last executing test programs: 9.251432924s ago: executing program 3 (id=427): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0x0, r4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}]}], {0x14}}, 0xd8}}, 0x10) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) 7.825412769s ago: executing program 3 (id=430): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14b442, 0x82) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x3fffffffffffd75, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, 0x0, 0x0) sendmmsg(r4, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000140)={0x17c04, r0, 0x6, 0x973f, 0x81, 0x1}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x25) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 7.120107946s ago: executing program 0 (id=433): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r3, 0x0, 0x0) setsockopt$inet6_int(r3, 0x10d, 0xb, &(0x7f0000000080)=0xa, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x62) 7.035836358s ago: executing program 4 (id=434): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}]}], {0x14}}, 0xd8}}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x15, @multicast1}, @timestamp}}}}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) 6.906913391s ago: executing program 1 (id=435): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) dup(r0) socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000040), 0x800) r1 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 6.902965061s ago: executing program 3 (id=436): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) tkill(r0, 0x1) connect$inet(r3, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) flock(0xffffffffffffffff, 0x8) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x6801, &(0x7f0000000240)={[{@bh}, {@nodelalloc}, {@data_ordered}]}, 0xfe, 0x550, &(0x7f0000000500)="$eJzs3c9vHFcdAPDvrL2Okzi1CxygUktFi5IKshvXtLU4lCIhOFVClHsw9saysvZG9rqNrQo2fwESQoDECS5ckPgDkFAkLhwRUiQ4g1QEQpCCBIfSQTM7G0eb2fU22djx+vORJvPmzY/v91l5szM7T7MBnFrPR8QbEfFhmqYvRcR8UV8ppuh0p2y79+++u5pNSaTx1j+SSIq6bLM0TdPeMc8Xu81GxDe+FvHt5L6As8V8b//6SrPZ2C4W6+3NG/Wdvf3LG5sr6431xtbS0uKry68tv7J8ZSztvBARr3/lLz/83s+/+vqvP//On6/+7dJ3srTmivW9djyE6WEru02vnpnt22H7IYM9ibL2VD8oFs6Ots+tx5kQAAADZdf4H4uIz0TESzEfU8MvZwEAAIATKP3SXHyQdJ/flZgZUA8AAACcIJV8DGxSqRVjAeaiUqnVumN4PxHnKs3WTvtz11q7W2vdsbILUa1c22g2rhRjhReimmTLi3n5YPnlvuWliHg6In4wfzZfrq22mmvH/eUHAAAAnBLn++7//z3fvf8fLjma5AAAAIDxWTjuBAAAAIDHzv0/AAAATLTqsJUzR5cHAAAA8Ph8/c03synt/f712tt7u9dbb19ea+xcr23urtZWW9s3auut1nr+zr7Nw47XbLVufCG2dm/W242ddv3C3v7VzdbuVvvqRsweSYMAAACABzz96dt/TCKi88Wz+RQe+8OpMX2v1HunZ0nv/9NT3fl7R5QUcCSmRtjmvTPl9a4T4GSb7q8Y0NeByTN0/D9wKhz2ix4DB+/8rjurjDkfAABg/C5+qvz5/+HX8x2X/HDC6cRwevU9/0/njysR4Mjlz/9HHcjjYgEmSnWkEYDAJHvU5/+HS9OPlBAAADB2c/mUVGrF13tzUanUahEX8p8FrCbXNpqNKxHxVET8Yb56JltezPdMDr1nAAAAAAAAAAAAAAAAAAAAAAAAAAC60jSJFAAAAJhoEZW/Jr/pvsv/4vyLc/3fD8wk/81/EngmIt75yVs/urnSbm8vZvX/vFff/nFR//JxfIMBAAAA9Ovdp+fz/xx3NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMmvfvvrvam0bY/Oy44v79yxGxUBZ/Ombz+WxUI+Lcv5KYvm+/JCKmxhC/cysiPlkWP8nSykPODYg/jj9C51bSSXOl8WOh+CuUxT8/hvhwmt3Ozj9vlPX/Sjyfz8v733QxParB57+4d/6bGtD/L4wY45k7v6wPjH8r4pnp8vNfL34yIP4LI0Wvxre+ub8/aG3604iLvc+f/Ix3f4SDUr29eaO+s7d/eWNzZb2x3thaWlp8dfm15VeWr9SvbTQbxb+lMb7/7K8+HNb+c6Wff0mRzeD2v1hyvKmS/P935+bdj/cWOg/Gv/RCSfzf/qzY4sH4lSLOZ4tytv5ir9zplu/33C9+/9yw9q8dtL+azc/cizy8/ZcGHbTfAx3l2dH+6wAAj8XO3v71lWazsT2xhewu/QlI42EKM/FEpDG5he9mhTvjOmCapmnWp0pW3Y6IUY6TxJhbWinP56Aw8Axw3GcmAABg3A4u+o87EwAAAAAAAAAAAAAAAAAAADi9juIta/0xD16BnIzjFdoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGPx/wAAAP//k7DbIA==") 6.182258119s ago: executing program 0 (id=437): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r3, 0xc1007c00, &(0x7f0000000080)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x0, 'fo\x00', 0x0, 0x7f}, 0x2c) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) 6.180254499s ago: executing program 1 (id=439): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) lseek(0xffffffffffffffff, 0x10001, 0x0) 6.119028331s ago: executing program 2 (id=440): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) ptrace(0x10, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, 0x0, 0x0, 0x4044084, 0x0, 0x0) socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 6.103767531s ago: executing program 4 (id=442): unshare(0x20000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file2/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1/file2/file3/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1/file2/file3/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file6\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340)='./file0/file6\x00', 0x0, 0x5000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file6/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000440)={0x2004}, 0x30, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file2/file3/file4\x00', 0x0, 0x0) landlock_restrict_self(r1, 0x0) openat(r0, &(0x7f0000000500)='file3/file5\x00', 0x0, 0x0) 4.678495886s ago: executing program 2 (id=443): unshare(0x20000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file2/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1/file2/file3/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1/file2/file3/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file6\x00', 0x1c0) mount$bind(&(0x7f0000000280)='./file0/file1/file2/file3\x00', &(0x7f00000002c0)='./file0/file1/file2/file3\x00', 0x0, 0x1000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file6/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000440)={0x2004}, 0x30, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file2/file3/file4\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000004c0)={0x4, r2}, 0x0) landlock_restrict_self(r1, 0x0) renameat2(r0, &(0x7f0000000540)='file3/file5\x00', r0, &(0x7f0000000580)='file3/file4/file5\x00', 0x0) 4.673933886s ago: executing program 1 (id=444): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioprio_set$pid(0x6, r1, 0x4000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=@getqdisc={0x24, 0x26, 0x705, 0x70bf2b, 0x5, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffe0}, {0xc, 0x78bbe9f1cfa0a994}, {0xfff2, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20004000) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x8084, &(0x7f0000000300)=ANY=[@ANYRES64=0x0, @ANYRESDEC], 0x1, 0x175, &(0x7f0000000580)="$eJzs28GLElEcB/DfpOlalz1Hh4EunZbq1LGIDaKBovBQp4Kty24stJep0/wVnfsHg9hTp16sI8qYIkLOSH4+F3/6Vd/vifp44nt3+9PpyfnFx/OXl3GQZdF/FHn8zuIwrkUvalUAAP+TXynFz5RSGlYx+h4ppa47AgC2zfoPAPtn3fpfPWxez/qttgcAbIH9PwDsn9dv3j5/XBTHr/L8IOJHVY7LcX1Z50+fFcf38onD+aMuy3Lcm+X36zxv5tfjxjR/sDQfxN07dX6VPXlRLOQ342T70wcAAIC9cJTPNPf3w2l+tCL/+/eBhf17P275rwAA7KSLL19P35+dffjcQjGajJi1O+hmxbcOXpadLXqxE20o1hZXb9l//cxdfisBbZh/6LvuBAAAAAAAAAAAAAAAWGWzg0GjiGjcMoiIJXeOGKw7WTBsfaoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAw8ycAAP//PR5EPA==") bind$packet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x140) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x1) 4.642459616s ago: executing program 0 (id=445): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x92c0, 0x2) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r3, 0x0, 0x0) setsockopt$inet6_int(r3, 0x10d, 0xb, &(0x7f0000000080)=0xa, 0x4) 4.555312818s ago: executing program 2 (id=446): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) sendto$inet6(r3, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x40008, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 4.555118389s ago: executing program 3 (id=448): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) io_setup(0x7d, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000a40)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) getdents64(0xffffffffffffffff, 0x0, 0x0) 4.555025469s ago: executing program 4 (id=449): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000008d40)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20008c80], 0x0, 0x0, &(0x7f0000008c80)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) 3.622015701s ago: executing program 0 (id=450): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r3, 0x0, 0x0) setsockopt$inet6_int(r3, 0x10d, 0xb, &(0x7f0000000080)=0xa, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x62) 3.496894404s ago: executing program 4 (id=451): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14b442, 0x82) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x3fffffffffffd75, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, 0x0, 0x0) sendmmsg(r4, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000140)={0x17c04, r0, 0x6, 0x973f, 0x81, 0x1}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x25) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 3.496163955s ago: executing program 1 (id=461): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) io_setup(0x7d, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000a40)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, 0x0, 0x0) 3.494224644s ago: executing program 2 (id=462): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x56, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x8, 0x18, 0x1000, 0x0, 0x0, {[@nop, @timestamp={0x8, 0xa, 0x8, 0x3}]}}}}}}}}, 0x0) 3.493692815s ago: executing program 3 (id=463): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioprio_set$pid(0x6, r1, 0x4000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=@getqdisc={0x24, 0x26, 0x705, 0x70bf2b, 0x5, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffe0}, {0xc, 0x78bbe9f1cfa0a994}, {0xfff2, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20004000) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x8084, &(0x7f0000000300)=ANY=[@ANYRES64=0x0, @ANYRESDEC], 0x1, 0x175, &(0x7f0000000580)="$eJzs28GLElEcB/DfpOlalz1Hh4EunZbq1LGIDaKBovBQp4Kty24stJep0/wVnfsHg9hTp16sI8qYIkLOSH4+F3/6Vd/vifp44nt3+9PpyfnFx/OXl3GQZdF/FHn8zuIwrkUvalUAAP+TXynFz5RSGlYx+h4ppa47AgC2zfoPAPtn3fpfPWxez/qttgcAbIH9PwDsn9dv3j5/XBTHr/L8IOJHVY7LcX1Z50+fFcf38onD+aMuy3Lcm+X36zxv5tfjxjR/sDQfxN07dX6VPXlRLOQ342T70wcAAIC9cJTPNPf3w2l+tCL/+/eBhf17P275rwAA7KSLL19P35+dffjcQjGajJi1O+hmxbcOXpadLXqxE20o1hZXb9l//cxdfisBbZh/6LvuBAAAAAAAAAAAAAAAWGWzg0GjiGjcMoiIJXeOGKw7WTBsfaoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAw8ycAAP//PR5EPA==") bind$packet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x140) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x1) 2.516170388s ago: executing program 0 (id=452): syz_mount_image$squashfs(&(0x7f0000000740), &(0x7f0000000280)='./file1\x00', 0x400, &(0x7f0000000500)=ANY=[], 0x29, 0x20e, &(0x7f0000000780)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r0, 0x852ac000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x7, 0x1, 0x5, "1ae586d32101b5128ed271c679583d00", 0x3f, 0x2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x2fd, 0xffff, 0x101, 0x300}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x70}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 2.515991398s ago: executing program 2 (id=453): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) ptrace(0x10, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, 0x0, 0x0, 0x4044084, 0x0, 0x0) socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) io_uring_setup(0x1, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) 2.43583299s ago: executing program 1 (id=454): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 2.422099951s ago: executing program 4 (id=455): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) lseek(r0, 0x10001, 0x0) 1.64559811s ago: executing program 3 (id=456): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) ptrace(0x10, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, 0x0, 0x0, 0x4044084, 0x0, 0x0) socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 27.105499ms ago: executing program 4 (id=457): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) tkill(r0, 0x1) connect$inet(r3, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) flock(0xffffffffffffffff, 0x8) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x6801, &(0x7f0000000240)={[{@bh}, {@nodelalloc}, {@data_ordered}]}, 0xfe, 0x550, &(0x7f0000000500)="$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") 26.390659ms ago: executing program 0 (id=470): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x56, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x8, 0x18, 0x1000, 0x0, 0x0, {[@nop, @timestamp={0x8, 0xa, 0x8, 0x3}]}}}}}}}}, 0x0) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x2, 0xfffd, {0xa, 0x0, 0xfffffffd, @loopback}}}, 0x32) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000140)={0x80, 0x0, 0x0, 0x3}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0xfffffffffffffffe, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x814) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/kernel/mm/transparent_hugepage/enabled\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='never\x00', 0x5) write(r3, &(0x7f0000000280)='always', 0x6) linkat(r3, 0x0, 