last executing test programs: 3.357030788s ago: executing program 0 (id=538): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000200)=""/140, 0x8c}], 0x1}, 0x7a5}], 0x1, 0x0, 0x0) close(r1) 3.118896343s ago: executing program 0 (id=539): r0 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x6, 0x3}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x8) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000004c0)={0x2e, 0x46, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000380)=@any_dev={0x4, 0xa5c, 0x0, 0x0, 0x1000, 0x3, 0x0, 0x0, 0x1}}}, 0x0) syz_io_uring_submit$UBLK(r1, r2, r3, &(0x7f0000000980)=@ublk_io_cmd_sqes={0x2e, 0x2a, 0x0, 0xffffffffffffffff, 0xc0107522, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, '\x00', @commit_and_fetch_cmd={0x3, 0x454, 0x9, 0x0}}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000440)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@new_dev={0x7, 0xecc, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xa6}}}, 0x0) io_uring_enter(r0, 0x6516, 0x6d93, 0x8, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, 0x0, 0x0) 3.023908355s ago: executing program 0 (id=540): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ac0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {0x0, 0x4788}, {0x7, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.79066836s ago: executing program 0 (id=543): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r3, r2, 0x25, 0x0, @val=@tracing={0x0, 0x8}}, 0x20) syz_emit_ethernet(0x5e, &(0x7f0000000280)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast2={0xff, 0x5}, @remote}}}}}}, 0x0) 2.722510162s ago: executing program 0 (id=546): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x40001, 0x1ee) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) sendfile(r1, r2, 0x0, 0x20fffe82) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c0000000000000005"]) 2.36793362s ago: executing program 1 (id=552): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40040}], 0x1, 0x40) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), 0x38}, 0x40000061) 2.296081511s ago: executing program 1 (id=553): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000014c0)='\x00', 0x1}], 0x1}}], 0x1, 0x400c405) exit(0x0) sendmmsg$inet6(r0, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) 1.839512501s ago: executing program 0 (id=559): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) 1.41639627s ago: executing program 1 (id=565): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chdir(&(0x7f0000000100)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x101000, 0x107) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x20902, 0x0) write$sequencer(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="810100000000000081", @ANYRES32=r0], 0x10) 1.060895657s ago: executing program 1 (id=566): syz_io_uring_setup(0x4f6, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setgroups(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r5) setregid(0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) sendto$inet6(r4, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1.060682637s ago: executing program 4 (id=567): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x403, &(0x7f0000000240)={&(0x7f0000000180)=""/116, 0x74}) 1.060172948s ago: executing program 3 (id=568): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000fc0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x13, 0x7}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}]}}]}, 0x4c}}, 0x0) 964.30789ms ago: executing program 4 (id=569): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x11, 0x66, &(0x7f0000000440)=0x135, 0x4) 899.926051ms ago: executing program 4 (id=570): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x65, &(0x7f0000000000)=0x10001, 0x4) 899.788561ms ago: executing program 4 (id=571): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0}, &(0x7f00000003c0), &(0x7f00000004c0)=r1}, 0x20) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 878.654152ms ago: executing program 3 (id=572): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0xfff, 0x3, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xbe1, &(0x7f0000001600)=ANY=[], 0x0) 847.062392ms ago: executing program 4 (id=573): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x4, 0x61f, &(0x7f0000000b00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1}) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="8f2a0a65bd8c002b", 0x8) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474082, 0x5c, 0x8}, 0x18) 795.229603ms ago: executing program 3 (id=574): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x10000000, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) 657.651636ms ago: executing program 4 (id=575): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000014c0)='\x00', 0x1}], 0x1}}], 0x1, 0x400c405) exit(0x0) sendmmsg$inet6(r0, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) 656.790036ms ago: executing program 2 (id=576): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) syz_clone(0x4400, 0x0, 0x0, 0x0, 0x0, 0x0) 573.299998ms ago: executing program 3 (id=577): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffa}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f00000005c0)=ANY=[], 0x0) 499.853219ms ago: executing program 3 (id=578): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bd52007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x62, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x37, &(0x7f0000000580)={@empty, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv6=@generic={0x9, 0x6, "81ec90", 0x1, 0x2e, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, {[], '0'}}}}}}, 0x0) 481.82947ms ago: executing program 3 (id=579): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(r0) close(0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = getuid() setreuid(0xee00, r4) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x1) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r7], 0x44}}, 0x28000) 394.043962ms ago: executing program 2 (id=580): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x872bc000) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000), 0x8) listen(r0, 0x3) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000040), 0x8) listen(r1, 0x8) 315.951893ms ago: executing program 2 (id=581): syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='attr/keycreate\x00') fchdir(r0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x5750c0}, 0x18) close(0x3) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 203.535676ms ago: executing program 2 (id=582): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x5, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0xfffffffd, 0x32}, @in=@local, {0x1, 0x3, 0x9, 0x9, 0x2, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x5f, 0xa}, {0x1}, 0x100, 0x0, 0x2, 0x0, 0x0, 0x23}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r1, &(0x7f00000004c0)="e2ce7375444e173c394472bee16328d064eb60fa938cb46bd046195d4029c447d7e40ccd2ea053623ad0b223cad3834ded782104512d3fcd9bac6f2fe4ba215a0958f079c85c9ff749dd70d371c8cfcfb05c3c0e16ae9dd1356f167e359d2f1ae5d6543e2ff9cef3bf70c26e46283177933758c8d32acf27b46ba8495d", 0x7d) 151.485617ms ago: executing program 2 (id=583): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) symlinkat(&(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) 80.432038ms ago: executing program 2 (id=584): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) 79.659489ms ago: executing program 1 (id=585): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000200)=""/140, 0x8c}], 0x1}, 0x7a5}], 0x1, 0x0, 0x0) close(r1) 0s ago: executing program 1 (id=586): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x1af, &(0x7f0000000480)="$eJzsmD9P20AYxp+z86euqqZru7RSIzUd6thOWzVDh8wdigQCsREREwUcghIPSTY+BTMfI2LJ94ABmBgIGxPDobPP8RFBEhBJkHh/w+vn7Nd37705PZEMgiBeLedn16casobQ75BFWt6/0OMcTcnvZW6+H9f+Hx1YVye9/r/i6HwMAOfTr58A0C/p8OWY87tvZ+V1BVqkk+rzNTCYUm9Aw6rULhjWpd5WdEPkm+ZWzXPNzYZXEcISwRbBEaEwWt9gn6ESyqBEpjxvdbo7Zc9zmzMUk/o3KGn4q/RP/b2i3lhx/2BDgy11AQzLUv9BOupN2BJl/58S8fz60/YvTtLsmzWFeC9rn8+iHzMTcpJYaDfmL8RRegFljBVvIh959OsMQlwawOJ3sUgR+xM/ZPim+FNC8Y+8X9/LtzrdH7V6uepW3V3HKfy2flrWLycfGFEYx/ifEfjTW2X+5AO5KZZCu+z7TTuMw7HTTsNvOvc5birwPw25r2HVTN5TCf4PPrAv4pLT5ZggCIIgCIIgCIIgCIIgCOLZ+QwWfAXl3OBDiuAjOEtB9m0AAAD//5oGYhw=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x1000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, 0x0, 0x5, 0x70bd2d, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.66' (ED25519) to the list of known hosts. [ 29.390972][ T4316] cgroup: Unknown subsys name 'net' [ 29.670431][ T4316] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.925135][ T4316] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 30.644677][ T4331] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.647209][ T4331] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.649330][ T4334] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.651430][ T4334] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.652954][ T4334] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.654417][ T4334] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 30.655705][ T4334] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.657624][ T4338] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.663804][ T4334] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.665507][ T4334] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.666943][ T4334] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.670709][ T4338] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.673105][ T4338] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.675065][ T4341] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.676656][ T4341] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 30.682622][ T4341] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.684409][ T4341] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.686141][ T4333] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 30.686212][ T4341] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.689925][ T4333] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.691196][ T4333] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.697766][ T4336] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.699446][ T4336] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 30.700838][ T4336] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.717073][ T4336] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.718791][ T4336] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.720465][ T4336] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.721956][ T4336] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.723362][ T4336] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 30.724626][ T4336] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.825884][ T4330] chnl_net:caif_netlink_parms(): no params data found [ 30.829181][ T4328] chnl_net:caif_netlink_parms(): no params data found [ 30.843314][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 30.854893][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.856411][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.858207][ T4330] device bridge_slave_0 entered promiscuous mode [ 30.866484][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.868821][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.870524][ T4330] device bridge_slave_1 entered promiscuous mode [ 30.877415][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.880070][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.881758][ T4328] device bridge_slave_0 entered promiscuous mode [ 30.895936][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.901693][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.902976][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.904633][ T4328] device bridge_slave_1 entered promiscuous mode [ 30.910484][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.920678][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.922051][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.923597][ T4329] device bridge_slave_0 entered promiscuous mode [ 30.932668][ T4330] team0: Port device team_slave_0 added [ 30.935143][ T4330] team0: Port device team_slave_1 added [ 30.944281][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.945625][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.947721][ T4329] device bridge_slave_1 entered promiscuous mode [ 30.949890][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.951135][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.955699][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.958514][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.959700][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.964501][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.039123][ T4330] device hsr_slave_0 entered promiscuous mode [ 31.088070][ T4330] device hsr_slave_1 entered promiscuous mode [ 31.139416][ T4328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.146916][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.150866][ T4328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.157634][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.160223][ T4342] chnl_net:caif_netlink_parms(): no params data found [ 31.164197][ T4339] chnl_net:caif_netlink_parms(): no params data found [ 31.169526][ T4328] team0: Port device team_slave_0 added [ 31.177601][ T4328] team0: Port device team_slave_1 added [ 31.184199][ T4329] team0: Port device team_slave_0 added [ 31.187317][ T4329] team0: Port device team_slave_1 added [ 31.211526][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.212729][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.217100][ T4328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.234134][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.235412][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.240104][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.242440][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.243603][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.248159][ T4328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.253457][ T4339] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.254887][ T4339] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.256488][ T4339] device bridge_slave_0 entered promiscuous mode [ 31.258517][ T4339] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.259653][ T4339] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.261353][ T4339] device bridge_slave_1 entered promiscuous mode [ 31.263084][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.264144][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.270736][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.291359][ T4339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.296025][ T4342] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.297346][ T4342] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.299609][ T4342] device bridge_slave_0 entered promiscuous mode [ 31.339063][ T4329] device hsr_slave_0 entered promiscuous mode [ 31.378128][ T4329] device hsr_slave_1 entered promiscuous mode [ 31.418013][ T4329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.419440][ T4329] Cannot create hsr debugfs directory [ 31.421366][ T4339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.425245][ T4342] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.426481][ T4342] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.428245][ T4342] device bridge_slave_1 entered promiscuous mode [ 31.478994][ T4328] device hsr_slave_0 entered promiscuous mode [ 31.518216][ T4328] device hsr_slave_1 entered promiscuous mode [ 31.558000][ T4328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.559401][ T4328] Cannot create hsr debugfs directory [ 31.567400][ T4342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.575572][ T4342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.578263][ T4339] team0: Port device team_slave_0 added [ 31.579995][ T4339] team0: Port device team_slave_1 added [ 31.600748][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.601962][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.606092][ T4339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.611546][ T4330] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.672374][ T4342] team0: Port device team_slave_0 added [ 31.674214][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.675499][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.680042][ T4339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.684897][ T4330] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.720629][ T4342] team0: Port device team_slave_1 added [ 31.723995][ T4330] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.765635][ T4330] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.811015][ T4342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.812224][ T4342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.816265][ T4342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.819518][ T4342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.820749][ T4342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.824890][ T4342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.889038][ T4339] device hsr_slave_0 entered promiscuous mode [ 31.928118][ T4339] device hsr_slave_1 entered promiscuous mode [ 31.977924][ T4339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.979343][ T4339] Cannot create hsr debugfs directory [ 32.038899][ T4342] device hsr_slave_0 entered promiscuous mode [ 32.088149][ T4342] device hsr_slave_1 entered promiscuous mode [ 32.127994][ T4342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.129301][ T4342] Cannot create hsr debugfs directory [ 32.152609][ T4329] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.212721][ T4329] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.263517][ T4329] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.306506][ T4329] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.373628][ T4328] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.409312][ T4328] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.459972][ T4328] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.499429][ T4328] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.550915][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.571756][ T4339] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.593842][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.596037][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.603036][ T4339] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.644186][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.646372][ T4339] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.688991][ T4339] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.718364][ T4341] Bluetooth: hci2: command 0x0409 tx timeout [ 32.719557][ T4341] Bluetooth: hci1: command 0x0409 tx timeout [ 32.720618][ T4341] Bluetooth: hci3: command 0x0409 tx timeout [ 32.720887][ T4336] Bluetooth: hci0: command 0x0409 tx timeout [ 32.742615][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.744632][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.746164][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.747433][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.749632][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.755664][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.757425][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.759767][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.761017][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.768971][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.771637][ T4342] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.797975][ T4333] Bluetooth: hci4: command 0x0409 tx timeout [ 32.800387][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.808586][ T4342] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.850797][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.852738][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.854255][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.855923][ T4342] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.900309][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.903017][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.904466][ T4342] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.945724][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.947788][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.955678][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.957172][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.959307][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.961410][ T1613] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.962596][ T1613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.964256][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.970977][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.972539][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.974128][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.975865][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.986040][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.987749][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.989767][ T1613] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.990994][ T1613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.992465][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.994174][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.995850][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.001847][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.004709][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.006520][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.009448][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.011067][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.012341][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.013828][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.025257][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.026958][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.030466][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.032250][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.033869][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.037424][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.044556][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.046377][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.049924][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.051263][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.056838][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.058831][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.061506][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.064004][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.070337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.072145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.074237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.075876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.077452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.084414][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.086244][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.090056][ T4339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.095211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.096960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.101914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.103448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.111522][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.121469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.123149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.131084][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.133181][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.134592][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.142296][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.146304][ T4339] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.150649][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.152099][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.160762][ T4342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.165716][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.167575][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.169959][ T1613] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.171239][ T1613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.172835][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.176993][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.178963][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.189689][ T1613] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.191029][ T1613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.195416][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.197159][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.204383][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.205933][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.207610][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.213373][ T4342] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.222708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.224484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.226318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.228922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.230395][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.231643][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.233212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.234801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.236214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.239245][ T4330] device veth0_vlan entered promiscuous mode [ 33.250274][ T4330] device veth1_vlan entered promiscuous mode [ 33.252774][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.254575][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.255920][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.257249][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.260095][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.261904][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.263431][ T1613] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.264597][ T1613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.266142][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.271379][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.272961][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.274624][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.276324][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.278777][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.280613][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.282179][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.289441][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.291415][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.293134][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.294899][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.296627][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.299829][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.312984][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.316105][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.317811][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.319501][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.321047][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.322642][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.326501][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.331328][ T4330] device veth0_macvtap entered promiscuous mode [ 33.334036][ T4330] device veth1_macvtap entered promiscuous mode [ 33.343902][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.345724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.347341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.352871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.354469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.356363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.357639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.364665][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.366245][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.373076][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.375863][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.377627][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.384977][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.390923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.392722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.394454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.395968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.400664][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.402123][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.405608][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.411966][ T4339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.414207][ T4330] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.415743][ T4330] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.417201][ T4330] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.420041][ T4330] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.425006][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.426808][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.431267][ T4329] device veth0_vlan entered promiscuous mode [ 33.434945][ T4329] device veth1_vlan entered promiscuous mode [ 33.437621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.439608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.441612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.443227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.444708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.455340][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.456891][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.459428][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.461043][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.463170][ T4328] device veth0_vlan entered promiscuous mode [ 33.493216][ T4328] device veth1_vlan entered promiscuous mode [ 33.495333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.496956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.499385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.500950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.513297][ T4329] device veth0_macvtap entered promiscuous mode [ 33.532930][ T4329] device veth1_macvtap entered promiscuous mode [ 33.542495][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.544129][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.545737][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.547323][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.553548][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.563196][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.565028][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.567276][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.574480][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.576243][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.578003][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.579684][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.583257][ T4328] device veth0_macvtap entered promiscuous mode [ 33.590724][ T4339] device veth0_vlan entered promiscuous mode [ 33.594858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.596553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.599416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.601093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.603160][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.603696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.604509][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.611708][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.613618][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.616158][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.619487][ T4328] device veth1_macvtap entered promiscuous mode [ 33.622948][ T4329] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.624464][ T4329] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.625844][ T4329] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.627329][ T4329] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.630820][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.632362][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.633865][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.635671][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.637644][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.639650][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.652107][ T4339] device veth1_vlan entered promiscuous mode [ 33.655321][ T4342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.664788][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.666596][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.669458][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.671172][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.673638][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.675997][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.677427][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.687596][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.689579][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.691213][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.692730][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.694404][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.695912][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.697680][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.703719][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.705368][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.706882][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.709204][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.711521][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.715345][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.716901][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.718588][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.720229][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.722430][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.724720][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.727563][ T4328] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.730296][ T4328] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.731726][ T4328] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.733187][ T4328] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.743303][ T4342] device veth0_vlan entered promiscuous mode [ 33.751978][ T4339] device veth0_macvtap entered promiscuous mode [ 33.754989][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.756765][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.759354][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.762153][ T4342] device veth1_vlan entered promiscuous mode [ 33.769168][ T4339] device veth1_macvtap entered promiscuous mode [ 33.784023][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.785859][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.789260][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.791106][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.792767][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.794498][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.802902][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.809501][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.811034][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.812568][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.814103][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.815888][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.827327][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.830757][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.832464][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.834470][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.836323][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.839283][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.841712][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.843059][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.844864][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.855212][ T1613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.856610][ T1613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.860362][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.861868][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.867097][ T4339] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.870385][ T4339] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.871975][ T4339] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.873487][ T4339] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.876629][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.879031][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.886929][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.892105][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.903626][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.905417][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.907165][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.914108][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.915527][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.917108][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.929830][ T4342] device veth0_macvtap entered promiscuous mode [ 33.932902][ T4342] device veth1_macvtap entered promiscuous mode [ 33.954265][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.956274][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.959467][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.961324][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.963099][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.964780][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.966483][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.971408][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.974039][ T4342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.975968][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.977625][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.980704][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.982349][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.991875][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.993719][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.012986][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.015261][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.016987][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.017124][ T4410] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3'. [ 34.020174][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.022095][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.023811][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.039733][ T4342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.045882][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.050879][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.056761][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.059391][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.061105][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.100069][ T4342] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.101823][ T4342] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.103421][ T4342] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.104971][ T4342] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.113882][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.115355][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.116742][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.194308][ T4376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.195768][ T4376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.200571][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.205963][ T4423] loop4: detected capacity change from 0 to 512 [ 34.210282][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.211700][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.213349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.233390][ T4413] loop1: detected capacity change from 0 to 32768 [ 34.235123][ T4423] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.251338][ T4413] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.2 (4413) [ 34.261914][ T4423] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 34.268885][ T4413] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 34.270585][ T4413] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 34.271934][ T4413] BTRFS info (device loop1): using free space tree [ 34.293323][ T4432] xt_NFQUEUE: number of total queues is 0 [ 34.306887][ T4423] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2802: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 34.310012][ T4423] EXT4-fs (loop4): 1 truncate cleaned up [ 34.311241][ T4423] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 34.333330][ T4423] EXT4-fs (loop4): shut down requested (2) [ 34.365786][ T4339] EXT4-fs (loop4): unmounting filesystem. [ 34.413805][ T4413] BTRFS info (device loop1): enabling ssd optimizations [ 34.498720][ T4328] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 34.797936][ T4336] Bluetooth: hci3: command 0x041b tx timeout [ 34.799517][ T4333] Bluetooth: hci1: command 0x041b tx timeout [ 34.799527][ T4331] Bluetooth: hci2: command 0x041b tx timeout [ 34.803243][ T4468] loop2: detected capacity change from 0 to 256 [ 34.805265][ T4468] ======================================================= [ 34.805265][ T4468] WARNING: The mand mount option has been deprecated and [ 34.805265][ T4468] and is ignored by this kernel. Remove the mand [ 34.805265][ T4468] option from the mount to silence this warning. [ 34.805265][ T4468] ======================================================= [ 34.812195][ T4341] Bluetooth: hci0: command 0x041b tx timeout [ 34.888362][ T4331] Bluetooth: hci4: command 0x041b tx timeout [ 35.066719][ T4475] loop2: detected capacity change from 0 to 512 [ 35.096629][ T4475] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.15: corrupted in-inode xattr [ 35.100844][ T4475] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.15: couldn't read orphan inode 15 (err -117) [ 35.113843][ T4475] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 35.205145][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 35.474311][ T4488] loop4: detected capacity change from 0 to 128 [ 35.477151][ T4488] EXT4-fs: Ignoring removed orlov option [ 35.485079][ T4488] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 35.526317][ T4339] EXT4-fs (loop4): unmounting filesystem. [ 35.588803][ T4491] loop0: detected capacity change from 0 to 8192 [ 35.797635][ T4494] loop4: detected capacity change from 0 to 32768 [ 35.808623][ T4494] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.21 (4494) [ 35.821671][ T4494] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 35.823375][ T4494] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 35.825150][ T4494] BTRFS info (device loop4): force clearing of disk cache [ 35.826500][ T4494] BTRFS info (device loop4): enabling auto defrag [ 35.827614][ T4494] BTRFS info (device loop4): max_inline at 0 [ 35.831802][ T4494] BTRFS info (device loop4): enabling disk space caching [ 35.833642][ T4494] BTRFS info (device loop4): disk space caching is enabled [ 35.956099][ T4494] BTRFS info (device loop4): enabling ssd optimizations [ 35.957766][ T4494] BTRFS info (device loop4): rebuilding free space tree [ 35.976939][ T4494] BTRFS info (device loop4): disabling free space tree [ 35.983396][ T4494] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 35.985070][ T4494] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 36.120824][ T4339] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 36.189701][ T4520] netlink: 40 bytes leftover after parsing attributes in process `syz.1.23'. [ 36.357300][ T4527] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 36.401114][ T4531] loop0: detected capacity change from 0 to 64 [ 36.423959][ T4531] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 36.533141][ T4521] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.535572][ T4521] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 36.573920][ T4541] loop4: detected capacity change from 0 to 4096 [ 36.598775][ T4541] ntfs: volume version 3.1. [ 36.662953][ T4550] xt_NFQUEUE: number of total queues is 0 [ 36.828071][ T4380] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 36.878709][ T4341] Bluetooth: hci0: command 0x040f tx timeout [ 36.879146][ T4331] Bluetooth: hci3: command 0x040f tx timeout [ 36.879851][ T4341] Bluetooth: hci2: command 0x040f tx timeout [ 36.880967][ T4333] Bluetooth: hci1: command 0x040f tx timeout [ 36.958649][ T4336] Bluetooth: hci4: command 0x040f tx timeout [ 37.011005][ T4380] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 37.012998][ T4380] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 37.016760][ T4380] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 37.018937][ T4380] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.021429][ T4380] usb 1-1: Product: syz [ 37.022204][ T4380] usb 1-1: Manufacturer: syz [ 37.024321][ T4380] usb 1-1: SerialNumber: syz [ 37.032146][ T4380] usb 1-1: config 0 descriptor?? [ 37.263631][ T4333] Bluetooth: hci0: unknown advertising packet type: 0x17 [ 37.263672][ T4333] Bluetooth: hci0: Dropping invalid advertising data [ 37.266713][ T4333] Bluetooth: hci0: Malformed LE Event: 0x02 [ 37.273935][ T4378] usb 1-1: USB disconnect, device number 2 [ 37.496688][ T4564] loop3: detected capacity change from 0 to 4096 [ 37.522336][ T4564] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 37.581778][ T4342] EXT4-fs (loop3): unmounting filesystem. [ 37.853490][ T4570] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 37.859832][ T4570] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 37.893940][ T4572] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 37.900712][ T4333] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 37.901851][ T4333] Bluetooth: Wrong link type (-22) [ 37.903586][ T4572] ntfs: volume version 3.1. [ 38.017626][ T4580] EXT2-fs (loop0): (no)acl options not supported [ 38.024992][ T4580] EXT2-fs (loop0): warning: mounting ext3 filesystem as ext2 [ 38.061313][ T4580] EXT2-fs (loop0): error: ext2_free_blocks: Freeing blocks not in datazone - block = 1803188595, count = 1 [ 38.065358][ T4580] EXT2-fs (loop0): error: ext2_free_blocks: Freeing blocks not in datazone - block = 1701604449, count = 1 [ 38.074215][ T4580] EXT2-fs (loop0): error: ext2_free_blocks: Freeing blocks not in datazone - block = 29554, count = 1 [ 38.083348][ T4580] EXT2-fs (loop0): error: ext2_free_blocks: Freeing blocks not in datazone - block = 65536, count = 1 [ 38.095919][ T4584] EXT2-fs (loop0): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 38.098310][ T4584] EXT2-fs (loop0): error: ext2_new_blocks: Allocating block in system zone - blocks from 1, length 12 [ 38.101717][ T4584] EXT2-fs (loop0): error: ext2_new_blocks: Allocating block in system zone - blocks from 25, length 231 [ 38.133426][ T4586] EXT4-fs: Ignoring removed bh option [ 38.144999][ T4587] netlink: 40 bytes leftover after parsing attributes in process `syz.1.46'. [ 38.154298][ T4586] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 38.207225][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 38.236693][ T4591] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 38.752041][ T4596] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.51 (4596) [ 38.761944][ T4596] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 38.763990][ T4596] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 38.772897][ T4596] BTRFS warning (device loop2): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 38.776087][ T4596] BTRFS info (device loop2): use zlib compression, level 3 [ 38.777401][ T4596] BTRFS info (device loop2): turning on async discard [ 38.779999][ T4596] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 38.782667][ T4596] BTRFS info (device loop2): trying to use backup root at mount time [ 38.785247][ T4596] BTRFS info (device loop2): enabling auto defrag [ 38.786523][ T4596] BTRFS info (device loop2): using free space tree [ 38.852285][ T4496] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x047202ff level 0 [ 38.854970][ T4596] BTRFS error (device loop2): failed to load root extent [ 38.856450][ T4596] BTRFS warning (device loop2): try to load backup roots slot 1 [ 38.863845][ T4496] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x6f726601 level 0 [ 38.866445][ T4596] BTRFS warning (device loop2): couldn't read tree root [ 38.867678][ T4596] BTRFS warning (device loop2): try to load backup roots slot 2 [ 38.873824][ T4596] BTRFS error (device loop2): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 38.875900][ T4596] BTRFS