T4295] usb 5-1: config 75 interface 162 has no altsetting 0 [ 146.610686][ T5259] loop0: detected capacity change from 0 to 512 [ 146.633309][ T4295] usb 5-1: New USB device found, idVendor=05a9, idProduct=2641, bcdDevice=84.4c [ 146.676200][ T4295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.713330][ T4295] usb 5-1: Product: syz [ 146.713379][ T5259] EXT4-fs (loop0): orphan cleanup on readonly fs [ 146.733926][ T4295] usb 5-1: Manufacturer: syz [ 146.756232][ T4295] usb 5-1: SerialNumber: syz [ 146.763501][ T5259] Quota error (device loop0): v2_read_file_info: Number of blocks too big for quota file size (2048 > 1024). [ 146.787152][ T5259] EXT4-fs warning (device loop0): ext4_enable_quotas:7029: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 146.787622][ T5243] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 146.802576][ T5259] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 146.820896][ T5259] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.259: bg 0: block 64: padding at end of block bitmap is not set [ 146.837463][ T5259] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 146.879570][ T5259] EXT4-fs (loop0): 1 truncate cleaned up [ 146.885550][ T5259] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 147.231996][ T4263] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 147.436313][ T27] audit: type=1800 audit(1736684222.117:60): pid=5259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.259" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 147.691881][ T5273] loop2: detected capacity change from 0 to 1024 [ 147.698601][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 148.353379][ T4295] usb 5-1: Found UVC 0.00 device syz (05a9:2641) [ 148.540815][ T4295] usb 5-1: No valid video chain found. [ 148.587780][ T4295] usb 5-1: USB disconnect, device number 3 [ 148.842751][ T9] hfsplus: b-tree write err: -5, ino 3 [ 148.978898][ T5288] loop4: detected capacity change from 0 to 512 [ 149.015497][ T5288] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 149.029621][ T5291] loop2: detected capacity change from 0 to 1024 [ 149.043780][ T4263] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 149.068937][ T5292] loop0: detected capacity change from 0 to 128 [ 149.114122][ T5291] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 149.135034][ T5288] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.271: bg 0: block 64: padding at end of block bitmap is not set [ 149.150831][ T5300] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 149.193119][ T5288] Quota error (device loop4): write_blk: dquota write failed [ 149.219057][ T5288] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 149.241719][ T5303] EXT4-fs (loop2): shut down requested (0) [ 149.249966][ T5288] EXT4-fs error (device loop4): ext4_acquire_dquot:6794: comm syz.4.271: Failed to acquire dquot type 0 [ 149.280174][ T5288] EXT4-fs (loop4): 1 truncate cleaned up [ 149.298834][ T5288] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 149.373804][ T5288] Quota error (device loop4): write_blk: dquota write failed [ 149.401453][ T5288] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 149.453235][ T5288] EXT4-fs error (device loop4): ext4_acquire_dquot:6794: comm syz.4.271: Failed to acquire dquot type 0 [ 149.601070][ T4245] EXT4-fs (loop4): unmounting filesystem. [ 149.857744][ T5316] loop1: detected capacity change from 