last executing test programs: 10.894021511s ago: executing program 4 (id=133): setreuid(0x0, 0x0) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x20081e, &(0x7f00000001c0)={[{@errors_remount}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7}}, {@noauto_da_alloc}]}, 0x1, 0x502, &(0x7f0000000a00)="$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") 8.744867471s ago: executing program 4 (id=137): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000040)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@noload}, {@dioread_nolock}]}, 0x1, 0x599, &(0x7f0000001280)="$eJzs3T9sG2UbAPDnznHTP/m+9JO+T/pAHSpAKlJVJ+kfKEztiqhUqQMSC0SOG1Vx4ipOoIkike4VogMC1KVsMDCCGBgQCyMrC4gZqaIRSE0HMHJ8TtPULk6I4xL/ftLZ73t39vO+d35e+053cgB962j9IY14KiIuJhHDG5YNRLbwaGO91ZWl4v2VpWIStdqlX5JIIuLeylKxuX6SPR+KiOWI+H9EfJOPOJ6uv+W+ZqG6sDg1Xi6XZrP6yNz01ZHqwuKJK9Pjk6XJ0sypF186c/b0mbGTYxube7+2sZbfWl9v/Hjz3RvfvXL75qefHVkuvj+exLkYypZt7MdOamyTfJzbNP90N4L1UNLrBrAtuSzP66n0vxiOXJb1rdQ2Dg6Du9I8oItqgxE1oE8l8h/6VPN3QP34tznt5u+PO+cbByD1uKsrS8V3ohl/oHFuIvavHZsc/DV56Mikfrx5eDcbyp60fD0iRgcGHv38J9nnb/tGd6KBdNXX5xs76tH9n66PP9Fi/Blqnjv9m5rj32o2/q22iJ9rM/5d7DDG76//9FHb+NcH4+mW8ZP1+EmL+GlEvNlh/FuvfXm23bLaxxHHonX8puTx54dHLl8pl0Ybjy1jfHXsyMvt+x9xsE38xjnb/WtfMxv7vy9rU9ph/7/49vNnlh8T//lnH7//W23/AxHxXofx/3Pvk1fbLbtzPblb/xWw1f2fRD5udxj/hXNHf8iKzhoCAAAAAAAAAMAOSteuZUvSwno5TQuFxj28/42DablSnTt+uTI/M9G45u1w5NPmlVbDjXpSr49l1+M26yc31U/lsoC5A2v1QrFSnuhx3wEAAAAAAAAAAAAAAAAAAOBJcWjT/f+/5dbu/9/8d9XAXtX+L7+BvU7+Q/96OP+TnrUD2H2+/6Fv1eQ/9C/5D/1L/kP/kv/Qv+Q/9C/5D/1L/gMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChPtXurywV6/WJgYX5qcpbJyZK1anC9HyxUKzMXi1MViqT5VKhWJn+q/dLKpWrozEzf21krlSdG6kuLL4xXZmfaf6naCnf9R4BAAAAAAAAAAAAAAAAAADAP8/Q2pSkhYh8o56mhULEvyLicBLJ5Svl0mhE/Dsivs/lB+v1sV43GgAAAAAAAAAAAAAAAAAAAPaY6sLi1Hi5XJrtXmEgC9XFEJ0XBrayckQs72wz6u+45Vflsw3Y4023Nwq5J+Nz+OQXejgoAQAAAAAAAAAAAAAAAABAn3pw02+nr/ijuw0CAAAAAAAAAAAAAAAAAACAvpT+nEREfTo2/NzQ5qX7ktXc2nNEvH3r0gfXxufmZsfq8++uz5/7MJt/shftBzrVzNM0Iup5DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxQXVicGi+XS7PbLAx2sE6v+wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwHX8GAAD//xLkz18=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) remap_file_pages(&(0x7f0000157000/0x2000)=nil, 0x1fffff, 0x0, 0x157, 0x0) 8.110068692s ago: executing program 4 (id=146): socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000018110000000000000004000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) close(r0) 6.111060183s ago: executing program 2 (id=153): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x1840020, &(0x7f0000000200)=ANY=[@ANYBLOB='gid=']) 6.051205286s ago: executing program 4 (id=155): sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x1cc6, 0x0, 0x0, 0x0) setrlimit(0x2, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) 5.916426705s ago: executing program 2 (id=156): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) remap_file_pages(&(0x7f0000157000/0x2000)=nil, 0x1fffff, 0x0, 0x157, 0x0) 5.693887049s ago: executing program 2 (id=157): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x400000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0xfffa, 0x7, 0x8, 0x8}, {0x6, 0x1, 0xd, 0x6, 0x6, 0xfb8e001}, 0x6, 0x4, 0x111e}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0x2, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x9, 0x4, 0x78, 0x9}}}}]}, 0x48}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.299868465s ago: executing program 3 (id=161): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) 5.22506556s ago: executing program 2 (id=162): syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x10050, &(0x7f0000000440)=ANY=[@ANYBLOB='unhide,utf8,map=acorn,check=strict,hide,nocompress,session=0x0000000000000052,hide,dmode=0x0000000\x00\x00\x00\x0000000,sbsector=0x0000000000000020,map=normal,map=off,mode=0x00000000000007ff,uid=', @ANYRESDEC=0x0, @ANYBLOB=',,'], 0xfd, 0x9e9, &(0x7f00000031c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) 5.196509622s ago: executing program 1 (id=163): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, 0x0) 4.952340778s ago: executing program 1 (id=164): io_submit(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x4008814) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffc0002}]}) rseq(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) semget(0x0, 0x2, 0x41) unshare(0x22020600) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{}, &(0x7f0000000000), 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1f9f4000) socketpair$unix(0x1, 0x2, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) 4.121436722s ago: executing program 3 (id=165): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) 3.949038194s ago: executing program 2 (id=166): socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000018110000000000000004000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) close(r0) 3.69230466s ago: executing program 4 (id=167): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) remap_file_pages(&(0x7f0000157000/0x2000)=nil, 0x1fffff, 0x0, 0x157, 0x0) 2.751922691s ago: executing program 3 (id=169): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000300)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRES32=r0, @ANYRESDEC], 0x44, 0x6f7, &(0x7f0000001f80)="$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") syz_mount_image$hfsplus(&(0x7f0000000a40), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2010410, &(0x7f0000000000)=ANY=[], 0x1, 0x68b, &(0x7f0000000a80)="$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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x2416e4cc027bbe81, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="18c700005c4391a6219e54e201000000850000006d000000ffcc706173c694e405670a585135b44b5c0209ee34b06aa38355a54b"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f00000000c0)=0x1, 0x6, 0x0, &(0x7f00000001c0), &(0x7f0000000300)=0x2, 0x2) 2.667012197s ago: executing program 4 (id=170): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x3, @remote}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203010902"], 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbb5a01f3c2f13608060001080006040002aaaaaaaaaaaaac1414bb"], 0x0) 2.654902047s ago: executing program 2 (id=171): syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x27, 0x4c, 0x3, 0x40, 0x5ab, 0x60, 0x1106, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xd, 0x0, 0x0, [{{0x9, 0x4, 0xa8, 0x0, 0x0, 0xf4, 0x7, 0x50}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0xa, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 2.247108454s ago: executing program 1 (id=173): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x1e) write(r0, &(0x7f0000000080)="0b000300010001", 0x7) 2.246342904s ago: executing program 0 (id=174): syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="3d0d8f929d36bc9c19d99c138002cdf0e58683ee6a6abe3f845d219f9f86cc41c0ed8b279cd28575a6a50679baf75e3aa7774f87987e5460c109d882afd2c2bfb760eaaae9b071cf23", @ANYRES64], 0x1, 0x19a, &(0x7f0000001400)="$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") statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) 2.224877235s ago: executing program 1 (id=175): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000240)) 1.563584918s ago: executing program 1 (id=176): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) 1.554597679s ago: executing program 3 (id=177): syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x10050, &(0x7f0000000440)=ANY=[@ANYBLOB='unhide,utf8,map=acorn,check=strict,hide,nocompress,session=0x0000000000000052,hide,dmode=0x0000000\x00\x00\x00\x0000000,sbsector=0x0000000000000020,map=normal,map=off,mode=0x00000000000007ff,uid=', @ANYRESDEC=0x0, @ANYBLOB=',,'], 0xfd, 0x9e9, &(0x7f00000031c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) 1.551224849s ago: executing program 0 (id=186): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x1e) write(r0, &(0x7f0000000080)="0b000300010001", 0x7) 1.378590091s ago: executing program 0 (id=178): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@fallback=r1, 0x1e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.246777369s ago: executing program 0 (id=179): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) 1.113253218s ago: executing program 3 (id=180): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) remap_file_pages(&(0x7f0000157000/0x2000)=nil, 0x1fffff, 0x0, 0x157, 0x0) 1.108436978s ago: executing program 0 (id=181): socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000018110000000000000004000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) close(r0) 892.416452ms ago: executing program 3 (id=182): listen(0xffffffffffffffff, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000880), 0x88000, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0xffff0000, 0x0) 28.460438ms ago: executing program 0 (id=183): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000100000000000000000000008500000017000000850000005000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) 0s ago: executing program 1 (id=184): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9800, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f000000040000002100000022bf000000000000", @ANYRES32, @ANYBLOB="0004000000"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.66' (ED25519) to the list of known hosts. [ 60.319423][ T4171] cgroup: Unknown subsys name 'net' [ 60.461264][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.951787][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 63.392949][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 63.546162][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 63.569747][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 63.586892][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.595292][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.603911][ T4183] device