0xffffffffffffffff, &(0x7f0000000100)='./sys\x00', 0x800) 25.900249ms ago: executing program 2 (id=458): unshare(0x20000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file2/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1/file2/file3/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1/file2/file3/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file6\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340)='./file0/file6\x00', 0x0, 0x5000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file6/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000440)={0x2004}, 0x30, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file2/file3/file4\x00', 0x0, 0x0) landlock_restrict_self(r1, 0x0) openat(r0, &(0x7f0000000500)='file3/file5\x00', 0x0, 0x0) 0s ago: executing program 1 (id=459): unshare(0x20000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file2/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1/file2/file3/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1/file2/file3/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file6\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340)='./file0/file6\x00', 0x0, 0x5000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file6/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000440)={0x2004}, 0x30, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file2/file3/file4\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000004c0)={0x4, r2}, 0x0) landlock_restrict_self(r1, 0x0) renameat2(r0, &(0x7f0000000540)='file3/file5\x00', r0, &(0x7f0000000580)='file3/file4/file5\x00', 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.215' (ED25519) to the list of known hosts. [ 29.569659][ T4316] cgroup: Unknown subsys name 'net' [ 29.770571][ T4316] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 30.059296][ T4316] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 30.761366][ T4332] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.768561][ T4335] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.769983][ T4335] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.772961][ T4342] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.774470][ T4342] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.775402][ T4344] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.775987][ T4342] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.777539][ T4344] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.779129][ T4342] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.780180][ T4344] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.781226][ T4342] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.782076][ T4344] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.783450][ T4342] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.784658][ T4344] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.785742][ T4342] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.788665][ T4345] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 30.788703][ T4342] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.790037][ T4345] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.791535][ T4342] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.792299][ T4345] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.793554][ T4342] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 30.794516][ T4345] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.795827][ T4342] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.798710][ T4345] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 30.800191][ T4345] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.801839][ T4345] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 30.809993][ T4346] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.811722][ T4346] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.833100][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 30.838564][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.928946][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 30.956425][ T4339] chnl_net:caif_netlink_parms(): no params data found [ 30.965496][ T4328] chnl_net:caif_netlink_parms(): no params data found [ 30.967470][ T4333] chnl_net:caif_netlink_parms(): no params data found [ 30.991174][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.992484][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.994384][ T4329] device bridge_slave_0 entered promiscuous mode [ 31.005362][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.006657][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.009677][ T4329] device bridge_slave_1 entered promiscuous mode [ 31.025070][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.026386][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.027873][ T4328] device bridge_slave_0 entered promiscuous mode [ 31.033150][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.036395][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.042850][ T4339] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.044133][ T4339] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.045623][ T4339] device bridge_slave_0 entered promiscuous mode [ 31.047348][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.049339][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.050889][ T4328] device bridge_slave_1 entered promiscuous mode [ 31.054474][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.055776][ T4333] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.057281][ T4333] device bridge_slave_0 entered promiscuous mode [ 31.060420][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.061710][ T4333] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.063347][ T4333] device bridge_slave_1 entered promiscuous mode [ 31.064776][ T4339] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.065996][ T4339] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.067518][ T4339] device bridge_slave_1 entered promiscuous mode [ 31.074587][ T4336] chnl_net:caif_netlink_parms(): no params data found [ 31.083357][ T4329] team0: Port device team_slave_0 added [ 31.092736][ T4328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.096998][ T4328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.099502][ T4329] team0: Port device team_slave_1 added [ 31.101375][ T4333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.103912][ T4339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.113431][ T4333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.115696][ T4339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.119576][ T4328] team0: Port device team_slave_0 added [ 31.128899][ T4328] team0: Port device team_slave_1 added [ 31.131916][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.133159][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.137524][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.144088][ T4333] team0: Port device team_slave_0 added [ 31.145859][ T4333] team0: Port device team_slave_1 added [ 31.152771][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.154002][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.160734][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.166593][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.167810][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.172791][ T4328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.175812][ T4339] team0: Port device team_slave_0 added [ 31.181442][ T4336] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.182709][ T4336] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.184288][ T4336] device bridge_slave_0 entered promiscuous mode [ 31.187575][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.189684][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.193885][ T4333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.196189][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.197379][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.202679][ T4328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.205440][ T4339] team0: Port device team_slave_1 added [ 31.207799][ T4336] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.209301][ T4336] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.211016][ T4336] device bridge_slave_1 entered promiscuous mode [ 31.212603][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.213905][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.218990][ T4333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.233983][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.235237][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.241651][ T4339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.279314][ T4329] device hsr_slave_0 entered promiscuous mode [ 31.318296][ T4329] device hsr_slave_1 entered promiscuous mode [ 31.361533][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.362791][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.367104][ T4339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.370364][ T4336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.372864][ T4336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.439182][ T4328] device hsr_slave_0 entered promiscuous mode [ 31.488230][ T4328] device hsr_slave_1 entered promiscuous mode [ 31.540340][ T4328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.541667][ T4328] Cannot create hsr debugfs directory [ 31.599067][ T4333] device hsr_slave_0 entered promiscuous mode [ 31.638189][ T4333] device hsr_slave_1 entered promiscuous mode [ 31.678121][ T4333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.679498][ T4333] Cannot create hsr debugfs directory [ 31.685711][ T4336] team0: Port device team_slave_0 added [ 31.693172][ T4336] team0: Port device team_slave_1 added [ 31.739543][ T4339] device hsr_slave_0 entered promiscuous mode [ 31.778167][ T4339] device hsr_slave_1 entered promiscuous mode [ 31.828076][ T4339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.829399][ T4339] Cannot create hsr debugfs directory [ 31.854754][ T4336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.855972][ T4336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.861248][ T4336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.870620][ T4336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.871732][ T4336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.875860][ T4336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.939110][ T4336] device hsr_slave_0 entered promiscuous mode [ 31.978261][ T4336] device hsr_slave_1 entered promiscuous mode [ 32.018027][ T4336] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.019316][ T4336] Cannot create hsr debugfs directory [ 32.075088][ T4329] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.124539][ T4329] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.159158][ T4329] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.203780][ T4329] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.244866][ T4328] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.283334][ T4328] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.319334][ T4328] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.370334][ T4328] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.425681][ T4333] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.485807][ T4333] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.519976][ T4333] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.559023][ T4333] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.620852][ T4339] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.682221][ T4339] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.722406][ T4339] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.765310][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.767044][ T4339] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.808463][ T4337] Bluetooth: hci2: command 0x0409 tx timeout [ 32.808467][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 32.834761][ T4336] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.869322][ T4336] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.888416][ T4337] Bluetooth: hci4: command 0x0409 tx timeout [ 32.888495][ T4346] Bluetooth: hci3: command 0x0409 tx timeout [ 32.889580][ T4337] Bluetooth: hci1: command 0x0409 tx timeout [ 32.911754][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.913868][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.917372][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.919968][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.921240][ T4336] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.972460][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.974222][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.975897][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.977197][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.981094][ T4336] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.029610][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.043350][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.045135][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.047062][ T234] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.048295][ T234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.050306][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.051937][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.059803][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.061829][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.066409][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.071109][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.072926][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.074487][ T234] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.075685][ T234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.077200][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.086444][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.088396][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.090023][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.091385][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.092749][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.094504][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.096585][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.101151][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.102827][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.109698][ T4333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.112664][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.114411][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.116037][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.117872][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.122430][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.124620][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.143832][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.145681][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.147503][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.151802][ T4333] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.155518][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.157063][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.161990][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.165033][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.166676][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.168850][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.170115][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.171806][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.177531][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.182981][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.184604][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.186163][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.187847][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.191119][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.199226][ T4336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.202742][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.207438][ T4339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.215442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.217048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.221340][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.222560][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.224046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.225741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.227478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.236400][ T4339] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.239655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.241423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.242893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.244242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.245645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.247848][ T4336] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.253448][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.260511][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.262448][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.264111][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.265775][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.267462][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.269725][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.277423][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.280312][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.282108][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.288866][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.290130][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.291661][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.293301][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.294863][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.296850][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.299494][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.300788][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.319124][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.321757][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.323233][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.324810][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.326345][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.327863][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.329251][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.330945][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.332674][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.334344][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.336217][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.337932][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.341096][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.342785][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.344454][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.346013][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.350352][ T4329] device veth0_vlan entered promiscuous mode [ 33.354895][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.356552][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.359120][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.360739][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.362299][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.363576][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.365095][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.366501][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.379866][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.381686][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.383455][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.385902][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.390723][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.392335][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.394068][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.395718][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.398601][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.400251][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.402223][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.406067][ T4336] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.411806][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.413749][ T4329] device veth1_vlan entered promiscuous mode [ 33.420333][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.421970][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.423262][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.424676][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.426315][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.427902][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.431146][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.433871][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.444129][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.464240][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.465827][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.467517][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.471717][ T4329] device veth0_macvtap entered promiscuous mode [ 33.484360][ T4329] device veth1_macvtap entered promiscuous mode [ 33.485835][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.487534][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.490114][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.491880][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.507377][ T4328] device veth0_vlan entered promiscuous mode [ 33.512461][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.514132][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.516013][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.517522][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.523470][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.524917][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.534170][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.536228][ T4328] device veth1_vlan entered promiscuous mode [ 33.541386][ T4333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.542869][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.544422][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.546131][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.549116][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.560422][ T4329] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.561965][ T4329] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.563458][ T4329] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.565016][ T4329] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.571294][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.573075][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.574794][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.576139][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.577478][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.582480][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.591234][ T4336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.601541][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.603299][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.604725][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.612829][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.614598][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.616169][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.617666][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.622089][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.623773][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.629943][ T4333] device veth0_vlan entered promiscuous mode [ 33.633794][ T4328] device veth0_macvtap entered promiscuous mode [ 33.648571][ T4339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.652276][ T4328] device veth1_macvtap entered promiscuous mode [ 33.656389][ T4333] device veth1_vlan entered promiscuous mode [ 33.683201][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.684665][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.695146][ T4339] device veth0_vlan entered promiscuous mode [ 33.696985][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.698768][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.700212][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.701825][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.703451][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.705084][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.706644][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.711701][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.713199][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.716093][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.717792][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.720800][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.731390][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.732950][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.734503][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.736135][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.741517][ T1616] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.742903][ T1616] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.746434][ T4339] device veth1_vlan entered promiscuous mode [ 33.751027][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.752566][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.754060][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.755905][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.758477][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.760288][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.762416][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.764121][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.765743][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.768860][ T4333] device veth0_macvtap entered promiscuous mode [ 33.771137][ T4333] device veth1_macvtap entered promiscuous mode [ 33.784270][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.785911][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.787408][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.789563][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.791737][ T4328] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.793268][ T4328] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.794810][ T4328] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.796316][ T4328] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.803283][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.804962][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.807877][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.812823][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.816372][ T4336] device veth0_vlan entered promiscuous mode [ 33.823686][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.825336][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.826898][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.831771][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.834246][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.839175][ T4336] device veth1_vlan entered promiscuous mode [ 33.852147][ T4336] device veth0_macvtap entered promiscuous mode [ 33.854158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.855801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.857323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.859900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.861885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.864207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.866137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.867802][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.880121][ T4336] device veth1_macvtap entered promiscuous mode [ 33.882835][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.884590][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.886184][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.888830][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.890977][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.893554][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.895202][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.896882][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.909763][ T4333] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.911285][ T4333] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.912840][ T4333] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.914315][ T4333] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.941602][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.943563][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.945606][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.947445][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.963154][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.965106][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.229115][ T4336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.234078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.235933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.256465][ T4339] device veth0_macvtap entered promiscuous mode [ 34.265790][ T4414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.266309][ T4339] device veth1_macvtap entered promiscuous mode [ 34.267088][ T4414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.270850][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.272757][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.274510][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.276522][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.278520][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.280472][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.282705][ T4336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.285402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.289015][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.290762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.292242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.293677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.295409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.297149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.302928][ T4336] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.304413][ T4336] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.306065][ T4336] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.307697][ T4336] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.323448][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.325303][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.326950][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.329737][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.331455][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.333173][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.335012][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.336714][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.339420][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.342943][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.344208][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.345241][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.347250][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.352764][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.359871][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.361328][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.366118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.367878][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.371581][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.373532][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.375515][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.377314][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.379409][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.381515][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.383671][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.386313][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.392563][ T4339] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.394395][ T4339] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.396026][ T4339] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.397687][ T4339] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.401236][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.403022][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.413028][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.416556][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.421856][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.452081][ T4414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.453523][ T4414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.454881][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.495451][ T4414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.496893][ T4414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.500422][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.503759][ T4414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.505207][ T4414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.506576][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.540613][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.542034][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.543431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.599606][ T4420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 34.888681][ T4337] Bluetooth: hci2: command 0x041b tx timeout [ 35.014265][ T48] Bluetooth: hci1: command 0x041b tx timeout [ 35.019089][ T4337] Bluetooth: hci0: command 0x041b tx timeout [ 35.020689][ T4337] Bluetooth: hci3: command 0x041b tx timeout [ 35.022645][ T48] Bluetooth: hci4: command 0x041b tx timeout [ 36.111822][ T4437] loop0: detected capacity change from 0 to 32768 [ 36.115141][ T4455] Bluetooth: MGMT ver 1.22 [ 36.276246][ T4464] netlink: 'syz.0.18': attribute type 1 has an invalid length. [ 36.386401][ T4467] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 36.938731][ T4464] netlink: 84 bytes leftover after parsing attributes in process `syz.0.18'. [ 36.947509][ T4464] netlink: 'syz.0.18': attribute type 1 has an invalid length. [ 37.054735][ T48] Bluetooth: hci4: command 0x040f tx timeout [ 37.055929][ T48] Bluetooth: hci3: command 0x040f tx timeout [ 37.057040][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 37.058116][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 37.059169][ T48] Bluetooth: hci1: command 0x040f tx timeout [ 37.361264][ T48] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 37.363162][ T48] CPU: 1 PID: 48 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 37.364388][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 37.366164][ T48] Workqueue: hci0 hci_rx_work [ 37.366996][ T48] Call trace: [ 37.367575][ T48] dump_backtrace+0x1c4/0x1f0 [ 37.368395][ T48] show_stack+0x2c/0x3c [ 37.369156][ T48] __dump_stack+0x30/0x40 [ 37.369985][ T48] dump_stack_lvl+0xf4/0x15c [ 37.370852][ T48] dump_stack+0x1c/0x5c [ 37.371594][ T48] sysfs_create_dir_ns+0x244/0x264 [ 37.372496][ T48] kobject_add_internal+0x5a8/0xb18 [ 37.373433][ T48] kobject_add+0x144/0x20c [ 37.374238][ T48] device_add+0x3dc/0xe4c [ 37.374976][ T48] hci_conn_add_sysfs+0xb8/0x1bc [ 37.375851][ T48] le_conn_complete_evt+0xd3c/0x1300 [ 37.376962][ T48] hci_le_conn_complete_evt+0x114/0x3b8 [ 37.377922][ T48] hci_le_meta_evt+0x2c0/0x4a8 [ 37.378788][ T48] hci_event_packet+0x64c/0xe60 [ 37.379680][ T48] hci_rx_work+0x310/0xa70 [ 37.380514][ T48] process_one_work+0x7e4/0x13bc [ 37.381467][ T48] worker_thread+0x8cc/0xfe8 [ 37.382341][ T48] kthread+0x254/0x2e0 [ 37.383116][ T48] ret_from_fork+0x10/0x20 [ 37.385504][ T48] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 37.387932][ T48] Bluetooth: hci0: failed to register connection device [ 37.994942][ T4493] netlink: 'syz.3.24': attribute type 10 has an invalid length. [ 38.357633][ T4497] loop2: detected capacity change from 0 to 16 [ 38.401945][ T4497] erofs: (device loop2): mounted with root inode @ nid 36. [ 38.467654][ T4498] loop0: detected capacity change from 0 to 128 [ 38.713756][ T4493] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 38.783858][ T115] cfg80211: failed to load regulatory.db [ 39.174558][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 39.176849][ T4337] Bluetooth: hci4: command 0x0419 tx timeout [ 39.178098][ T4330] Bluetooth: hci0: command 0x0419 tx timeout [ 39.179346][ T4346] Bluetooth: hci2: command 0x0419 tx timeout [ 39.179987][ T4345] Bluetooth: hci3: command 0x0419 tx timeout [ 40.361595][ T4524] netlink: 'syz.4.29': attribute type 2 has an invalid length. [ 40.413768][ T4535] loop1: detected capacity change from 0 to 256 [ 40.425651][ T4535] exfat: Deprecated parameter 'utf8' [ 40.433053][ T4535] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 41.034831][ T4517] Set syz1 is full, maxelem 65536 reached [ 41.208123][ T4332] Bluetooth: hci4: command 0x0405 tx timeout [ 43.000654][ T4569] loop2: detected capacity change from 0 to 256 [ 43.004049][ T4569] ======================================================= [ 43.004049][ T4569] WARNING: The mand mount option has been deprecated and [ 43.004049][ T4569] and is ignored by this kernel. Remove the mand [ 43.004049][ T4569] option from the mount to silence this warning. [ 43.004049][ T4569] ======================================================= [ 43.143302][ T4568] syz.2.39: attempt to access beyond end of device [ 43.143302][ T4568] loop2: rw=2049, sector=256, nr_sectors = 100 limit=256 [ 43.152762][ T4570] netlink: 'syz.0.38': attribute type 39 has an invalid length. [ 43.276515][ T4580] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 43.681318][ T4592] device syzkaller0 entered promiscuous mode [ 44.504023][ T4625] loop4: detected capacity change from 0 to 1024 [ 44.505963][ T4625] EXT4-fs: Ignoring removed bh option [ 44.521576][ T4625] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 44.659007][ T4332] Bluetooth: hci0: command 0x0406 tx timeout [ 44.715106][ T4630] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 45.378116][ T4644] ICMPv6: NA: ff:ff:ff:ff:ff:ff advertised our address fe80::aa on syz_tun! [ 45.423450][ T4642] loop1: detected capacity change from 0 to 1764 [ 45.502507][ T4639] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 45.506984][ T4639] CIFS mount error: No usable UNC path provided in device string! [ 45.506984][ T4639] [ 45.508782][ T4639] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 45.515876][ T4336] EXT4-fs (loop4): unmounting filesystem. [ 45.651540][ T4648] loop0: detected capacity change from 0 to 40427 [ 45.655032][ T4648] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 45.659097][ T4648] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 45.964789][ T4648] F2FS-fs (loop0): invalid crc value [ 46.205088][ T4662] xt_policy: output policy not valid in PREROUTING and INPUT [ 46.530421][ T4648] F2FS-fs (loop0): Found nat_bits in checkpoint [ 46.759925][ T4648] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 46.761552][ T4648] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 47.005554][ T4670] loop4: detected capacity change from 0 to 512 [ 47.009107][ T4670] EXT4-fs: Invalid want_extra_isize 7 [ 47.101358][ T4318] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 47.438418][ T4678] loop1: detected capacity change from 0 to 512 [ 47.454723][ T4678] EXT2-fs (loop1): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 47.470874][ T4678] EXT2-fs (loop1): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c] [ 47.671912][ T4686] xt_CT: You must specify a L4 protocol and not use inversions on it [ 47.833638][ T4688] using random self ethernet address [ 47.834947][ T4688] using random host ethernet address [ 48.164062][ T4694] loop0: detected capacity change from 0 to 256 [ 49.846310][ T4716] netlink: 12 bytes leftover after parsing attributes in process `syz.3.67'. [ 49.855607][ T4716] 8021q: VLANs not supported on ipvlan1 [ 49.906830][ T4716] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.972816][ T4716] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.398684][ T4724] loop0: detected capacity change from 0 to 8192 [ 51.056618][ T4724] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 51.059471][ T4724] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 51.062375][ T4724] REISERFS (device loop0): using ordered data mode [ 51.066895][ T4724] reiserfs: using flush barriers [ 51.089437][ T4724] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 51.100086][ T4724] REISERFS (device loop0): checking transaction log (loop0) [ 51.119358][ T4738] loop4: detected capacity change from 0 to 512 [ 51.491161][ T4724] REISERFS (device loop0): Using tea hash to sort names [ 51.512022][ T4738] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 51.515008][ T4724] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 51.836043][ T4724] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 51.842033][ T4724] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 51.844645][ T4724] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 51.847344][ T4336] EXT4-fs (loop4): unmounting filesystem. [ 51.880360][ T4724] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 51.912146][ T4724] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 51.916594][ T4724] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 51.927537][ T4724] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 51.933370][ T4750] loop3: detected capacity change from 0 to 1024 [ 51.937901][ T4724] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 51.938496][ T4750] EXT4-fs: Ignoring removed bh option [ 51.958285][ T4724] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 51.971130][ T4750] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 52.479820][ T4724] netlink: 68 bytes leftover after parsing attributes in process `syz.0.69'. [ 52.494013][ T4724] Zero length message leads to an empty skb [ 52.826736][ T4773] loop4: detected capacity change from 0 to 1024 [ 53.175144][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 53.659039][ T4789] loop1: detected capacity change from 0 to 128 [ 53.688127][ T4789] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 53.690288][ T4789] hpfs: filesystem error: improperly stopped [ 53.691302][ T4789] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 53.692785][ T4789] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2 [ 53.741119][ T4318] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 54.199311][ T4810] Driver unsupported XDP return value 0 on prog (id 3) dev N/A, expect packet loss! [ 54.297907][ T4814] loop3: detected capacity change from 0 to 1024 [ 54.743950][ T4820] loop0: detected capacity change from 0 to 512 [ 54.746152][ T4820] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 54.777691][ T4822] loop2: detected capacity change from 0 to 4096 [ 54.873922][ T4827] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 54.883407][ T4820] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3861: comm syz.0.95: Allocating blocks 41-42 which overlap fs metadata [ 54.888581][ T4820] EXT4-fs (loop0): Remounting filesystem read-only [ 54.891089][ T4820] Quota error (device loop0): write_blk: dquota write failed [ 54.894072][ T4820] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 54.896967][ T4820] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3861: comm syz.0.95: Allocating blocks 41-42 which overlap fs metadata [ 54.903524][ T4820] EXT4-fs (loop0): Remounting filesystem read-only [ 54.904974][ T4820] Quota error (device loop0): write_blk: dquota write failed [ 54.906410][ T4820] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 54.908501][ T4820] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.95: Failed to acquire dquot type 1 [ 54.911181][ T4820] EXT4-fs (loop0): Remounting filesystem read-only [ 54.912712][ T4820] EXT4-fs error (device loop0): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 54.916569][ T4820] EXT4-fs (loop0): Remounting filesystem read-only [ 54.921955][ T4820] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #12: comm syz.0.95: corrupted inode contents [ 54.924432][ T4820] EXT4-fs (loop0): Remounting filesystem read-only [ 54.925772][ T4820] EXT4-fs error (device loop0): ext4_dirty_inode:6156: inode #12: comm syz.0.95: mark_inode_dirty error [ 55.280204][ T4820] EXT4-fs (loop0): Remounting filesystem read-only [ 55.287179][ T4820] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #12: comm syz.0.95: corrupted inode contents [ 55.297342][ T4820] EXT4-fs (loop0): Remounting filesystem read-only [ 55.338416][ T4820] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #12: comm syz.0.95: mark_inode_dirty error [ 55.345283][ T4820] EXT4-fs (loop0): Remounting filesystem read-only [ 55.362438][ T4820] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #12: comm syz.0.95: corrupted inode contents [ 55.364993][ T4840] loop3: detected capacity change from 0 to 512 [ 55.366783][ T4840] ext3: Unknown parameter 'noacl' [ 55.369575][ T4820] EXT4-fs (loop0): Remounting filesystem read-only [ 55.371043][ T4820] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 55.375891][ T4820] EXT4-fs (loop0): Remounting filesystem read-only [ 55.378124][ T4820] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #12: comm syz.0.95: corrupted inode contents [ 55.382765][ T4820] EXT4-fs (loop0): Remounting filesystem read-only [ 55.384182][ T4820] EXT4-fs error (device loop0): ext4_truncate:4325: inode #12: comm syz.0.95: mark_inode_dirty error [ 55.386348][ T4820] EXT4-fs (loop0): Remounting filesystem read-only [ 55.387620][ T4820] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 55.389711][ T4820] EXT4-fs (loop0): Remounting filesystem read-only [ 55.391194][ T4820] EXT4-fs (loop0): 1 truncate cleaned up [ 55.392373][ T4820] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 55.400337][ T4318] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 55.777596][ T4844] loop3: detected capacity change from 0 to 8 [ 56.608446][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 56.715532][ T4854] loop2: detected capacity change from 0 to 512 [ 56.717116][ T4854] EXT4-fs: inline encryption not supported [ 56.817960][ C0] sched: RT throttling activated [ 56.854266][ T4854] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 57.855049][ T4860] loop4: detected capacity change from 0 to 256 [ 57.923648][ T4860] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 57.997536][ T4864] loop0: detected capacity change from 0 to 512 [ 58.130485][ T4854] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.101: corrupted in-inode xattr [ 58.133711][ T4854] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.101: couldn't read orphan inode 15 (err -117) [ 58.261096][ T4872] process 'syz.4.105' launched './file1' with NULL argv: empty string added [ 58.553314][ T4854] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 58.693896][ T4871] Injecting memory failure for pfn 0x13d801 at process virtual address 0x20001000 [ 59.109927][ T4320] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 59.513771][ T4876] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 59.521384][ T4871] Memory failure: 0x13d801: recovery action for dirty LRU page: Recovered [ 59.592151][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 59.597416][ T4879] device syzkaller0 entered promiscuous mode [ 60.276826][ T4889] loop2: detected capacity change from 0 to 512 [ 60.279348][ T4889] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 60.282123][ T4889] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 60.301970][ T4889] EXT4-fs (loop2): 1 truncate cleaned up [ 60.303261][ T4889] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 60.766347][ T4899] device syzkaller0 entered promiscuous mode [ 60.787892][ T4899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.113'. [ 60.805833][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 61.003827][ T4912] loop0: detected capacity change from 0 to 256 [ 61.965306][ T4910] wusb3801 0-0004: supply vbus not found, using dummy regulator [ 61.971783][ T4910] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x04 [ 63.010622][ T4932] bridge0: port 3(erspan0) entered blocking state [ 63.012324][ T4932] bridge0: port 3(erspan0) entered disabled state [ 63.014415][ T4932] device erspan0 entered promiscuous mode [ 63.016308][ T4932] bridge0: port 3(erspan0) entered blocking state [ 63.017884][ T4932] bridge0: port 3(erspan0) entered forwarding state [ 63.023473][ T4932] device erspan0 left promiscuous mode [ 63.024622][ T4932] bridge0: port 3(erspan0) entered disabled state [ 63.392184][ T4937] loop3: detected capacity change from 0 to 512 [ 63.394645][ T4937] EXT4-fs: Ignoring removed nobh option [ 63.836650][ T4948] loop0: detected capacity change from 0 to 164 [ 63.858566][ T4937] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 64.202359][ T4953] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4329] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4953] [ 64.244188][ T4957] rock: directory entry would overflow storage [ 64.245560][ T4957] rock: sig=0x4f50, size=4, remaining=3 [ 64.246631][ T4957] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 64.258598][ T4953] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #2: comm syz.3.125: corrupted inode contents [ 64.265552][ T4953] EXT4-fs error (device loop3): ext4_dirty_inode:6156: inode #2: comm syz.3.125: mark_inode_dirty error [ 64.267849][ T4953] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #2: comm syz.3.125: corrupted inode contents [ 64.270460][ T4953] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.125: mark_inode_dirty error [ 64.435286][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 64.489829][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.491837][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.530272][ T4959] loop2: detected capacity change from 0 to 131072 [ 64.673813][ T4966] loop1: detected capacity change from 0 to 512 [ 65.255315][ T4959] F2FS-fs (loop2): Test dummy encryption mode enabled [ 65.257163][ T4959] F2FS-fs (loop2): invalid crc value [ 65.284201][ T4959] F2FS-fs (loop2): Found nat_bits in checkpoint [ 65.318221][ T4959] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 65.893823][ T4066] libceph: connect (1)[c::]:6789 error -101 [ 65.895281][ T4066] libceph: mon0 (1)[c::]:6789 connect error [ 65.955132][ T4963] loop3: detected capacity change from 0 to 131072 [ 65.957188][ T4963] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 65.959401][ T4963] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 65.976225][ T4963] F2FS-fs (loop3): invalid crc value [ 65.983060][ T4963] F2FS-fs (loop3): Found nat_bits in checkpoint [ 65.995537][ T4963] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 65.997053][ T4963] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 66.482000][ T4980] ceph: No mds server is up or the cluster is laggy [ 66.691815][ T4066] libceph: connect (1)[c::]:6789 error -101 [ 66.693044][ T4066] libceph: mon0 (1)[c::]:6789 connect error [ 67.874137][ T5012] loop2: detected capacity change from 0 to 16 [ 67.945621][ T5012] erofs: (device loop2): mounted with root inode @ nid 36. [ 68.232965][ T5019] erofs: (device loop2): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 89 [ 68.235008][ T5019] erofs: (device loop2): z_erofs_readahead: readahead error at page 17 @ nid 89 [ 68.236701][ T5019] erofs: (device loop2): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 89 [ 68.238549][ T5019] erofs: (device loop2): z_erofs_readahead: readahead error at page 16 @ nid 89 [ 68.240903][ T5019] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 68.242771][ T5019] erofs: (device loop2): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 68.244906][ T5019] syz.2.135: attempt to access beyond end of device [ 68.244906][ T5019] loop2: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 68.248071][ T5019] syz.2.135: attempt to access beyond end of device [ 68.248071][ T5019] loop2: rw=524288, sector=96, nr_sectors = 40 limit=16 [ 68.250930][ T5019] syz.2.135: attempt to access beyond end of device [ 68.250930][ T5019] loop2: rw=524288, sector=8, nr_sectors = 80 limit=16 [ 68.287252][ T5019] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 68.287305][ T5020] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 68.289134][ T5019] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 68.290317][ T5020] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 68.292438][ T5019] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 68.294617][ T5021] loop4: detected capacity change from 0 to 128 [ 68.295994][ T5019] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 68.314251][ T5021] FAT-fs (loop4): bogus number of reserved sectors [ 68.315761][ T5021] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 68.323420][ T5021] FAT-fs (loop4): Can't find a valid FAT filesystem [ 68.367828][ T4866] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 68.615187][ T5021] loop4: detected capacity change from 0 to 131072 [ 68.902866][ T5021] F2FS-fs (loop4): Test dummy encryption mode enabled [ 68.905535][ T5021] F2FS-fs (loop4): invalid crc value [ 68.939145][ T5032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.145'. [ 68.941078][ T5032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.942571][ T5032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.944702][ T5032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.946147][ T5032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.031033][ T5036] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 69.899980][ T5021] F2FS-fs (loop4): Found nat_bits in checkpoint [ 69.909189][ T5021] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 70.410014][ T5054] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 71.472815][ T4345] Bluetooth: hci5: command 0x1003 tx timeout [ 71.474189][ T4332] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 71.765995][ T5065] loop3: detected capacity change from 0 to 8 [ 72.810132][ T5088] loop1: detected capacity change from 0 to 4096 [ 72.946000][ T5088] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 72.948077][ T5088] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 72.951370][ T5088] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 72.953318][ T5088] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 72.955670][ T5088] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 72.977348][ T5088] ntfs: volume version 3.1. [ 73.186319][ T5088] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 73.188687][ T5088] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 73.216326][ T5088] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 73.218309][ T5088] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 73.220303][ T5088] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 74.084632][ T5106] hub 8-0:1.0: USB hub found [ 74.085929][ T5106] hub 8-0:1.0: 8 ports detected [ 74.376108][ T5112] tipc: Enabling of bearer rejected, failed to enable media [ 74.827290][ T5094] loop3: detected capacity change from 0 to 32768 [ 75.145461][ T5094] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.155 (5094) [ 75.578264][ T5094] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 75.636670][ T5094] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 75.639396][ T5094] BTRFS info (device loop3): turning off barriers [ 75.646187][ T5094] BTRFS info (device loop3): setting nodatasum [ 75.650135][ T5094] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 75.655356][ T5094] BTRFS info (device loop3): use zstd compression, level 3 [ 75.657937][ T5094] BTRFS info (device loop3): using free space tree [ 76.778200][ T5155] loop4: detected capacity change from 0 to 16 [ 76.798869][ T5153] infiniband syz2: set down [ 76.799843][ T5153] infiniband syz2: added ipvlan0 [ 76.849396][ T5155] erofs: (device loop4): mounted with root inode @ nid 36. [ 77.192728][ T5153] infiniband syz2: Couldn't open port 1 [ 77.593327][ T5154] tipc: Started in network mode [ 77.594329][ T5154] tipc: Node identity 4, cluster identity 4711 [ 77.595520][ T5154] tipc: Node number set to 4 [ 77.694825][ T5153] RDS/IB: syz2: added [ 77.695709][ T5153] smc: adding ib device syz2 with port count 1 [ 77.696826][ T5153] smc: ib device syz2 port 1 has pnetid [ 77.787386][ T5094] BTRFS error (device loop3): open_ctree failed: -12 [ 77.892444][ T5176] loop2: detected capacity change from 0 to 1024 [ 78.050754][ T5184] loop0: detected capacity change from 0 to 512 [ 78.054220][ T5184] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 78.074817][ T5184] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3861: comm syz.0.171: Allocating blocks 41-42 which overlap fs metadata [ 78.100830][ T5184] EXT4-fs (loop0): Remounting filesystem read-only [ 78.102065][ T5184] __quota_error: 4 callbacks suppressed [ 78.102073][ T5184] Quota error (device loop0): write_blk: dquota write failed [ 78.104380][ T5184] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 78.105907][ T5184] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3861: comm syz.0.171: Allocating blocks 41-42 which overlap fs metadata [ 78.856651][ T5184] EXT4-fs (loop0): Remounting filesystem read-only [ 78.861369][ T5184] Quota error (device loop0): write_blk: dquota write failed [ 78.862818][ T5184] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 78.864580][ T5184] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.171: Failed to acquire dquot type 1 [ 78.869049][ T5184] EXT4-fs (loop0): Remounting filesystem read-only [ 78.870345][ T5184] EXT4-fs error (device loop0): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 78.908378][ T5184] EXT4-fs (loop0): Remounting filesystem read-only [ 78.909579][ T5184] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #12: comm syz.0.171: corrupted inode contents [ 78.974558][ T5176] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 79.183863][ T5184] EXT4-fs (loop0): Remounting filesystem read-only [ 79.312461][ T5184] EXT4-fs error (device loop0): ext4_dirty_inode:6156: inode #12: comm syz.0.171: mark_inode_dirty error [ 79.330324][ T5184] EXT4-fs (loop0): Remounting filesystem read-only [ 79.331504][ T5184] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #12: comm syz.0.171: corrupted inode contents [ 79.334761][ T5198] loop4: detected capacity change from 0 to 4096 [ 79.336484][ T5198] EXT4-fs: inline encryption not supported [ 79.340879][ T5198] EXT4-fs: Ignoring removed mblk_io_submit option [ 79.343182][ T5198] EXT4-fs: inline encryption not supported [ 79.344357][ T5198] ext4: Unknown parameter 'in' [ 79.348517][ T5184] EXT4-fs (loop0): Remounting filesystem read-only [ 79.350908][ T5184] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #12: comm syz.0.171: mark_inode_dirty error [ 79.371428][ T5184] EXT4-fs (loop0): Remounting filesystem read-only [ 79.372870][ T5184] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #12: comm syz.0.171: corrupted inode contents [ 79.385265][ T5184] EXT4-fs (loop0): Remounting filesystem read-only [ 79.392928][ T5184] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 79.394912][ T5184] EXT4-fs (loop0): Remounting filesystem read-only [ 79.396220][ T5184] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #12: comm syz.0.171: corrupted inode contents [ 79.398692][ T5184] EXT4-fs (loop0): Remounting filesystem read-only [ 79.400041][ T5184] EXT4-fs error (device loop0): ext4_truncate:4325: inode #12: comm syz.0.171: mark_inode_dirty error [ 79.402842][ T5184] EXT4-fs (loop0): Remounting filesystem read-only [ 79.404013][ T5184] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 79.405908][ T5184] EXT4-fs (loop0): Remounting filesystem read-only [ 79.407259][ T5184] EXT4-fs (loop0): 1 truncate cleaned up [ 79.408409][ T5184] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 79.416209][ T4318] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 79.572870][ T5198] trusted_key: encrypted_key: insufficient parameters specified [ 79.650967][ T5198] loop4: detected capacity change from 0 to 512 [ 79.657758][ T5198] FAT-fs (loop4): Unrecognized mount option "nnonumtail=1" or missing value [ 79.814383][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 79.910317][ T5204] loop3: detected capacity change from 0 to 512 [ 80.471541][ T5204] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 80.473215][ T5204] System zones: 1-12 [ 80.476252][ T5204] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.175: missing EA_INODE flag [ 80.489148][ T5204] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.175: error while reading EA inode 12 err=-117 [ 80.496981][ T5204] EXT4-fs (loop3): 1 orphan inode deleted [ 80.500355][ T5204] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 81.128995][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 81.454207][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 81.873303][ T5235] Injecting memory failure for pfn 0x13da01 at process virtual address 0x20001000 [ 82.653778][ T5245] loop1: detected capacity change from 0 to 16 [ 82.663496][ T5245] erofs: (device loop1): mounted with root inode @ nid 36. [ 82.955961][ T5250] erofs: (device loop1): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 89 [ 82.958031][ T5250] erofs: (device loop1): z_erofs_readahead: readahead error at page 17 @ nid 89 [ 82.959933][ T5250] erofs: (device loop1): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 89 [ 82.961938][ T5250] erofs: (device loop1): z_erofs_readahead: readahead error at page 16 @ nid 89 [ 82.963935][ T5250] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 83.021513][ T5250] erofs: (device loop1): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 83.023604][ T5250] syz.1.185: attempt to access beyond end of device [ 83.023604][ T5250] loop1: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 83.026292][ T5250] syz.1.185: attempt to access beyond end of device [ 83.026292][ T5250] loop1: rw=524288, sector=96, nr_sectors = 40 limit=16 [ 83.028949][ T5250] syz.1.185: attempt to access beyond end of device [ 83.028949][ T5250] loop1: rw=524288, sector=8, nr_sectors = 80 limit=16 [ 83.034348][ T5235] Memory failure: 0x13da01: recovery action for dirty LRU page: Recovered [ 83.296838][ T5243] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 83.304686][ T5247] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 83.304973][ T5250] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 83.306223][ T5247] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 83.307764][ T5250] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 83.311942][ T5250] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 83.313577][ T5250] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 83.685102][ T5259] loop3: detected capacity change from 0 to 131072 [ 83.735242][ T5259] F2FS-fs (loop3): Test dummy encryption mode enabled [ 83.736808][ T5259] F2FS-fs (loop3): invalid crc value [ 83.838412][ T5269] loop0: detected capacity change from 0 to 4096 [ 85.322003][ T5259] F2FS-fs (loop3): Found nat_bits in checkpoint [ 85.415056][ T5259] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 85.535086][ T5269] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 85.537249][ T5269] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 85.542899][ T5269] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 85.545159][ T5269] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 85.547814][ T5269] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 85.613787][ T5281] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 85.644906][ T5269] ntfs: volume version 3.1. [ 85.657723][ T5269] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 85.660382][ T5269] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 85.665106][ T5269] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 85.667435][ T5269] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 85.669701][ T5269] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 86.586625][ T5301] xt_policy: output policy not valid in PREROUTING and INPUT [ 88.281556][ T5329] loop2: detected capacity change from 0 to 512 [ 