last executing test programs: 25.844035986s ago: executing program 1 (id=250): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0xbb) 25.574640028s ago: executing program 1 (id=252): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x2e) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00010c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x28, "61752b496c088bfa3ab146172ea135d9eb2804e1c77d9a2afb2ccf56645ad9a4d2d7a884e117b513"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22.47455375s ago: executing program 1 (id=265): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(0x0) pipe2$9p(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x40, 0x40, 0x7, 0x4, {{0x18, 0x4, 0x0, 0x0, 0x60, 0x68, 0x0, 0x8, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@timestamp_addr={0x44, 0x14, 0x4, 0x1, 0x4, [{@multicast1, 0x8}, {@broadcast, 0x47}]}, @rr={0x7, 0x17, 0xb8, [@dev, @remote, @dev={0xac, 0x14, 0x14, 0x3e}, @empty, @multicast1]}, @generic={0x44, 0x2}, @cipso={0x86, 0x6}, @noop, @timestamp_prespec={0x44, 0xc, 0xd5, 0x3, 0xe, [{@multicast1, 0x1fb}]}, @generic={0x4, 0x9, "8790452437534c"}, @noop]}}}}}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_score\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x440, 0x0, 0x168, 0x9, 0x270, 0xb, 0x370, 0x250, 0x250, 0x370, 0x250, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', [], [], 'ip6tnl0\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x230, 0x270, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'pim6reg0\x00', {0x0, 0x7ff, 0x0, 0x0, 0x0, 0x6, 0x1000}}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) 21.382991668s ago: executing program 1 (id=270): socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000000e40)=ANY=[@ANYBLOB='iocharset=iso8859-1,nostrict,uid=forget,anchor=0000000000000145,gid=', @ANYRESDEC=0x0, @ANYBLOB=',dmode=00000000000000000002004,undelete,partition=00000000000000000001,unhide,\x00'], 0x1, 0xc43, &(0x7f00000001c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x800002e, r6, 0x0) ioctl$TIOCL_BLANKSCREEN(r4, 0x5609, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) timer_gettime(0x0, &(0x7f0000000300)) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 18.407711199s ago: executing program 1 (id=274): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000ac0)='./bus\x00', 0x0, &(0x7f0000020000)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x5511, &(0x7f0000015b80)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf9, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_script(r0, &(0x7f00000003c0), 0xb) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup3(0xffffffffffffffff, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r6, &(0x7f00000000c0)='./file1\x00', 0x0) openat(r6, &(0x7f00000001c0)='./file1\x00', 0x5, 0x0) 16.455051647s ago: executing program 1 (id=279): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {}, {0x5}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x0, 0x6}}, @TCA_FW_MASK={0x8}]}}]}, 0x40}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8.310790317s ago: executing program 0 (id=303): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x4}) 8.086324265s ago: executing program 4 (id=305): socket(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() execve(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x18) renameat2(r1, &(0x7f0000000080)='./file1\x00', r0, &(0x7f00000000c0)='./file0\x00', 0x0) 7.942780136s ago: executing program 0 (id=306): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c9000a00063b7d746e74b079ad5d"], 0xf) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB], 0x58) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x1, 0x2}, {0x4}}, @l2cap_conf_rsp={{0x5, 0xa7, 0x18}, {0x6, 0x8, 0x3, [@l2cap_conf_efs={0x6, 0x10, {0x5, 0x2, 0x8, 0x4, 0xdfd1, 0x7}}]}}]}}, 0x2b) syz_open_dev$usbmon(&(0x7f0000000280), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) eventfd(0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x81}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x19, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="851089e68f4a991f"], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000001400)=[r0, r0, r0], &(0x7f0000001440)=[{0x0, 0x4, 0xc, 0x7}, {0x3, 0x3, 0x0, 0x6}, {0x5, 0x4, 0x2, 0xc}, {0x5, 0x1, 0xc, 0x7}, {0x5, 0x2, 0x6, 0x9}, {0x1, 0x2, 0x9, 0xa}]}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r3}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r3, 0xe0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000001580)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000015c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1, 0x8, 0x0, 0x0}}, 0x10) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) dup2(r2, r2) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000040)=0x803) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) arch_prctl$ARCH_SHSTK_ENABLE(0x1011, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcd9}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x80ffffff}}, [@printk={@d, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_procfs(0x0, &(0x7f0000000100)='oom_score_adj\x00') pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0xd000943e, &(0x7f0000000400)={0x0, 0x0, "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", "b55aae1627792e4b4eb2027700bc7a1d241ff72020db76ea061c98334202e442957fda95f4db25ed7970406bd44cddd4db770c4ef5805c5a24cb6896f193519eefcaaa568365b102a3ec4e1639db606b48a4ab0f3a29b8d8995cbf44ad3b8d8b8ab52221bbaa3a2ff6864511b74acba00168b06e2d0f99d1907f54f0aa0f191c16301734c55ef13ec225caf2c13e29c4946f2fa31b1957237b5e04e44811461c3834a3af7d05bc85ae7634273c3740187447c208f20c6130dd5126ba8e742937b8ab6b925b4ec48b5743250dfeec9f66a20af10f55d58a30c520718e3dc75da4d6033794c822e8d40a00c7944f8a9fe6a571b491e30dc87291c61cdf3d6cf68953bb531763fff0ca74432c0e0f38abc94eef93be780f37ec275db1f0edd89871866e8836b1491f1bf3b41bdd1b3e6f877403e7c82392556ba646f20c44c82abf16c7b1540c5d4a6dbabf195e88d9e4f1754f76e8b9ed18e09f97e9fd6a0354a93c68c4e9454a2dac88f29e414c369c2c4016d62444a72c3917b049c679d0a672b46d89cda645030aae2bb65761ef80ebb7e859b0a5ea6273fdb557bc2dee27ea70b08a6525a26e57e7da6bdc62f82e97fb92b4a3a8855a8660489ff49f8d5d4c07dd3725f869588415a72ea94735f5056119f0fd34f3b87763749c2c3500d3b60d2a1d4f5069b0712f44af2c065f358d87bf61662353730aa45cd6d040dec799b7b63ca026c4582cbfef43eee60a05c730df77ae631c818015a0857546613a5e6862fc58422a2eed1fcbc60650edc67948b5df793f8d52d0cee980c693a669bec631e958759e691741077e61194a25097a904f2a0b2cee020348acf31ca05c994c23669e62e8396792a10eeab9e52179c83488e4c5bb3433c92025e043317932ac1aacca006a95a6a9571c1d1257a581eac1bc7e4e02a027d616c1a7eab38d70b6613fdd1656ed065f4ccb91988d596f8f1cc0c58fdd7b07b4a71e1918f083b94c1eb36f4de3b5510ca559563e6a2e5fb5b84c6534913ae9046a98d9b961510c36784eb55b26327b9d2d675e6a5fc468253cce3969a78c2ccf3429f73e4d7c6ec12a6edf6ce0d82280d983120781f63be07abf2fad88f4367de6a9d1631042be739c71d3fc27a7d9c33aad8361e6c7dc685971522dcd5af40d915903cdad919d7c7f4aa79b27625cd0957ed050328d0e307ac3cc653d11fade5de6bbcd0fd379c4cea8b329fbf762462f57bc2bc76aab88dfe2dfad99d461c44492fcc25156a7e8506a3a2de5d728e8e4fe411fb3b8ed3594e3cf5d55d53bec9c6460e63d16bb499b16c8dc98705ae7ef744980cfa503c02d4af8cb2f368c9d49493594ed3695d85305050fbc8a03fa52e96b50b41dc3cf2342f8177a1ccc02556bd227e5dde2cd3e86f2aa389ce814bbc1fac8394d09f59029f3a0be993030f4e9944c914a3518b0a2f4dbd8ff74063b118cf06ce5770075ce1765c666386a20cd229f65cdfe18189fb798060c0adeac90f1065915a3d86499a6c7b59f0b4d5f66e383359cd40786a9c1bbde3e8a39bdbe6063023a185cdee56dfb0f3207b8a666bfaf17cb44c56d1be990be69d0e9224cccc5d3d603583c7d0bcfab7c0c03cca49d1d6626d30d85382409dc87f42d8b4ae3e989cb9f5dc8c9aac87fb5a51169aa92e788717e1f1eec586dc66d17436afd7dab0b47904b99c521f5ca9b73a394e291eadd69f12726ccade10496c92eac33031ab666feca6137cac144ef542420332c9cc9e6c9de7bed4262ac20c6231e737e2acc67c7a48abdd4f54a5f72fed663acad55aa046b346d40498ec4f97cfb858222a501d951d97631d157dfb41b2554297c73253195b3e51cfa1a1873ddc4770c8dcec582b6657dd349d3ef11757685495358664c1c2619f5ccf9303c39b5bed143489dc211d6c01369480b0dbf62b5fcaddf71fb43cbbe514dd332b2e03cb96d40a553acbe859cc87185f4e7b793f3afdd07914aa0ca0f7a3377843f46b14f0684e4438f2d7fd766f264d19486868f18907a26481ea76f65d12bdc853b903afbc47597a2f9e3eb52967ec04b742926cb8c7f840b5ff34cef1ded2de2a2fb500e595589f2d109057a47b5665b0dc1a8f655715d4f4f349b65af986cd838236152df54b71c5ec14b4b9738e80c62877f59bc4087b063ba53996d65a547617320e37c53596a31b52d396f801b6242c6311a6f583bda2d56de86ee5c5bda060490a4de9a37f555d7acfd9617e61ac849979ef16ab192c13c57270be5bb04cc36704e83a0615cdc4519bab366296131234a0a638d7db573b4ca9ceb69bc1148d0efa5699257717112e32318b40c9cd3ae5e59d20ea46cc45e3d35cf7e8fd3934785fa09f2ab6aae3971d62fd383d29fad94d33b20b94b16d641924430ef0b5245e7f31bcb93832704146a750333942ca14fe91390b95d0f14cc7c10ff4faa6ec0f6ec9f6383dd47dcff1c9b99f930ae47996d747f299777092e0f57ceaa93e758a4927f2010ba1719de64e5643e7e41e3b549db51d3d63b4a1ab812044f2b7760052a6403d1d34a29db496308d949db43040ac1e5448091fe630e3e0649490e76c94bd1d557053b64219fcbddb07ffa39312c6dc5641671421a0fa9b7dd0a383bc7c16b5832551c7e104d726b57bada2fe31ea32da4cd904a856348785fa55cb7a56cb06566cf8eeae69cf3cb1dd8369dfa6c198fc4ed25562edd3e3027ea604bbaec2797915bd141318608be9004491991d8536f3fc790c82f3ecf600fbc875d7ed71bd8e3cb21d6eaabdb503eae6e074294d38cc6d74ee655623ea7b613d0e60e908f663c78e3acdd3e0105e6073e6170d3f431ad23a85756329320d940e1fd4e1d52b80e56164f6f20732863311a7670340da6692f62867fb08fc1ea790f7bde7abe73f4cdb9279db037d250c3559d2b91a9e90e30c79618f83691eb7c442b525e604ad7168a9778aac4a461570bb76c1ebd2e24a739d7cad03837b6e9a35c8c118025e1c2d7bc8eb14792c43f91b8958301f309950f70177eb318b2b92efa136072fd98d682be84f5e364dba26c8ed214c4eb3f93266d70d4f94ea524ddc641d806518419c4d153c5f4244af034f7e9ab57d82a529729693d6bc4c25d3bba671479b5cb1c0daa82e2a5f9c141e0d168e165998e577fec72d6149861877f5dadab272afd38e931096d164b448ac12f3fe19e33d200d720e1acbd91d87a4ec35c79c69f9b5b5c1a2d860517f279ed76d18a3e0b03242d58e2b4506234b576016a8b00a029913377f1f4b3c256171b5e65f10a78d004e186a3adb0877dbe844c89cbf42cc7560dc7b3b4912fc199c4dd99c6dd89e14f20b8a6cf786f3748b0af49ec3fcde93bc0183bb03576b6f7cd59a6686354fb1d0df275a0b696be3b9f97e2f987d2c653beeab97b868c628efc3304d545b77d2ad4e6cdc2fb2daeea1935d9a3ea1cf17bf8470c3bb2aacea05e0ff2af9e6a67f65cdfe0fd7dd22e832bfbb855048a2e47d0a876dca8c37e9c8d1fd90b421e825c66920dcb5b049f1df9863e1846cb691d41658865a13270982479c9c63aeb18228e180f489e3d36a4d57c1c6779308fa34208a6ea6b4d952293df9cb0e905672b238b58fde615d47ad76c4eec6221d625fb1703bd058f11a2bdb8963d18c778787788d9309c6ad627fd2aeff45746f1b4b0bfc5a5b3968ebb20f41f7efca24f6fad63f947d46b70a39712fbeb7eecdff89e90d819f8dba052bf20e45692a8fc4bc240c8cb721ff0c573abd365db5821b544aaa3ad73075a13d9cb288ce295038eead7e3ef0c7208a6b94e91651f1dcd07c14c9091665c85b9a1855496d20fc32b52c3174473689371fcea2173d4802d3fb2ea9128904111c03cc07fba480d1f3db7e82629f55b7cac96a07f4b08dbf4051aea88f12f37a70babcb9a0204865f8f8ab13a81b347564e5f6652cf17bf05dcf3e2de046ce92d6a9cbf277340a38326ccac4512ae2daad0dcfaf41665b52174d6a66efdf6a756b44c3f4eb386f17856116ded1755661690ff6a64bd6815ff62a981f6f07ce0f598563d0b8d282a47c8d4926c82368b10dd7f7d6ee61d97feac89dae9ff5ec7e45d19689c39f682110c508145297c2c9117532aace4f7bb392fc3b4347c8dc9360b24d89ddedeac5c033ce8585334f0c6df6063961db9aaec10559d8c751fce0ccd8452156eef016deebf671c08019ea53568eb729364bc4a84438e744cbb2a6060caa25385c8d09d3a31288b48be4e7db1581fba068d0f60de277063adb657e979df9b76c4038605c8ebe8ad831fdd21c040856f851ff60258d697edec2c82e7b45e5116f03a7eb662bcd4e05bd69b6d596655142cfd6eeb53cf4288eed62dca37f0b6053634e7118807e371ca0295c5503a8a58957ef00fb9bc9ad28f49c6ff3a0ac9319ea980378e7bb9c9942eb285ca1472a485beb7cd8ad17b7cd7d0cbada3bd1c2d57ec84c22238e2d8d0143242bbca6755ff5bcda70c24533e4ab88ecf4ecfea68c4ab7033b1b89de4d1e763f0343513cdf525cf600cc2018d0be9c3ace6d37fe192bf091999744fe460e08f71a4e07f3d945acffa0c7e988114e4a1f165554d42043c60070dc40c59e66cabefd30c9e072edde986e2e5d4d5fe4f1962577d80ab9d9c909d4bb60b5f6f20befda3c8710196e2d18dc6157b7914e0a497c346951c4194e221541ceddc6055bff3e39f7fc5eb7067be694d4dfc709de75ca91ae5105c391daba23bf66c7d4952da61d86f020e1128ed2c738fd5a102aaa0711bd58d5c1bde7f996bf61c86d6a0145ea15d98495eaf5d2b7059bd367d5c1c228a3ce6e42941de9a36178d2b057b9c8a9eb132920c0df998c8a6e0ce776be78ffa181adcf1d424b879116b94b0ce1fceb933a7d1daaad2dd32ae8d60b1dcfc477141a1f61f6c98359e2e83c397faa02c634266ff2abeb5a3745e4e4328c4ed8b0d7db934176bdb4a8dc3c1fe4176b9458f023139c07690cbc1f988e7afa3b714aca97ce5da39edc2ca3d280aef15f8c2bb139e654788a1f3e842807e3d2c8c82f5dedff0974fbf4d2e31847bb386d9ffafb82880fddf6665e3903a978bb520be86f2058ebb0ea2ef91d895bbbf1b99b4c8d5ec9d6b9afbd3139fa422d533ccbafd4e33059417f1d8142013f57f236ae1f68a5bac521d36563158e34809bd5473b0b74dd3c715111a0050b594d1ebb682779f68e4521495aeddbe066358cfb38c41a4e8667a1e96007c3a71e3643cbb221a52ad99cd008ee0524ca0b55ab0092997ebd2515112394d96fb43bb1337a710b915c75faeedf66ab01b06548f459e5e4990995284ece0ed864c2e63756a7fb7f2627c1502be77009ecb0d798c10c4882ff7c7ddaaf3274968a6ca6f4ba0d7ed277a9fa1b53b46af"}) 