bridge_slave_0 entered promiscuous mode [ 63.620953][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 63.658736][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.666023][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.674055][ T4183] device bridge_slave_1 entered promiscuous mode [ 63.694668][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 63.730367][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.756163][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.833775][ T4183] team0: Port device team_slave_0 added [ 63.852013][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.859260][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.867971][ T4189] device bridge_slave_0 entered promiscuous mode [ 63.883559][ T4183] team0: Port device team_slave_1 added [ 63.889840][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.897057][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.905103][ T4192] device bridge_slave_0 entered promiscuous mode [ 63.919979][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.927282][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.935611][ T4189] device bridge_slave_1 entered promiscuous mode [ 63.958718][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.965965][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.973790][ T4192] device bridge_slave_1 entered promiscuous mode [ 64.025956][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.033055][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.041924][ T4182] device bridge_slave_0 entered promiscuous mode [ 64.061180][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.070676][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.078148][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.086223][ T4194] device bridge_slave_0 entered promiscuous mode [ 64.094260][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.101284][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.127242][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.141091][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.150533][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.157988][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.166796][ T4182] device bridge_slave_1 entered promiscuous mode [ 64.175475][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.185074][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.192142][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.200125][ T4194] device bridge_slave_1 entered promiscuous mode [ 64.207572][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.215096][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.241238][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.253964][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.331879][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.344295][ T4189] team0: Port device team_slave_0 added [ 64.361346][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.372855][ T4192] team0: Port device team_slave_0 added [ 64.380539][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.391170][ T4189] team0: Port device team_slave_1 added [ 64.405603][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.423472][ T4192] team0: Port device team_slave_1 added [ 64.453116][ T4183] device hsr_slave_0 entered promiscuous mode [ 64.460292][ T4183] device hsr_slave_1 entered promiscuous mode [ 64.513905][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.521098][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.547252][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.560823][ T4182] team0: Port device team_slave_0 added [ 64.567688][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.577140][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.603819][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.619081][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.626611][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.652671][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.666808][ T4194] team0: Port device team_slave_0 added [ 64.676464][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.683461][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.710105][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.723479][ T4182] team0: Port device team_slave_1 added [ 64.740082][ T4194] team0: Port device team_slave_1 added [ 64.796295][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.803271][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.830542][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.849786][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.858175][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.884279][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.900782][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.908134][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.934657][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.956159][ T4189] device hsr_slave_0 entered promiscuous mode [ 64.963017][ T4189] device hsr_slave_1 entered promiscuous mode [ 64.969727][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.977942][ T4189] Cannot create hsr debugfs directory [ 64.983799][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.990805][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.017104][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.067848][ T4192] device hsr_slave_0 entered promiscuous mode [ 65.075392][ T4192] device hsr_slave_1 entered promiscuous mode [ 65.081942][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.090038][ T4192] Cannot create hsr debugfs directory [ 65.125524][ T4184] Bluetooth: hci3: command 0x0409 tx timeout [ 65.132615][ T4184] Bluetooth: hci0: command 0x0409 tx timeout [ 65.135210][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 65.138966][ T4184] Bluetooth: hci2: command 0x0409 tx timeout [ 65.153476][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 65.195547][ T4182] device hsr_slave_0 entered promiscuous mode [ 65.202355][ T4182] device hsr_slave_1 entered promiscuous mode [ 65.209597][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.217302][ T4182] Cannot create hsr debugfs directory [ 65.230112][ T4194] device hsr_slave_0 entered promiscuous mode [ 65.237161][ T4194] device hsr_slave_1 entered promiscuous mode [ 65.243677][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.251459][ T4194] Cannot create hsr debugfs directory [ 65.520290][ T4183] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.537145][ T4183] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.547892][ T4183] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.557755][ T4183] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.627821][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.646009][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.660425][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.670660][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.701608][ T4192] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.713540][ T4192] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.737760][ T4192] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.753177][ T4192] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.840813][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.858326][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.867788][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.877877][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.903271][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.914183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.925178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.933950][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.947364][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.002165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.011291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.021128][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.028483][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.044479][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.064847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.072933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.082846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.091841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.101870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.111175][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.118419][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.126348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.135517][ T4182] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.169657][ T4182] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.179794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.192540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.202353][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.209628][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.218196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.227105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.235738][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.242797][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.250974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.260037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.270085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.279714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.288555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.298672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.312513][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.322348][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.336162][ T4182] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.345638][ T4182] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.359588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.368213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.382676][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.403737][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.415997][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.433376][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.448799][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.460482][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.472900][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.489493][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.498834][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.524046][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.539720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.556442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.567104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.575334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.601462][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.610558][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.623197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.633565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.642502][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.649721][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.672412][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.683729][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.697930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.707050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.716899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.725866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.733379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.741280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.750177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.758928][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.766070][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.779573][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.808761][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.838427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.881326][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.892170][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.902244][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.937200][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.947205][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.957152][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.967260][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.976929][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.985887][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.994398][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.003616][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.018759][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.031474][ T4183] device veth0_vlan entered promiscuous mode [ 67.047589][ T4183] device veth1_vlan entered promiscuous mode [ 67.057881][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.066139][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.073917][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.082219][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.091660][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.099692][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.107741][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.116706][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.129982][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.140503][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.152699][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.161966][ T506] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.169192][ T506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.178572][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.189075][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.205036][ T23] Bluetooth: hci1: command 0x041b tx timeout [ 67.205630][ T4254] Bluetooth: hci2: command 0x041b tx timeout [ 67.211242][ T23] Bluetooth: hci4: command 0x041b tx timeout [ 67.218751][ T4254] Bluetooth: hci0: command 0x041b tx timeout [ 67.230602][ T4254] Bluetooth: hci3: command 0x041b tx timeout [ 67.251143][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.259550][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.273352][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.281222][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.290776][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.300774][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.307939][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.316784][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.325769][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.334457][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.343504][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.352299][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.361766][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.371761][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.385095][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.401389][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.410628][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.419462][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.433718][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.442760][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.478730][ T4183] device veth0_macvtap entered promiscuous mode [ 67.499654][ T4194] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.520960][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.535457][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.543769][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.552750][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.561761][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.571453][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.580054][ T506] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.587180][ T506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.596129][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.605933][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.614302][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.622694][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.637860][ T4183] device veth1_macvtap entered promiscuous mode [ 67.665780][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.685203][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.696848][ T506] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.704182][ T506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.731902][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.747103][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.792436][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.800377][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.811351][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.822330][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.831453][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.859245][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.877649][ T4189] device veth0_vlan entered promiscuous mode [ 67.890442][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.900225][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.911348][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.920057][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.929787][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.939690][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.948889][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.958048][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.971876][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.980011][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.988296][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.001249][ T4183] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.010536][ T4183] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.019562][ T4183] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.028419][ T4183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.049792][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.074332][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.088498][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.103608][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.112831][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.123123][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.136218][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.146805][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.155683][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.176711][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.185055][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.195009][ T4189] device veth1_vlan entered promiscuous mode [ 68.290883][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.300061][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.309408][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.319175][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.338687][ T4189] device veth0_macvtap entered promiscuous mode [ 68.356011][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.375046][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.395355][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.424227][ T4189] device veth1_macvtap entered promiscuous mode [ 68.457272][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.476117][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.497579][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.510336][ T4194] device veth0_vlan entered promiscuous mode [ 68.525041][ T1282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.533107][ T1282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.568398][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.581339][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.593794][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.601888][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.610228][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.619123][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.628407][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.638990][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.654175][ T4194] device veth1_vlan entered promiscuous mode [ 68.665813][ T1282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.673987][ T1282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.683333][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.702421][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.710173][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.724137][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.741061][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.755409][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.766110][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.777872][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.817164][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.826392][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.850806][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.860584][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.872182][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.887043][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.910462][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.921878][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.932121][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.957755][ T4194] device veth0_macvtap entered promiscuous mode [ 68.989870][ T4192] device veth0_vlan entered promiscuous mode [ 69.005681][ T4290] loop3: detected capacity change from 0 to 128 [ 69.033123][ T4192] device veth1_vlan entered promiscuous mode [ 69.043421][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.053563][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.066733][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.078007][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.087249][ T4290] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 69.105071][ T4290] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 69.141200][ T4194] device veth1_macvtap entered promiscuous mode [ 69.182575][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.201075][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.211186][ T4290] EXT4-fs error (device loop3): dx_make_map:1328: inode #2: block 20: comm syz.3.4: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 69.212339][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.235588][ T4290] EXT4-fs error (device loop3) in do_split:2095: Corrupt filesystem [ 69.243773][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.251380][ T4290] EXT4-fs error (device loop3): dx_make_map:1328: inode #2: block 20: comm syz.3.4: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 69.254446][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.281136][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.281841][ T4290] EXT4-fs error (device loop3) in do_split:2095: Corrupt filesystem [ 69.296602][ T4240] Bluetooth: hci0: command 0x040f tx timeout [ 69.298600][ T4233] Bluetooth: hci3: command 0x040f tx timeout [ 69.311584][ T4240] Bluetooth: hci2: command 0x040f tx timeout [ 69.312596][ T4255] Bluetooth: hci4: command 0x040f tx timeout [ 69.330730][ T4255] Bluetooth: hci1: command 0x040f tx timeout [ 69.335462][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.353758][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.364045][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.374984][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.388482][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.421606][ T4192] device veth0_macvtap entered promiscuous mode [ 69.443597][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.458605][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.467780][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.476935][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.486124][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.495034][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.503652][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.512811][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.521159][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.550109][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.566533][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.581124][ T4294] loop3: detected capacity change from 0 to 1024 [ 69.581412][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.599243][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.610720][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.635303][ T4294] ======================================================= [ 69.635303][ T4294] WARNING: The mand mount option has been deprecated and [ 69.635303][ T4294] and is ignored by this kernel. Remove the mand [ 69.635303][ T4294] option from the mount to silence this warning. [ 69.635303][ T4294] ======================================================= [ 69.672989][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.682659][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.702100][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.712610][ T4294] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 69.732797][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.742621][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.753462][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.765151][ T4294] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,noload,dioread_nolock,,errors=continue. Quota mode: none. [ 69.783433][ T4192] device veth1_macvtap entered promiscuous mode [ 69.793496][ T4294] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.801106][ T4182] device veth0_vlan entered promiscuous mode [ 69.845380][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.848665][ T4182] device veth1_vlan entered promiscuous mode [ 69.853605][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.912465][ T4294] EXT4-fs error (device loop3): ext4_map_blocks:739: inode #15: comm syz.3.6: lblock 0 mapped to illegal pblock 0 (length 1) [ 69.912914][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.936152][ T4294] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 69.950055][ T4294] EXT4-fs (loop3): This should not happen!! Data will be lost [ 69.950055][ T4294] [ 69.963288][ T4294] EXT4-fs error (device loop3): ext4_ext_remove_space:2929: inode #15: comm syz.3.6: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 69.973860][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.995030][ T4298] mmap: syz.3.6 (4298) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 70.004249][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.032292][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.042840][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.056104][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.066829][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.086334][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.113225][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.122102][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.134237][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.134424][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.146089][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.163531][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.193884][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.215475][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.226513][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.261850][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.281088][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.415454][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.431753][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.441401][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.453112][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.462071][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.472824][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.484714][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.248198][ T4182] device veth0_macvtap entered promiscuous mode [ 71.275499][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.284200][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.323177][ T4182] device veth1_macvtap entered promiscuous mode [ 71.353954][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.367804][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 71.375065][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 71.380474][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.387738][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.416585][ T4308] loop3: detected capacity change from 0 to 2048 [ 71.417413][ T1282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.431490][ T1282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.439419][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 71.439484][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 71.439542][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 71.473303][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.516699][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.536270][ T4308] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 