warning (device loop2): couldn't read tree root [ 38.877044][ T4596] BTRFS warning (device loop2): try to load backup roots slot 3 [ 38.924456][ T4596] BTRFS info (device loop2): enabling ssd optimizations [ 38.926122][ T4596] BTRFS info (device loop2): rebuilding free space tree [ 38.931395][ T4596] BTRFS info (device loop2): checking UUID tree [ 38.958656][ T4333] Bluetooth: hci1: command 0x0419 tx timeout [ 38.959819][ T4333] Bluetooth: hci3: command 0x0419 tx timeout [ 38.967528][ T4631] netlink: 'syz.1.56': attribute type 11 has an invalid length. [ 38.969058][ T4336] Bluetooth: hci2: command 0x0419 tx timeout [ 38.969089][ T4336] Bluetooth: hci0: command 0x0419 tx timeout [ 38.974433][ T4631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.56'. [ 39.007407][ T4607] F2FS-fs (loop3): invalid crc value [ 39.017782][ T4607] F2FS-fs (loop3): Found nat_bits in checkpoint [ 39.038108][ T4333] Bluetooth: hci4: command 0x0419 tx timeout [ 39.056935][ T4607] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 39.061891][ T4330] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 39.149022][ T4342] syz-executor: attempt to access beyond end of device [ 39.149022][ T4342] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 39.231048][ T4648] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input2 [ 39.281677][ T4653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.294393][ T4653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.432972][ T4661] netlink: 40 bytes leftover after parsing attributes in process `syz.2.65'. [ 39.463059][ T4660] set_capacity_and_notify: 7 callbacks suppressed [ 39.463069][ T4660] loop0: detected capacity change from 0 to 2048 [ 39.504278][ T4660] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 39.540975][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 40.064648][ T4686] loop3: detected capacity change from 0 to 128 [ 40.082800][ T4686] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 40.176092][ T4342] EXT4-fs (loop3): unmounting filesystem. [ 40.223628][ T4701] xt_NFQUEUE: number of total queues is 0 [ 40.235322][ T4700] loop2: detected capacity change from 0 to 1024 [ 40.421847][ T4715] loop2: detected capacity change from 0 to 256 [ 40.424898][ T4715] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 40.565811][ T4720] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 40.583291][ T4720] FAT-fs (loop2): Filesystem has been set read-only [ 40.614987][ T4720] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 40.874035][ T4737] netlink: 40 bytes leftover after parsing attributes in process `syz.4.90'. [ 41.029630][ T4746] Illegal XDP return value 4294967274 on prog (id 5) dev syz_tun, expect packet loss! [ 41.639754][ T4779] xt_NFQUEUE: number of total queues is 0 [ 41.686024][ T4784] syz.1.110 uses obsolete (PF_INET,SOCK_PACKET) [ 41.961472][ T112] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.234764][ T112] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 42.256594][ T4805] fido_id[4805]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 42.545844][ T4816] netlink: 40 bytes leftover after parsing attributes in process `syz.2.118'. [ 42.676399][ T4826] loop4: detected capacity change from 0 to 512 [ 42.682228][ T4826] EXT4-fs: Ignoring removed bh option [ 42.684673][ T4826] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 42.733343][ T4826] EXT4-fs (loop4): 1 truncate cleaned up [ 42.734504][ T4826] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 42.742665][ T4825] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.122: bg 0: block 465: padding at end of block bitmap is not set [ 42.745761][ T4813] loop3: detected capacity change from 0 to 40427 [ 42.751899][ T4813] F2FS-fs (loop3): invalid crc value [ 42.797249][ T4339] EXT4-fs (loop4): unmounting filesystem. [ 42.808871][ T4813] F2FS-fs (loop3): Found nat_bits in checkpoint [ 42.830830][ T4837] loop4: detected capacity change from 0 to 512 [ 42.834083][ T4813] F2FS-fs (loop3): Start checkpoint disabled! [ 42.842111][ T4813] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 43.283748][ T4848] xt_NFQUEUE: number of total queues is 0 [ 43.291414][ T4846] netlink: 40 bytes leftover after parsing attributes in process `syz.4.129'. [ 43.407604][ T4857] loop0: detected capacity change from 0 to 1024 [ 43.436435][ T4857] hfsplus: xattr searching failed [ 43.442507][ T4853] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 43.444282][ T4853] SQUASHFS error: Failed to read block 0x0: -5 [ 43.996849][ T4875] loop2: detected capacity change from 0 to 256 [ 44.055936][ T4869] loop4: detected capacity change from 0 to 32768 [ 44.056870][ T4875] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d) [ 44.061991][ T4869] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop4 scanned by syz.4.137 (4869) [ 44.065834][ T4869] BTRFS info (device loop4): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 44.067796][ T4869] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 44.070822][ T4869] BTRFS info (device loop4): using free space tree [ 44.079347][ T4869] BTRFS info (device loop4): enabling ssd optimizations [ 44.084968][ T4875] process 'syz.2.139' launched './file0' with NULL argv: empty string added [ 44.113403][ T4339] BTRFS info (device loop4): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 44.125542][ T4875] exFAT-fs (loop2): error, broken FAT chain. [ 44.140867][ T4875] exFAT-fs (loop2): Filesystem has been set read-only [ 44.167230][ T4875] exFAT-fs (loop2): error, failed to bmap (inode : 000000009aab6b10 iblock : 0, err : -5) [ 44.187193][ T4875] exFAT-fs (loop2): error, broken FAT chain. [ 44.188731][ T4875] exFAT-fs (loop2): error, failed to bmap (inode : 000000009aab6b10 iblock : 0, err : -5) [ 44.190568][ T4875] exFAT-fs (loop2): error, broken FAT chain. [ 44.191706][ T4875] exFAT-fs (loop2): error, failed to bmap (inode : 000000009aab6b10 iblock : 1, err : -5) [ 44.193534][ T4875] exFAT-fs (loop2): error, broken FAT chain. [ 44.194755][ T4875] exFAT-fs (loop2): error, failed to bmap (inode : 000000009aab6b10 iblock : 2, err : -5) [ 44.204266][ T4875] exFAT-fs (loop2): error, broken FAT chain. [ 44.205522][ T4875] exFAT-fs (loop2): error, failed to bmap (inode : 000000009aab6b10 iblock : 3, err : -5) [ 44.207279][ T4875] exFAT-fs (loop2): error, broken FAT chain. [ 44.208741][ T4875] exFAT-fs (loop2): error, failed to bmap (inode : 000000009aab6b10 iblock : 4, err : -5) [ 44.210657][ T4875] exFAT-fs (loop2): error, broken FAT chain. [ 44.211930][ T4875] exFAT-fs (loop2): error, failed to bmap (inode : 000000009aab6b10 iblock : 5, err : -5) [ 44.213910][ T4875] exFAT-fs (loop2): error, broken FAT chain. [ 44.215041][ T4875] exFAT-fs (loop2): error, failed to bmap (inode : 000000009aab6b10 iblock : 6, err : -5) [ 44.216742][ T4875] exFAT-fs (loop2): error, broken FAT chain. [ 44.218154][ T4875] exFAT-fs (loop2): error, failed to bmap (inode : 000000009aab6b10 iblock : 7, err : -5) [ 44.220183][ T4875] exFAT-fs (loop2): error, broken FAT chain. [ 44.221310][ T4875] exFAT-fs (loop2): error, failed to bmap (inode : 000000009aab6b10 iblock : 0, err : -5) [ 44.223254][ T4875] exFAT-fs (loop2): error, broken FAT chain. [ 44.224552][ T4875] exFAT-fs (loop2): error, broken FAT chain. [ 44.225721][ T4875] exFAT-fs (loop2): error, broken FAT chain. [ 44.226813][ T4875] exFAT-fs (loop2): error, broken FAT chain. [ 44.228837][ T4875] exFAT-fs (loop2): error, broken FAT chain. [ 44.229977][ T4875] exFAT-fs (loop2): error, broken FAT chain. [ 44.231421][ T4875] exFAT-fs (loop2): error, broken FAT chain. [ 44.246385][ T4318] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 10 /dev/loop4 scanned by udevd (4318) [ 44.360684][ T4901] netlink: 40 bytes leftover after parsing attributes in process `syz.2.143'. [ 44.403475][ T4336] Bluetooth: hci0: unexpected cc 0x206e length: 9 > 3 [ 44.503746][ T4896] JBD2: Ignoring recovery information on journal [ 44.855276][ T4896] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 44.877006][ T4642] kernel write not supported for file /media4 (pid: 4642 comm: kworker/1:15) [ 44.893770][ T4896] overlayfs: upper fs does not support tmpfile. [ 44.902697][ T4896] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 44.913910][ T4896] overlayfs: upper fs missing required features. [ 44.927329][ T4896] overlayfs: upper fs does not support tmpfile. [ 44.930222][ T4896] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 44.933816][ T4896] overlayfs: upper fs missing required features. [ 44.949825][ T4923] set_capacity_and_notify: 1 callbacks suppressed [ 44.949833][ T4923] loop0: detected capacity change from 0 to 512 [ 44.962104][ T4923] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 44.997397][ T4926] netlink: 84 bytes leftover after parsing attributes in process `syz.1.153'. [ 44.997609][ T4342] ocfs2: Unmounting device (7,3) on (node local) [ 45.018142][ T4929] loop1: detected capacity change from 0 to 256 [ 45.024603][ T4929] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 45.209865][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 45.392165][ T4946] netlink: 40 bytes leftover after parsing attributes in process `syz.3.157'. [ 45.585216][ T4951] loop2: detected capacity change from 0 to 512 [ 45.696458][ T4957] xt_NFQUEUE: number of total queues is 0 [ 45.832253][ T4962] loop4: detected capacity change from 0 to 512 [ 45.845305][ T4962] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 45.861458][ T4962] EXT4-fs (loop4): 1 truncate cleaned up [ 45.862674][ T4962] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 45.907307][ T4339] EXT4-fs (loop4): unmounting filesystem. [ 46.004143][ T4972] loop4: detected capacity change from 0 to 4096 [ 46.018543][ T4972] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.019781][ T4972] EXT4-fs: inline encryption not supported [ 46.024899][ T4972] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 46.026775][ T4972] EXT4-fs (loop4): Test dummy encryption mode enabled [ 46.030812][ T4972] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 46.041097][ T4972] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 46.063097][ T4339] EXT4-fs (loop4): unmounting filesystem. [ 46.247931][ T4979] loop4: detected capacity change from 0 to 8186 [ 46.271297][ T4979] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 46.272205][ T4986] loop0: detected capacity change from 0 to 4096 [ 46.273705][ T4979] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 46.288890][ T4986] EXT4-fs: inline encryption not supported [ 46.297415][ T4986] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 46.312792][ T4986] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=84ec118, mo2=0003] [ 46.601643][ T4986] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 46.677106][ T4995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.678985][ T4995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.756133][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 46.796113][ T5001] loop4: detected capacity change from 0 to 512 [ 46.995457][ T5006] netlink: 40 bytes leftover after parsing attributes in process `syz.4.180'. [ 47.418541][ T112] kernel write not supported for file bpf-prog (pid: 112 comm: kworker/0:2) [ 47.934940][ T5029] tipc: Started in network mode [ 47.936349][ T5029] tipc: Node identity ac1414aa, cluster identity 4711 [ 47.939813][ T5029] tipc: Enabled bearer , priority 10 [ 48.132563][ T5042] netlink: 40 bytes leftover after parsing attributes in process `syz.4.188'. [ 48.379372][ T5046] xt_NFQUEUE: number of total queues is 0 [ 48.953297][ T4469] tipc: Node number set to 2886997162 [ 49.001790][ T5057] netlink: 40 bytes leftover after parsing attributes in process `syz.4.198'. [ 49.383634][ T5064] loop2: detected capacity change from 0 to 1024 [ 49.422568][ T5066] netlink: 60 bytes leftover after parsing attributes in process `syz.0.201'. [ 49.424502][ T5066] netlink: 60 bytes leftover after parsing attributes in process `syz.0.201'. [ 49.426115][ T5066] Zero length message leads to an empty skb [ 49.437431][ T321] hfsplus: b-tree write err: -5, ino 25 [ 49.440955][ T321] hfsplus: b-tree write err: -5, ino 4 [ 49.442496][ T321] hfsplus: b-tree write err: -5, ino 2 [ 49.445067][ T321] hfsplus: b-tree write err: -5, ino 17 [ 49.479459][ T5070] loop0: detected capacity change from 0 to 64 [ 49.753967][ T5068] XFS (loop2): Mounting V5 Filesystem [ 50.175452][ T5068] XFS (loop2): Ending clean mount [ 50.179213][ T5093] set_capacity_and_notify: 1 callbacks suppressed [ 50.179220][ T5093] loop1: detected capacity change from 0 to 1024 [ 50.255178][ T5095] netlink: 40 bytes leftover after parsing attributes in process `syz.4.207'. [ 50.451360][ T5093] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 50.470025][ T5093] EXT4-fs (loop1): shut down requested (0) [ 50.530013][ T5102] xt_NFQUEUE: number of total queues is 0 [ 50.625981][ T4330] XFS (loop2): Unmounting Filesystem [ 50.632927][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 51.021483][ T5112] loop4: detected capacity change from 0 to 1024 [ 51.219689][ T5118] netlink: 40 bytes leftover after parsing attributes in process `syz.1.217'. [ 51.309248][ T5116] loop4: detected capacity change from 0 to 32768 [ 51.669772][ T5116] XFS (loop4): Mounting V5 Filesystem [ 51.706067][ T5116] XFS (loop4): Ending clean mount [ 51.834392][ T4339] XFS (loop4): Unmounting Filesystem [ 52.182248][ T5149] netlink: 40 bytes leftover after parsing attributes in process `syz.3.224'. [ 52.273902][ T5152] loop1: detected capacity change from 0 to 128 [ 52.294936][ T5152] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 52.324834][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 52.558678][ T5161] netlink: 40 bytes leftover after parsing attributes in process `syz.1.228'. [ 52.573074][ T5164] xt_NFQUEUE: number of total queues is 0 [ 53.024608][ T5172] loop1: detected capacity change from 0 to 256 [ 53.045573][ T5174] loop2: detected capacity change from 0 to 64 [ 53.581966][ T5185] netlink: 24 bytes leftover after parsing attributes in process `syz.1.237'. [ 53.630541][ T5191] loop2: detected capacity change from 0 to 512 [ 53.647774][ T5191] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 53.759471][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 53.854253][ T5196] netlink: 40 bytes leftover after parsing attributes in process `syz.4.240'. [ 53.866762][ T5198] netlink: 83 bytes leftover after parsing attributes in process `syz.1.241'. [ 54.235208][ T5207] loop1: detected capacity change from 0 to 2048 [ 54.254910][ T5207] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 54.268099][ T5207] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 54.271235][ T5207] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 54.502793][ T5217] netlink: 40 bytes leftover after parsing attributes in process `syz.4.243'. [ 54.539595][ T5220] xt_NFQUEUE: number of total queues is 0 [ 55.157753][ T5235] loop1: detected capacity change from 0 to 512 [ 55.195539][ T5233] netlink: 40 bytes leftover after parsing attributes in process `syz.2.253'. [ 55.203371][ T5235] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 55.207241][ T5235] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.254: corrupted xattr block 33 [ 55.213384][ T5235] EXT4-fs (loop1): Remounting filesystem read-only [ 55.214750][ T5235] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.254: corrupted xattr block 33 [ 55.221325][ T5235] EXT4-fs (loop1): Remounting filesystem read-only [ 55.222905][ T5235] fscrypt (loop1, inode 15): Error -117 getting encryption context [ 55.234981][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 56.267067][ T5270] xt_NFQUEUE: number of total queues is 0 [ 56.348931][ T5273] loop3: detected capacity change from 0 to 1024 [ 56.925748][ T5287] netlink: 40 bytes leftover after parsing attributes in process `syz.0.272'. [ 57.252314][ T5291] netlink: 40 bytes leftover after parsing attributes in process `syz.1.268'. [ 57.257385][ T5293] loop2: detected capacity change from 0 to 64 [ 57.367796][ T5297] loop2: detected capacity change from 0 to 512 [ 57.377157][ T5297] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 57.386132][ T5297] FAT-fs (loop2): Directory bread(block 1056) failed [ 57.392988][ T5297] FAT-fs (loop2): Directory bread(block 1057) failed [ 57.395117][ T5297] FAT-fs (loop2): Directory bread(block 1058) failed [ 57.396527][ T5297] FAT-fs (loop2): Directory bread(block 1059) failed [ 57.398293][ T5297] FAT-fs (loop2): Directory bread(block 1060) failed [ 57.399462][ T5297] FAT-fs (loop2): Directory bread(block 1061) failed [ 57.400681][ T5297] FAT-fs (loop2): Directory bread(block 1062) failed [ 57.402016][ T5297] FAT-fs (loop2): Directory bread(block 1063) failed [ 57.403371][ T5297] FAT-fs (loop2): Directory bread(block 1064) failed [ 57.404648][ T5297] FAT-fs (loop2): Directory bread(block 1065) failed [ 57.695826][ T5301] loop3: detected capacity change from 0 to 128 [ 57.702114][ T5301] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 57.721155][ T5301] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 57.731700][ T5305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.280'. [ 57.815312][ T5311] loop4: detected capacity change from 0 to 256 [ 58.167562][ T5311] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xa7bc3a1f, utbl_chksum : 0xe619d30d) [ 58.177421][ T5318] xt_NFQUEUE: number of total queues is 0 [ 58.178895][ T5311] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 2199023255554) [ 58.825798][ T5330] netlink: 40 bytes leftover after parsing attributes in process `syz.1.288'. [ 59.287091][ T5346] netlink: 40 bytes leftover after parsing attributes in process `syz.2.287'. [ 59.609323][ T5350] loop1: detected capacity change from 0 to 1024 [ 59.672286][ T5350] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 59.697055][ T5350] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: comm syz.1.295: lblock 0 mapped to illegal pblock 0 (length 6) [ 59.714425][ T5350] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 59.718429][ T5350] EXT4-fs (loop1): This should not happen!! Data will be lost [ 59.718429][ T5350] [ 59.728553][ T5350] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: block 8: comm syz.1.295: lblock 8 mapped to illegal pblock 8 (length 8) [ 59.733864][ T5350] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 59.735941][ T5350] EXT4-fs (loop1): This should not happen!! Data will be lost [ 59.735941][ T5350] [ 59.750273][ T5350] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: block 1: comm syz.1.295: lblock 1 mapped to illegal pblock 1 (length 1) [ 59.803803][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 60.326720][ T5369] xt_NFQUEUE: number of total queues is 0 [ 61.235442][ T5393] netlink: 40 bytes leftover after parsing attributes in process `syz.3.305'. [ 61.694050][ T5408] netlink: 40 bytes leftover after parsing attributes in process `syz.2.313'. [ 61.982856][ T5414] vcan0: tx drop: invalid sa for name 0xfffffffffffffff9 [ 62.723186][ T5424] xt_NFQUEUE: number of total queues is 0 [ 63.475803][ T5440] netlink: 40 bytes leftover after parsing attributes in process `syz.3.326'. [ 63.727339][ T5431] loop2: detected capacity change from 0 to 32768 [ 63.785107][ T5431] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 63.790544][ T5431] JBD2: Ignoring recovery information on journal [ 63.832046][ T5447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.328'. [ 63.837438][ T5431] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 63.842294][ T5447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.328'. [ 64.017518][ T4330] ocfs2: Unmounting device (7,2) on (node local) [ 64.410983][ T5462] netlink: 40 bytes leftover after parsing attributes in process `syz.0.331'. [ 64.412540][ T5465] loop3: detected capacity change from 0 to 2048 [ 64.421284][ T5465] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 64.479854][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.481189][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.503288][ T5470] loop2: detected capacity change from 0 to 2048 [ 64.509268][ T5470] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 64.515843][ T5470] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 64.675786][ T5468] loop1: detected capacity change from 0 to 32768 [ 64.991004][ T5481] loop4: detected capacity change from 0 to 8192 [ 65.116167][ T5491] netlink: 40 bytes leftover after parsing attributes in process `syz.1.345'. [ 65.565512][ T5496] loop0: detected capacity change from 0 to 32768 [ 65.610430][ T5496] XFS (loop0): Mounting V5 Filesystem [ 65.630783][ T5496] XFS (loop0): Ending clean mount [ 65.683975][ T4329] XFS (loop0): Unmounting Filesystem [ 66.196576][ T5530] netlink: 40 bytes leftover after parsing attributes in process `syz.1.357'. [ 67.040383][ T5539] loop0: detected capacity change from 0 to 256 [ 67.070766][ T5539] FAT-fs (loop0): Directory bread(block 64) failed [ 67.071838][ T5539] FAT-fs (loop0): Directory bread(block 65) failed [ 67.078196][ T5539] FAT-fs (loop0): Directory bread(block 66) failed [ 67.079493][ T5539] FAT-fs (loop0): Directory bread(block 67) failed [ 67.084788][ T5539] FAT-fs (loop0): Directory bread(block 68) failed [ 67.086089][ T5539] FAT-fs (loop0): Directory bread(block 69) failed [ 67.093402][ T5539] FAT-fs (loop0): Directory bread(block 70) failed [ 67.093546][ T5520] loop2: detected capacity change from 0 to 131072 [ 67.094450][ T5539] FAT-fs (loop0): Directory bread(block 71) failed [ 67.096774][ T5539] FAT-fs (loop0): Directory bread(block 72) failed [ 67.100222][ T5520] F2FS-fs (loop2): invalid crc value [ 67.106846][ T5539] FAT-fs (loop0): Directory bread(block 73) failed [ 67.115396][ T5520] F2FS-fs (loop2): Found nat_bits in checkpoint [ 67.133942][ T5520] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 67.720618][ T5553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.366'. [ 67.759261][ T5553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.366'. [ 67.970130][ T5570] loop3: detected capacity change from 0 to 2048 [ 68.000251][ T5570] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 68.355220][ T4342] EXT4-fs (loop3): unmounting filesystem. [ 68.371011][ T5580] loop0: detected capacity change from 0 to 512 [ 68.383621][ T5580] EXT2-fs (loop0): (no)user_xattr optionsnot supported [ 68.390292][ T5580] EXT2-fs (loop0): warning: mounting ext3 filesystem as ext2 [ 68.709669][ T5592] netlink: 40 bytes leftover after parsing attributes in process `syz.4.377'. [ 69.452347][ T5611] loop4: detected capacity change from 0 to 128 [ 69.472868][ T5611] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 69.511125][ T4339] EXT4-fs (loop4): unmounting filesystem. [ 69.545338][ T5614] netlink: 64 bytes leftover after parsing attributes in process `syz.4.386'. [ 69.581984][ T5614] netlink: 64 bytes leftover after parsing attributes in process `syz.4.386'. [ 69.595714][ T5596] loop1: detected capacity change from 0 to 131072 [ 69.601958][ T14] cfg80211: failed to load regulatory.db [ 69.613547][ T5596] F2FS-fs (loop1): Wrong NAT boundary, start(2560) end(3584) blocks(0) [ 69.616905][ T5596] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 69.624711][ T5596] F2FS-fs (loop1): invalid crc value [ 69.646530][ T5596] F2FS-fs (loop1): Found nat_bits in checkpoint [ 69.674981][ T5596] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 69.676493][ T5596] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 69.676950][ T5619] loop8: detected capacity change from 0 to 7 [ 69.710385][ T5619] Dev loop8: unable to read RDB block 7 [ 69.711706][ T5619] loop8: unable to read partition table [ 69.717051][ T5619] loop8: partition table beyond EOD, truncated [ 69.720498][ T5619] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 70.674896][ T5626] loop4: detected capacity change from 0 to 131072 [ 70.691592][ T5645] netlink: 40 bytes leftover after parsing attributes in process `syz.2.395'. [ 70.696187][ T5626] F2FS-fs (loop4): Invalid log sectors per block(570425347) log sectorsize(9) [ 70.698155][ T5626] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 70.707221][ T5626] F2FS-fs (loop4): invalid crc value [ 70.743719][ T5626] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 70.766721][ T5626] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=90000000, run fsck to fix. [ 70.780859][ T5626] F2FS-fs (loop4): Bad quota inode 1:2415919104 [ 70.785361][ T5626] F2FS-fs (loop4): Failed to enable quota tracking (type=1, err=-22). Please run fsck to fix. [ 70.787334][ T5626] F2FS-fs (loop4): Cannot turn on quotas: error -22 [ 70.803328][ T5626] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 70.804809][ T5626] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b [ 71.039613][ T5654] loop1: detected capacity change from 0 to 32768 [ 71.338038][ T5654] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.399 (5654) [ 71.351646][ T5654] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 71.353472][ T5654] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 71.367438][ T5654] BTRFS info (device loop1): force clearing of disk cache [ 71.372122][ T5654] BTRFS info (device loop1): enabling auto defrag [ 71.373148][ T5654] BTRFS info (device loop1): max_inline at 0 [ 71.374119][ T5654] BTRFS info (device loop1): enabling disk space caching [ 71.375265][ T5654] BTRFS info (device loop1): disk space caching is enabled [ 71.496475][ T5654] BTRFS info (device loop1): enabling ssd optimizations [ 71.509532][ T5654] BTRFS info (device loop1): rebuilding free space tree [ 71.513932][ T5654] BTRFS info (device loop1): disabling free space tree [ 71.515129][ T5654] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 71.516756][ T5654] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 71.650585][ T39] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 71.718738][ T4328] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 71.777529][ T5693] loop3: detected capacity change from 0 to 32768 [ 71.797043][ T5693] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.405 (5693) [ 71.825048][ T5697] netlink: 'syz.0.408': attribute type 1 has an invalid length. [ 71.838109][ T5697] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.851863][ T5693] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 71.854897][ T5693] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 71.856375][ T5693] BTRFS info (device loop3): turning on sync discard [ 71.857599][ T5693] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 71.859438][ T5693] BTRFS info (device loop3): use zstd compression, level 3 [ 71.860586][ T5693] BTRFS info (device loop3): turning on async discard [ 71.861684][ T5693] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 71.863425][ T5693] BTRFS info (device loop3): trying to use backup root at mount time [ 71.864764][ T5693] BTRFS info (device loop3): enabling auto defrag [ 71.865859][ T5693] BTRFS info (device loop3): using free space tree [ 71.947807][ T11] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 71.950461][ T5693] BTRFS error (device loop3): failed to load root extent [ 71.951708][ T5693] BTRFS warning (device loop3): try to load backup roots slot 1 [ 71.953373][ T4762] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 71.955741][ T5693] BTRFS warning (device loop3): couldn't read tree root [ 71.956976][ T5693] BTRFS warning (device loop3): try to load backup roots slot 2 [ 71.970378][ T5693] BTRFS error (device loop3): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 71.972341][ T5693] BTRFS warning (device loop3): couldn't read tree root [ 71.973601][ T5693] BTRFS warning (device loop3): try to load backup roots slot 3 [ 71.974893][ T5715] netlink: 20 bytes leftover after parsing attributes in process `syz.2.411'. [ 72.000964][ T5693] BTRFS info (device loop3): enabling ssd optimizations [ 72.002920][ T5693] BTRFS info (device loop3): rebuilding free space tree [ 72.008639][ T5693] BTRFS info (device loop3): checking UUID tree [ 72.082566][ T4342] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 72.108121][ T11] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 72.375706][ T5750] netlink: 40 bytes leftover after parsing attributes in process `syz.2.417'. [ 72.676772][ T5756] netlink: 40 bytes leftover after parsing attributes in process `syz.0.416'. [ 72.859460][ T5765] loop1: detected capacity change from 0 to 512 [ 72.866933][ T5765] EXT4-fs: Ignoring removed oldalloc option [ 72.872912][ T5765] EXT4-fs (loop1): Test dummy encryption mode enabled [ 72.895121][ T5765] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 72.920862][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 73.017195][ T5779] loop3: detected capacity change from 0 to 256 [ 73.025852][ T5779] exfat: Deprecated parameter 'utf8' [ 73.026940][ T5779] exfat: Deprecated parameter 'utf8' [ 73.027983][ T5779] exfat: Deprecated parameter 'utf8' [ 73.032750][ T5779] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 73.183979][ T5784] loop2: detected capacity change from 0 to 8 [ 73.314823][ T5792] loop1: detected capacity change from 0 to 1024 [ 73.327051][ T5792] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 73.385108][ T5703] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 73.431844][ T5792] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 73.661917][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 73.714524][ T5796] JBD2: Ignoring recovery information on journal [ 73.742255][ T5815] netlink: 24 bytes leftover after parsing attributes in process `syz.2.437'. [ 73.795050][ T5815] netlink: 24 bytes leftover after parsing attributes in process `syz.2.437'. [ 73.801340][ T5796] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 73.933590][ T4339] ocfs2: Unmounting device (7,4) on (node local) [ 73.944464][ T5824] netlink: 40 bytes leftover after parsing attributes in process `syz.0.438'. [ 74.106832][ T5835] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 74.154633][ T5840] netlink: 40 bytes leftover after parsing attributes in process `syz.2.440'. [ 74.854538][ T5860] set_capacity_and_notify: 2 callbacks suppressed [ 74.854547][ T5860] loop0: detected capacity change from 0 to 32768 [ 74.901428][ T5860] loop0: p1 p3 < > [ 74.929501][ T5865] netlink: 12 bytes leftover after parsing attributes in process `syz.0.450'. [ 74.932048][ T5865] netlink: 108 bytes leftover after parsing attributes in process `syz.0.450'. [ 75.008808][ T4657] udevd[4657]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 75.010651][ T4318] udevd[4318]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 75.124706][ T5882] loop0: detected capacity change from 0 to 16 [ 75.144426][ T5882] erofs: (device loop0): mounted with root inode @ nid 36. [ 75.177180][ T5882] syz.0.456: attempt to access beyond end of device [ 75.177180][ T5882] loop0: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 75.182874][ T5885] loop1: detected capacity change from 0 to 512 [ 75.184196][ T5882] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -4055 in[4096, 0] out[9000] [ 75.200967][ T5885] EXT2-fs (loop1): warning: mounting ext3 filesystem as ext2 [ 75.345326][ T5888] netlink: 40 bytes leftover after parsing attributes in process `syz.0.458'. [ 75.495855][ T5892] netlink: 40 bytes leftover after parsing attributes in process `syz.1.459'. [ 75.962159][ T5898] netlink: 12 bytes leftover after parsing attributes in process `syz.3.462'. [ 76.276313][ T5894] loop2: detected capacity change from 0 to 131072 [ 76.279412][ T5894] F2FS-fs (loop2): invalid crc value [ 76.283110][ T5894] F2FS-fs (loop2): Found nat_bits in checkpoint [ 76.305579][ T5894] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 76.313397][ T5894] F2FS-fs (loop2): Corrupted max_depth of 3: 16842753 [ 76.427883][ T5919] netlink: 'syz.1.469': attribute type 27 has an invalid length. [ 76.518614][ T5929] loop3: detected capacity change from 0 to 256 [ 76.529174][ T5929] capability: warning: `syz.3.471' uses deprecated v2 capabilities in a way that may be insecure [ 76.532300][ T5919] bond0: (slave bond_slave_0): Releasing backup interface [ 76.545430][ T5932] loop2: detected capacity change from 0 to 1024 [ 76.590107][ T5932] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 76.603530][ T5938] loop3: detected capacity change from 0 to 512 [ 76.615219][ T5938] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 76.624481][ T5932] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.472: bg 0: block 112: padding at end of block bitmap is not set [ 76.641918][ T5932] EXT4-fs (loop2): Remounting filesystem read-only [ 76.691895][ T5931] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: comm syz.2.472: lblock 0 mapped to illegal pblock 0 (length 1) [ 76.705171][ T5931] EXT4-fs (loop2): Remounting filesystem read-only [ 76.707298][ T5931] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: comm syz.2.472: lblock 0 mapped to illegal pblock 0 (length 1) [ 76.715546][ T5931] EXT4-fs (loop2): Remounting filesystem read-only [ 76.716775][ T5931] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: comm syz.2.472: lblock 0 mapped to illegal pblock 0 (length 1) [ 76.725668][ T5931] EXT4-fs (loop2): Remounting filesystem read-only [ 76.726953][ T5931] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: comm syz.2.472: lblock 0 mapped to illegal pblock 0 (length 1) [ 76.735794][ T5931] EXT4-fs (loop2): Remounting filesystem read-only [ 76.737091][ T5931] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: comm syz.2.472: lblock 0 mapped to illegal pblock 0 (length 1) [ 76.746370][ T5931] EXT4-fs (loop2): Remounting filesystem read-only [ 76.777139][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 76.875212][ T4342] EXT4-fs (loop3): unmounting filesystem. [ 76.926742][ T5948] loop1: detected capacity change from 0 to 4096 [ 77.000384][ T5954] netlink: 40 bytes leftover after parsing attributes in process `syz.2.475'. [ 77.037922][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 77.657421][ T5971] loop0: detected capacity change from 0 to 8192 [ 77.671026][ T5971] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 77.679740][ T5971] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 77.694777][ T5971] REISERFS (device loop0): using ordered data mode [ 77.702767][ T5971] reiserfs: using flush barriers [ 77.713337][ T5971] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 77.726688][ T5971] REISERFS (device loop0): checking transaction log (loop0) [ 77.854141][ T5976] loop2: detected capacity change from 0 to 4096 [ 77.885883][ T5976] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 77.899693][ T5971] REISERFS (device loop0): Using tea hash to sort names [ 77.910927][ T5971] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 78.024652][ T5971] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 78.081343][ T39] Bluetooth: hci5: Frame reassembly failed (-84) [ 78.882262][ T6002] netlink: 40 bytes leftover after parsing attributes in process `syz.3.498'. [ 78.931168][ T5999] XFS (loop0): Mounting V5 Filesystem [ 78.957073][ T5999] XFS (loop0): Ending clean mount [ 79.087446][ T4329] XFS (loop0): Unmounting Filesystem [ 79.823010][ T6037] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 79.825514][ T6037] JBD2: Ignoring recovery information on journal [ 79.902018][ T6037] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 79.909128][ T6040] netlink: 40 bytes leftover after parsing attributes in process `syz.2.509'. [ 80.034401][ T4329] ocfs2: Unmounting device (7,0) on (node local) [ 80.078346][ T4336] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 80.747214][ T6075] netlink: 40 bytes leftover after parsing attributes in process `syz.4.521'. [ 81.095912][ T6080] set_capacity_and_notify: 2 callbacks suppressed [ 81.095922][ T6080] loop4: detected capacity change from 0 to 2048 [ 81.121683][ T6080] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 81.213289][ T6082] loop2: detected capacity change from 0 to 32768 [ 81.233659][ T6082] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 81.668642][ T6099] loop1: detected capacity change from 0 to 512 [ 81.700410][ T6099] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 81.710283][ T6101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.529'. [ 81.949272][ T6112] loop1: detected capacity change from 0 to 256 [ 81.951079][ T6112] exfat: Deprecated parameter 'utf8' [ 81.952152][ T6112] exfat: Deprecated parameter 'namecase' [ 81.967364][ T6112] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe6e0c303, utbl_chksum : 0xe619d30d) [ 82.000598][ T9] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 82.006791][ T9] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 82.015430][ T9] EXT4-fs (loop4): This should not happen!! Data will be lost [ 82.015430][ T9] [ 82.017273][ T9] EXT4-fs (loop4): Total free blocks count 0 [ 82.018514][ T9] EXT4-fs (loop4): Free/Dirty block details [ 82.019550][ T9] EXT4-fs (loop4): free_blocks=2415919504 [ 82.020501][ T9] EXT4-fs (loop4): dirty_blocks=7840 [ 82.021530][ T9] EXT4-fs (loop4): Block reservation details [ 82.022694][ T9] EXT4-fs (loop4): i_reserved_data_blocks=490 [ 82.025926][ T6072] loop0: detected capacity change from 0 to 131072 [ 82.047534][ T9] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2048 with error 28 [ 82.054208][ T6114] netlink: 40 bytes leftover after parsing attributes in process `syz.3.533'. [ 82.074217][ T6072] F2FS-fs (loop0): inline encryption not supported [ 82.077446][ T6072] F2FS-fs (loop0): Test dummy encryption mode enabled [ 82.100126][ T6072] F2FS-fs (loop0): invalid crc value [ 82.131015][ T6072] F2FS-fs (loop0): Found nat_bits in checkpoint [ 82.191485][ T6072] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 82.460622][ T4330] ocfs2: Unmounting device (7,2) on (node local) [ 82.566377][ T6131] loop2: detected capacity change from 0 to 512 [ 82.580542][ T6121] loop1: detected capacity change from 0 to 32768 [ 82.585218][ T6131] EXT4-fs (loop2): 1 truncate cleaned up [ 82.586424][ T6131] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 82.620590][ T6121] XFS (loop1): Mounting V5 Filesystem [ 82.639844][ T6121] XFS (loop1): Ending clean mount [ 82.662023][ T6131] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 82.759657][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 82.761576][ T4328] XFS (loop1): Unmounting Filesystem [ 82.863640][ T6147] netlink: 14640 bytes leftover after parsing attributes in process `syz.2.541'. [ 82.971079][ T6156] loop3: detected capacity change from 0 to 256 [ 82.978571][ T6156] exfat: Deprecated parameter 'utf8' [ 82.979550][ T6156] exfat: Deprecated parameter 'namecase' [ 82.986084][ T6156] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe6e0c303, utbl_chksum : 0xe619d30d) [ 83.222735][ T6167] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 83.231084][ T6154] loop0: detected capacity change from 0 to 32768 [ 83.252329][ T6154] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 83.274928][ T6172] loop3: detected capacity change from 0 to 512 [ 83.283510][ T6173] syz.1.552 sent an empty control message without MSG_MORE. [ 83.326541][ T6172] EXT4-fs (loop3): 1 truncate cleaned up [ 83.327606][ T6172] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 83.453209][ T6172] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 83.482932][ T4342] EXT4-fs (loop3): unmounting filesystem. [ 83.657781][ T6191] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 83.774297][ T6191] fscrypt: Adiantum using implementation "adiantum(xchacha12-neon,aes-ce,nhpoly1305-generic)" [ 83.813305][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 83.968486][ T6200] erofs: (device loop2): mounted with root inode @ nid 36. [ 83.988139][ T6200] erofs: (device loop2): erofs_find_target_block: corrupted dir block 0 @ nid 36 [ 83.998449][ T6200] erofs: (device loop2): erofs_find_target_block: corrupted dir block 0 @ nid 36 [ 84.004280][ T6200] erofs: (device loop2): erofs_find_target_block: corrupted dir block 0 @ nid 36 [ 84.013994][ T6200] erofs: (device loop2): erofs_find_target_block: corrupted dir block 0 @ nid 36 [ 84.017515][ T6200] erofs: (device loop2): erofs_find_target_block: corrupted dir block 0 @ nid 36 [ 84.019833][ T6200] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 36 [ 84.206468][ T4329] ocfs2: Unmounting device (7,0) on (node local) [ 84.852916][ T6229] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 2: comm syz.4.573: lblock 2 mapped to illegal pblock 2 (length 1) [ 84.876421][ T6229] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 84.879482][ T6229] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 48: comm syz.4.573: lblock 0 mapped to illegal pblock 48 (length 1) [ 84.890121][ T6229] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 84.891801][ T6229] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.573: Failed to acquire dquot type 0 [ 84.896008][ T6229] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 84.901184][ T6229] EXT4-fs error (device loop4): ext4_evict_inode:281: inode #11: comm syz.4.573: mark_inode_dirty error [ 84.903317][ T6229] EXT4-fs warning (device loop4): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 84.905375][ T6229] EXT4-fs (loop4): 1 orphan inode deleted [ 84.906497][ T6229] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 84.911268][ T4376] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 84.917450][ T4376] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 84.925074][ T4376] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:5: Failed to release dquot type 0 [ 84.950945][ T4339] EXT4-fs (loop4): unmounting filesystem. [ 84.952367][ T4376] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 84.956044][ T4376] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 84.957501][ T4376] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:5: Failed to release dquot type 0 [ 84.959845][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 84.999737][ T4339] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 85.013577][ T4339] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 85.021558][ T4339] EXT4-fs error (device loop4): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 85.347401][ T6250] netlink: 40 bytes leftover after parsing attributes in process `syz.3.579'. [ 85.662283][ T6262] erofs: (device loop1): mounted with root inode @ nid 36. [ 85.672773][ T6262] syz.1.586: attempt to access beyond end of device [ 85.672773][ T6262] loop1: rw=524288, sector=88, nr_sectors = 48 limit=16 [ 85.676093][ T6262] syz.1.586: attempt to access beyond end of device [ 85.676093][ T6262] loop1: rw=524288, sector=8, nr_sectors = 80 limit=16 [ 85.682508][ T6262] ================================================================== [ 85.683964][ T6262] BUG: KASAN: use-after-free in z_erofs_transform_plain+0x39c/0x494 [ 85.685342][ T6262] Read of size 4096 at addr ffff0000d59d0000 by task syz.1.586/6262 [ 85.686810][ T6262] [ 85.687237][ T6262] CPU: 0 PID: 6262 Comm: syz.1.586 Not tainted syzkaller #0 [ 85.688515][ T6262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 85.690274][ T6262] Call trace: [ 85.690840][ T6262] dump_backtrace+0x1c4/0x1f0 [ 85.691679][ T6262] show_stack+0x2c/0x3c [ 85.692416][ T6262] __dump_stack+0x30/0x40 [ 85.693190][ T6262] dump_stack_lvl+0xf4/0x15c [ 85.694010][ T6262] print_address_description+0x88/0x218 [ 85.695019][ T6262] print_report+0x50/0x68 [ 85.695804][ T6262] kasan_report+0xa8/0xfc [ 85.696584][ T6262] kasan_check_range+0x258/0x290 [ 85.697476][ T6262] memcpy+0x48/0x90 [ 85.698190][ T6262] z_erofs_transform_plain+0x39c/0x494 [ 85.699313][ T6262] z_erofs_decompress+0x9c/0xd4 [ 85.700240][ T6262] z_erofs_decompress_queue+0x103c/0x1bf4 [ 85.701345][ T6262] z_erofs_runqueue+0x1540/0x16a8 [ 85.702305][ T6262] z_erofs_read_folio+0x2dc/0x5cc [ 85.703249][ T6262] filemap_read_folio+0x134/0x384 [ 85.704181][ T6262] filemap_fault+0x990/0xe98 [ 85.704985][ T6262] __do_fault+0x11c/0x3d8 [ 85.705716][ T6262] handle_mm_fault+0x1d04/0x3018 [ 85.706556][ T6262] do_page_fault+0x310/0x99c [ 85.707350][ T6262] do_translation_fault+0x94/0xc8 [ 85.708216][ T6262] do_mem_abort+0x70/0x198 [ 85.708985][ T6262] el1_abort+0x3c/0x5c [ 85.709705][ T6262] el1h_64_sync_handler+0x50/0xac [ 85.710576][ T6262] el1h_64_sync+0x64/0x68 [ 85.711322][ T6262] __arch_copy_from_user+0x84/0x230 [ 85.712230][ T6262] __sys_sendmsg+0x230/0x374 [ 85.713000][ T6262] __arm64_sys_sendmsg+0x80/0x94 [ 85.713813][ T6262] invoke_syscall+0x98/0x290 [ 85.714585][ T6262] el0_svc_common+0x13c/0x258 [ 85.715366][ T6262] do_el0_svc+0x5c/0x134 [ 85.716141][ T6262] el0_svc+0x58/0x128 [ 85.716845][ T6262] el0t_64_sync_handler+0x84/0xf0 [ 85.717797][ T6262] el0t_64_sync+0x18c/0x190 [ 85.718536][ T6262] [ 85.718914][ T6262] Allocated by task 4657: [ 85.719646][ T6262] kasan_set_track+0x4c/0x80 [ 85.720421][ T6262] kasan_save_alloc_info+0x24/0x30 [ 85.721314][ T6262] __kasan_slab_alloc+0x70/0x88 [ 85.722126][ T6262] slab_post_alloc_hook+0x74/0x430 [ 85.722998][ T6262] kmem_cache_alloc+0x234/0x310 [ 85.723835][ T6262] __alloc_file+0x30/0x234 [ 85.724584][ T6262] alloc_empty_file+0xa0/0x184 [ 85.725358][ T6262] path_openat+0xe0/0x27a0 [ 85.726120][ T6262] do_filp_open+0x198/0x38c [ 85.726883][ T6262] do_sys_openat2+0x134/0x3fc [ 85.727697][ T6262] __arm64_sys_openat+0x11c/0x150 [ 85.728546][ T6262] invoke_syscall+0x98/0x290 [ 85.729322][ T6262] el0_svc_common+0x13c/0x258 [ 85.730123][ T6262] do_el0_svc+0x5c/0x134 [ 85.730857][ T6262] el0_svc+0x58/0x128 [ 85.731569][ T6262] el0t_64_sync_handler+0x84/0xf0 [ 85.732440][ T6262] el0t_64_sync+0x18c/0x190 [ 85.733255][ T6262] [ 85.733641][ T6262] Freed by task 6154: [ 85.734291][ T6262] kasan_set_track+0x4c/0x80 [ 85.735052][ T6262] kasan_save_free_info+0x38/0x5c [ 85.735878][ T6262] ____kasan_slab_free+0x148/0x1b0 [ 85.736972][ T6262] __kasan_slab_free+0x18/0x28 [ 85.737993][ T6262] slab_free_freelist_hook+0x16c/0x1e8 [ 85.739037][ T6262] kmem_cache_free+0x118/0x318 [ 85.739962][ T6262] file_free_rcu+0xac/0x128 [ 85.740803][ T6262] rcu_core+0x848/0x18e8 [ 85.741550][ T6262] rcu_core_si+0x10/0x1c [ 85.742350][ T6262] handle_softirqs+0x318/0xc90 [ 85.743248][ T6262] __do_softirq+0x14/0x20 [ 85.744003][ T6262] [ 85.744382][ T6262] Last potentially related work creation: [ 85.745383][ T6262] kasan_save_stack+0x40/0x70 [ 85.746171][ T6262] __kasan_record_aux_stack+0xc0/0xdc [ 85.747055][ T6262] kasan_record_aux_stack_noalloc+0x14/0x20 [ 85.748064][ T6262] call_rcu+0x104/0x958 [ 85.748765][ T6262] __fput+0x508/0x7b0 [ 85.749465][ T6262] ____fput+0x20/0x30 [ 85.750169][ T6262] task_work_run+0x1f4/0x280 [ 85.750975][ T6262] do_notify_resume+0x20f8/0x2c84 [ 85.751856][ T6262] el0_svc+0x98/0x128 [ 85.752562][ T6262] el0t_64_sync_handler+0x84/0xf0 [ 85.753457][ T6262] el0t_64_sync+0x18c/0x190 [ 85.754256][ T6262] [ 85.754655][ T6262] Second to last potentially related work creation: [ 85.755782][ T6262] kasan_save_stack+0x40/0x70 [ 85.756617][ T6262] __kasan_record_aux_stack+0xc0/0xdc [ 85.757525][ T6262] kasan_record_aux_stack+0x14/0x20 [ 85.758422][ T6262] task_work_add+0x90/0x370 [ 85.759207][ T6262] fput+0xf4/0x1e4 [ 85.759873][ T6262] filp_close+0x104/0x164 [ 85.760660][ T6262] close_fd+0x74/0x90 [ 85.761355][ T6262] __arm64_sys_close+0x3c/0x80 [ 85.762204][ T6262] invoke_syscall+0x98/0x290 [ 85.763030][ T6262] el0_svc_common+0x13c/0x258 [ 85.763831][ T6262] do_el0_svc+0x5c/0x134 [ 85.764573][ T6262] el0_svc+0x58/0x128 [ 85.765268][ T6262] el0t_64_sync_handler+0x84/0xf0 [ 85.766156][ T6262] el0t_64_sync+0x18c/0x190 [ 85.766917][ T6262] [ 85.767316][ T6262] The buggy address belongs to the object at ffff0000d59d0000 [ 85.767316][ T6262] which belongs to the cache filp of size 456 [ 85.769664][ T6262] The buggy address is located 0 bytes inside of [ 85.769664][ T6262] 456-byte region [ffff0000d59d0000, ffff0000d59d01c8) [ 85.771944][ T6262] [ 85.772388][ T6262] The buggy address belongs to the physical page: [ 85.773475][ T6262] page:000000001fc4c978 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1159d0 [ 85.775253][ T6262] head:000000001fc4c978 order:1 compound_mapcount:0 compound_pincount:0 [ 85.776743][ T6262] memcg:ffff0000f4918401 [ 85.777520][ T6262] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 85.778961][ T6262] raw: 05ffc00000010200 fffffc00036a9f80 dead000000000004 ffff0000c0858780 [ 85.780466][ T6262] raw: 0000000000000000 00000000000c000c 00000001ffffffff ffff0000f4918401 [ 85.782260][ T6262] page dumped because: kasan: bad access detected [ 85.783421][ T6262] [ 85.783815][ T6262] Memory state around the buggy address: [ 85.784775][ T6262] ffff0000d59cff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 85.786163][ T6262] ffff0000d59cff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 85.787594][ T6262] >ffff0000d59d0000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.788999][ T6262] ^ [ 85.789739][ T6262] ffff0000d59d0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.791135][ T6262] ffff0000d59d0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.792535][ T6262] ================================================================== [ 85.798644][ T6262] Disabling lock debugging due to kernel taint [ 85.804034][ T6262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.637850][ T4333] Bluetooth: hci5: command 0x1003 tx timeout [ 86.639283][ T4336] Bluetooth: hci5: Opcode 0x1003 failed: -110