0 to 1024 [ 149.893392][ T75] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 149.913573][ T75] EXT4-fs (loop2): This should not happen!! Data will be lost [ 149.913573][ T75] [ 149.923838][ T75] EXT4-fs (loop2): Total free blocks count 0 [ 149.932543][ T75] EXT4-fs (loop2): Free/Dirty block details [ 149.942354][ T75] EXT4-fs (loop2): free_blocks=68451041280 [ 149.948682][ T75] EXT4-fs (loop2): dirty_blocks=3536 [ 149.954231][ T75] EXT4-fs (loop2): Block reservation details [ 149.963495][ T75] EXT4-fs (loop2): i_reserved_data_blocks=221 [ 150.115281][ T4295] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 150.927751][ T4632] hfsplus: b-tree write err: -5, ino 3 [ 151.016620][ T4295] usb 5-1: config 252 has an invalid interface number: 12 but max is 0 [ 151.024926][ T4295] usb 5-1: config 252 has no interface number 0 [ 151.040464][ T4295] usb 5-1: New USB device found, idVendor=7392, idProduct=a611, bcdDevice=70.dc [ 151.100954][ T4295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.110372][ T4295] usb 5-1: Product: syz [ 151.114635][ T4295] usb 5-1: Manufacturer: syz [ 151.121560][ T4295] usb 5-1: SerialNumber: syz [ 151.443620][ T5327] loop1: detected capacity change from 0 to 512 [ 151.469400][ T5327] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 151.541529][ T5327] EXT4-fs (loop1): 1 truncate cleaned up [ 151.548624][ T5327] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 151.808859][ T4263] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 152.161484][ T4246] EXT4-fs (loop1): unmounting filesystem. [ 152.366111][ T5343] loop0: detected capacity change from 0 to 1024 [ 152.584148][ T5345] capability: warning: `syz.1.288' uses 32-bit capabilities (legacy support in use) [ 152.834948][ T127] usb 5-1: USB disconnect, device number 4 [ 152.920853][ T5351] loop1: detected capacity change from 0 to 512 [ 152.942065][ T5351] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 152.982450][ T5351] EXT4-fs (loop1): 1 truncate cleaned up [ 153.014126][ T5351] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 153.115447][ T4295] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 153.252842][ T4263] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 153.262590][ T4246] EXT4-fs (loop1): unmounting filesystem. [ 153.317982][ T4295] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 153.350125][ T4295] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.415389][ T4295] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 153.434754][ T4295] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 153.465301][ T4295] usb 1-1: Product: syz [ 153.469731][ T4295] usb 1-1: Manufacturer: syz [ 153.622412][ T5371] loop1: detected capacity change from 0 to 4096 [ 153.656402][ T4295] hub 1-1:4.0: USB hub found [ 153.675998][ T5371] EXT4-fs: Ignoring removed nomblk_io_submit option [ 153.705981][ T5371] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 153.741543][ T5371] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 153.836876][ T5371] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 16715264 out of range 0-8 [ 153.859221][ T5371] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 153.871100][ T4295] hub 1-1:4.0: 2 ports detected [ 153.894043][ T5371] EXT4-fs error (device loop1): ext4_acquire_dquot:6794: comm syz.1.300: Failed to acquire dquot type 0 [ 154.005199][ T127] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 