71.548882][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.566616][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.623744][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.640862][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.661794][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.683031][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.694623][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.707281][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.718284][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.737636][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.777587][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.785903][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.795218][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.816797][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.838145][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.850167][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.871073][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.881714][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.895198][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.908884][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.934959][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.946914][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.957914][ T506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.977884][ T4323] loop3: detected capacity change from 0 to 128 [ 71.979999][ T4182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.010882][ T506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.036976][ T4182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.057651][ T4182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.088223][ T4182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.117618][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.127550][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.138926][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.152280][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.164025][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.180074][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.311456][ T4329] loop3: detected capacity change from 0 to 1024 [ 72.367402][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.402396][ T4316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.420914][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.435760][ T4329] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 72.442853][ T4316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.477044][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.526301][ T4329] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,noload,dioread_nolock,,errors=continue. Quota mode: none. [ 72.535345][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.553623][ T4329] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.579116][ T4329] EXT4-fs error (device loop3): ext4_map_blocks:739: inode #15: comm syz.3.13: lblock 0 mapped to illegal pblock 0 (length 1) [ 72.594800][ T4329] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 72.614813][ T4329] EXT4-fs (loop3): This should not happen!! Data will be lost [ 72.614813][ T4329] [ 72.650846][ T4329] EXT4-fs error (device loop3): ext4_ext_remove_space:2929: inode #15: comm syz.3.13: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 72.671822][ T4344] loop1: detected capacity change from 0 to 128 [ 72.700650][ T4337] device syzkaller0 entered promiscuous mode [ 72.820362][ T4344] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 72.856769][ T4344] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 72.872470][ T4340] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 73.095369][ T4353] loop0: detected capacity change from 0 to 1024 [ 73.514327][ T4357] fscrypt: Error allocating hmac(sha512): -2 [ 73.630894][ T4365] loop3: detected capacity change from 0 to 256 [ 73.879636][ T4365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19'. [ 73.931729][ T26] audit: type=1800 audit(1761635969.028:2): pid=4353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 74.074825][ T4379] loop3: detected capacity change from 0 to 128 [ 74.135728][ T4379] FAT-fs (loop3): Directory bread(block 414) failed [ 74.149171][ T4379] FAT-fs (loop3): Directory bread(block 415) failed [ 74.160933][ T4381] loop2: detected capacity change from 0 to 1024 [ 74.184689][ T4379] FAT-fs (loop3): Directory bread(block 416) failed [ 74.194469][ T4379] FAT-fs (loop3): Directory bread(block 417) failed [ 74.234119][ T4381] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 74.254873][ T4184] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 74.278831][ T4379] FAT-fs (loop3): Directory bread(block 418) failed [ 74.295903][ T4379] FAT-fs (loop3): Directory bread(block 419) failed [ 74.302835][ T4379] FAT-fs (loop3): Directory bread(block 420) failed [ 74.324256][ T4379] FAT-fs (loop3): Directory bread(block 421) failed [ 74.343856][ T4381] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,noload,dioread_nolock,,errors=continue. Quota mode: none. [ 74.412455][ T4381] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.438939][ T4379] FAT-fs (loop3): Directory bread(block 414) failed [ 74.480807][ T4379] FAT-fs (loop3): Directory bread(block 415) failed [ 74.544640][ T4184] usb 5-1: Using ep0 maxpacket: 8 [ 74.707322][ T4184] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 74.721367][ T4184] usb 5-1: config 179 has no interface number 0 [ 74.729567][ T4184] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 74.759643][ T4184] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 74.771711][ T4184] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 74.784172][ T4184] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 74.796365][ T4184] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 74.814934][ T4184] usb 5-1: config 179 interface 65 has no altsetting 0 [ 74.821969][ T4184] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 74.831524][ T4184] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.920925][ T4395] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 74.952983][ T4184] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input5 [ 74.985995][ T4402] loop1: detected capacity change from 0 to 1024 [ 75.011274][ T4397] device syzkaller0 entered promiscuous mode [ 75.026847][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 75.036812][ T4404] loop0: detected capacity change from 0 to 128 [ 75.112889][ T4404] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 75.134230][ T4404] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 75.320127][ T4184] usb 5-1: USB disconnect, device number 2 [ 75.334583][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 75.394051][ T4184] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 76.227236][ T4408] fscrypt: Error allocating hmac(sha512): -2 [ 76.314969][ T4416] loop1: detected capacity change from 0 to 1024 [ 76.591711][ T4274] hfsplus: b-tree write err: -5, ino 4 [ 76.623233][ T4425] loop4: detected capacity change from 0 to 1024 [ 76.817682][ T4431] loop1: detected capacity change from 0 to 1024 [ 76.828613][ T26] audit: type=1800 audit(1761635971.928:3): pid=4425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.35" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 76.988976][ T4431] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 77.754551][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 77.763704][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 77.772726][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 77.781736][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 77.790740][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 77.799731][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 77.808796][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 77.817984][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 77.827154][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 77.836149][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 77.925640][ T4431] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,noload,dioread_nolock,,errors=continue. Quota mode: none. [ 77.944826][ T4431] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.157994][ T4449] loop3: detected capacity change from 0 to 128 [ 78.235042][ T4448] device syzkaller0 entered promiscuous mode [ 78.274224][ T4449] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.293601][ T4451] netlink: 160 bytes leftover after parsing attributes in process `syz.1.46'. [ 78.320443][ T4449] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 78.332503][ T4451] netlink: 160 bytes leftover after parsing attributes in process `syz.1.46'. [ 78.410575][ T4455] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.562529][ T4448] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 79.407524][ T4462] fscrypt: Error allocating hmac(sha512): -2 [ 80.247092][ T4475] loop1: detected capacity change from 0 to 1024 [ 80.397365][ T4473] loop3: detected capacity change from 0 to 1024 [ 81.346633][ T4481] loop4: detected capacity change from 0 to 256 [ 82.475459][ T4316] hfsplus: b-tree write err: -5, ino 4 [ 82.587563][ T4481] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 82.644742][ T4481] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 82.703313][ T4491] loop3: detected capacity change from 0 to 1024 [ 82.842288][ T4481] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 83.107469][ T4496] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 83.508106][ T4494] loop1: detected capacity change from 0 to 1024 [ 83.519350][ T26] audit: type=1800 audit(1761635978.618:4): pid=4491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.55" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 83.584766][ T4494] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 83.755531][ T4494] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,noload,dioread_nolock,,errors=continue. Quota mode: none. [ 83.921070][ T4505] loop3: detected capacity change from 0 to 256 [ 83.938860][ T4494] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.001547][ T4505] exfat: Bad value for 'uid' [ 84.123226][ T4511] loop4: detected capacity change from 0 to 128 [ 84.278225][ T4511] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 84.333536][ T4511] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 84.686335][ T4521] loop0: detected capacity change from 0 to 16 [ 85.949313][ T4524] fscrypt: Error allocating hmac(sha512): -2 [ 86.055238][ T4173] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 86.103701][ T4521] erofs: (device loop0): mounted with root inode @ nid 36. [ 86.314701][ T4173] usb 2-1: Using ep0 maxpacket: 8 [ 87.452831][ T7] cfg80211: failed to load regulatory.db [ 87.540409][ T4544] loop3: detected capacity change from 0 to 128 [ 87.584692][ T4173] usb 2-1: unable to get BOS descriptor or descriptor too short [ 87.640955][ T4546] device syzkaller0 entered promiscuous mode [ 87.654066][ T4546] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 87.662634][ T4173] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 87.676304][ T4173] usb 2-1: can't read configurations, error -71 [ 87.781604][ T4544] EXT4-fs (loop3): Ignoring removed nobh option [ 87.893761][ T4544] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,max_dir_size_kb=0x0000000000000004,,errors=continue. Quota mode: none. [ 87.921966][ T4544] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 87.962183][ T4553] loop0: detected capacity change from 0 to 256 [ 87.990277][ T4553] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 88.042358][ T4553] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 88.094363][ T4555] loop1: detected capacity change from 0 to 1024 [ 88.117241][ T4553] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 88.164861][ T4555] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 88.204629][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 88.259304][ T4555] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,noload,dioread_nolock,,errors=continue. Quota mode: none. [ 88.327825][ T4555] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.594911][ T7] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 88.611707][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.641043][ T7] usb 5-1: config 0 descriptor?? [ 88.673923][ T4563] capability: warning: `syz.1.75' uses deprecated v2 capabilities in a way that may be insecure [ 88.706938][ T7] cp210x 5-1:0.0: cp210x converter detected [ 88.749234][ T4565] loop0: detected capacity change from 0 to 128 [ 88.910939][ T4565] EXT4-fs (loop0): Ignoring removed nobh option [ 88.928141][ T7] usb 5-1: cp210x converter now attached to ttyUSB0 [ 88.987349][ T4565] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,max_dir_size_kb=0x0000000000000004,,errors=continue. Quota mode: none. [ 89.223177][ T4565] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 90.439398][ T7] usb 5-1: USB disconnect, device number 3 [ 90.504678][ T7] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 90.513512][ T7] cp210x 5-1:0.0: device disconnected [ 90.601389][ T4589] loop1: detected capacity change from 0 to 256 [ 90.655622][ T4589] exfat: Bad value for 'uid' [ 90.785973][ T4591] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 90.957276][ T4597] loop1: detected capacity change from 0 to 1024 [ 91.001533][ T4599] loop3: detected capacity change from 0 to 512 [ 91.032612][ T4601] loop4: detected capacity change from 0 to 1024 [ 91.086490][ T4601] EXT4-fs (loop4): Ignoring removed oldalloc option [ 91.093346][ T4599] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 91.094854][ T4601] EXT4-fs (loop4): Ignoring removed bh option [ 91.113538][ T4601] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 91.126060][ T4597] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 91.201252][ T4599] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 91.225883][ T4597] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,noload,dioread_nolock,,errors=continue. Quota mode: none. [ 91.242899][ T4597] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.254401][ T4599] System zones: 0-2, 18-18, 34-34 [ 91.260610][ T4601] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,mb_optimize_scan=0x0000000000000001,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 91.264960][ T4599] EXT4-fs (loop3): mounted filesystem without journal. Opts: noquota,debug,jqfmt=vfsv0,noauto_da_alloc,resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 91.304824][ T4599] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.739462][ T4623] loop2: detected capacity change from 0 to 16 [ 93.045550][ T26] audit: type=1326 audit(1761635988.118:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4625 comm="syz.3.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc16f8afc9 code=0x7ffc0000 [ 93.252892][ T4623] erofs: (device loop2): mounted with root inode @ nid 36. [ 93.377734][ T26] audit: type=1326 audit(1761635988.178:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4625 comm="syz.3.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc16f8afc9 code=0x7ffc0000 [ 93.504003][ T4634] loop1: detected capacity change from 0 to 1024 [ 93.520343][ T26] audit: type=1326 audit(1761635988.178:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4625 comm="syz.3.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fbc16f8afc9 code=0x7ffc0000 [ 93.652985][ T4634] EXT4-fs (loop1): inline encryption not supported [ 93.731940][ T4634] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 93.754546][ T26] audit: type=1326 audit(1761635988.178:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4625 comm="syz.3.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc16f8afc9 code=0x7ffc0000 [ 93.806593][ T26] audit: type=1326 audit(1761635988.188:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4625 comm="syz.3.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc16f8afc9 code=0x7ffc0000 [ 93.883865][ T4634] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 94.008518][ T26] audit: type=1326 audit(1761635988.208:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4625 comm="syz.3.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7fbc16f8afc9 code=0x7ffc0000 [ 94.036356][ T26] audit: type=1326 audit(1761635988.208:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4625 comm="syz.3.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc16f8afc9 code=0x7ffc0000 [ 94.225548][ T4653] loop3: detected capacity change from 0 to 1024 [ 94.278331][ T4653] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 94.440095][ T4653] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,noload,dioread_nolock,,errors=continue. Quota mode: none. [ 94.459667][ T4657] loop0: detected capacity change from 0 to 4096 [ 94.555527][ T4653] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.650588][ T4657] EXT4-fs (loop0): Ignoring removed bh option [ 96.051326][ T4657] EXT4-fs (loop0): Test dummy encryption mode enabled [ 96.073106][ T4657] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 96.083333][ T4657] System zones: 0-5 [ 96.102047][ T4657] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,delalloc,bh,test_dummy_encryption,nodiscard,nojournal_checksum,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 96.341993][ T1108] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 97.473967][ T4657] fscrypt (loop0): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 97.636730][ T4701] loop1: detected capacity change from 0 to 512 [ 97.779595][ T4705] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 97.820717][ T1108] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 97.835433][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.860867][ T1108] usb 5-1: config 0 descriptor?? [ 97.871974][ T4701] EXT4-fs (loop1): Test dummy encryption mode enabled [ 97.878972][ T4701] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 97.892088][ T4701] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 97.901970][ T4701] EXT4-fs (loop1): ea_inode feature is not supported for Hurd [ 99.685711][ T1108] usb 5-1: can't set config #0, error -71 [ 99.704462][ T4715] loop0: detected capacity change from 0 to 1024 [ 99.720637][ T1108] usb 5-1: USB disconnect, device number 4 [ 99.758377][ T4715] EXT4-fs (loop0): Test dummy encryption mode enabled [ 99.788179][ T4715] EXT4-fs (loop0): inline encryption not supported [ 99.872609][ T4719] loop4: detected capacity change from 0 to 1024 [ 99.882279][ T4715] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 100.054738][ T4719] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 100.217534][ T4719] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,noload,dioread_nolock,,errors=continue. Quota mode: none. [ 100.324912][ T4719] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.004974][ T4744] xt_nat: multiple ranges no longer supported [ 101.983800][ T4751] loop0: detected capacity change from 0 to 1024 [ 102.033989][ T4754] tipc: Started in network mode [ 102.044702][ T4754] tipc: Node identity 0610073b7175, cluster identity 4711 [ 102.052235][ T4754] tipc: Enabled bearer , priority 0 [ 102.074417][ T4754] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 102.089605][ T4754] tipc: Resetting bearer [ 102.120094][ T4751] EXT4-fs (loop0): inline encryption not supported [ 102.144126][ T4751] EXT4-fs (loop0): Ignoring removed nobh option [ 102.194622][ T4630] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 102.210372][ T4753] tipc: Disabling bearer [ 102.222471][ T4751] EXT4-fs (loop0): Ignoring removed bh option [ 102.234926][ T4751] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 102.382659][ T4751] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,nodelalloc,init_itable=0x0000000000000003,inlinecrypt,data_err=ignore,nodiscard,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 102.625030][ T4630] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 102.817013][ T4630] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.073341][ T4751] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3871: comm syz.0.129: Allocating blocks 497-513 which overlap fs metadata [ 103.151367][ T4630] usb 3-1: config 0 descriptor?? [ 103.235820][ T4630] cp210x 3-1:0.0: cp210x converter detected [ 103.302586][ T4767] loop4: detected capacity change from 0 to 512 [ 104.341164][ T4630] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 104.502204][ T4630] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 104.513616][ T4767] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,auto_da_alloc=0x0000000000000007,noauto_da_alloc,. Quota mode: writeback. [ 104.513731][ T4767] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.517616][ T26] audit: type=1326 audit(1761635999.618:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4776 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06671a4fc9 code=0x7ffc0000 [ 104.521115][ T26] audit: type=1326 audit(1761635999.618:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4776 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06671a4fc9 code=0x7ffc0000 [ 104.554735][ T4630] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 104.685304][ T4630] usb 3-1: cp210x converter now attached to ttyUSB0 [ 104.731780][ T4630] usb 3-1: USB disconnect, device number 2 [ 104.771766][ T4630] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 104.796540][ T4630] cp210x 3-1:0.0: device disconnected [ 104.854587][ T26] audit: type=1326 audit(1761635999.698:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4776 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f06671a4fc9 code=0x7ffc0000 [ 105.170011][ T26] audit: type=1326 audit(1761635999.708:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4776 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06671a4fc9 code=0x7ffc0000 [ 105.204285][ T26] audit: type=1326 audit(1761635999.708:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4776 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06671a4fc9 code=0x7ffc0000 [ 105.336519][ T26] audit: type=1326 audit(1761635999.708:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4776 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f06671a4fc9 code=0x7ffc0000 [ 105.430795][ T26] audit: type=1326 audit(1761635999.708:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4776 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06671a4fc9 code=0x7ffc0000 [ 105.511453][ T26] audit: type=1326 audit(1761635999.708:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4776 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06671a4fc9 code=0x7ffc0000 [ 105.552774][ T4793] loop4: detected capacity change from 0 to 1024 [ 105.593610][ T26] audit: type=1326 audit(1761635999.708:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4776 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f06671a4fc9 code=0x7ffc0000 [ 105.623965][ T26] audit: type=1326 audit(1761635999.708:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4776 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06671a4fc9 code=0x7ffc0000 [ 105.672716][ T4793] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 105.774189][ T4793] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,noload,dioread_nolock,,errors=continue. Quota mode: none. [ 105.810827][ T4808] tipc: Started in network mode [ 105.816899][ T4808] tipc: Node identity 9a988181c2c3, cluster identity 4711 [ 105.824331][ T4808] tipc: Enabled bearer , priority 0 [ 105.833715][ T4808] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 105.851280][ T4808] tipc: Resetting bearer [ 105.861236][ T4804] tipc: Disabling bearer [ 105.871151][ T4793] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.924876][ T4807] loop0: detected capacity change from 0 to 1764 [ 106.037008][ T4812] netlink: 92 bytes leftover after parsing attributes in process `syz.3.147'. [ 106.993457][ T4818] loop1: detected capacity change from 0 to 512 [ 107.393739][ T4818] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 108.032160][ T4818] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.149: invalid indirect mapped block 32768 (level 2) [ 108.060687][ T4818] EXT4-fs (loop1): Remounting filesystem read-only [ 108.095476][ T4818] EXT4-fs (loop1): 1 orphan inode deleted [ 108.112949][ T4818] EXT4-fs (loop1): 1 truncate cleaned up [ 108.126252][ T4837] loop3: detected capacity change from 0 to 128 [ 108.133224][ T4818] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,quota,. Quota mode: writeback. [ 108.194985][ T4837] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 108.314608][ T4240] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 108.394868][ T4837] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.479817][ T4837] syz.3.154 (pid 4837) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 108.510571][ T4843] tipc: Started in network mode [ 108.584730][ T4843] tipc: Node identity 3a27df60d89d, cluster identity 4711 [ 108.609474][ T4843] tipc: Enabled bearer , priority 0 [ 108.622877][ T4843] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 108.639877][ T4843] tipc: Resetting bearer [ 108.714717][ T4240] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 108.741139][ T4240] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.758904][ T4842] tipc: Disabling bearer [ 108.781445][ T4240] usb 1-1: config 0 descriptor?? [ 108.828359][ T4240] cp210x 1-1:0.0: cp210x converter detected [ 108.950018][ T4855] loop2: detected capacity change from 0 to 1764 [ 109.951705][ T4240] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 109.983761][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 109.983776][ T26] audit: type=1326 audit(1761636005.078:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4859 comm="syz.1.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f06671a4fc9 code=0x7ffc0000 [ 110.004762][ T4240] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 110.095174][ T4240] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 110.127355][ T26] audit: type=1326 audit(1761636005.078:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4859 comm="syz.1.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06671a4fc9 code=0x7ffc0000 [ 110.174858][ T4240] usb 1-1: cp210x converter now attached to ttyUSB0 [ 110.219479][ T4240] usb 1-1: USB disconnect, device number 2 [ 110.235751][ T26] audit: type=1326 audit(1761636005.078:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4859 comm="syz.1.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06671a4fc9 code=0x7ffc0000 [ 110.289228][ T4240] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 110.305277][ T4240] cp210x 1-1:0.0: device disconnected [ 110.325678][ T26] audit: type=1326 audit(1761636005.078:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4859 comm="syz.1.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f06671a4fc9 code=0x7ffc0000 [ 110.429115][ T26] audit: type=1326 audit(1761636005.078:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4859 comm="syz.1.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06671a4fc9 code=0x7ffc0000 [ 110.511186][ T26] audit: type=1326 audit(1761636005.078:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4859 comm="syz.1.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06671a4fc9 code=0x7ffc0000 [ 110.543663][ T26] audit: type=1326 audit(1761636005.078:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4859 comm="syz.1.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f06671a4fc9 code=0x7ffc0000 [ 110.808020][ T26] audit: type=1326 audit(1761636005.078:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4859 comm="syz.1.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06671a4fc9 code=0x7ffc0000 [ 111.391618][ T26] audit: type=1326 audit(1761636005.078:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4859 comm="syz.1.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06671a4fc9 code=0x7ffc0000 [ 111.473499][ T26] audit: type=1326 audit(1761636005.078:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4859 comm="syz.1.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f06671a4fc9 code=0x7ffc0000 [ 111.527649][ T4874] loop3: detected capacity change from 0 to 1024 [ 111.552254][ T4880] tipc: Started in network mode [ 111.564863][ T4880] tipc: Node identity d295b292e5, cluster identity 4711 [ 111.571985][ T4880] tipc: Enabled bearer , priority 0 [ 111.593840][ T4880] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 111.608504][ T4880] tipc: Resetting bearer [ 111.623240][ T4879] tipc: Disabling bearer [ 111.917095][ T4887] loop0: detected capacity change from 0 to 8 [ 112.419186][ T4887] SQUASHFS error: Failed to read block 0x6de: -5 [ 112.433320][ T4887] SQUASHFS error: Unable to read metadata cache entry [6dc] [ 112.447354][ T4887] SQUASHFS error: Failed to read block 0x63a: -5 [ 112.454014][ T4887] SQUASHFS error: Unable to read metadata cache entry [638] [ 112.464460][ T4887] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 112.517231][ T4311] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 112.538876][ T4661] hfsplus: b-tree write err: -5, ino 4 [ 112.705595][ T21] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 112.869290][ T4901] loop3: detected capacity change from 0 to 1764 [ 112.985052][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 114.021941][ T21] usb 5-1: config 0 has no interfaces? [ 114.085059][ T4311] usb 3-1: config 0 has an invalid interface number: 168 but max is 0 [ 114.103843][ T4311] usb 3-1: config 0 has no interface number 0 [ 114.110276][ T4311] usb 3-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 