6.802739079s ago: executing program 4 (id=308): r0 = socket$inet6(0xa, 0x3, 0x35) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[@ANYBLOB="00010401"], 0x18) sendmmsg$inet(r0, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 6.717977456s ago: executing program 2 (id=309): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) socket$caif_seqpacket(0x25, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) 6.598022235s ago: executing program 3 (id=310): ioprio_set$pid(0x1, 0x0, 0x2000) r0 = syz_io_uring_setup(0xec3, &(0x7f0000000400), &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) 6.426584179s ago: executing program 4 (id=311): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) unshare(0x20000400) setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000140), 0x4) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e20, 0x8363}, {0x0, 0x2, 0x2, 0xfffffffffffffff5, 0x0, 0x0, 0x0, 0x1}, {0x6, 0x0, 0x9e3}, 0x2}, {{@in=@dev, 0x4d4, 0xff}, 0x2, @in, 0x3504, 0x0, 0x0, 0x0, 0x3, 0x2dd, 0x8000}}, 0xe8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x800) r6 = socket$packet(0x11, 0x3, 0x300) bind$packet(r6, &(0x7f0000000680)={0x11, 0x1b, r4, 0x1, 0x1, 0x6, @random="7bb239f594a9"}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r9}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 6.344321796s ago: executing program 3 (id=312): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000180)='./bus\x00', 0x400, &(0x7f0000000440)=ANY=[], 0x1, 0x63a, &(0x7f0000000840)="$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") openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) linkat(r0, &(0x7f0000000180)='./file1\x00', r0, &(0x7f0000000640)='./bus\x00', 0x0) unlink(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000180)='./file1\x00') 6.229113455s ago: executing program 0 (id=313): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r1}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc09b6f2609", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.002534823s ago: executing program 0 (id=314): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) sched_setscheduler(0x0, 0x5, &(0x7f0000000300)=0xe7ad) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=0x1, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000007c0)=0x8001) sched_setscheduler(r0, 0x2, &(0x7f0000000340)) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000380)={'veth0_to_bridge\x00', {0x2, 0x0, @private}}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'dummy0\x00'}) setxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, 0x0, 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f00000005c0)={0x0, 0x0, 0xe, 0x1e, 0x15d, &(0x7f0000000100)="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"}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d008b0000000500010004"], 0x4c}}, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$PIO_UNIMAP(r5, 0x4b66, &(0x7f0000000000)={0x0, 0x0}) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000580)={0x2, &(0x7f0000000540)=[{0x1000, 0x1}, {0xa5, 0x3}]}) ioctl$TIOCGPTPEER(r5, 0x5441, 0x8) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{}, {}, {}]}) 5.957448467s ago: executing program 3 (id=315): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCGETD(r4, 0x5424, &(0x7f0000000400)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_open_dev$loop(0x0, 0x0, 0x0) unshare(0x400) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea899e2b7fb0a0110d1000000000900", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c5512654000"}}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5b}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00'}, 0x10) futex(0xfffffffffffffffc, 0x80, 0x0, 0x0, 0x0, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="c02101"], 0xfdae) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3.763086835s ago: executing program 3 (id=316): setrlimit(0x1, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0x42) open(&(0x7f0000000280)='./bus\x00', 0x400141042, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x18502, &(0x7f0000001b80)=ANY=[], 0x1, 0x11f3, &(0x7f0000000980)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup3(r1, r0, 0x0) io_setup(0x6, &(0x7f0000000240)=0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) io_submit(r2, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) r3 = open(&(0x7f0000000080)='./bus\x00', 0x40002, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x100000002) fallocate(r3, 0x3, 0x0, 0xffeffeff000) r4 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000180), 0x4) 3.662683513s ago: executing program 2 (id=317): mkdir(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000440)={&(0x7f00000003c0)=[{0x0, 0xc801, 0x0, 0xffffffffffffffff}], 0x1}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000640), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x0, 0x4}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@ifindex, 0xffffffffffffffff, 0x0, 0x0, 0x0, @prog_id}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x1}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) name_to_handle_at(r4, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0) 2.60016679s ago: executing program 3 (id=318): syz_usb_connect(0x0, 0x2d, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000974281408205050083e50102030109021b0002000000000904000000eca19d000904ba000009"], 0x0) 2.58702874s ago: executing program 2 (id=319): socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB]) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0xa, @vbi={0x0, 0x0, 0x33565348, 0x0, [0x2]}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000500)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x11a, 0x23, 0x0, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000140)={0x4, {{0xa, 0x0, 0x9, @private2}}}, 0x88) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') 1.582838742s ago: executing program 2 (id=320): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000010000000000000604000000005f3e"], 0x0, 0x28}, 0x20) 1.554666274s ago: executing program 2 (id=321): bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 711.487542ms ago: executing program 0 (id=322): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000340)={[{@errors_remount}, {@noquota}, {@nouid32}, {@auto_da_alloc_val}, {@nomblk_io_submit}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@barrier}, {@delalloc}, {@usrquota}]}, 0x10, 0x4c6, &(0x7f0000000ec0)="$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") pipe(&(0x7f0000000100)) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a843500140600fe80000000000000e5000000", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000200)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473ba6100b021ee66b9800000c00f146635004000000f300f20e06635800000000f22e0f30fa6c8", 0x54}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001a000000000000000000"], 0x1c}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 546.642356ms ago: executing program 4 (id=323): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @rand_addr=0x64010101}]}, &(0x7f0000000600)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}, &(0x7f00000000c0)=0xb0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000240)={r2}, &(0x7f00000002c0)=0x8) 519.006328ms ago: executing program 2 (id=324): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000086dd020003"], 0xfdef) 386.546329ms ago: executing program 4 (id=325): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, &(0x7f0000000000), 0x4) 235.298941ms ago: executing program 0 (id=326): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f0000000140)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRES16, @ANYRES64=0x0], 0xfd, 0x1500, &(0x7f0000001b80)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fdatasync(r4) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000080), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) ioctl$RTC_SET_TIME(r5, 0x5452, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x90) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) clock_adjtime(0x1, &(0x7f0000000180)={0xd, 0x6, 0x246, 0xc, 0x40, 0x3, 0x8, 0x4, 0x5, 0x5479, 0x7, 0x6, 0x7fff, 0x200, 0xa0, 0x2, 0x5, 0x1, 0x6, 0x0, 0xffffffffffffffff, 0x9, 0x9a, 0x5, 0x28ad487d, 0xd7}) 26.792508ms ago: executing program 4 (id=327): syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000016c0)={0x1, &(0x7f0000001680)=[{0x6}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 0s ago: executing program 3 (id=328): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000002000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400320000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000074c0000000c0a01020000000000000000010000000900020073797a3200000000200003801c0000800800034000000001040001800c00044000000000000000000900010073797a30"], 0xd8}}, 0x0) kernel console output (not intermixed with test programs): c address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.115248][ T3645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.126508][ T3645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.142118][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.151406][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.175061][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.184027][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.200386][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.210394][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.222443][ T3645] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.233224][ T3645] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.263951][ T3645] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.280106][ T3645] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.392388][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.445554][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.467794][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.555592][ T3659] Bluetooth: hci2: command tx timeout [ 77.561128][ T3659] Bluetooth: hci4: command tx timeout [ 77.571056][ T3658] Bluetooth: hci0: command tx timeout [ 77.576719][ T3658] Bluetooth: hci3: command tx timeout [ 77.582420][ T3658] Bluetooth: hci1: