last executing test programs: 4.022123693s ago: executing program 2 (id=196): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000002480)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000000)='.\x00', 0x18424bc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x100, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)) 3.396221652s ago: executing program 4 (id=202): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)='\\', 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000200)) 2.644196963s ago: executing program 4 (id=208): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) 2.303298917s ago: executing program 4 (id=210): r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x600) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x70bd2b, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 2.253043558s ago: executing program 3 (id=212): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40441, 0x106) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) fallocate(r0, 0x8, 0x4000, 0x10000) 2.024457291s ago: executing program 4 (id=214): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000080)='>', 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000200)=0x3b) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x58) 1.975248862s ago: executing program 3 (id=215): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x1c, r1, 0x64fce33ba3dcdc5d, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24008001}, 0x14) 1.850727724s ago: executing program 1 (id=217): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x268, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x254, 0x1, [@m_ife={0xe8, 0xb, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x8, 0x2, 0x9, 0x5}, 0x1}}, @TCA_IFE_METALST={0x4}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x91, 0x6, "ea24464decc1b2772ce0e9d802b5374a8d6638c9f5d62d73097ad3660799f8b78cf33d02da7d6acb22261a61dc99ee70038b350979cbf8e56f4d7cee654dcd1431a97a46709cf0dbc14a82bf5671ba09e008e09a7901ffe209071ef86a70688c0f6abfa8f702f0b00d21384a7ea430e4f04c8939aecfdf8df7de53b09b77f410a11e18106318fb58cb28e6978e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0xc8, 0x14, 0x0, 0x0, {{0x9}, {0x4}, {0x99, 0x6, "576458eea52fd27eec92e713a172e757e1f62fe8475fa8817d9bd39d398251801f64d9b8e312b47b111ff094a2f452e1fd749b169123625c664a63e06baa8402c6b5fe34fbffaf329e5589fe1d00f704d8d13b0100000081ec7a1e9e21427be570631961812505684e260d3f73821a372961e6acf9f73f3ab3a6d19010c501877fc1573ff3fe388a502702c7e7d4eb99cd479f52be"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0xa0, 0x9, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x4, 0x3, 0x2, 0x4}}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x408, 0x6, 0x5, 0x5, 0x69e}}, @TCA_ACT_BPF_FD={0x8}]}, {0x25, 0x6, "ffff88b2fa7e2ad0ddd1d3cdaa9b380000006034293d9d0e7476f9878bc66aa46f"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x9}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000880)=""/191, 0x41}, 0x2ad6}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.821002644s ago: executing program 2 (id=218): move_pages(0x0, 0x2, &(0x7f00000000c0)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil], 0x0, 0x0, 0x0) r0 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0, 0x29}, 0x8}, 0x0) 1.719627056s ago: executing program 3 (id=219): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x811}, 0x20000054) 1.565298588s ago: executing program 1 (id=220): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0xffffffffffffff21, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "a2a88faa7ec665a571a9ad3d1f9512e3c591df4a4554c6c2e2cc6cb4d9aee4579684743ad4888f1522a47ddaff3d4f9450d288e8559bc4f795aa0d1bc74d926038adb808cba6e90535b2eb8ba3e8ff927207d17a86b10d604e77a459df67e7f0c842d463ca5977b7e2eb55fbb9881d15633717817c735da52a1da7d64bb22e58550d8ee20883e41ec2f119a6a6364d68900c1cce4a3b3225a9ce9e1e00b444e9e7bcd10e1dec202ce7786aa7cf10d4dd6bbcee586d7903a6239ff90b49cd7fddb0c67ddab326cdb2d0fa48a783f691be9ebaa1243b21afd04a372650aa7eb46a2675cc67ae12d3b99c9acb4d9fb7c78081d269b443affd86eededd4867311221"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x4}}, @TCA_CHOKE_STAB={0x104, 0x2, "554b956aa3fcfbc4a187baf0437163b5d33108db016465f92a93480d2c246d90f03741da6ee916f7c9917dbd81da67d6150151679559af8402b932745d19fbfbd679c133c4714565f91cd05790d990818bac85598b6a844cb2c2d277aaca9a88ee0e6a834ba02b4e549f11fb13e9fe33730c55997f2d3b7e6469210db81587fc522295f49a78f4e08ddfb01172b12a19b303a0c47fa3500cdc3e6725a79dcd3731c37083c3bbe73c43e7e2ea82c72986a1499c677c565ea1cfc874e7e978e4ebe8d338f0b37807d40333ee570133982998623ec809826f1009856a9d9d8e839c65d3ead78c6b3cb8f7beee8e59f19de93d06628a2cdfa4333d96882b96c36cc3"}]}}]}, 0x3a8}}, 0x0) 1.521809368s ago: executing program 0 (id=221): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001002dbd700000000000fe8000000000000000000000000000aafe8000000003000000000000000000aa00000000000000000a00303000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000008feffffffff7f40000200000000000008000000000000000001"], 0xb8}}, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040) 1.477927949s ago: executing program 4 (id=222): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250e000000340041090800080006000000060002004e200000080007000800000005000d000100000008000600090000000800080009"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 1.41824384s ago: executing program 3 (id=223): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x8, 0x81, 0xffffffff}) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x20000000) 1.215641702s ago: executing program 2 (id=224): r0 = socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0xc, 0x0, 0x4], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x800, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 1.152851014s ago: executing program 3 (id=225): mmap(&(0x7f00003d3000/0x4000)=nil, 0x4000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") 1.125587164s ago: executing program 4 (id=226): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x42, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, "", [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x26}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xfd, 0xf, 0xbe}}}}}]}}]}}, 0x0) mmap(&(0x7f0000614000/0x2000)=nil, 0x2000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="4021260000002601f70ba381030000000000000000cb4fdca0560fb3dcbbe357c6476a3e0d54f36550b1d43ee44fbf6fc9"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.109622304s ago: executing program 1 (id=227): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000240), 0x401, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.083151895s ago: executing program 0 (id=228): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xe, 0x20, 0x66, 0x0, 0x3, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x4e1f, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x3, 0x100, @void}}}}}}}, 0x0) 902.578857ms ago: executing program 2 (id=229): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) 866.370148ms ago: executing program 1 (id=230): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100080, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000740), 0x8202, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000080)=0x1) 846.637868ms ago: executing program 0 (id=231): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r0, 0x4, 0x1) getdents64(r0, 0xffffffffffffffff, 0x43) 690.7421ms ago: executing program 1 (id=232): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b00), 0x0, 0x5, 0x0, 0x0, r1}) 641.74513ms ago: executing program 2 (id=233): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0xfdef, 0x0) write$binfmt_register(r2, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, '\\x\'\xcd\x98\xfb\x87\xc8-vFJ\x94\x99)++\x00\x00+\xb1!\xf6\xafZS\xf3\xfe\x81\xdchW\x9b\x0f\t1\x9b&\xcb\xd6[8E\xe9\xcd\xff\x7f\x00\x00\x00\x00\x00\x00\xa7\xd9\x98\x12\xc7\xe7\xae\xb9@\x92>%(T\xf6\xe6m\f\x8c\xcd\xcf\x9c', 0x3a, ')\v\b]+!', 0x3a, './file0'}, 0xfdef) 630.467581ms ago: executing program 0 (id=234): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x4, {{@in6=@private1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xff}}, [@migrate={0x50, 0x11, [{@in6=@private1, @in=@private=0xa010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@rand_addr=0x6, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}}, 0x0) 503.985152ms ago: executing program 1 (id=235): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x181242, 0x2) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000200), &(0x7f0000000340)={0x0, 0xfb, 0x25, 0x5, 0x20, "b48d0bf0e352df6b766f8540b4bdecd6", "f9d05a94d168559e46096dd47cb84880"}, 0x25, 0x0) 422.358714ms ago: executing program 0 (id=236): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.bfq.dequeue\x00', 0x0, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/113, 0x71}], 0x1, 0x0, 0x0) 177.545967ms ago: executing program 2 (id=237): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)=@known='security.apparmor\x00', 0x0, 0x0, 0x1) lgetxattr(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)=@known='security.apparmor\x00', 0x0, 0x0) 77.176698ms ago: executing program 0 (id=238): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) sendto$l2tp(r0, &(0x7f00000002c0)="e5786a0d000000000000003b", 0xc, 0x400c0c1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, 0x2004}, 0x10) recvfrom$l2tp(r0, 0x0, 0x0, 0x20, 0x0, 0x0) 0s ago: executing program 3 (id=239): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000001e00)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x5, @remote, 0x7}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000600)="13", 0x1}], 0x1}}], 0x1, 0x4) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0xffff}, &(0x7f00000001c0)=0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.211' (ED25519) to the list of known hosts. [ 78.461690][ T4262] cgroup: Unknown subsys name 'net' [ 78.605012][ T4262] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.168594][ T4262] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 81.663931][ T4280] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.674479][ T4280] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.685502][ T4281] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.693183][ T4281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.701281][ T4281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.711033][ T4285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.720191][ T4285] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.727565][ T4285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.735436][ T4285] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.744699][ T4285] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.751939][ T4285] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.760542][ T4285] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.767946][ T4285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.775380][ T4287] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.785582][ T4287] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.793086][ T4287] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.800589][ T4287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.808350][ T4287] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.817145][ T4287] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.825123][ T4287] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.834074][ T4287] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.841995][ T4287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.850063][ T4287] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.860069][ T4288] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.870505][ T4277] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.878497][ T4277] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.909512][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.930635][ T4288] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.954997][ T4281] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 81.967568][ T4281] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.495286][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 82.516014][ T4289] chnl_net:caif_netlink_parms(): no params data found [ 82.532006][ T4283] chnl_net:caif_netlink_parms(): no params data found [ 82.581333][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 82.626904][ T4282] chnl_net:caif_netlink_parms(): no params data found [ 82.731144][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.739306][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.748748][ T4275] device bridge_slave_0 entered promiscuous mode [ 82.792303][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.799708][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.808110][ T4275] device bridge_slave_1 entered promiscuous mode [ 82.869686][ T4289] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.876943][ T4289] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.885780][ T4289] device bridge_slave_0 entered promiscuous mode [ 82.894822][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.904501][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.914690][ T4283] device bridge_slave_0 entered promiscuous mode [ 82.931531][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.938871][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.946942][ T4283] device bridge_slave_1 entered promiscuous mode [ 82.963921][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.973578][ T4289] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.981293][ T4289] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.991786][ T4289] device bridge_slave_1 entered promiscuous mode [ 82.999685][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.006840][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.015410][ T4276] device bridge_slave_0 entered promiscuous mode [ 83.049037][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.076004][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.083565][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.092081][ T4276] device bridge_slave_1 entered promiscuous mode [ 83.101792][ T4283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.111487][ T4282] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.120018][ T4282] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.128599][ T4282] device bridge_slave_0 entered promiscuous mode [ 83.161112][ T4283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.171329][ T4282] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.182842][ T4282] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.190947][ T4282] device bridge_slave_1 entered promiscuous mode [ 83.205114][ T4289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.219120][ T4275] team0: Port device team_slave_0 added [ 83.258025][ T4289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.269665][ T4275] team0: Port device team_slave_1 added [ 83.277848][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.294411][ T4283] team0: Port device team_slave_0 added [ 83.335452][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.350500][ T4283] team0: Port device team_slave_1 added [ 83.358290][ T4282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.383613][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.390865][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.417483][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.453671][ T4282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.465622][ T4289] team0: Port device team_slave_0 added [ 83.475443][ T4289] team0: Port device team_slave_1 added [ 83.482107][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.489641][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.516619][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.546491][ T4276] team0: Port device team_slave_0 added [ 83.575624][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.583084][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.610262][ T4283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.624675][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.632058][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.669455][ T4283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.682731][ T4276] team0: Port device team_slave_1 added [ 83.699359][ T4289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.706483][ T4289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.733867][ T4289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.751526][ T4282] team0: Port device team_slave_0 added [ 83.770638][ T4289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.777965][ T4289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.804577][ T4289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.832153][ T4282] team0: Port device team_slave_1 added [ 83.854337][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.862524][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.889928][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.906478][ T4275] device hsr_slave_0 entered promiscuous mode [ 83.914300][ T4275] device hsr_slave_1 entered promiscuous mode [ 83.942256][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.949321][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.972059][ T4291] Bluetooth: hci3: command 0x0409 tx timeout [ 83.977049][ T4282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.983498][ T4281] Bluetooth: hci1: command 0x0409 tx timeout [ 83.997267][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.006282][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.033648][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.047327][ T4281] Bluetooth: hci4: command 0x0409 tx timeout [ 84.054074][ T4281] Bluetooth: hci2: command 0x0409 tx timeout [ 84.067226][ T4291] Bluetooth: hci0: command 0x0409 tx timeout [ 84.085758][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.093583][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.121450][ T4282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.188661][ T4289] device hsr_slave_0 entered promiscuous mode [ 84.196399][ T4289] device hsr_slave_1 entered promiscuous mode [ 84.203710][ T4289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.213337][ T4289] Cannot create hsr debugfs directory [ 84.223391][ T4283] device hsr_slave_0 entered promiscuous mode [ 84.231097][ T4283] device hsr_slave_1 entered promiscuous mode [ 84.238210][ T4283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.246022][ T4283] Cannot create hsr debugfs directory [ 84.286319][ T4276] device hsr_slave_0 entered promiscuous mode [ 84.293537][ T4276] device hsr_slave_1 entered promiscuous mode [ 84.300367][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.308183][ T4276] Cannot create hsr debugfs directory [ 84.366451][ T4282] device hsr_slave_0 entered promiscuous mode [ 84.373621][ T4282] device hsr_slave_1 entered promiscuous mode [ 84.381352][ T4282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.389141][ T4282] Cannot create hsr debugfs directory [ 84.789356][ T4275] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.801464][ T4275] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.823684][ T4275] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.840339][ T4275] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.895006][ T4276] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.906729][ T4276] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.931589][ T4276] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.944401][ T4276] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.016812][ T4283] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.031431][ T4283] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.045497][ T4283] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.067828][ T4283] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.155427][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.163582][ T4289] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.204872][ T4289] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.215136][ T4289] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.260816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.274835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.286375][ T4289] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.299397][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.339371][ T4282] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.351172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.363737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.373636][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.381095][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.402121][ T4282] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.413880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.446980][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.454943][ T4282] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.476208][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.485968][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.495282][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.502524][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.528758][ T4282] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.543255][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.555545][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.575971][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.603328][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.612331][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.621828][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.632280][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.642082][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.655098][ T4283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.690300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.704212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.714666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.723931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.740553][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.747774][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.756273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.765648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.775712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.784576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.804996][ T4275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.818532][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.839330][ T4283] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.849593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.870250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.887961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.907539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.916704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.926529][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.933860][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.945638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.989723][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.047300][ T4291] Bluetooth: hci1: command 0x041b tx timeout [ 86.048505][ T4281] Bluetooth: hci3: command 0x041b tx timeout [ 86.073604][ T4289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.090997][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.100793][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.111387][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.118588][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.127451][ T4285] Bluetooth: hci0: command 0x041b tx timeout [ 86.129531][ T4281] Bluetooth: hci2: command 0x041b tx timeout [ 86.133712][ T4285] Bluetooth: hci4: command 0x041b tx timeout [ 86.150874][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.160620][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.169778][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.180550][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.190051][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.199686][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.210012][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.219732][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.229019][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.236171][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.244238][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.253907][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.262461][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.278112][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.312175][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.321386][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.333696][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.352912][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.373824][ T4289] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.390572][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.410952][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.421774][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.430171][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.438735][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.453965][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.496132][ T4282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.524101][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.542138][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.554885][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.562351][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.580192][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.593837][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.605850][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.620583][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.633789][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.641108][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.656714][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.672182][ T4283] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.693185][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.728943][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.745080][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.754704][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.772377][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.781156][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.789652][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.833730][ T4282] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.863794][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.875331][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.889548][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.911947][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.928278][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.962673][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.988176][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.995376][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.070508][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.099434][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.115105][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.124045][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.134344][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.144590][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.153648][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.173177][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.200735][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.228352][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.235540][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.293382][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.333652][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.358201][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.391637][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.429611][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.473900][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.497711][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.505363][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.537974][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.568104][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.649033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.659282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.688673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.707874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.718347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.742171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.775141][ T4275] device veth0_vlan entered promiscuous mode [ 87.810254][ T4282] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.823893][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.836107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.852714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.861995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.871153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.880526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.903415][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.943141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.953122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.970102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.984434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.992589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.008059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.038420][ T4275] device veth1_vlan entered promiscuous mode [ 88.067642][ T4276] device veth0_vlan entered promiscuous mode [ 88.089249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.103292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.115740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.128640][ T4285] Bluetooth: hci3: command 0x040f tx timeout [ 88.134779][ T4285] Bluetooth: hci1: command 0x040f tx timeout [ 88.167821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.176138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.207642][ T4285] Bluetooth: hci2: command 0x040f tx timeout [ 88.213774][ T4285] Bluetooth: hci0: command 0x040f tx timeout [ 88.220474][ T4291] Bluetooth: hci4: command 0x040f tx timeout [ 88.242072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.261326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.283974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.317595][ T4276] device veth1_vlan entered promiscuous mode [ 88.375562][ T4275] device veth0_macvtap entered promiscuous mode [ 88.396751][ T4275] device veth1_macvtap entered promiscuous mode [ 88.405087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.420924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.433262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.446096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.462294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.473433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.529815][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.539669][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.550872][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.560873][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.571218][ T4283] device veth0_vlan entered promiscuous mode [ 88.589623][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.598676][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.622067][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.654111][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.663846][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.674233][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.684215][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.696398][ T4276] device veth0_macvtap entered promiscuous mode [ 88.707238][ T4283] device veth1_vlan entered promiscuous mode [ 88.720349][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.737023][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.752443][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.766454][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.780216][ T4276] device veth1_macvtap entered promiscuous mode [ 88.795234][ T4289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.812551][ T4275] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.837213][ T4275] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.846087][ T4275] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.893147][ T4275] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.991279][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.010412][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.023997][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.054349][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.065232][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.079550][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.088721][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.124023][ T4282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.142898][ T4283] device veth0_macvtap entered promiscuous mode [ 89.153618][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.168712][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.181151][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.196425][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.198638][ T4301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.216641][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.226635][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.226938][ T4301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.239809][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.270692][ T4276] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.288604][ T4276] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.299011][ T4276] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.308554][ T4276] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.333074][ T4283] device veth1_macvtap entered promiscuous mode [ 89.345118][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.355186][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.364643][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.401915][ T4303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.417477][ T4303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.436117][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.459520][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.469922][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.485832][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.498640][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.508998][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.519844][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.531966][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.567918][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.580181][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.600295][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.625532][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.636926][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.648091][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.668125][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.699517][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.718703][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.730253][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.740706][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.756367][ T4283] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.782751][ T4283] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.792067][ T4283] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.801269][ T4283] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.819028][ T4282] device veth0_vlan entered promiscuous mode [ 89.839390][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.865985][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.994484][ T4282] device veth1_vlan entered promiscuous mode [ 90.026524][ T4301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.057669][ T4301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.082904][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.107825][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.119965][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.192022][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.207944][ T4285] Bluetooth: hci1: command 0x0419 tx timeout [ 90.210354][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.214972][ T4285] Bluetooth: hci3: command 0x0419 tx timeout [ 90.244898][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.254029][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.274799][ T4289] device veth0_vlan entered promiscuous mode [ 90.287749][ T4285] Bluetooth: hci2: command 0x0419 tx timeout [ 90.287769][ T4291] Bluetooth: hci0: command 0x0419 tx timeout [ 90.293929][ T4285] Bluetooth: hci4: command 0x0419 tx timeout [ 90.310833][ T4352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.324962][ T4282] device veth0_macvtap entered promiscuous mode [ 90.333486][ T4352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.351927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.369305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.384719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.394229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.418462][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.426464][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.464808][ T4289] device veth1_vlan entered promiscuous mode [ 90.484479][ T4282] device veth1_macvtap entered promiscuous mode [ 90.493871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.505450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.514546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.586978][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.588293][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.615055][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.615915][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.638676][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.653358][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.666149][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.682778][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.696187][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.715234][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.728892][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.740259][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.751134][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.761393][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.802515][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.838941][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.855300][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.873239][ T4368] loop0: detected capacity change from 0 to 1024 [ 90.887906][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.902299][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.912681][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.952582][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.965496][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.980975][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.993141][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.038805][ T4289] device veth0_macvtap entered promiscuous mode [ 91.063744][ T4282] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.085906][ C1] operation not supported error, dev loop0, sector 32 op 0x9:(WRITE_ZEROES) flags 0x8000800 phys_seg 0 prio class 2 [ 91.099324][ T4282] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.133309][ T4282] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.147609][ T4282] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.188557][ T4289] device veth1_macvtap entered promiscuous mode [ 91.242984][ T4365] loop1: detected capacity change from 0 to 40427 [ 91.302399][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.362183][ T4365] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 91.387161][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.398611][ T4365] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 91.432517][ T4365] F2FS-fs (loop1): invalid crc value [ 91.432536][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.459516][ T4365] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 91.476950][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.519622][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.563592][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.642946][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.668586][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.699031][ T4289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.767247][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 91.778091][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.789934][ T4365] F2FS-fs (loop1): Start checkpoint disabled! [ 91.831360][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.864117][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.883059][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.905887][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.929647][ T4365] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 91.942643][ T4365] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 91.950910][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.969428][ T27] cfg80211: failed to load regulatory.db [ 92.002087][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.035085][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.065354][ T26] audit: type=1800 audit(1782368518.137:2): pid=4365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 92.076057][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.141908][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.184962][ T4289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.197221][ T4344] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 92.208407][ T4352] kworker/u4:7: attempt to access beyond end of device [ 92.208407][ T4352] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 92.239403][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.265139][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.305984][ T4352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.315429][ T4289] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.345792][ T4289] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.348477][ T4352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.358742][ T4289] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.373751][ T4289] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.421170][ T4344] usb 3-1: Using ep0 maxpacket: 32 [ 92.444727][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.453386][ T4344] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 92.482895][ T4344] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 92.503492][ T4344] usb 3-1: config 0 interface 0 has no altsetting 0 [ 92.540450][ T4344] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 92.554003][ T4344] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.570228][ T4344] usb 3-1: Product: syz [ 92.574592][ T4344] usb 3-1: Manufacturer: syz [ 92.579749][ T4344] usb 3-1: SerialNumber: syz [ 92.590899][ T4344] usb 3-1: config 0 descriptor?? [ 92.635700][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.671343][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.703612][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.756447][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.787372][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.795141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.917515][ T4301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.931472][ T4301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.952436][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.022918][ T4344] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 93.061150][ T4387] loop3: detected capacity change from 0 to 256 [ 93.085708][ T4386] loop0: detected capacity change from 0 to 1024 [ 93.175815][ T4387] ======================================================= [ 93.175815][ T4387] WARNING: The mand mount option has been deprecated and [ 93.175815][ T4387] and is ignored by this kernel. Remove the mand [ 93.175815][ T4387] option from the mount to silence this warning. [ 93.175815][ T4387] ======================================================= [ 93.467266][ T27] usb 3-1: USB disconnect, device number 2 [ 93.776351][ T4401] device macvlan1 entered promiscuous mode [ 93.791638][ T4401] device macvlan1 left promiscuous mode [ 94.055160][ T4409] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.217628][ T4413] netlink: 44 bytes leftover after parsing attributes in process `syz.0.20'. [ 94.257462][ T4413] netlink: 43 bytes leftover after parsing attributes in process `syz.0.20'. [ 94.266673][ T4413] netlink: 'syz.0.20': attribute type 6 has an invalid length. [ 94.291389][ T4420] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 94.347139][ T4413] netlink: 'syz.0.20': attribute type 5 has an invalid length. [ 94.354997][ T4413] netlink: 43 bytes leftover after parsing attributes in process `syz.0.20'. [ 94.558575][ T4291] Bluetooth: hci4: hcon ffff88801fbfa000 sent 1 < count 511 [ 95.125987][ T4443] loop4: detected capacity change from 0 to 256 [ 95.167443][ T3599] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 95.387368][ T3599] usb 4-1: Using ep0 maxpacket: 32 [ 95.395359][ T3599] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 95.497167][ T3599] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.589653][ T3599] usb 4-1: config 0 descriptor?? [ 95.797101][ C1] sched: RT throttling activated [ 95.816188][ T3599] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 95.898603][ T4432] loop1: detected capacity change from 0 to 131072 [ 95.906371][ T3599] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 95.972137][ T3599] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 96.004025][ T4432] XFS (loop1): Mounting V5 Filesystem [ 96.017447][ T3599] usb 4-1: media controller created [ 96.041083][ T3599] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 96.093581][ T3599] az6027: usb out operation failed. (-71) [ 96.124590][ T3599] az6027: usb out operation failed. (-71) [ 96.174851][ T4432] XFS (loop1): Starting recovery (logdev: internal) [ 96.207130][ T3599] stb0899_attach: Driver disabled by Kconfig [ 96.213379][ T3599] az6027: no front-end attached [ 96.213379][ T3599] [ 96.310917][ T3599] az6027: usb out operation failed. (-71) [ 96.352444][ T4470] loop2: detected capacity change from 0 to 256 [ 96.358730][ T3599] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 96.367032][ T3599] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 96.479144][ T3599] dvb-usb: schedule remote query interval to 400 msecs. [ 96.486285][ T3599] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 96.570831][ T4432] XFS (loop1): Ending recovery (logdev: internal) [ 96.584050][ T4432] XFS (loop1): Unmounting Filesystem [ 96.647429][ T3599] usb 4-1: USB disconnect, device number 2 [ 96.832798][ T4474] loop3: detected capacity change from 0 to 512 [ 96.931788][ T4474] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 97.007506][ T4474] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 97.046857][ T4474] EXT4-fs (loop3): orphan file too big: 4294967295 [ 97.066123][ T4474] EXT4-fs (loop3): mount failed [ 97.119996][ T3599] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 97.423153][ T4464] loop0: detected capacity change from 0 to 32768 [ 97.504738][ T4464] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.36 (4464) [ 97.637775][ T4464] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 97.685232][ T4464] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 97.747430][ T4464] BTRFS info (device loop0): using free space tree [ 98.056025][ T4513] capability: warning: `syz.3.47' uses deprecated v2 capabilities in a way that may be insecure [ 98.147273][ T4464] BTRFS info (device loop0): enabling ssd optimizations [ 98.335700][ T4522] loop1: detected capacity change from 0 to 64 [ 98.371899][ T4523] Falling back ldisc for ttyS3. [ 99.035623][ T4276] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 100.200745][ T4527] loop3: detected capacity change from 0 to 32768 [ 100.307840][ T4565] netlink: 332 bytes leftover after parsing attributes in process `syz.1.64'. [ 100.322929][ T4527] XFS (loop3): Mounting V5 Filesystem [ 100.397878][ T4565] netlink: 'syz.1.64': attribute type 9 has an invalid length. [ 100.513276][ T4542] loop2: detected capacity change from 0 to 40427 [ 100.521303][ T4527] XFS (loop3): Ending clean mount [ 100.590642][ T4542] F2FS-fs (loop2): invalid crc value [ 100.612289][ T4527] XFS (loop3): Quotacheck needed: Please wait. [ 100.628869][ T4542] F2FS-fs (loop2): Found nat_bits in checkpoint [ 100.740620][ T4527] XFS (loop3): Quotacheck: Done. [ 100.805445][ T4577] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 100.849895][ T4542] F2FS-fs (loop2): Start checkpoint disabled! [ 100.860869][ T4527] capability: warning: `syz.3.53' uses 32-bit capabilities (legacy support in use) [ 100.876368][ T4577] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.885704][ T4577] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.924347][ T4542] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 100.964192][ T4581] loop0: detected capacity change from 0 to 1024 [ 101.112941][ T4578] hfsplus: invalid extended attribute record [ 101.198455][ T4282] XFS (loop3): Unmounting Filesystem [ 101.277044][ T65] hfsplus: b-tree write err: -5, ino 25 [ 101.290591][ T65] hfsplus: b-tree write err: -5, ino 4 [ 101.296415][ T65] hfsplus: b-tree write err: -5, ino 2 [ 101.484740][ T4585] device bridge0 entered promiscuous mode [ 101.547626][ T4585] device macvlan2 entered promiscuous mode [ 101.589001][ T4589] loop8: detected capacity change from 0 to 7 [ 101.599400][ T4378] Dev loop8: unable to read RDB block 7 [ 101.605265][ T4378] loop8: unable to read partition table [ 101.647374][ T4378] loop8: partition table beyond EOD, truncated [ 101.673300][ T4589] Dev loop8: unable to read RDB block 7 [ 101.702382][ T4589] loop8: unable to read partition table [ 101.747466][ T4589] loop8: partition table beyond EOD, truncated [ 101.786790][ T4589] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 102.369256][ T4610] loop0: detected capacity change from 0 to 1024 [ 102.447355][ T4291] Bluetooth: hci4: command 0x2016 tx timeout [ 102.567872][ T4546] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 102.706349][ T4621] loop1: detected capacity change from 0 to 512 [ 102.736379][ T4621] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 102.767504][ T4546] usb 4-1: Using ep0 maxpacket: 16 [ 102.775203][ T4546] usb 4-1: config 0 interface 0 has no altsetting 0 [ 102.801664][ T4546] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 102.822439][ T4621] EXT4-fs (loop1): 1 truncate cleaned up [ 102.831064][ T4621] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 102.863281][ T4546] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.927308][ T4547] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 102.939355][ T4546] usb 4-1: config 0 descriptor?? [ 103.070008][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 103.166876][ T4547] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 103.199787][ T4547] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.222117][ T4547] usb 1-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 103.235147][ T4547] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.252622][ T4547] usb 1-1: config 0 descriptor?? [ 103.286167][ T4629] netlink: 156 bytes leftover after parsing attributes in process `syz.2.88'. [ 103.399471][ T4546] uclogic 0003:28BD:0071.0001: interface is invalid, ignoring [ 103.631855][ T4369] usb 4-1: USB disconnect, device number 3 [ 103.669890][ T4636] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 103.681695][ T4547] hid (null): report_id 51781 is invalid [ 103.728211][ T4547] razer 0003:1532:010D.0002: unknown main item tag 0x0 [ 103.747974][ T4547] razer 0003:1532:010D.0002: unknown main item tag 0x0 [ 103.755051][ T4547] razer 0003:1532:010D.0002: unknown main item tag 0x0 [ 103.768684][ T4639] Zero length message leads to an empty skb [ 103.773217][ T4547] razer 0003:1532:010D.0002: unknown main item tag 0x0 [ 103.804524][ T4547] razer 0003:1532:010D.0002: unknown main item tag 0x0 [ 103.814757][ T4547] razer 0003:1532:010D.0002: unknown main item tag 0x0 [ 103.833036][ T4547] razer 0003:1532:010D.0002: report_id 51781 is invalid [ 103.861421][ T4547] razer 0003:1532:010D.0002: item 0 2 1 8 parsing failed [ 103.888058][ T4547] razer: probe of 0003:1532:010D.0002 failed with error -22 [ 103.925097][ T4547] usb 1-1: USB disconnect, device number 2 [ 104.114694][ T4647] program syz.1.97 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.329587][ T4651] Illegal XDP return value 4294967274 on prog (id 10) dev N/A, expect packet loss! [ 104.421743][ T4653] loop3: detected capacity change from 0 to 2048 [ 104.517942][ T4653] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 104.823790][ T4643] loop2: detected capacity change from 0 to 32768 [ 104.882765][ T4643] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.95 (4643) [ 104.974521][ T4643] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 105.020155][ T4643] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 105.060577][ T4643] BTRFS info (device loop2): enabling disk space caching [ 105.097233][ T4643] BTRFS info (device loop2): force clearing of disk cache [ 105.137713][ T4643] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 105.201557][ T4643] BTRFS info (device loop2): use zstd compression, level 3 [ 105.229271][ T4643] BTRFS info (device loop2): disk space caching is enabled [ 105.576844][ T4664] loop0: detected capacity change from 0 to 32768 [ 105.583588][ T4643] BTRFS info (device loop2): enabling ssd optimizations [ 105.629991][ T4643] BTRFS info (device loop2): rebuilding free space tree [ 105.685531][ T4643] BTRFS info (device loop2): disabling free space tree [ 105.700642][ T4643] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 105.715094][ T26] audit: type=1800 audit(1782368531.797:3): pid=4664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.105" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 105.741539][ T4643] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 106.450768][ T4283] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 106.557995][ T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 106.749694][ T27] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 106.757432][ T4546] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 106.767395][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.778420][ T27] usb 2-1: config 0 descriptor?? [ 106.787429][ T27] cp210x 2-1:0.0: cp210x converter detected [ 106.977198][ T4546] usb 4-1: Using ep0 maxpacket: 8 [ 106.997280][ T4546] usb 4-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 107.009135][ T4718] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 107.046615][ T4546] usb 4-1: config 0 interface 0 has no altsetting 0 [ 107.054161][ T4546] usb 4-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00 [ 107.071927][ T4546] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.092180][ T4546] usb 4-1: config 0 descriptor?? [ 107.198912][ T27] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 107.207230][ T4718] usb 5-1: Using ep0 maxpacket: 8 [ 107.219168][ T4718] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 107.256508][ T4718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.274105][ T27] usb 2-1: cp210x converter now attached to ttyUSB0 [ 107.298725][ T4718] usb 5-1: Product: syz [ 107.307866][ T4726] loop2: detected capacity change from 0 to 512 [ 107.322337][ T4718] usb 5-1: Manufacturer: syz [ 107.334535][ T4718] usb 5-1: SerialNumber: syz [ 107.345315][ T4718] usb 5-1: config 0 descriptor?? [ 107.381966][ T4726] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 107.455401][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 107.465960][ T27] usb 2-1: USB disconnect, device number 2 [ 107.522085][ T27] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 107.530445][ T4546] wacom 0003:056A:00E3.0003: unknown main item tag 0x7 [ 107.558277][ T4546] wacom 0003:056A:00E3.0003: unknown main item tag 0x0 [ 107.565300][ T4546] wacom 0003:056A:00E3.0003: unknown main item tag 0x1 [ 107.593459][ T4718] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 107.603264][ T4546] wacom 0003:056A:00E3.0003: unknown main item tag 0xd [ 107.610213][ T27] cp210x 2-1:0.0: device disconnected [ 107.674522][ T4546] wacom 0003:056A:00E3.0003: hidraw0: USB HID v0.77 Device [HID 056a:00e3] on usb-dummy_hcd.3-1/input0 [ 107.781498][ T4721] usb 4-1: USB disconnect, device number 4 [ 108.015464][ T4718] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 108.056262][ T4718] usb 5-1: USB disconnect, device number 2 [ 108.082451][ T4730] fido_id[4730]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 108.256191][ T4729] loop2: detected capacity change from 0 to 32768 [ 108.386391][ T4729] ERROR: (device loop2): diAllocAG: free inode not found in summary map [ 108.386391][ T4729] [ 108.417254][ T4729] ERROR: (device loop2): remounting filesystem as read-only [ 108.445110][ T4729] ialloc: diAlloc returned -5! [ 108.981523][ T4749] netlink: 'syz.2.129': attribute type 1 has an invalid length. [ 109.269986][ T4756] loop1: detected capacity change from 0 to 256 [ 109.775321][ T4764] loop0: detected capacity change from 0 to 256 [ 109.871025][ T4741] loop3: detected capacity change from 0 to 40427 [ 109.914261][ T4741] F2FS-fs (loop3): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 109.944193][ T4741] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 109.961116][ T4741] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 109.990605][ T4741] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3ffff [ 110.020960][ T4741] F2FS-fs (loop3): invalid crc value [ 110.096018][ T4741] F2FS-fs (loop3): Found nat_bits in checkpoint [ 110.233169][ T4741] F2FS-fs (loop3): Start checkpoint disabled! [ 110.277604][ T4741] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 110.285403][ T4741] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 110.424826][ T26] audit: type=1800 audit(1782368536.497:4): pid=4741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.128" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 110.646834][ T4778] loop1: detected capacity change from 0 to 128 [ 110.718276][ T4778] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 110.740919][ T4778] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.870892][ T9] kworker/u4:0: attempt to access beyond end of device [ 110.870892][ T9] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 111.094959][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 111.585549][ T4801] loop0: detected capacity change from 0 to 1024 [ 112.107924][ T4809] loop1: detected capacity change from 0 to 8192 [ 112.146373][ T4815] program syz.2.160 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.148557][ T4809] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 112.175363][ T4809] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 112.188766][ T4809] REISERFS (device loop1): using ordered data mode [ 112.198854][ T4809] reiserfs: using flush barriers [ 112.213216][ T4809] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 112.237931][ T4809] REISERFS (device loop1): checking transaction log (loop1) [ 112.273567][ T4809] REISERFS (device loop1): Using r5 hash to sort names [ 112.303580][ T4809] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 112.873506][ T4807] loop3: detected capacity change from 0 to 32768 [ 112.918976][ T26] audit: type=1800 audit(1782368538.997:5): pid=4807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.156" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 113.693372][ T4849] loop2: detected capacity change from 0 to 256 [ 113.811524][ T4849] FAT-fs (loop2): Directory bread(block 64) failed [ 113.868926][ T4849] FAT-fs (loop2): Directory bread(block 65) failed [ 113.884262][ T4849] FAT-fs (loop2): Directory bread(block 66) failed [ 113.909756][ T4849] FAT-fs (loop2): Directory bread(block 67) failed [ 113.947038][ T4849] FAT-fs (loop2): Directory bread(block 68) failed [ 113.953833][ T4849] FAT-fs (loop2): Directory bread(block 69) failed [ 113.973368][ T4849] FAT-fs (loop2): Directory bread(block 70) failed [ 113.995881][ T4849] FAT-fs (loop2): Directory bread(block 71) failed [ 114.047713][ T4849] FAT-fs (loop2): Directory bread(block 72) failed [ 114.064724][ T4849] FAT-fs (loop2): Directory bread(block 73) failed [ 115.197411][ T4858] loop0: detected capacity change from 0 to 40427 [ 115.255269][ T4888] loop1: detected capacity change from 0 to 4096 [ 115.268202][ T4858] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 115.276043][ T4858] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 115.366277][ T4858] F2FS-fs (loop0): Found nat_bits in checkpoint [ 115.432130][ T4888] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 115.595556][ T26] audit: type=1800 audit(1782368541.667:6): pid=4888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.192" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 115.653059][ T4858] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 115.667014][ T4858] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 115.924724][ T4858] syz.0.177: attempt to access beyond end of device [ 115.924724][ T4858] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 116.582609][ T4917] loop1: detected capacity change from 0 to 8192 [ 116.650317][ T4917] loop1: p2 p4 [ 116.653989][ T4917] loop1: partition table partially beyond EOD, truncated [ 116.676356][ T4917] loop1: p2 start 269365764 is beyond EOD, truncated [ 116.702762][ T4917] loop1: p4 size 262144 extends beyond EOD, truncated [ 116.723301][ T4920] syz.1.204 uses obsolete (PF_INET,SOCK_PACKET) [ 116.998231][ T4902] loop2: detected capacity change from 0 to 40427 [ 117.043712][ T4902] F2FS-fs (loop2): invalid crc value [ 117.090843][ T4902] F2FS-fs (loop2): Found nat_bits in checkpoint [ 117.270554][ T4902] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 117.291764][ T4395] udevd[4395]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 117.307379][ T4902] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 117.361376][ T4902] F2FS-fs (loop2): Start checkpoint disabled! [ 117.454346][ T4902] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 117.773873][ T4950] loop0: detected capacity change from 0 to 256 [ 118.250555][ T4963] netlink: 888 bytes leftover after parsing attributes in process `syz.1.220'. [ 118.315551][ T4964] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 118.346501][ T4964] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 118.927306][ T4369] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 119.054164][ T4978] loop3: detected capacity change from 0 to 4096 [ 119.121400][ T4978] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 119.133817][ T4369] usb 5-1: Using ep0 maxpacket: 8 [ 119.149206][ T4369] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 119.209172][ T4994] loop1: detected capacity change from 0 to 512 [ 119.215881][ T4369] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 119.243763][ T4994] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 119.281910][ T4994] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 119.296993][ T4369] usb 5-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 119.297054][ T4369] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.346373][ T4369] usb 5-1: config 0 descriptor?? [ 119.392951][ T4994] EXT4-fs (loop1): 1 truncate cleaned up [ 119.417240][ T4994] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 119.611379][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 119.620220][ T4994] ================================================================== [ 119.628369][ T4994] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0xa27/0x1eb0 [ 119.636519][ T4994] Read of size 18446744073709551540 at addr ffff888027fe1870 by task syz.1.235/4994 [ 119.646125][ T4994] [ 119.648509][ T4994] CPU: 1 PID: 4994 Comm: syz.1.235 Not tainted syzkaller #0 [ 119.655853][ T4994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 119.666238][ T4994] Call Trace: [ 119.669568][ T4994] [ 119.672545][ T4994] dump_stack_lvl+0x188/0x24e [ 119.677300][ T4994] ? __lock_acquire+0x7bd0/0x7bd0 [ 119.682769][ T4994] ? show_regs_print_info+0x12/0x12 [ 119.688031][ T4994] ? load_image+0x410/0x410 [ 119.692588][ T4994] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 119.698183][ T4994] ? __virt_addr_valid+0x188/0x540 [ 119.703604][ T4994] ? __virt_addr_valid+0x467/0x540 [ 119.708776][ T4994] ? ext4_xattr_set_entry+0xa27/0x1eb0 [ 119.714286][ T4994] print_report+0xa8/0x210 [ 119.718753][ T4994] kasan_report+0x10b/0x140 [ 119.723300][ T4994] ? ext4_xattr_set_entry+0xa27/0x1eb0 [ 119.728872][ T4994] ? ext4_xattr_set_entry+0xa27/0x1eb0 [ 119.734376][ T4994] kasan_check_range+0x235/0x290 [ 119.739367][ T4994] ? ext4_xattr_set_entry+0xa27/0x1eb0 [ 119.744874][ T4994] memmove+0x25/0x60 [ 119.749008][ T4994] ext4_xattr_set_entry+0xa27/0x1eb0 [ 119.754348][ T4994] ext4_xattr_block_set+0xa86/0x2fe0 [ 119.759685][ T4994] ? __lock_acquire+0x7bd0/0x7bd0 [ 119.764748][ T4994] ? ext4_drop_inode+0x114/0x2b0 [ 119.769723][ T4994] ? ext4_xattr_block_find+0x2c0/0x2c0 [ 119.775249][ T4994] ? _raw_spin_unlock+0x24/0x40 [ 119.780151][ T4994] ? ext4_xattr_ibody_set+0x5ac/0x700 [ 119.785565][ T4994] ext4_xattr_set_handle+0xdf2/0x1510 [ 119.790990][ T4994] ? ext4_xattr_inode_free_quota+0x1b0/0x1b0 [ 119.797151][ T4994] ext4_xattr_set+0x22e/0x310 [ 119.801985][ T4994] ? ext4_xattr_set_credits+0x270/0x270 [ 119.807588][ T4994] ? evm_protect_xattr+0x332/0x9d0 [ 119.812750][ T4994] ? ext4_xattr_trusted_get+0x40/0x40 [ 119.818169][ T4994] __vfs_setxattr+0x3d8/0x410 [ 119.822891][ T4994] __vfs_setxattr_noperm+0x126/0x5e0 [ 119.828219][ T4994] vfs_setxattr+0x167/0x2e0 [ 119.832862][ T4994] ? xattr_permission+0x510/0x510 [ 119.838148][ T4994] ? _copy_from_user+0x10b/0x170 [ 119.843306][ T4994] ? setxattr+0x22b/0x330 [ 119.847691][ T4994] setxattr+0x2a3/0x330 [ 119.851912][ T4994] ? path_setxattr+0x290/0x290 [ 119.856751][ T4994] ? __mnt_want_write+0x21f/0x2a0 [ 119.861839][ T4994] path_setxattr+0x147/0x290 [ 119.866486][ T4994] ? simple_xattr_list_add+0xf0/0xf0 [ 119.871901][ T4994] ? lock_chain_count+0x20/0x20 [ 119.876822][ T4994] __x64_sys_lsetxattr+0xb4/0xd0 [ 119.881819][ T4994] do_syscall_64+0x4c/0xa0 [ 119.886277][ T4994] ? clear_bhb_loop+0x60/0xb0 [ 119.891177][ T4994] ? clear_bhb_loop+0x60/0xb0 [ 119.895990][ T4994] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 119.902206][ T4994] RIP: 0033:0x7f0559d9ce59 [ 119.906661][ T4994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.926315][ T4994] RSP: 002b:00007f055ac37028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 119.934771][ T4994] RAX: ffffffffffffffda RBX: 00007f055a015fa0 RCX: 00007f0559d9ce59 [ 119.942798][ T4994] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000200000000100 [ 119.950902][ T4994] RBP: 00007f0559e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 119.958919][ T4994] R10: 000000000000fe37 R11: 0000000000000246 R12: 0000000000000000 [ 119.967079][ T4994] R13: 00007f055a016038 R14: 00007f055a015fa0 R15: 00007fff8429fc28 [ 119.975122][ T4994] [ 119.978184][ T4994] [ 119.980546][ T4994] Allocated by task 4994: [ 119.984908][ T4994] kasan_set_track+0x4b/0x70 [ 119.989587][ T4994] __kasan_kmalloc+0x8e/0xa0 [ 119.994225][ T4994] __kmalloc_node_track_caller+0xb0/0x240 [ 120.000180][ T4994] kmemdup+0x27/0x60 [ 120.004126][ T4994] ext4_xattr_block_set+0x97f/0x2fe0 [ 120.009565][ T4994] ext4_xattr_set_handle+0xdf2/0x1510 [ 120.015078][ T4994] ext4_xattr_set+0x22e/0x310 [ 120.019934][ T4994] __vfs_setxattr+0x3d8/0x410 [ 120.024717][ T4994] __vfs_setxattr_noperm+0x126/0x5e0 [ 120.030063][ T4994] vfs_setxattr+0x167/0x2e0 [ 120.034606][ T4994] setxattr+0x2a3/0x330 [ 120.038975][ T4994] path_setxattr+0x147/0x290 [ 120.043824][ T4994] __x64_sys_lsetxattr+0xb4/0xd0 [ 120.048976][ T4994] do_syscall_64+0x4c/0xa0 [ 120.053431][ T4994] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 120.059473][ T4994] [ 120.061829][ T4994] The buggy address belongs to the object at ffff888027fe1800 [ 120.061829][ T4994] which belongs to the cache kmalloc-1k of size 1024 [ 120.076189][ T4994] The buggy address is located 112 bytes inside of [ 120.076189][ T4994] 1024-byte region [ffff888027fe1800, ffff888027fe1c00) [ 120.089612][ T4994] [ 120.091975][ T4994] The buggy address belongs to the physical page: [ 120.098446][ T4994] page:ffffea00009ff800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27fe0 [ 120.108635][ T4994] head:ffffea00009ff800 order:3 compound_mapcount:0 compound_pincount:0 [ 120.117002][ T4994] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 120.125291][ T4994] raw: 00fff00000010200 0000000000000000 dead000000000001 ffff888017441dc0 [ 120.133937][ T4994] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 120.142664][ T4994] page dumped because: kasan: bad access detected [ 120.149121][ T4994] page_owner tracks the page as allocated [ 120.154979][ T4994] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3629, tgid 3629 (klogd), ts 85077341410, free_ts 85007926394 [ 120.176040][ T4994] post_alloc_hook+0x173/0x1a0 [ 120.180889][ T4994] get_page_from_freelist+0x206b/0x2180 [ 120.186507][ T4994] __alloc_pages+0x1ec/0x4f0 [ 120.191161][ T4994] alloc_slab_page+0x5d/0x180 [ 120.196537][ T4994] new_slab+0x87/0x2d0 [ 120.200784][ T4994] ___slab_alloc+0xbc5/0x1240 [ 120.205601][ T4994] __kmem_cache_alloc_node+0x126/0x270 [ 120.211483][ T4994] kmalloc_trace+0x26/0xe0 [ 120.215966][ T4994] syslog_print+0x100/0x630 [ 120.220669][ T4994] do_syslog+0x817/0x900 [ 120.224961][ T4994] __x64_sys_syslog+0x78/0x90 [ 120.230123][ T4994] do_syscall_64+0x4c/0xa0 [ 120.234690][ T4994] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 120.240814][ T4994] page last free stack trace: [ 120.245881][ T4994] free_unref_page_prepare+0x8e5/0x9e0 [ 120.251938][ T4994] free_unref_page+0x2e/0x3f0 [ 120.257629][ T4994] __unfreeze_partials+0x188/0x1e0 [ 120.262798][ T4994] put_cpu_partial+0x17c/0x250 [ 120.267698][ T4994] qlist_free_all+0x76/0xe0 [ 120.272241][ T4994] kasan_quarantine_reduce+0x144/0x160 [ 120.277829][ T4994] __kasan_slab_alloc+0x1e/0x80 [ 120.282746][ T4994] slab_post_alloc_hook+0x4b/0x490 [ 120.287912][ T4994] __kmem_cache_alloc_node+0x19d/0x270 [ 120.293509][ T4994] __kmalloc_node+0xa2/0x240 [ 120.298405][ T4994] kvmalloc_node+0x6c/0x180 [ 120.303139][ T4994] seq_read_iter+0x1de/0xc50 [ 120.307779][ T4994] vfs_read+0x471/0x960 [ 120.312063][ T4994] ksys_read+0x14d/0x260 [ 120.316356][ T4994] do_syscall_64+0x4c/0xa0 [ 120.320797][ T4994] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 120.326769][ T4994] [ 120.329138][ T4994] Memory state around the buggy address: [ 120.334971][ T4994] ffff888027fe1700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 120.343429][ T4994] ffff888027fe1780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 120.351625][ T4994] >ffff888027fe1800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 120.359720][ T4994] ^ [ 120.367463][ T4994] ffff888027fe1880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 120.375562][ T4994] ffff888027fe1900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 120.383651][ T4994] ================================================================== [ 120.421822][ T4994] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 120.429193][ T4994] CPU: 0 PID: 4994 Comm: syz.1.235 Not tainted syzkaller #0 [ 120.436528][ T4994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 120.446645][ T4994] Call Trace: [ 120.449976][ T4994] [ 120.452964][ T4994] dump_stack_lvl+0x188/0x24e [ 120.457711][ T4994] ? memcpy+0x3c/0x60 [ 120.461751][ T4994] ? show_regs_print_info+0x12/0x12 [ 120.467008][ T4994] ? load_image+0x410/0x410 [ 120.471582][ T4994] panic+0x2d3/0x710 [ 120.475664][ T4994] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 120.481901][ T4994] ? bpf_jit_dump+0xd0/0xd0 [ 120.486564][ T4994] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 120.492622][ T4994] ? _raw_spin_unlock+0x40/0x40 [ 120.497648][ T4994] check_panic_on_warn+0x80/0xa0 [ 120.502665][ T4994] ? ext4_xattr_set_entry+0xa27/0x1eb0 [ 120.508194][ T4994] end_report+0x66/0x110 [ 120.512504][ T4994] kasan_report+0x118/0x140 [ 120.517090][ T4994] ? ext4_xattr_set_entry+0xa27/0x1eb0 [ 120.522622][ T4994] ? ext4_xattr_set_entry+0xa27/0x1eb0 [ 120.528242][ T4994] kasan_check_range+0x235/0x290 [ 120.533436][ T4994] ? ext4_xattr_set_entry+0xa27/0x1eb0 [ 120.539154][ T4994] memmove+0x25/0x60 [ 120.543108][ T4994] ext4_xattr_set_entry+0xa27/0x1eb0 [ 120.549003][ T4994] ext4_xattr_block_set+0xa86/0x2fe0 [ 120.554722][ T4994] ? __lock_acquire+0x7bd0/0x7bd0 [ 120.559932][ T4994] ? ext4_drop_inode+0x114/0x2b0 [ 120.565296][ T4994] ? ext4_xattr_block_find+0x2c0/0x2c0 [ 120.570843][ T4994] ? _raw_spin_unlock+0x24/0x40 [ 120.575858][ T4994] ? ext4_xattr_ibody_set+0x5ac/0x700 [ 120.581312][ T4994] ext4_xattr_set_handle+0xdf2/0x1510 [ 120.586852][ T4994] ? ext4_xattr_inode_free_quota+0x1b0/0x1b0 [ 120.592940][ T4994] ext4_xattr_set+0x22e/0x310 [ 120.597695][ T4994] ? ext4_xattr_set_credits+0x270/0x270 [ 120.603312][ T4994] ? evm_protect_xattr+0x332/0x9d0 [ 120.608486][ T4994] ? ext4_xattr_trusted_get+0x40/0x40 [ 120.614010][ T4994] __vfs_setxattr+0x3d8/0x410 [ 120.618962][ T4994] __vfs_setxattr_noperm+0x126/0x5e0 [ 120.624326][ T4994] vfs_setxattr+0x167/0x2e0 [ 120.629059][ T4994] ? xattr_permission+0x510/0x510 [ 120.634148][ T4994] ? _copy_from_user+0x10b/0x170 [ 120.639137][ T4994] ? setxattr+0x22b/0x330 [ 120.643631][ T4994] setxattr+0x2a3/0x330 [ 120.647833][ T4994] ? path_setxattr+0x290/0x290 [ 120.653528][ T4994] ? __mnt_want_write+0x21f/0x2a0 [ 120.658660][ T4994] path_setxattr+0x147/0x290 [ 120.663470][ T4994] ? simple_xattr_list_add+0xf0/0xf0 [ 120.668891][ T4994] ? lock_chain_count+0x20/0x20 [ 120.673880][ T4994] __x64_sys_lsetxattr+0xb4/0xd0 [ 120.678877][ T4994] do_syscall_64+0x4c/0xa0 [ 120.683370][ T4994] ? clear_bhb_loop+0x60/0xb0 [ 120.688077][ T4994] ? clear_bhb_loop+0x60/0xb0 [ 120.692912][ T4994] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 120.699023][ T4994] RIP: 0033:0x7f0559d9ce59 [ 120.703556][ T4994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.723638][ T4994] RSP: 002b:00007f055ac37028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 120.732180][ T4994] RAX: ffffffffffffffda RBX: 00007f055a015fa0 RCX: 00007f0559d9ce59 [ 120.740371][ T4994] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000200000000100 [ 120.748676][ T4994] RBP: 00007f0559e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 120.757382][ T4994] R10: 000000000000fe37 R11: 0000000000000246 R12: 0000000000000000 [ 120.766384][ T4994] R13: 00007f055a016038 R14: 00007f055a015fa0 R15: 00007fff8429fc28 [ 120.774502][ T4994] [ 120.778168][ T4994] Kernel Offset: disabled [ 120.782513][ T4994] Rebooting in 86400 seconds..