154.031745][ T4246] EXT4-fs (loop1): unmounting filesystem. [ 154.071825][ T4295] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 154.084186][ T4295] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 154.166184][ T4295] usb 1-1: USB disconnect, device number 2 [ 154.195184][ T127] usb 4-1: Using ep0 maxpacket: 8 [ 154.201947][ T127] usb 4-1: config 0 has an invalid interface descriptor of length 3, skipping [ 154.377731][ T127] usb 4-1: config 0 has an invalid interface descriptor of length 2, skipping [ 154.387683][ T127] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.398121][ T127] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 154.407473][ T127] usb 4-1: New USB device found, idVendor=0df6, idProduct=0076, bcdDevice=41.91 [ 154.416779][ T127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.428139][ T127] usb 4-1: config 0 descriptor?? [ 154.649196][ T4295] usb 4-1: USB disconnect, device number 4 [ 155.521537][ T4263] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 155.955201][ T5411] loop4: detected capacity change from 0 to 512 [ 155.985383][ T5411] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 156.052493][ T5411] EXT4-fs (loop4): 1 truncate cleaned up [ 156.063851][ T5411] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 156.265398][ T5411] ================================================================== [ 156.273503][ T5411] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x8ca/0x1f30 [ 156.281254][ T5411] Read of size 18446744073709551572 at addr ffff8880797a0850 by task syz.4.313/5411 [ 156.290627][ T5411] [ 156.292966][ T5411] CPU: 1 PID: 5411 Comm: syz.4.313 Not tainted 6.1.124-syzkaller #0 [ 156.300952][ T5411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 156.311010][ T5411] Call Trace: [ 156.314293][ T5411] [ 156.317231][ T5411] dump_stack_lvl+0x1e3/0x2cb [ 156.321934][ T5411] ? nf_tcp_handle_invalid+0x642/0x642 [ 156.327412][ T5411] ? panic+0x764/0x764 [ 156.331491][ T5411] ? _printk+0xd1/0x111 [ 156.335657][ T5411] ? __virt_addr_valid+0x17f/0x530 [ 156.340791][ T5411] ? __virt_addr_valid+0x17f/0x530 [ 156.345918][ T5411] print_report+0x15f/0x4f0 [ 156.350430][ T5411] ? __virt_addr_valid+0x17f/0x530 [ 156.355554][ T5411] ? __virt_addr_valid+0x17f/0x530 [ 156.360672][ T5411] ? __virt_addr_valid+0x45b/0x530 [ 156.365796][ T5411] ? __phys_addr+0xb6/0x170 [ 156.370313][ T5411] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 156.375778][ T5411] kasan_report+0x136/0x160 [ 156.380289][ T5411] ? __x64_sys_unlink+0x45/0x50 [ 156.385154][ T5411] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 156.390775][ T5411] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 156.396256][ T5411] kasan_check_range+0x27f/0x290 [ 156.401210][ T5411] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 156.406681][ T5411] memmove+0x25/0x60 [ 156.410590][ T5411] ext4_xattr_set_entry+0x8ca/0x1f30 [ 156.415896][ T5411] ? ext4_xattr_inode_lookup_create+0x1ff0/0x1ff0 [ 156.422337][ T5411] ? ext4_xattr_block_set+0x884/0x3920 [ 156.427810][ T5411] ? kmemdup+0x41/0x60 [ 156.431893][ T5411] ? memcpy+0x3c/0x60 [ 156.435887][ T5411] ext4_xattr_block_set+0xa58/0x3920 [ 156.441191][ T5411] ? __getblk_gfp+0x50/0xa20 [ 156.445799][ T5411] ? _raw_spin_unlock+0x24/0x40 [ 156.450667][ T5411] ? ext4_xattr_block_find+0x510/0x510 [ 156.456148][ T5411] ? ext4_xattr_block_find+0x468/0x510 [ 