88.533147][ T5331] loop1: detected capacity change from 0 to 512 [ 88.535060][ T5331] EXT4-fs: Ignoring removed nobh option [ 88.574257][ T5318] loop4: detected capacity change from 0 to 40427 [ 88.576124][ T5331] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 88.579011][ T5318] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 88.582646][ T5318] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 88.586843][ T5318] F2FS-fs (loop4): invalid crc value [ 88.687218][ T5318] F2FS-fs (loop4): Found nat_bits in checkpoint [ 88.708698][ T5342] loop2: detected capacity change from 0 to 512 [ 88.768537][ T5345] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4328] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[5345] [ 88.796359][ T5345] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #2: comm syz.1.204: corrupted inode contents [ 88.805081][ T5345] EXT4-fs error (device loop1): ext4_dirty_inode:6156: inode #2: comm syz.1.204: mark_inode_dirty error [ 88.909990][ T5345] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #2: comm syz.1.204: corrupted inode contents [ 88.959921][ T5345] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.204: mark_inode_dirty error [ 89.021015][ T5318] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 89.022733][ T5318] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 89.022986][ T5342] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 89.051090][ T5342] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3861: comm syz.2.205: Allocating blocks 41-42 which overlap fs metadata [ 89.054089][ T5342] EXT4-fs (loop2): Remounting filesystem read-only [ 89.055505][ T5342] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3861: comm syz.2.205: Allocating blocks 41-42 which overlap fs metadata [ 89.058427][ T5342] EXT4-fs (loop2): Remounting filesystem read-only [ 89.059862][ T5342] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.205: Failed to acquire dquot type 1 [ 89.062173][ T5342] EXT4-fs (loop2): Remounting filesystem read-only [ 89.063622][ T5342] EXT4-fs error (device loop2): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 89.066855][ T5342] EXT4-fs (loop2): Remounting filesystem read-only [ 89.075671][ T5342] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.205: corrupted inode contents [ 89.079153][ T5342] EXT4-fs (loop2): Remounting filesystem read-only [ 89.081466][ T5342] EXT4-fs error (device loop2): ext4_dirty_inode:6156: inode #12: comm syz.2.205: mark_inode_dirty error [ 89.085759][ T5342] EXT4-fs (loop2): Remounting filesystem read-only [ 89.087134][ T5342] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.205: corrupted inode contents [ 89.094239][ T5342] EXT4-fs (loop2): Remounting filesystem read-only [ 89.097839][ T5342] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #12: comm syz.2.205: mark_inode_dirty error [ 89.103453][ T5342] EXT4-fs (loop2): Remounting filesystem read-only [ 89.105002][ T5342] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.205: corrupted inode contents [ 89.111569][ T5342] EXT4-fs (loop2): Remounting filesystem read-only [ 89.114042][ T5342] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 89.118443][ T5342] EXT4-fs (loop2): Remounting filesystem read-only [ 89.120868][ T5342] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.205: corrupted inode contents [ 89.124426][ T5342] EXT4-fs (loop2): Remounting filesystem read-only [ 89.127515][ T5342] EXT4-fs error (device loop2): ext4_truncate:4325: inode #12: comm syz.2.205: mark_inode_dirty error [ 89.154782][ T5342] EXT4-fs (loop2): Remounting filesystem read-only [ 89.171528][ T5342] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 89.174623][ T5342] EXT4-fs (loop2): Remounting filesystem read-only [ 89.334655][ T5342] EXT4-fs (loop2): 1 truncate cleaned up [ 89.336939][ T5342] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 89.443592][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 90.020762][ T5358] loop1: detected capacity change from 0 to 131072 [ 90.090917][ T5358] F2FS-fs (loop1): Test dummy encryption mode enabled [ 90.094796][ T5358] F2FS-fs (loop1): invalid crc value [ 90.178769][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 90.296573][ T5358] F2FS-fs (loop1): Found nat_bits in checkpoint [ 90.307107][ T5358] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 92.224071][ T5386] xt_policy: output policy not valid in PREROUTING and INPUT [ 93.396394][ T5412] loop0: detected capacity change from 0 to 16 [ 93.451606][ T5412] erofs: (device loop0): mounted with root inode @ nid 36. [ 93.638205][ T5420] loop2: detected capacity change from 0 to 512 [ 93.646593][ T5420] EXT4-fs: Ignoring removed nobh option [ 93.922092][ T5423] ICMPv6: NA: ff:ff:ff:ff:ff:ff advertised our address fe80::aa on syz_tun! [ 93.930756][ T5430] loop3: detected capacity change from 0 to 131072 [ 93.969428][ T5430] F2FS-fs (loop3): Test dummy encryption mode enabled [ 93.971842][ T5430] F2FS-fs (loop3): invalid crc value [ 94.310154][ T5420] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 95.040219][ T5446] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4339] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[5446] [ 95.271448][ T5446] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #2: comm syz.2.221: corrupted inode contents [ 95.964993][ T5449] hub 8-0:1.0: USB hub found [ 96.545850][ T5449] hub 8-0:1.0: 8 ports detected [ 96.688108][ T5446] EXT4-fs error (device loop2): ext4_dirty_inode:6156: inode #2: comm syz.2.221: mark_inode_dirty error [ 96.731680][ T5430] F2FS-fs (loop3): Found nat_bits in checkpoint [ 96.862818][ T5446] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #2: comm syz.2.221: corrupted inode contents [ 97.161648][ T5446] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.221: mark_inode_dirty error [ 97.204942][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 98.095558][ T5468] tipc: Started in network mode [ 98.096538][ T5468] tipc: Node identity 4, cluster identity 4711 [ 98.097637][ T5468] tipc: Node number set to 4 [ 99.654735][ T5497] loop4: detected capacity change from 0 to 131072 [ 99.765021][ T5497] F2FS-fs (loop4): Test dummy encryption mode enabled [ 99.772370][ T5497] F2FS-fs (loop4): invalid crc value [ 99.869218][ T5506] rdma_rxe: rxe_register_device failed with error -23 [ 99.870903][ T5506] rdma_rxe: failed to add ipvlan0 [ 99.884752][ T5506] loop2: detected capacity change from 0 to 16 [ 100.840882][ T5506] erofs: (device loop2): mounted with root inode @ nid 36. [ 101.262786][ T5497] F2FS-fs (loop4): Found nat_bits in checkpoint [ 101.282264][ T5497] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 103.158929][ T5530] loop1: detected capacity change from 0 to 128 [ 104.188317][ T5540] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4336] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[5540] [ 104.624004][ T5548] tipc: Started in network mode [ 104.625053][ T5548] tipc: Node identity 4, cluster identity 4711 [ 104.626094][ T5548] tipc: Node number set to 4 [ 105.831814][ T5571] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 105.852981][ T5567] loop3: detected capacity change from 0 to 40427 [ 105.860069][ T5567] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 105.863031][ T5567] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 105.866523][ T5567] F2FS-fs (loop3): invalid crc value [ 106.041451][ T5567] F2FS-fs (loop3): Found nat_bits in checkpoint [ 106.214055][ T5584] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 106.770044][ T5567] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 106.771293][ T5567] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 108.952301][ T5599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.265'. [ 108.954166][ T5599] bond0: option packets_per_slave: invalid value (18446744072707910257) [ 108.955662][ T5599] bond0: option packets_per_slave: allowed values 0 - 65535 [ 111.343803][ T5637] loop1: detected capacity change from 0 to 1024 [ 111.346600][ T5637] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 111.376338][ T5635] loop2: detected capacity change from 0 to 40427 [ 111.396716][ T5644] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 111.464888][ T5635] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3ffff [ 111.466715][ T5635] F2FS-fs (loop2): Invalid gid value -1 [ 111.620231][ T5649] hfsplus: filesystem is marked journaled, leaving read-only. [ 112.084308][ T5654] loop0: detected capacity change from 0 to 1024 [ 112.097797][ T5654] EXT4-fs: Ignoring removed bh option [ 112.211880][ T5661] loop1: detected capacity change from 0 to 2048 [ 112.213474][ T5654] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 112.223774][ T5661] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=2362, location=2362 [ 112.227341][ T5661] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 112.252734][ T5661] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 112.296101][ T5661] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 112.660517][ T5635] input: syz1 as /devices/virtual/input/input2 [ 112.760517][ T5667] loop2: detected capacity change from 0 to 1024 [ 113.414223][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 113.440513][ T5673] ceph: No mds server is up or the cluster is laggy [ 113.469767][ T5682] loop3: detected capacity change from 0 to 8 [ 113.546960][ T5667] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 113.739613][ T5689] bpf_jit: unknown opcode 06 [ 114.260769][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 114.842471][ T5708] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 116.083590][ T5723] loop2: detected capacity change from 0 to 128 [ 116.397713][ T5722] loop0: detected capacity change from 0 to 204800 [ 116.410668][ T5722] loop1: detected capacity change from 0 to 204800 [ 117.272722][ T5736] loop3: detected capacity change from 0 to 40427 [ 117.569348][ T5736] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3ffff [ 117.573227][ T5736] F2FS-fs (loop3): Invalid gid value -1 [ 118.203471][ T5736] input: syz1 as /devices/virtual/input/input3 [ 118.320632][ T5765] overlayfs: conflicting lowerdir path [ 118.952279][ T5768] loop3: detected capacity change from 0 to 1024 [ 119.036729][ T5768] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 120.828316][ T4345] Bluetooth: hci4: link tx timeout [ 120.829533][ T4345] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 121.128132][ T5777] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 121.203696][ T5777] EXT4-fs (loop3): Remounting filesystem read-only [ 122.183007][ T5817] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 122.743468][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 123.180806][ T4345] Bluetooth: hci4: command 0x0406 tx timeout [ 124.961630][ T5846] tipc: Started in network mode [ 124.962621][ T5846] tipc: Node identity 4, cluster identity 4711 [ 124.963700][ T5846] tipc: Node number set to 4 [ 125.208164][ T4345] Bluetooth: hci4: command 0x0405 tx timeout [ 125.233985][ T5858] loop0: detected capacity change from 0 to 40427 [ 125.321125][ T5862] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 125.552767][ T5858] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3ffff [ 125.557763][ T5858] F2FS-fs (loop0): Invalid gid value -1 [ 125.714228][ T5858] input: syz1 as /devices/virtual/input/input4 [ 125.978736][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.981589][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.056015][ T5871] loop0: detected capacity change from 0 to 1024 [ 126.082288][ T5873] loop4: detected capacity change from 0 to 1024 [ 126.095135][ T5875] loop2: detected capacity change from 0 to 1024 [ 126.097792][ T5873] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 126.099674][ T5875] EXT4-fs: Ignoring removed bh option [ 126.115109][ T5871] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 126.126726][ T5875] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 126.315872][ T5883] hfsplus: filesystem is marked journaled, leaving read-only. [ 127.048351][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 127.073385][ T5863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.677935][ T4332] Bluetooth: hci4: link tx timeout [ 128.679651][ T4332] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 129.023800][ T5919] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 129.030734][ T5878] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 129.042761][ T5878] EXT4-fs (loop0): Remounting filesystem read-only [ 129.523030][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 129.674509][ T5907] loop2: detected capacity change from 0 to 40427 [ 129.702102][ T5907] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 129.703765][ T5907] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 129.709899][ T5907] F2FS-fs (loop2): invalid crc value [ 129.719801][ T5907] F2FS-fs (loop2): Found nat_bits in