command tx timeout [ 77.625531][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.633708][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.667800][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.697109][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.721740][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.749945][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.770044][ T3735] loop2: detected capacity change from 0 to 1764 [ 77.800716][ T3735] ======================================================= [ 77.800716][ T3735] WARNING: The mand mount option has been deprecated and [ 77.800716][ T3735] and is ignored by this kernel. Remove the mand [ 77.800716][ T3735] option from the mount to silence this warning. [ 77.800716][ T3735] ======================================================= [ 78.012616][ C0] eth0: bad gso: type: 1, size: 1408 [ 78.129230][ T3745] input: syz1 as /devices/virtual/input/input5 [ 78.528869][ T3630] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.246067][ T3761] netlink: 'syz.1.14': attribute type 11 has an invalid length. [ 79.292490][ T3761] netlink: 9388 bytes leftover after parsing attributes in process `syz.1.14'. [ 79.434816][ T3630] usb 1-1: Using ep0 maxpacket: 32 [ 79.520986][ T3748] loop4: detected capacity change from 0 to 32768 [ 79.555634][ T3630] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.604730][ T3630] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 79.613677][ T3630] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 79.694446][ T3749] loop3: detected capacity change from 0 to 32768 [ 79.714222][ T3749] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.11 (3749) [ 79.772553][ T3749] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 79.786912][ T3749] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 79.795289][ T3630] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 79.813788][ T3749] BTRFS info (device loop3): using free space tree [ 79.825094][ T3630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.872660][ T3630] usb 1-1: Product: syz [ 79.890687][ T3630] usb 1-1: Manufacturer: syz [ 79.905858][ T3687] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.918542][ T3630] usb 1-1: SerialNumber: syz [ 79.928981][ T3769] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 79.954788][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 79.963259][ T3769] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 80.008192][ T3630] cdc_ncm 1-1:1.0: skipping garbage [ 80.028062][ T3630] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 80.072285][ T3630] cdc_ncm 1-1:1.0: bind() failure [ 80.200026][ T3749] BTRFS info (device loop3): enabling ssd optimizations [ 80.248112][ T3769] ERROR: (device loop4): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 80.248112][ T3769] [ 80.290594][ T3769] ERROR: (device loop4): remounting filesystem as read-only [ 80.304909][ T3687] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.318044][ T3769] ERROR: (device loop4): jfs_unlink: [ 80.318044][ T3769] [ 80.331137][ T3687] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.344808][ T3749] capability: warning: `syz.3.11' uses deprecated v2 capabilities in a way that may be insecure [ 80.363873][ T3687] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 80.388210][ T3687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.429506][ T3687] usb 3-1: config 0 descriptor?? [ 80.456292][ T3639] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 80.504997][ T3630] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 80.755161][ T3630] usb 2-1: Using ep0 maxpacket: 8 [ 80.904777][ T3630] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.999059][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 81.014550][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 81.022804][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 81.034527][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 81.042877][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 81.051725][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 81.060713][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 81.069642][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 81.078310][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 81.150561][ T3687] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 81.440769][ T3687] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 81.511012][ T3687] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0001/input/input6 [ 81.534791][ T3630] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 81.576228][ T3630] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.594985][ T3630] usb 2-1: Product: syz [ 81.630908][ T3630] usb 2-1: Manufacturer: syz [ 81.642262][ T3687] cm6533_jd 0003:0D8C:0022.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 81.672475][ T3630] usb 2-1: SerialNumber: syz [ 81.718898][ T14] cfg80211: failed to load regulatory.db [ 81.755513][ T3687] usb 3-1: USB disconnect, device number 2 [ 81.788503][ T3812] overlayfs: refusing to follow metacopy origin for (/file1) [ 82.419510][ T3815] loop2: detected capacity change from 0 to 2048 [ 83.285558][ T3819] device batadv0 entered promiscuous mode [ 83.290891][ T3815] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 83.436530][ T3815] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 83.546569][ T3630] cdc_ncm 2-1:1.0: failed to get mac address [ 83.605668][ T3824] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.884121][ T3826] loop0: detected capacity change from 0 to 2048 [ 83.982095][ T3826] loop0: p3 < > p4 < > [ 83.991215][ T3826] loop0: partition table partially beyond EOD, truncated [ 84.021653][ T3826] loop0: p3 start 4284289 is beyond EOD, truncated [ 84.084961][ T3824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.142085][ T3824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.125220][ T3630] cdc_ncm 2-1:1.0: bind() failure [ 85.165259][ T3630] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 85.184669][ T3630] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 85.215008][ T3630] usbtest: probe of 2-1:1.1 failed with error -71 [ 85.376781][ T3630] usb 2-1: USB disconnect, device number 2 [ 86.735184][ T3642] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt [ 86.735184][ T3642] [ 86.754698][ T3687] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.780242][ T3848] kvm: emulating exchange as write [ 86.858935][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.909184][ T3846] loop2: detected capacity change from 0 to 40427 [ 86.979702][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.010444][ T3846] F2FS-fs (loop2): invalid crc value [ 87.053583][ T3846] F2FS-fs (loop2): Found nat_bits in checkpoint [ 87.060317][ T3687] usb 4-1: Using ep0 maxpacket: 16 [ 87.149778][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.201590][ T3687] usb 4-1: config 0 has an invalid descriptor of length 117, skipping remainder of the config [ 87.223257][ T3687] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x1D, skipping [ 87.261097][ T3846] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 87.273933][ T3687] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 118, changing to 10 [ 87.337583][ T3687] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 25956, setting to 1024 [ 87.390083][ T3687] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.653362][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.796922][ T3850] f2fs_ckpt-7:2: attempt to access beyond end of device [ 87.796922][ T3850] loop2: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 88.268379][ T3687] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 88.286536][ T3687] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 88.322884][ T3687] usb 4-1: Manufacturer: syz [ 88.399961][ T3647] syz-executor: attempt to access beyond end of device [ 88.399961][ T3647] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 88.455491][ T3647] syz-executor: attempt to access beyond end of device [ 88.455491][ T3647] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 88.475036][ T3687] usb 4-1: config 0 descriptor?? [ 88.530377][ T3842] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 88.547643][ T3687] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 88.790467][ T3798] usb 4-1: USB disconnect, device number 2 [ 88.877036][ T3864] loop1: detected capacity change from 0 to 4096 [ 88.952451][ T3864] ntfs: (device loop1): parse_options(): Invalid fmask option argument: 0000000000000000000000how_sys_files=yes [ 89.446254][ T3659] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.457157][ T3659] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.466367][ T3659] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.520296][ T3659] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.530019][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 89.538919][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.709638][ T3878] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 90.079631][ T3884] loop3: detected capacity change from 0 to 512 [ 90.292101][ T3884] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.40: casefold flag without casefold feature [ 90.348822][ T3884] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.40: missing EA_INODE flag [ 90.377229][ T3884] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.40: error while reading EA inode 12 err=-117 [ 90.445403][ T3884] EXT4-fs (loop3): 1 orphan inode deleted [ 90.458917][ T3884] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 90.866540][ T3892] xt_TPROXY: Can be used only with -p tcp or -p udp [ 90.939153][ T26] audit: type=1804 audit(1723636336.693:3): pid=3892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.40" name="/newroot/9/file0/bus" dev="loop3" ino=15 res=1 errno=0 [ 91.280344][ T3873] chnl_net:caif_netlink_parms(): no params data found [ 91.389596][ T3639] EXT4-fs (loop3): unmounting filesystem. [ 91.597149][ T3897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.635218][ T3658] Bluetooth: hci2: command tx timeout [ 91.681902][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.691241][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.709831][ T3897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.722649][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.731982][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.739898][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 91.753257][ T3659] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.790936][ T48] Bluetooth: unknown link type 60 [ 91.870564][ T3873] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.878736][ T3873] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.887679][ T3873] device bridge_slave_0 entered promiscuous mode [ 91.910437][ T3873] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.926045][ T3873] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.950785][ T3873] device bridge_slave_1 entered promiscuous mode [ 92.060891][ T3873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.109308][ T9] device hsr_slave_0 left promiscuous mode [ 92.143172][ T9] device hsr_slave_1 left promiscuous mode [ 92.160843][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.180535][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.210969][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.233317][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.268895][ T9] device bridge_slave_1 left promiscuous mode [ 92.289332][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.331497][ T9] device bridge_slave_0 left promiscuous mode [ 92.351698][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.423691][ T9] device veth1_macvtap left promiscuous mode [ 92.442356][ T9] device veth0_macvtap left promiscuous mode [ 92.458938][ T9] device veth1_vlan left promiscuous mode [ 92.465150][ T9] device veth0_vlan left promiscuous mode [ 93.351517][ T9] team0 (unregistering): Port device team_slave_1 removed [ 93.404961][ T9] team0 (unregistering): Port device team_slave_0 removed [ 93.441035][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.486635][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.724871][ T48] Bluetooth: hci2: command tx timeout [ 93.807499][ T48] Bluetooth: hci4: command tx timeout [ 93.878566][ T48] Bluetooth: hci3: command tx timeout [ 93.928973][ T9] bond0 (unregistering): Released all slaves [ 94.047993][ T3873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.057616][ T3914] netlink: 'syz.3.46': attribute type 11 has an invalid length. [ 94.071224][ T3929] netlink: 'syz.0.47': attribute type 2 has an invalid length. [ 94.209056][ T3873] team0: Port device team_slave_0 added [ 94.276525][ T3873] team0: Port device team_slave_1 added [ 94.349984][ T3873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.364370][ T3935] loop3: detected capacity change from 0 to 128 [ 94.376363][ T3873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.444875][ T3873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.456848][ T3935] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 94.508571][ T3935] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 94.512605][ T3873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.579338][ T3873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.659643][ T3873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.739130][ T3639] EXT4-fs (loop3): unmounting filesystem. [ 94.918828][ T3873] device hsr_slave_0 entered promiscuous mode [ 94.987367][ T3873] device hsr_slave_1 entered promiscuous mode [ 95.118843][ T3903] chnl_net:caif_netlink_parms(): no params data found [ 95.559259][ T3964] loop3: detected capacity change from 0 to 256 [ 95.577932][ T3964] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 95.610405][ T3964] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 95.653105][ T3903] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.697367][ T3903] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.726766][ T3903] device bridge_slave_0 entered promiscuous mode [ 95.766390][ T3903] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.773543][ T3903] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.905087][ T3658] Bluetooth: hci2: command tx timeout [ 95.910700][ T3658] Bluetooth: hci4: command tx timeout [ 96.664369][ T3903] device bridge_slave_1 entered promiscuous mode [ 97.139712][ T3903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.226573][ T3903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.275701][ T3983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.275991][ T3983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.452538][ T3903] team0: Port device team_slave_0 added [ 97.585710][ T3903] team0: Port device team_slave_1 added [ 97.687953][ T3903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.704820][ T3903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.784592][ T3903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.917188][ T3903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.924197][ T3903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.954777][ T3658] Bluetooth: hci4: command tx timeout [ 97.960260][ T3658] Bluetooth: hci2: command tx timeout [ 98.114567][ T3903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.235271][ T3903] device hsr_slave_0 entered promiscuous mode [ 98.279961][ T3903] device hsr_slave_1 entered promiscuous mode [ 98.316028][ T3903] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.338738][ T3903] Cannot create hsr debugfs directory [ 98.541817][ T3873] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 98.602187][ T3873] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 98.656328][ T3873] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 98.788309][ T3873] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 98.878281][ T4012] loop3: detected capacity change from 0 to 16 [ 98.960654][ T4012] erofs: (device loop3): mounted with root inode @ nid 36. [ 99.019652][ T3903] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.209350][ T3903] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.388571][ T4014] syz.3.64: attempt to access beyond end of device [ 99.388571][ T4014] loop3: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 99.997908][ T3903] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.024631][ T4003] loop0: detected capacity change from 0 to 32768 [ 100.034876][ T3658] Bluetooth: hci4: command tx timeout [ 100.075909][ T4003] XFS: attr2 mount option is deprecated. [ 100.103828][ T4003] XFS: ikeep mount option is deprecated. [ 100.124262][ T4003] XFS: noikeep mount option is deprecated. [ 100.156396][ T3873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.215811][ T3903] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.262782][ T4003] XFS (loop0): Mounting V5 Filesystem [ 100.295949][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.314284][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.385608][ T3873] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.439922][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.451492][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.472722][ T3630] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.480993][ T3630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.505402][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.514309][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.555092][ T3630] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.562295][ T3630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.606734][ T4003] XFS (loop0): Ending clean mount [ 100.616720][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.635569][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 100.655394][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 100.685878][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.724333][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.739476][ T4031] loop3: detected capacity change from 0 to 4096 [ 100.779319][ T4031] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 100.813550][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 100.814907][ T4003] XFS (loop0): Quotacheck needed: Please wait. [ 100.822913][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.865751][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.881214][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.889623][ T4031] ntfs3: loop3: Failed to load $MFT. [ 100.890381][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.925384][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.945191][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.957797][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 101.007803][ T4003] XFS (loop0): Quotacheck: Done. [ 101.091403][ T3903] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.142354][ T3645] XFS (loop0): Unmounting Filesystem [ 101.167050][ T3903] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.225524][ T3903] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.300550][ T3903] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.389435][ T4045] loop3: detected capacity change from 0 to 128 [ 101.533182][ T4045] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 101.576381][ T4045] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 101.662620][ T4045] syz.3.69 (pid 4045) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 101.737977][ T4045] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 101.780012][ T4045] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 101.831962][ T4045] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 101.865782][ T4045] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 101.879514][ T4045] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 101.901668][ T3903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.932223][ T4045] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 101.952411][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.962312][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 102.132869][ T3903] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.156173][ T3639] EXT4-fs (loop3): unmounting filesystem. [ 102.172822][ T3873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.190051][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.210206][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.288732][ T4041] loop1: detected capacity change from 0 to 32768 [ 102.302416][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 102.325743][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.340509][ T4041] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.67 (4041) [ 102.351509][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.359748][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.455252][ T4041] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 102.515750][ T4041] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 102.546267][ T4041] BTRFS info (device loop1): using free space tree [ 102.568252][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 102.587062][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 102.623029][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 102.649815][ T26] audit: type=1326 audit(1723636348.423:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4073 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77f7799f9 code=0x7ffc0000 [ 102.653098][ T3693] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.679162][ T3693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.694143][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 102.703747][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 102.751831][ T26] audit: type=1326 audit(1723636348.443:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4073 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77f7799f9 code=0x7ffc0000 [ 102.780945][ T4084] loop3: detected capacity change from 0 to 512 [ 102.821045][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.830507][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.848243][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 102.861581][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 102.874141][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 102.874164][ T4084] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 102.886534][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 102.912264][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 102.929004][ T26] audit: type=1326 audit(1723636348.443:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4073 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fe77f7799f9 code=0x7ffc0000 [ 102.956691][ T26] audit: type=1326 audit(1723636348.443:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4073 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77f7799f9 code=0x7ffc0000 [ 102.978850][ T26] audit: type=1326 audit(1723636348.443:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4073 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77f7799f9 code=0x7ffc0000 [ 103.001666][ T26] audit: type=1326 audit(1723636348.443:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4073 