156.461623][ T5411] ext4_expand_extra_isize_ea+0x10d5/0x1bb0 [ 156.467545][ T5411] ? ext4_xattr_set+0x3d0/0x3d0 [ 156.472405][ T5411] ? rwsem_write_trylock+0x166/0x210 [ 156.477710][ T5411] ? clear_nonspinnable+0x60/0x60 [ 156.482753][ T5411] ? ext4_reserve_inode_write+0x2b3/0x360 [ 156.488494][ T5411] ? dquot_initialize_needed+0x128/0x320 [ 156.494146][ T5411] __ext4_expand_extra_isize+0x2f7/0x3d0 [ 156.499820][ T5411] __ext4_mark_inode_dirty+0x54f/0x920 [ 156.505298][ T5411] ? ext4_blocks_for_truncate+0x270/0x270 [ 156.511038][ T5411] ? current_time+0x1ba/0x300 [ 156.515732][ T5411] ? atime_needs_update+0x7b0/0x7b0 [ 156.520952][ T5411] __ext4_unlink+0x6ed/0xba0 [ 156.525561][ T5411] ? __ext4_read_dirblock+0x890/0x890 [ 156.530959][ T5411] ? rwsem_write_trylock+0x166/0x210 [ 156.536265][ T5411] ? inode_permission+0xf7/0x450 [ 156.541219][ T5411] ? clear_nonspinnable+0x60/0x60 [ 156.546257][ T5411] ext4_unlink+0x1d5/0x670 [ 156.550689][ T5411] vfs_unlink+0x359/0x5f0 [ 156.555034][ T5411] do_unlinkat+0x4a5/0x820 [ 156.559469][ T5411] ? fsnotify_link_count+0xf0/0xf0 [ 156.564604][ T5411] __x64_sys_unlink+0x45/0x50 [ 156.569296][ T5411] do_syscall_64+0x3b/0xb0 [ 156.573730][ T5411] ? clear_bhb_loop+0x45/0xa0 [ 156.578415][ T5411] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 156.584323][ T5411] RIP: 0033:0x7f8ff3985d29 [ 156.588762][ T5411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.608380][ T5411] RSP: 002b:00007f8ff476b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 156.616811][ T5411] RAX: ffffffffffffffda RBX: 00007f8ff3b75fa0 RCX: 00007f8ff3985d29 [ 156.624798][ T5411] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 156.632779][ T5411] RBP: 00007f8ff3a01b08 R08: 0000000000000000 R09: 0000000000000000 [ 156.640761][ T5411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.648742][ T5411] R13: 0000000000000000 R14: 00007f8ff3b75fa0 R15: 00007ffe0d075568 [ 156.656729][ T5411] [ 156.659754][ T5411] [ 156.662098][ T5411] Allocated by task 5411: [ 156.666422][ T5411] kasan_set_track+0x4b/0x70 [ 156.671021][ T5411] __kasan_kmalloc+0x97/0xb0 [ 156.675621][ T5411] __kmalloc_node_track_caller+0xb1/0x220 [ 156.681351][ T5411] kmemdup+0x26/0x60 [ 156.685253][ T5411] ext4_xattr_block_set+0x884/0x3920 [ 156.690543][ T5411] ext4_expand_extra_isize_ea+0x10d5/0x1bb0 [ 156.696445][ T5411] __ext4_expand_extra_isize+0x2f7/0x3d0 [ 156.702098][ T5411] __ext4_mark_inode_dirty+0x54f/0x920 [ 156.707577][ T5411] __ext4_unlink+0x6ed/0xba0 [ 156.712182][ T5411] ext4_unlink+0x1d5/0x670 [ 156.716619][ T5411] vfs_unlink+0x359/0x5f0 [ 156.720960][ T5411] do_unlinkat+0x4a5/0x820 [ 156.725386][ T5411] __x64_sys_unlink+0x45/0x50 [ 156.730074][ T5411] do_syscall_64+0x3b/0xb0 [ 156.734504][ T5411] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 156.740415][ T5411] [ 156.742748][ T5411] The buggy address belongs to the object at ffff8880797a0800 [ 156.742748][ T5411] which belongs to the cache kmalloc-1k of size 1024 [ 156.756807][ T5411] The buggy address is located 80 bytes inside of [ 156.756807][ T5411] 1024-byte region [ffff8880797a0800, ffff8880797a0c00) [ 156.770092][ T5411] [ 156.772420][ T5411] The buggy address belongs to the physical page: [ 156.778844][ T5411] page:ffffea0001e5e800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x797a0 [ 156.789006][ T5411] head:ffffea0001e5e800 order:3 compound_mapcount:0 compound_pincount:0 [ 156.797334][ T5411] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 156.805334][ T5411] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017c41dc0 [ 156.813924][ T5411] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 156.822508][ T5411] page dumped because: kasan: bad access detected [ 156.828930][ T5411] page_owner tracks the page as allocated [ 156.834651][ T5411] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 11, tgid 11 (kworker/u4:1), ts 58428771449, free_ts 58367754891 [ 156.855062][ T5411] post_alloc_hook+0x18d/0x1b0 [ 156.859841][ T5411] get_page_from_freelist+0x3731/0x38d0 [ 156.865404][ T5411] __alloc_pages+0x28d/0x770 [ 156.870003][ T5411] alloc_slab_page+0x6a/0x150 [ 156.874689][ T5411] new_slab+0x84/0x2d0 [ 156.878773][ T5411] ___slab_alloc+0xc20/0x1270 [ 156.883460][ T5411] __kmem_cache_alloc_node+0x19f/0x260 [ 156.888929][ T5411] __kmalloc_node_track_caller+0xa0/0x220 [ 156.894656][ T5411] __alloc_skb+0x135/0x670 [ 156.899096][ T5411] inet6_rt_notify+0xdc/0x280 [ 156.903786][ T5411] fib6_add+0x1db2/0x3c80 [ 156.908139][ T5411] ip6_route_add+0x84/0x120 [ 156.912655][ T5411] addrconf_add_linklocal+0x625/0xae0 [ 156.918041][ T5411] addrconf_addr_gen+0x856/0xbe0 [ 156.922987][ T5411] addrconf_init_auto_addrs+0x945/0xe60 [ 156.928542][ T5411] addrconf_notify+0xade/0xf60 [ 156.933311][ T5411] page last free stack trace: [ 156.937982][ T5411] free_unref_page_prepare+0x12a6/0x15b0 [ 156.943624][ T5411] free_unref_page+0x33/0x3e0 [ 156.948308][ T5411] __unfreeze_partials+0x1b7/0x210 [ 156.953438][ T5411] put_cpu_partial+0x17b/0x250 [ 156.958214][ T5411] qlist_free_all+0x76/0xe0 [ 156.962729][ T5411] kasan_quarantine_reduce+0x156/0x170 [ 156.968197][ T5411] __kasan_slab_alloc+0x1f/0x70 [ 156.973053][ T5411] slab_post_alloc_hook+0x52/0x3a0 [ 156.978176][ T5411] __kmem_cache_alloc_node+0x137/0x260 [ 156.983654][ T5411] kmalloc_trace+0x26/0xe0 [ 156.988079][ T5411] netdevice_event+0x3eb/0xa00 [ 156.992868][ T5411] raw_notifier_call_chain+0xd0/0x170 [ 156.998249][ T5411] __dev_notify_flags+0x304/0x610 [ 157.003280][ T5411] dev_change_flags+0xe7/0x190 [ 157.008070][ T5411] do_setlink+0xcf4/0x3de0 [ 157.008096][ T5411] rtnl_newlink+0x172c/0x2050 [ 157.008116][ T5411] [ 157.008121][ T5411] Memory state around the buggy address: [ 157.008130][ T5411] ffff8880797a0700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 157.008141][ T5411] ffff8880797a0780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 157.008152][ T5411] >ffff8880797a0800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.008159][ T5411] ^ [ 157.008169][ T5411] ffff8880797a0880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.008179][ T5411] ffff8880797a0900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.008186][ T5411] ================================================================== [ 157.011660][ T5411] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 157.011671][ T5411] CPU: 1 PID: 5411 Comm: syz.4.313 Not tainted 6.1.124-syzkaller #0 [ 157.011689][ T5411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 157.011698][ T5411] Call Trace: [ 157.011704][ T5411] [ 157.011710][ T5411] dump_stack_lvl+0x1e3/0x2cb [ 157.011737][ T5411] ? nf_tcp_handle_invalid+0x642/0x642 [ 157.011760][ T5411] ? panic+0x764/0x764 [ 157.011777][ T5411] ? preempt_schedule_common+0xa6/0xd0 [ 157.011797][ T5411] ? vscnprintf+0x59/0x80 [ 157.011816][ T5411] panic+0x318/0x764 [ 157.011834][ T5411] ? check_panic_on_warn+0x1d/0xa0 [ 157.011853][ T5411] ? memcpy_page_flushcache+0xfc/0xfc [ 157.011882][ T5411] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 157.011905][ T5411] ? _raw_spin_unlock+0x40/0x40 [ 157.011927][ T5411] check_panic_on_warn+0x7e/0xa0 [ 157.011945][ T5411] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 157.011963][ T5411] end_report+0x66/0x110 [ 157.011979][ T5411] kasan_report+0x143/0x160 [ 157.011994][ T5411] ? __x64_sys_unlink+0x45/0x50 [ 157.012016][ T5411] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 157.012033][ T5411] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 157.012050][ T5411] kasan_check_range+0x27f/0x290 [ 157.012067][ T5411] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 157.012083][ T5411] memmove+0x25/0x60 [ 157.012101][ T5411] ext4_xattr_set_entry+0x8ca/0x1f30 [ 157.012126][ T5411] ? ext4_xattr_inode_lookup_create+0x1ff0/0x1ff0 [ 157.012143][ T5411] ? ext4_xattr_block_set+0x884/0x3920 [ 157.012159][ T5411] ? kmemdup+0x41/0x60 [ 157.012177][ T5411] ? memcpy+0x3c/0x60 [ 157.012195][ T5411] ext4_xattr_block_set+0xa58/0x3920 [ 157.012218][ T5411] ? __getblk_gfp+0x50/0xa20 [ 157.012235][ T5411] ? _raw_spin_unlock+0x24/0x40 [ 157.012256][ T5411] ? ext4_xattr_block_find+0x510/0x510 [ 157.012277][ T5411] ? ext4_xattr_block_find+0x468/0x510 [ 157.012296][ T5411] ext4_expand_extra_isize_ea+0x10d5/0x1bb0 [ 157.012326][ T5411] ? ext4_xattr_set+0x3d0/0x3d0 [ 157.012341][ T5411] ? rwsem_write_trylock+0x166/0x210 [ 157.012364][ T5411] ? clear_nonspinnable+0x60/0x60 [ 157.012383][ T5411] ? ext4_reserve_inode_write+0x2b3/0x360 [ 157.012407][ T5411] ? dquot_initialize_needed+0x128/0x320 [ 157.012429][ T5411] __ext4_expand_extra_isize+0x2f7/0x3d0 [ 157.012454][ T5411] __ext4_mark_inode_dirty+0x54f/0x920 [ 157.012477][ T5411] ? ext4_blocks_for_truncate+0x270/0x270 [ 157.012498][ T5411] ? current_time+0x1ba/0x300 [ 157.012521][ T5411] ? atime_needs_update+0x7b0/0x7b0 [ 157.012548][ T5411] __ext4_unlink+0x6ed/0xba0 [ 157.012570][ T5411] ? __ext4_read_dirblock+0x890/0x890 [ 157.012591][ T5411] ? rwsem_write_trylock+0x166/0x210 [ 157.012611][ T5411] ? inode_permission+0xf7/0x450 [ 157.012630][ T5411] ? clear_nonspinnable+0x60/0x60 [ 157.012653][ T5411] ext4_unlink+0x1d5/0x670 [ 157.012673][ T5411] vfs_unlink+0x359/0x5f0 [ 157.012697][ T5411] do_unlinkat+0x4a5/0x820 [ 157.012720][ T5411] ? fsnotify_link_count+0xf0/0xf0 [ 157.012749][ T5411] __x64_sys_unlink+0x45/0x50 [ 157.012770][ T5411] do_syscall_64+0x3b/0xb0 [ 157.012791][ T5411] ? clear_bhb_loop+0x45/0xa0 [ 157.012806][ T5411] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.012828][ T5411] RIP: 0033:0x7f8ff3985d29 [ 157.012843][ T5411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.012857][ T5411] RSP: 002b:00007f8ff476b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 157.012883][ T5411] RAX: ffffffffffffffda RBX: 00007f8ff3b75fa0 RCX: 00007f8ff3985d29 [ 157.012897][ T5411] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 157.012908][ T5411] RBP: 00007f8ff3a01b08 R08: 0000000000000000 R09: 0000000000000000 [ 157.012919][ T5411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.012929][ T5411] R13: 0000000000000000 R14: 00007f8ff3b75fa0 R15: 00007ffe0d075568 [ 157.012947][ T5411] [ 157.013197][ T5411] Kernel Offset: disabled [ 157.465240][ T5411] Rebooting in 86400 seconds..