checkpoint [ 130.096910][ T5907] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 130.099861][ T5907] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 132.156554][ T5958] xt_CT: You must specify a L4 protocol and not use inversions on it [ 132.396127][ T5938] loop4: detected capacity change from 0 to 40427 [ 132.441077][ T5938] F2FS-fs (loop4): Unrecognized mount option "01777777777777777777777" or missing value [ 134.838337][ T4332] Bluetooth: hci4: link tx timeout [ 134.839346][ T4332] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 136.580442][ T5988] loop2: detected capacity change from 0 to 1024 [ 136.919954][ T5988] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 137.352780][ T6004] hfsplus: filesystem is marked journaled, leaving read-only. [ 138.297912][ T6021] xt_CT: You must specify a L4 protocol and not use inversions on it [ 138.484431][ T6022] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 140.512894][ T6024] loop4: detected capacity change from 0 to 512 [ 140.516539][ T6024] EXT4-fs: Ignoring removed bh option [ 140.529190][ T6024] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 141.832676][ T4332] Bluetooth: hci4: link tx timeout [ 141.833598][ T4332] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 141.849088][ T6024] EXT4-fs warning (device loop4): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop4. [ 142.205451][ T6038] loop2: detected capacity change from 0 to 32768 [ 142.208249][ T6038] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.375 (6038) [ 142.216545][ T6038] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 142.218745][ T6038] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 142.220748][ T6038] BTRFS warning (device loop2): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 142.222582][ T6038] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 142.224341][ T6038] BTRFS info (device loop2): trying to use backup root at mount time [ 142.225698][ T6038] BTRFS info (device loop2): using free space tree [ 142.609541][ T4486] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 142.611919][ T6038] BTRFS error (device loop2): failed to load root extent [ 142.613132][ T6038] BTRFS warning (device loop2): try to load backup roots slot 1 [ 142.614818][ T4486] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 142.617188][ T6038] BTRFS warning (device loop2): couldn't read tree root [ 142.618909][ T6038] BTRFS warning (device loop2): try to load backup roots slot 2 [ 142.620488][ T6038] BTRFS error (device loop2): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 142.622586][ T6038] BTRFS warning (device loop2): couldn't read tree root [ 142.623722][ T6038] BTRFS warning (device loop2): try to load backup roots slot 3 [ 142.627830][ T6038] BTRFS info (device loop2): enabling ssd optimizations [ 142.631675][ T6038] BTRFS info (device loop2): rebuilding free space tree [ 142.643734][ T6038] BTRFS info (device loop2): checking UUID tree [ 142.660756][ T6038] netlink: 14902 bytes leftover after parsing attributes in process `syz.2.375'. [ 142.696979][ T6061] loop1: detected capacity change from 0 to 40427 [ 142.705640][ T6061] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3ffff [ 142.707103][ T6061] F2FS-fs (loop1): Invalid gid value -1 [ 142.852273][ T4339] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 143.200904][ T6061] input: syz1 as /devices/virtual/input/input5 [ 143.292049][ T6094] loop1: detected capacity change from 0 to 1024 [ 143.343261][ T6094] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 144.088087][ T6098] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 144.115917][ T6098] EXT4-fs (loop1): Remounting filesystem read-only [ 144.116463][ T6107] loop4: detected capacity change from 0 to 256 [ 144.118971][ T6107] exfat: Deprecated parameter 'utf8' [ 144.141619][ T6107] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 144.150552][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 145.006047][ T6128] xt_CT: You must specify a L4 protocol and not use inversions on it [ 145.881768][ T6143] loop1: detected capacity change from 0 to 8 [ 146.006783][ T6147] xt_CT: You must specify a L4 protocol and not use inversions on it [ 146.655345][ T6152] loop4: detected capacity change from 0 to 2048 [ 146.669310][ T6152] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=2362, location=2362 [ 146.678843][ T6152] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 146.681180][ T6152] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 146.686840][ T6152] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.781470][ T6156] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 147.061189][ T6158] loop1: detected capacity change from 0 to 1024 [ 147.062761][ T6158] EXT4-fs: Ignoring removed bh option [ 147.096416][ T6158] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 147.198226][ T6166] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 147.977866][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 148.525725][ T6184] loop0: detected capacity change from 0 to 512 [ 148.924665][ T6181] loop1: detected capacity change from 0 to 40427 [ 149.127691][ T6198] xt_CT: You must specify a L4 protocol and not use inversions on it [ 149.238754][ T6181] F2FS-fs (loop1): invalid crc value [ 149.262080][ T6181] F2FS-fs (loop1): Found nat_bits in checkpoint [ 149.272972][ T6181] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 150.607371][ T6209] f2fs_ckpt-7:1: attempt to access beyond end of device [ 150.607371][ T6209] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 151.296237][ T6218] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 151.321968][ T6221] loop3: detected capacity change from 0 to 128 [ 153.232572][ T4345] Bluetooth: hci4: link tx timeout [ 153.233674][ T4345] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.332863][ T4345] Bluetooth: hci4: link tx timeout [ 153.333918][ T4345] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.335480][ T4345] Bluetooth: hci4: link tx timeout [ 153.336405][ T4345] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.338404][ T4345] Bluetooth: hci4: link tx timeout [ 153.339353][ T4345] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.341019][ T4345] Bluetooth: hci4: link tx timeout [ 153.662316][ T6252] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 153.676893][ T4330] Bluetooth: hci3: command 0x0406 tx timeout [ 153.676973][ T4337] Bluetooth: hci1: command 0x0406 tx timeout [ 153.679393][ T48] Bluetooth: hci0: command 0x0406 tx timeout [ 153.680813][ T4332] Bluetooth: hci2: command 0x0406 tx timeout [ 153.682441][ T4345] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.951717][ T4345] Bluetooth: hci4: link tx timeout [ 153.952807][ T4345] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.955522][ T4345] Bluetooth: hci4: link tx timeout [ 153.956484][ T4345] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.957868][ T4345] Bluetooth: hci4: link tx timeout [ 153.959534][ T4345] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.965838][ T4345] Bluetooth: hci4: link tx timeout [ 153.966695][ T4345] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.968032][ T4345] Bluetooth: hci4: link tx timeout [ 153.968877][ T4345] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 154.088340][ T6261] xt_CT: You must specify a L4 protocol and not use inversions on it [ 154.339377][ T6265] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 155.171102][ T6276] loop4: detected capacity change from 0 to 128 [ 155.438889][ T6280] loop2: detected capacity change from 0 to 8 [ 155.443790][ T6279] loop3: detected capacity change from 0 to 1024 [ 155.445959][ T6279] EXT4-fs: Ignoring removed bh option [ 155.462683][ T6279] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 155.835034][ T6289] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 156.346954][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 156.864795][ T6309] loop3: detected capacity change from 0 to 512 [ 157.315383][ T6319] xt_CT: You must specify a L4 protocol and not use inversions on it [ 158.392252][ T6323] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 159.472584][ T6337] loop1: detected capacity change from 0 to 128 [ 159.484355][ T6344] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 159.791143][ T6356] loop4: detected capacity change from 0 to 1024 [ 159.792795][ T6356] EXT4-fs: Ignoring removed bh option [ 159.801482][ T6356] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 160.571170][ T6361] loop3: detected capacity change from 0 to 128 [ 160.777416][ T6370] loop0: detected capacity change from 0 to 8 [ 160.825412][ T4336] EXT4-fs (loop4): unmounting filesystem. [ 161.693327][ T4345] Bluetooth: hci4: link tx timeout [ 161.694273][ T4345] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 161.695729][ T4345] Bluetooth: hci4: link tx timeout [ 161.696605][ T4345] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 161.700424][ T4345] Bluetooth: hci4: link tx timeout [ 161.701376][ T4345] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 161.702883][ T4345] Bluetooth: hci4: link tx timeout [ 161.703814][ T4345] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 161.705384][ T4345] Bluetooth: hci4: link tx timeout [ 161.706285][ T4345] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 161.707660][ T4345] Bluetooth: hci4: link tx timeout [ 161.708680][ T4345] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 161.710391][ T4345] Bluetooth: hci4: link tx timeout [ 161.711284][ T4345] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 161.712629][ T4345] Bluetooth: hci4: link tx timeout [ 161.713517][ T4345] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 161.714954][ T4345] Bluetooth: hci4: link tx timeout [ 161.715935][ T4345] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 161.717435][ T4345] Bluetooth: hci4: link tx timeout [ 161.718488][ T4345] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 161.721870][ T4345] Bluetooth: hci4: link tx timeout [ 161.848039][ T4345] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 161.849580][ T4345] Bluetooth: hci4: link tx timeout [ 161.850523][ T4345] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 163.055340][ T6381] xt_CT: You must specify a L4 protocol and not use inversions on it [ 163.293014][ T6391] ------------[ cut here ]------------ [ 163.294252][ T6391] WARNING: CPU: 1 PID: 6391 at security/landlock/fs.c:752 collect_domain_accesses+0x6c4/0x720 [ 163.296077][ T6391] Modules linked in: [ 163.296802][ T6391] CPU: 1 PID: 6391 Comm: syz.1.459 Not tainted syzkaller #0 [ 163.298103][ T6391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 163.299895][ T6391] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 163.301336][ T6391] pc : collect_domain_accesses+0x6c4/0x720 [ 163.302382][ T6391] lr : collect_domain_accesses+0x6c0/0x720 [ 163.303438][ T6391] sp : ffff8000219678d0 [ 163.304170][ T6391] x29: ffff800021967920 x28: ffff0000dd57d800 x27: 0000000000000001 [ 163.305623][ T6391] x26: ffff800021967a1a x25: 0000000000000000 x24: ffff0000dfe3e8d0 [ 163.307343][ T6391] x23: 0000000000002004 x22: 0000000000000001 x21: ffff0000dfe3e8d0 [ 163.309069][ T6391] x20: 0000000000002004 x19: 0000000000000000 x18: 0000000000000000 [ 163.310615][ T6391] x17: 0000000000000000 x16: ffff800011ba0e90 x15: 0000000000000002 [ 163.312177][ T6391] x14: 0000000000000001 x13: 1ffff00002a74071 x12: 0000000000080000 [ 163.313637][ T6391] x11: 0000000000000e1d x10: ffff8000222eb000 x9 : ffff80000a61dca4 [ 163.315107][ T6391] x8 : 0000000000000e1e x7 : ffff80000a619334 x6 : 0000000000000000 [ 163.316812][ T6391] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000002 [ 163.318264][ T6391] x2 : 0000000000000008 x1 : ffff800011cfedc0 x0 : 0000000000000000 [ 163.319768][ T6391] Call trace: [ 163.320364][ T6391] collect_domain_accesses+0x6c4/0x720 [ 163.321533][ T6391] current_check_refer_path+0x408/0x804 [ 163.322684][ T6391] hook_path_rename+0x4c/0x60 [ 163.323675][ T6391] security_path_rename+0x154/0x1f0 [ 163.324707][ T6391] do_renameat2+0x5cc/0xaa4 [ 163.325583][ T6391] __arm64_sys_renameat2+0xe8/0x104 [ 163.326491][ T6391] invoke_syscall+0x98/0x290 [ 163.327326][ T6391] el0_svc_common+0x13c/0x258 [ 163.328127][ T6391] do_el0_svc+0x5c/0x134 [ 163.328867][ T6391] el0_svc+0x58/0x128 [ 163.329602][ T6391] el0t_64_sync_handler+0x84/0xf0 [ 163.330553][ T6391] el0t_64_sync+0x18c/0x190 [ 163.331388][ T6391] irq event stamp: 1614 [ 163.332123][ T6391] hardirqs last enabled at (1613): [] mod_objcg_state+0x32c/0x4f0 [ 163.333783][ T6391] hardirqs last disabled at (1614): [] el1_dbg+0x24/0x80 [ 163.335350][ T6391] softirqs last enabled at (1596): [] local_bh_enable+0x10/0x34 [ 163.337025][ T6391] softirqs last disabled at (1594): [] local_bh_disable+0x10/0x34 [ 163.338772][ T6391] ---[ end trace 0000000000000000 ]--- [ 163.749672][ T6398] loop4: detected capacity change from 0 to 512