114.119579][ T4311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.163830][ T4311] usb 3-1: config 0 descriptor?? [ 114.255410][ T21] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 114.274730][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.284238][ T21] usb 5-1: Product: syz [ 114.288705][ T21] usb 5-1: Manufacturer: syz [ 114.293651][ T21] usb 5-1: SerialNumber: syz [ 114.312939][ T21] r8152-cfgselector 5-1: config 0 descriptor?? [ 114.659080][ T4198] Bluetooth: hci4: Unknown advertising packet type: 0x11 [ 114.659302][ T4198] ================================================================== [ 114.674780][ T4198] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x12c0/0x3b80 [ 114.682721][ T4198] Read of size 1 at addr ffff88805fbba408 by task kworker/u5:6/4198 [ 114.690838][ T4198] [ 114.693206][ T4198] CPU: 1 PID: 4198 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 114.700775][ T4198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 114.710858][ T4198] Workqueue: hci4 hci_rx_work [ 114.715596][ T4198] Call Trace: [ 114.718901][ T4198] [ 114.721858][ T4198] dump_stack_lvl+0x168/0x230 [ 114.726632][ T4198] ? show_regs_print_info+0x20/0x20 [ 114.731867][ T4198] ? load_image+0x3b0/0x3b0 [ 114.736405][ T4198] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 114.741814][ T4198] print_address_description+0x60/0x2d0 [ 114.747575][ T4198] ? hci_le_meta_evt+0x12c0/0x3b80 [ 114.752714][ T4198] kasan_report+0xdf/0x130 [ 114.757161][ T4198] ? hci_le_meta_evt+0x12c0/0x3b80 [ 114.762320][ T4198] hci_le_meta_evt+0x12c0/0x3b80 [ 114.767306][ T4198] ? hci_event_packet+0x2c0/0x12f0 [ 114.772465][ T4198] ? hci_remote_host_features_evt+0x280/0x280 [ 114.778570][ T4198] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 114.784280][ T4198] ? mark_lock+0x94/0x320 [ 114.788642][ T4198] ? mutex_unlock+0x10/0x10 [ 114.793179][ T4198] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 114.799198][ T4198] ? lock_chain_count+0x20/0x20 [ 114.804084][ T4198] ? __rwlock_init+0x140/0x140 [ 114.808880][ T4198] hci_event_packet+0xe05/0x12f0 [ 114.813853][ T4198] ? lockdep_hardirqs_on+0x94/0x140 [ 114.819107][ T4198] ? rcu_lock_release+0x20/0x20 [ 114.824000][ T4198] ? hci_send_to_monitor+0x9c/0x4a0 [ 114.825107][ T4919] tipc: Enabled bearer , priority 0 [ 114.829226][ T4198] hci_rx_work+0x255/0xa10 [ 114.840296][ T4198] process_one_work+0x863/0x1000 [ 114.845287][ T4198] ? worker_detach_from_pool+0x240/0x240 [ 114.850950][ T4198] ? lockdep_hardirqs_off+0x70/0x100 [ 114.856256][ T4198] ? _raw_spin_lock_irq+0xab/0xe0 [ 114.861292][ T4198] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 114.866680][ T4198] ? wq_worker_running+0x97/0x170 [ 114.871758][ T4198] worker_thread+0xaa8/0x12a0 [ 114.876641][ T4198] kthread+0x436/0x520 [ 114.880725][ T4198] ? rcu_lock_release+0x20/0x20 [ 114.885588][ T4198] ? kthread_blkcg+0xd0/0xd0 [ 114.890193][ T4198] ret_from_fork+0x1f/0x30 [ 114.894632][ T4198] [ 114.897659][ T4198] [ 114.899988][ T4198] Allocated by task 4877: [ 114.904317][ T4198] __kasan_kmalloc+0xb5/0xf0 [ 114.908920][ T4198] __alloc_skb+0x22c/0x750 [ 114.913346][ T4198] vhci_write+0xbc/0x450 [ 114.917739][ T4198] vfs_write+0x712/0xd00 [ 114.921996][ T4198] ksys_write+0x14d/0x250 [ 114.926335][ T4198] do_syscall_64+0x4c/0xa0 [ 114.930766][ T4198] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 114.936675][ T4198] [ 114.938999][ T4198] Last potentially related work creation: [ 114.944711][ T4198] kasan_save_stack+0x35/0x60 [ 114.949390][ T4198] kasan_record_aux_stack+0xb8/0x100 [ 114.955038][ T4198] kvfree_call_rcu+0x10a/0x7c0 [ 114.959803][ T4198] neigh_remove_one+0x4e8/0x5f0 [ 114.964829][ T4198] ___neigh_create+0x468/0x2250 [ 114.969678][ T4198] ip6_finish_output2+0xa01/0x1500 [ 114.974795][ T4198] ndisc_send_skb+0xbea/0x14a0 [ 114.979560][ T4198] addrconf_rs_timer+0x2b8/0x600 [ 114.984513][ T4198] call_timer_fn+0x16c/0x530 [ 114.989261][ T4198] __run_timers+0x525/0x7c0 [ 114.993787][ T4198] run_timer_softirq+0x63/0xf0 [ 114.998572][ T4198] handle_softirqs+0x328/0x820 [ 115.003349][ T4198] __irq_exit_rcu+0x12f/0x220 [ 115.008040][ T4198] irq_exit_rcu+0x5/0x20 [ 115.012293][ T4198] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 115.017941][ T4198] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 115.023924][ T4198] [ 115.026251][ T4198] The buggy address belongs to the object at ffff88805fbba000 [ 115.026251][ T4198] which belongs to the cache kmalloc-1k of size 1024 [ 115.040312][ T4198] The buggy address is located 8 bytes to the right of [ 115.040312][ T4198] 1024-byte region [ffff88805fbba000, ffff88805fbba400) [ 115.054019][ T4198] The buggy address belongs to the page: [ 115.059662][ T4198] page:ffffea00017eee00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5fbb8 [ 115.069846][ T4198] head:ffffea00017eee00 order:3 compound_mapcount:0 compound_pincount:0 [ 115.078171][ T4198] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 115.086251][ T4198] raw: 00fff00000010200 0000000000000000 0000000100000001 ffff888016841dc0 [ 115.094943][ T4198] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 115.103522][ T4198] page dumped because: kasan: bad access detected [ 115.109942][ T4198] page_owner tracks the page as allocated [ 115.115655][ T4198] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 144, ts 68692768046, free_ts 21721134130 [ 115.132604][ T4198] get_page_from_freelist+0x1b77/0x1c60 [ 115.138173][ T4198] __alloc_pages+0x1e1/0x470 [ 115.142769][ T4198] new_slab+0xc0/0x4b0 [ 115.146850][ T4198] ___slab_alloc+0x81e/0xdf0 [ 115.151442][ T4198] __kmalloc+0x1cd/0x330 [ 115.155690][ T4198] ieee802_11_parse_elems_crc+0xab/0x10c0 [ 115.161435][ T4198] ieee80211_ibss_rx_queued_mgmt+0x369/0x29c0 [ 115.167509][ T4198] ieee80211_iface_work+0x70e/0xc60 [ 115.172715][ T4198] process_one_work+0x863/0x1000 [ 115.177656][ T4198] worker_thread+0xaa8/0x12a0 [ 115.182336][ T4198] kthread+0x436/0x520 [ 115.186406][ T4198] ret_from_fork+0x1f/0x30 [ 115.190982][ T4198] page last free stack trace: [ 115.196109][ T4198] free_unref_page_prepare+0x637/0x6c0 [ 115.201588][ T4198] free_unref_page+0x94/0x280 [ 115.206273][ T4198] free_contig_range+0x96/0xf0 [ 115.211054][ T4198] destroy_args+0x100/0xa20 [ 115.215622][ T4198] debug_vm_pgtable+0x318/0x370 [ 115.220497][ T4198] do_one_initcall+0x1ee/0x680 [ 115.225268][ T4198] do_initcall_level+0x137/0x1f0 [ 115.230220][ T4198] do_initcalls+0x4b/0x90 [ 115.234553][ T4198] kernel_init_freeable+0x3ce/0x560 [ 115.239757][ T4198] kernel_init+0x19/0x1b0 [ 115.244095][ T4198] ret_from_fork+0x1f/0x30 [ 115.248519][ T4198] [ 115.250855][ T4198] Memory state around the buggy address: [ 115.256487][ T4198] ffff88805fbba300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 115.264554][ T4198] ffff88805fbba380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 115.272618][ T4198] >ffff88805fbba400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 115.280680][ T4198] ^ [ 115.285009][ T4198] ffff88805fbba480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 115.293177][ T4198] ffff88805fbba500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 115.301266][ T4198] ================================================================== [ 115.309332][ T4198] Disabling lock debugging due to kernel taint [ 115.316862][ T21] r8152-cfgselector 5-1: can't set config #0, error -71 [ 115.332088][ T4198] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 115.339338][ T4198] CPU: 0 PID: 4198 Comm: kworker/u5:6 Tainted: G B syzkaller #0 [ 115.348629][ T4198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 115.358695][ T4198] Workqueue: hci4 hci_rx_work [ 115.363391][ T4198] Call Trace: [ 115.366705][ T4198] [ 115.369640][ T4198] dump_stack_lvl+0x168/0x230 [ 115.374536][ T4198] ? show_regs_print_info+0x20/0x20 [ 115.379738][ T4198] ? load_image+0x3b0/0x3b0 [ 115.384253][ T4198] panic+0x2c9/0x7f0 [ 115.388169][ T4198] ? bpf_jit_dump+0xd0/0xd0 [ 115.392706][ T4198] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 115.398629][ T4198] ? _raw_spin_unlock+0x40/0x40 [ 115.403483][ T4198] ? hci_le_meta_evt+0x12c0/0x3b80 [ 115.408597][ T4198] check_panic_on_warn+0x80/0xa0 [ 115.413543][ T4198] ? hci_le_meta_evt+0x12c0/0x3b80 [ 115.418654][ T4198] end_report+0x6d/0xf0 [ 115.422814][ T4198] kasan_report+0x102/0x130 [ 115.427322][ T4198] ? hci_le_meta_evt+0x12c0/0x3b80 [ 115.432438][ T4198] hci_le_meta_evt+0x12c0/0x3b80 [ 115.437379][ T4198] ? hci_event_packet+0x2c0/0x12f0 [ 115.442514][ T4198] ? hci_remote_host_features_evt+0x280/0x280 [ 115.448601][ T4198] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 115.454252][ T4198] ? mark_lock+0x94/0x320 [ 115.458600][ T4198] ? mutex_unlock+0x10/0x10 [ 115.463234][ T4198] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 115.469237][ T4198] ? lock_chain_count+0x20/0x20 [ 115.474191][ T4198] ? __rwlock_init+0x140/0x140 [ 115.478971][ T4198] hci_event_packet+0xe05/0x12f0 [ 115.484020][ T4198] ? lockdep_hardirqs_on+0x94/0x140 [ 115.489664][ T4198] ? rcu_lock_release+0x20/0x20 [ 115.494526][ T4198] ? hci_send_to_monitor+0x9c/0x4a0 [ 115.499767][ T4198] hci_rx_work+0x255/0xa10 [ 115.504203][ T4198] process_one_work+0x863/0x1000 [ 115.509153][ T4198] ? worker_detach_from_pool+0x240/0x240 [ 115.514793][ T4198] ? lockdep_hardirqs_off+0x70/0x100 [ 115.520085][ T4198] ? _raw_spin_lock_irq+0xab/0xe0 [ 115.525117][ T4198] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 115.530523][ T4198] ? wq_worker_running+0x97/0x170 [ 115.535553][ T4198] worker_thread+0xaa8/0x12a0 [ 115.540248][ T4198] kthread+0x436/0x520 [ 115.544328][ T4198] ? rcu_lock_release+0x20/0x20 [ 115.549209][ T4198] ? kthread_blkcg+0xd0/0xd0 [ 115.553804][ T4198] ret_from_fork+0x1f/0x30 [ 115.558232][ T4198] [ 115.561365][ T4198] Kernel Offset: disabled [ 115.565700][ T4198] Rebooting in 86400 seconds..