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe77f7799f9 code=0x7ffc0000 [ 103.024569][ T4084] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 103.034337][ T4084] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 not in group (block 0)! [ 103.044932][ T4041] BTRFS info (device loop1): enabling ssd optimizations [ 103.053004][ T26] audit: type=1326 audit(1723636348.443:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4073 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77f7799f9 code=0x7ffc0000 [ 103.088701][ T3798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 103.094702][ T4084] EXT4-fs (loop3): group descriptors corrupted! [ 103.126077][ T3798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.162784][ T26] audit: type=1326 audit(1723636348.483:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4073 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7fe77f7799f9 code=0x7ffc0000 [ 103.179730][ T3903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 103.316071][ T26] audit: type=1326 audit(1723636348.483:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4073 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77f7799f9 code=0x7ffc0000 [ 103.464257][ T26] audit: type=1326 audit(1723636348.483:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4073 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77f7799f9 code=0x7ffc0000 [ 103.648287][ T3640] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 103.696260][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 103.713067][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 103.730113][ T4110] loop3: detected capacity change from 0 to 2048 [ 103.835988][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 103.895704][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 104.628969][ T3873] device veth0_vlan entered promiscuous mode [ 104.648823][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 104.668267][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 104.773938][ T3873] device veth1_vlan entered promiscuous mode [ 104.983451][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 105.004565][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 105.030596][ T3873] device veth0_macvtap entered promiscuous mode [ 105.131528][ T4132] loop3: detected capacity change from 0 to 512 [ 105.153420][ T9] device hsr_slave_0 left promiscuous mode [ 105.174932][ T9] device hsr_slave_1 left promiscuous mode [ 105.181527][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.203349][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.204134][ T4132] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 105.225291][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.232754][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.261762][ T4132] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 105.262239][ T9] device bridge_slave_1 left promiscuous mode [ 105.278851][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.287836][ T9] device bridge_slave_0 left promiscuous mode [ 105.294116][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.342644][ T4132] EXT4-fs (loop3): 1 truncate cleaned up [ 105.370655][ T4132] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 105.406672][ T9] device veth1_macvtap left promiscuous mode [ 105.415033][ T9] device veth0_macvtap left promiscuous mode [ 105.421211][ T9] device veth1_vlan left promiscuous mode [ 105.444930][ T9] device veth0_vlan left promiscuous mode [ 105.516272][ T4132] fscrypt (loop3, inode 18): Unsupported encryption flags (0x08) [ 105.599423][ T3639] EXT4-fs (loop3): unmounting filesystem. [ 107.030248][ T9] team0 (unregistering): Port device team_slave_1 removed [ 107.076734][ T9] team0 (unregistering): Port device team_slave_0 removed [ 107.137178][ T4166] process 'syz.1.86' launched './file0' with NULL argv: empty string added [ 107.150199][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.233356][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.756721][ T9] bond0 (unregistering): Released all slaves [ 107.877001][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 107.894710][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.912041][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 107.932409][ T3873] device veth1_macvtap entered promiscuous mode [ 107.977237][ T3903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.998977][ T3873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.017194][ T3873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.027960][ T3873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.049654][ T3873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.060106][ T3873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.114687][ T3873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.242454][ T3873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.319345][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 108.337712][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 108.361867][ T3873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.385139][ T3873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.424609][ T3873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.445320][ T3873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.460601][ T3873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.474718][ T3873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.587314][ T3873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.601729][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 108.616556][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 109.035996][ T3873] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.075690][ T3873] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.096648][ T3873] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.123716][ T3873] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.185973][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 109.226213][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 109.468516][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 109.508815][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 109.539731][ T3903] device veth0_vlan entered promiscuous mode [ 109.587206][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 109.609779][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 109.658657][ T3903] device veth1_vlan entered promiscuous mode [ 109.679283][ T4015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.717608][ T4015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.795571][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 109.835446][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 109.843895][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 109.887116][ T4015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.904694][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 109.914036][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 109.936750][ T4015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.958152][ T3903] device veth0_macvtap entered promiscuous mode [ 109.971805][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 109.980111][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 110.070312][ T3903] device veth1_macvtap entered promiscuous mode [ 110.112778][ T3903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.128927][ T4198] input: syz0 as /devices/virtual/input/input7 [ 110.195514][ T3903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.223300][ T3903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.259987][ T3903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.284674][ T3903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.328945][ T3903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.370551][ T3903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.412115][ T3903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.630212][ T3903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.770543][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 110.821018][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 110.836480][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 110.853384][ T3903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.883146][ T3903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.901561][ T3903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.069169][ T3903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.079492][ T3903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.090334][ T3903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.100929][ T3903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.426268][ T3903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.019326][ T3903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.021826][ T4217] loop4: detected capacity change from 0 to 2048 [ 112.054902][ T4217] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 112.099657][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 112.115739][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 112.162152][ T3903] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.207677][ T3903] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.219927][ T3903] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.284597][ T3903] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.485844][ T4015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.506190][ T4015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.537102][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 112.574221][ T4015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.597434][ T4015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.631840][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 114.364626][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 114.746019][ T4257] loop1: detected capacity change from 0 to 40427 [ 115.289939][ T4257] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 115.297784][ T4257] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 115.427645][ T4257] F2FS-fs (loop1): Found nat_bits in checkpoint [ 115.489893][ T4257] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 115.497038][ T4257] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 115.514600][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 115.635659][ T7] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 115.649300][ T7] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 115.679893][ T7] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.985226][ T7] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.041293][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.074540][ T7] usb 4-1: Product: syz [ 116.078768][ T7] usb 4-1: Manufacturer: syz [ 116.128039][ T7] usb 4-1: SerialNumber: syz [ 116.205744][ T7] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 116.345043][ T4268] netlink: 28 bytes leftover after parsing attributes in process `syz.1.107'. [ 116.850902][ T4275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.861891][ T4275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.623949][ T40] usb 1-1: USB disconnect, device number 2 [ 118.727704][ T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 118.761027][ T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 118.770103][ T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 118.780354][ T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 118.790643][ T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 118.798159][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 119.054612][ T4288] input: syz0 as /devices/virtual/input/input8 [ 119.175885][ T4289] loop2: detected capacity change from 0 to 512 [ 119.224206][ T4289] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 119.589286][ T4115] usb 4-1: USB disconnect, device number 3 [ 119.624451][ T4289] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 119.640799][ T4289] EXT4-fs (loop2): 1 truncate cleaned up [ 119.646603][ T4289] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 120.086163][ T4296] hub 6-0:1.0: USB hub found [ 120.094089][ T4296] hub 6-0:1.0: 1 port detected [ 120.153798][ T3903] EXT4-fs (loop2): unmounting filesystem. [ 120.298814][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.162030][ T3658] Bluetooth: hci3: command tx timeout [ 121.256133][ T4301] loop2: detected capacity change from 0 to 1024 [ 121.297010][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.361079][ T4301] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 121.364160][ T4307] loop4: detected capacity change from 0 to 256 [ 121.467002][ T4301] EXT4-fs (loop2): orphan cleanup on readonly fs [ 121.473998][ T4301] EXT4-fs error (device loop2): ext4_free_blocks:6213: comm syz.2.117: Freeing blocks not in datazone - block = 0, count = 4096 [ 121.606801][ T4301] EXT4-fs (loop2): 1 orphan inode deleted [ 121.626452][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.647527][ T4301] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 121.701646][ T4283] chnl_net:caif_netlink_parms(): no params data found [ 121.756810][ T4304] netlink: 'syz.1.112': attribute type 2 has an invalid length. [ 121.783589][ T3903] EXT4-fs (loop2): unmounting filesystem. [ 121.814451][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.914046][ T4304] loop1: detected capacity change from 0 to 256 [ 122.243885][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.287265][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.302635][ T4283] device bridge_slave_0 entered promiscuous mode [ 122.349461][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.401847][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.476162][ T4283] device bridge_slave_1 entered promiscuous mode [ 122.543555][ T4321] loop2: detected capacity change from 0 to 1024 [ 122.607124][ T4321] hfsplus: unable to parse mount options [ 123.206217][ T4283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.244754][ T3658] Bluetooth: hci3: command tx timeout [ 123.370748][ T4283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.649661][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 123.815554][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 123.839896][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 124.187626][ T4283] team0: Port device team_slave_0 added [ 124.218205][ T4283] team0: Port device team_slave_1 added [ 124.397864][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.416227][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.524120][ T4283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.632074][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.645964][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.670553][ T4348] loop3: detected capacity change from 0 to 4096 [ 124.757472][ T4348] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 124.769872][ T4283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.948659][ T4348] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 125.110815][ T4283] device hsr_slave_0 entered promiscuous mode [ 125.129714][ T4358] loop2: detected capacity change from 0 to 128 [ 125.147295][ T4358] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 125.172683][ T4283] device hsr_slave_1 entered promiscuous mode [ 125.314396][ T4283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.322370][ T3658] Bluetooth: hci3: command tx timeout [ 125.334565][ T4283] Cannot create hsr debugfs directory [ 125.417566][ T4366] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 125.660823][ T26] kauditd_printk_skb: 30 callbacks suppressed [ 125.660840][ T26] audit: type=1804 audit(1723636371.433:44): pid=4360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.124" name="/newroot/44/file1/file1" dev="loop3" ino=30 res=1 errno=0 [ 125.952978][ T4356] loop1: detected capacity change from 0 to 2048 [ 126.061908][ T3639] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 126.074101][ T4356] hpfs: filesystem error: invalid number of hotfixes: 266, used: 2; already mounted read-only [ 126.139759][ T4369] loop4: detected capacity change from 0 to 1024 [ 126.141758][ T4356] hpfs: filesystem error: improperly stopped [ 126.207809][ T4356] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2 [ 126.279597][ T4369] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 126.366674][ T3658] Bluetooth: hci1: Malformed LE Event: 0x0d [ 126.426705][ T4377] Driver unsupported XDP return value 0 on prog (id 32) dev N/A, expect packet loss! [ 126.475774][ T26] audit: type=1804 audit(1723636372.253:45): pid=4380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.130" name="/newroot/9/bus/file1" dev="loop4" ino=15 res=1 errno=0 [ 126.504974][ T4380] EXT4-fs error (device loop4): ext4_xattr_ibody_get:603: inode #15: comm syz.4.130: corrupted in-inode xattr [ 126.569974][ T4381] loop1: detected capacity change from 0 to 256 [ 126.613941][ T4380] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.130: corrupted in-inode xattr [ 126.680061][ T4381] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 126.765250][ T4380] syz.4.130: attempt to access beyond end of device [ 126.765250][ T4380] loop4: rw=2049, sector=3606377190, nr_sectors = 2 limit=1024 [ 126.843400][ T4380] EXT4-fs warning (device loop4): ext4_end_bio:347: I/O error 10 writing to inode 15 starting block 1803188595) [ 126.895307][ T4380] Buffer I/O error on device loop4, logical block 1803188595 [ 126.939123][ T9] device hsr_slave_0 left promiscuous mode [ 126.985337][ T4380] syz.4.130: attempt to access beyond end of device [ 126.985337][ T4380] loop4: rw=2049, sector=3403208898, nr_sectors = 2 limit=1024 [ 127.010998][ T9] device hsr_slave_1 left promiscuous mode [ 127.025561][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.047350][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.075226][ T4380] EXT4-fs warning (device loop4): ext4_end_bio:347: I/O error 10 writing to inode 15 starting block 1701604449) [ 127.100963][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.115800][ T4380] Buffer I/O error on device loop4, logical block 1701604449 [ 127.149971][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.166371][ T4380] syz.4.130: attempt to access beyond end of device [ 127.166371][ T4380] loop4: rw=2049, sector=59108, nr_sectors = 2 limit=1024 [ 127.188718][ T9] device bridge_slave_1 left promiscuous mode [ 127.203668][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.211682][ T4380] EXT4-fs warning (device loop4): ext4_end_bio:347: I/O error 10 writing to inode 15 starting block 29554) [ 127.224020][ T4390] loop2: detected capacity change from 0 to 512 [ 127.232257][ T4380] Buffer I/O error on device loop4, logical block 29554 [ 127.241129][ T9] device bridge_slave_0 left promiscuous mode [ 127.250861][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.283083][ T4390] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 127.299992][ T4390] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038 (0x7fffffff) [ 127.358365][ T9] device veth1_macvtap left promiscuous mode [ 127.379229][ T9] device veth0_macvtap left promiscuous mode [ 127.394822][ T3658] Bluetooth: hci3: command tx timeout [ 127.918607][ T3903] EXT4-fs (loop2): unmounting filesystem. [ 127.938236][ T9] device veth1_vlan left promiscuous mode [ 127.944299][ T9] device veth0_vlan left promiscuous mode [ 128.008015][ T26] audit: type=1804 audit(1723636373.783:46): pid=4397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.134" name="/newroot/46/bus/file0" dev="overlay" ino=278 res=1 errno=0 [ 128.382935][ T4401] loop2: detected capacity change from 0 to 4096 [ 128.420344][ T4401] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 128.470308][ T4401] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 128.756871][ T4409] loop3: detected capacity change from 0 to 2048 [ 128.817372][ T4409] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.967907][ T3903] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 129.548986][ T4421] loop3: detected capacity change from 0 to 512 [ 129.614669][ T4421] EXT4-fs (loop3): filesystem is read-only [ 129.643237][ T4423] loop1: detected capacity change from 0 to 16 [ 129.684017][ T4423] erofs: (device loop1): mounted with root inode @ nid 36. [ 129.943634][ T4421] loop3: detected capacity change from 0 to 256 [ 130.141704][ T9] team0 (unregistering): Port device team_slave_1 removed [ 130.635663][ T4421] FAT-fs (loop3): Unrecognized mount option "uni_x" or missing value [ 130.707941][ T9] team0 (unregistering): Port device team_slave_0 removed [ 130.770282][ T3733] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 130.810364][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.906438][ C0] eth0: bad gso: type: 1, size: 1408 [ 130.966996][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.244579][ T4371] EXT4-fs warning (device loop4): kmmpd:168: kmmpd being stopped since MMP feature has been disabled. [ 132.791566][ T4449] loop3: detected capacity change from 0 to 1024 [ 132.814325][ T9] bond0 (unregistering): Released all slaves [ 132.908271][ T4449] EXT4-fs: Ignoring removed orlov option [ 132.918837][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.922008][ T4449] EXT4-fs (loop3): Test dummy encryption mode enabled [ 132.929200][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.947386][ T4449] EXT4-fs (loop3): can't mount with commit=6, fs mounted w/o journal [ 133.020136][ T4454] loop1: detected capacity change from 0 to 1024 [ 133.020856][ T3873] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /9/bus: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 133.329956][ T4454] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 133.352704][ T3873] EXT4-fs (loop4): Inode 15 (ffff888074dee450): i_reserved_data_blocks (1) not cleared! [ 133.400689][ T3873] EXT4-fs (loop4): unmounting filesystem. [ 133.413129][ T4462] netlink: 12 bytes leftover after parsing attributes in process `syz.3.150'. [ 133.926570][ T26] audit: type=1800 audit(1723636379.703:47): pid=4454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.149" name="bus" dev="loop1" ino=19 res=0 errno=0 [ 134.120329][ T26] audit: type=1804 audit(1723636379.893:48): pid=4466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.149" name="/newroot/34/file1/memory.events" dev="loop1" ino=18 res=1 errno=0 [ 134.130596][ T4466] EXT4-fs error (device loop1) in ext4_setattr:5622: Out of memory [ 134.241117][ T4466] EXT4-fs (loop1): Remounting filesystem read-only [ 134.346247][ T4473] loop2: detected capacity change from 0 to 1024 [ 134.353398][ T4473] hfsplus: unable to parse mount options [ 134.513392][ T3733] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 134.881397][ T4481] loop2: detected capacity change from 0 to 2048 [ 135.055036][ T4481] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 135.765773][ T3640] EXT4-fs error (device loop1): ext4_map_blocks:634: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 135.937608][ T3640] EXT4-fs (loop1): unmounting filesystem. [ 135.948154][ T4496] loop2: detected capacity change from 0 to 128 [ 136.047288][ T4496] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 136.096644][ T4496] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 136.197103][ T4283] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 136.255249][ T4496] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 136.273163][ T4283] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 136.305368][ T4496] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 136.356731][ T4496] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 136.382879][ T4496] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 136.425552][ T4496] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 136.446393][ T4283] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 136.457367][ T4283] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 136.475669][ T4496] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 136.672894][ T3903] EXT4-fs (loop2): unmounting filesystem. [ 136.818946][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 136.837220][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 136.850980][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 136.858361][ T4283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.866711][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 136.880906][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 136.888431][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 137.102840][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.135281][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.153777][ T4283] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.198502][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 137.225396][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 137.245275][ T3690] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.252539][ T3690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.308465][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.339715][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 137.351478][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 137.375492][ T3687] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.382651][ T3687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.415147][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 137.431078][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 137.482193][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 137.516648][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 137.565323][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 137.637675][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 137.657842][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 137.686115][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 137.712429][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 137.762214][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 137.781475][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 137.822058][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 137.828871][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 137.845507][ T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 137.855063][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 137.864338][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 137.873976][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 137.886555][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 138.099011][ T4523] loop2: detected capacity change from 0 to 1024 [ 138.224683][ T4523] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 138.292010][ T26] audit: type=1800 audit(1723636384.063:49): pid=4523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.169" name="bus" dev="loop2" ino=19 res=0 errno=0 [ 138.388546][ T26] audit: type=1804 audit(1723636384.163:50): pid=4528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.169" name="/newroot/24/file1/memory.events" dev="loop2" ino=18 res=1 errno=0 [ 138.388966][ T4528] EXT4-fs error (device loop2) in ext4_setattr:5622: Out of memory [ 138.425276][ T4528] EXT4-fs (loop2): Remounting filesystem read-only [ 138.440868][ T4504] chnl_net:caif_netlink_parms(): no params data found [ 138.860594][ T3903] EXT4-fs error (device loop2): ext4_map_blocks:634: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 138.915506][ T3658] Bluetooth: hci1: command tx timeout [ 138.941895][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 138.951351][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 138.984701][ T4504] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.992976][ T4504] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.025859][ T4504] device bridge_slave_0 entered promiscuous mode [ 139.060936][ T3903] EXT4-fs (loop2): unmounting filesystem. [ 139.078879][ T4504] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.100482][ T4504] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.121158][ T4504] device bridge_slave_1 entered promiscuous mode [ 139.199029][ T4524] chnl_net:caif_netlink_parms(): no params data found [ 139.272700][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.397008][ T4504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.453848][ T4504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.488958][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 139.509048][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 139.628785][ T4504] team0: Port device team_slave_0 added [ 139.664673][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 139.673191][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 139.696262][ T4504] team0: Port device team_slave_1 added [ 139.718432][ T4283] device veth0_vlan entered promiscuous mode [ 139.751372][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 139.766153][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 139.851454][ T4283] device veth1_vlan entered promiscuous mode [ 139.963189][ T3658] Bluetooth: hci2: command tx timeout [ 139.972484][ T4524] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.992761][ T4524] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.016051][ T4524] device bridge_slave_0 entered promiscuous mode [ 140.078258][ T4504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.093572][ T4504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.172581][ T4504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.203078][ T4524] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.214606][ T4524] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.257409][ T4524] device bridge_slave_1 entered promiscuous mode [ 140.334257][ T4504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.344567][ T4504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.428579][ T4504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.448901][ T4524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.466685][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 140.477436][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 140.486295][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 140.496840][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 140.505724][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 140.513100][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 140.584415][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.648540][ T4524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.699825][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 140.720109][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 140.770298][ T4581] loop3: detected capacity change from 0 to 32768 [ 140.792608][ T4581] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.176 (4581) [ 140.861787][ T4581] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 140.877322][ T4581] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 140.884841][ T4504] device hsr_slave_0 entered promiscuous mode [ 140.894739][ T4581] BTRFS info (device loop3): using free space tree [ 140.901767][ T4504] device hsr_slave_1 entered promiscuous mode [ 140.923588][ T4504] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.953685][ T4504] Cannot create hsr debugfs directory [ 140.999614][ T3658] Bluetooth: hci1: command tx timeout [ 141.047003][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.084190][ T4524] team0: Port device team_slave_0 added [ 141.115670][ T4524] team0: Port device team_slave_1 added [ 141.168856][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 141.178144][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 141.192211][ T4581] BTRFS info (device loop3): enabling ssd optimizations [ 141.238894][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.339326][ T3639] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 141.362743][ T4283] device veth0_macvtap entered promiscuous mode [ 141.676895][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.711477][ T4524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.718750][ T4524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.782426][ T4524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.805669][ T4283] device veth1_macvtap entered promiscuous mode [ 141.833361][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 141.842321][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 141.904792][ T4524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.911839][ T4524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.942325][ T4524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.035449][ T3658] Bluetooth: hci2: command tx timeout [ 142.085389][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.103623][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.122284][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.133354][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.152386][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.164248][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.174907][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.187365][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.199531][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.210462][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.222031][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.232695][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.251787][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.262040][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.274183][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.284734][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.297055][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.309264][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.350943][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 142.362425][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 142.373447][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 142.374919][ T4622] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 142.382892][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 142.414880][ T4283] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.423648][ T4283] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.443102][ T4283] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.453102][ T4283] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.480068][ T4524] device hsr_slave_0 entered promiscuous mode [ 142.498042][ T4524] device hsr_slave_1 entered promiscuous mode [ 142.513412][ T4524] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.534200][ T4524] Cannot create hsr debugfs directory [ 142.595394][ T3658] Bluetooth: hci4: command tx timeout [ 142.607888][ T4504] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.750588][ T4504] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.767126][ T4622] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.790173][ T4622] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.800934][ T4622] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 142.812336][ T4622] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.835251][ T4622] usb 4-1: config 0 descriptor?? [ 142.924213][ T4504] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.049802][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.078026][ T48] Bluetooth: hci1: command tx timeout [ 143.098559][ T4504] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.131164][ T4584] chnl_net:caif_netlink_parms(): no params data found [ 143.170542][ T4247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.183146][ T4247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.213057][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.257832][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 143.416380][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.502027][ T4584] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.523310][ T4584] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.533497][ T4584] device bridge_slave_0 entered promiscuous mode [ 143.544636][ T4622] usb 4-1: string descriptor 0 read error: -22 [ 143.607048][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.631159][ T4584] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.639829][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.648933][ T4584] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.656299][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.668247][ T4584] device bridge_slave_1 entered promiscuous mode [ 143.694589][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 143.805651][ T4622] uclogic 0003:256C:006D.0002: interface is invalid, ignoring [ 143.816715][ T4584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.854242][ T4584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.932010][ T4504] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 144.106865][ T4504] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 144.114953][ T48] Bluetooth: hci2: command tx timeout [ 144.132437][ T4584] team0: Port device team_slave_0 added [ 144.213270][ T4504] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 144.233970][ T4584] team0: Port device team_slave_1 added [ 144.313794][ T4504] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 144.347631][ T7] usb 4-1: USB disconnect, device number 4 [ 144.477977][ T4676] loop0: detected capacity change from 0 to 256 [ 144.637141][ T4675] loop3: detected capacity change from 0 to 2048 [ 144.675555][ T48] Bluetooth: hci4: command tx timeout [ 144.724155][ T4675] hpfs: filesystem error: invalid number of hotfixes: 266, used: 2; already mounted read-only [ 144.744186][ T4675] hpfs: filesystem error: improperly stopped [ 144.783130][ T4675] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2 [ 145.104166][ T4584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.166021][ T48] Bluetooth: hci1: command tx timeout [ 145.188277][ T4584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.383056][ T48] Bluetooth: hci0: Malformed LE Event: 0x0d [ 145.487876][ T4584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.640469][ T4684] loop3: detected capacity change from 0 to 256 [ 145.671726][ T4584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.679170][ T4584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.723004][ T4584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.726913][ T4684] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 146.152496][ T4584] device hsr_slave_0 entered promiscuous mode [ 146.171385][ T4584] device hsr_slave_1 entered promiscuous mode [ 146.180810][ T4584] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.194626][ T48] Bluetooth: hci2: command tx timeout [ 146.200379][ T4584] Cannot create hsr debugfs directory [ 146.666534][ T4524] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 146.708880][ T4504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.720770][ T4524] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 146.762160][ T48] Bluetooth: hci4: command tx timeout [ 146.879240][ T4524] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 146.936655][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 146.950081][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 146.969580][ T4504] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.133034][ T4524] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 147.180076][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.209235][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.238783][ T4115] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.246027][ T4115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.254741][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.285200][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.295677][ T4115] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.302838][ T4115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.297901][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 148.394608][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 148.549735][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 148.558834][ T4716] loop3: detected capacity change from 0 to 2048 [ 148.571369][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 148.588221][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 148.614858][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 148.629826][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 148.663648][ T4716] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 148.674062][ T4716] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038 (0x7fffffff) [ 148.734038][ T3639] EXT4-fs (loop3): unmounting filesystem. [ 148.815591][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 148.835602][ T48] Bluetooth: hci4: command tx timeout [ 148.837814][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 148.851260][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.078531][ T4504] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 149.144569][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 149.171419][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 149.187719][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 149.224813][ T4729] loop3: detected capacity change from 0 to 64 [ 149.292811][ T4729] MINIX-fs: file system does not have enough zmap blocks allocated. Refusing to mount. [ 149.374312][ T4729] MINIX-fs: bad superblock or unable to read bitmaps [ 149.573108][ T4524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.692077][ T4733] loop3: detected capacity change from 0 to 256 [ 149.744898][ T4733] exfat: Deprecated parameter 'namecase' [ 149.750720][ T4733] exfat: Deprecated parameter 'utf8' [ 149.784699][ T4733] exfat: Deprecated parameter 'namecase' [ 149.803945][ T4733] exfat: Deprecated parameter 'utf8' [ 149.835045][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 149.842853][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.862976][ T4733] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0x01284b2f, utbl_chksum : 0xe619d30d) [ 149.911018][ T4584] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 149.958665][ T4524] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.000584][ T4584] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 150.095258][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 150.136105][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.155955][ T4615] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.163222][ T4615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.191263][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 150.374345][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 150.375679][ T4615] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.375747][ T4615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.394210][ T4736] sched: RT throttling activated [ 152.576350][ T4584] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 152.616050][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 152.624827][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 152.635634][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 152.703863][ T4584] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 152.784208][ T3757] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.792644][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 152.800831][ T3757] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.809617][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 152.821170][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 152.832164][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 152.841039][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 152.848587][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 152.857374][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 152.869390][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 152.887573][ T4504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.931567][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 152.958038][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 152.984434][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 153.010876][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 153.025571][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 153.087518][ T9] device hsr_slave_0 left promiscuous mode [ 153.103897][ T9] device hsr_slave_1 left promiscuous mode [ 153.107366][ T4757] loop0: detected capacity change from 0 to 128 [ 153.117135][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.145813][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.164048][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.192532][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.211023][ T9] device bridge_slave_1 left promiscuous mode [ 153.221728][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.242188][ T9] device bridge_slave_0 left promiscuous mode [ 153.262945][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.298411][ T9] device hsr_slave_0 left promiscuous mode [ 153.311060][ T9] device hsr_slave_1 left promiscuous mode [ 153.333885][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.341944][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.361780][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.372208][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.415556][ T9] device bridge_slave_1 left promiscuous mode [ 153.454068][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.497579][ T9] device bridge_slave_0 left promiscuous mode [ 153.504182][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.560020][ T9] device hsr_slave_0 left promiscuous mode [ 153.577204][ T9] device hsr_slave_1 left promiscuous mode [ 153.583856][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.591966][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.603389][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.618046][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.634440][ T9] device bridge_slave_1 left promiscuous mode [ 153.654813][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.674229][ T9] device bridge_slave_0 left promiscuous mode [ 153.680627][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.841256][ T9] device veth1_macvtap left promiscuous mode [ 153.847716][ T9] device veth0_macvtap left promiscuous mode [ 153.857899][ T9] device veth1_vlan left promiscuous mode [ 153.863868][ T9] device veth0_vlan left promiscuous mode [ 153.895163][ T9] device veth1_macvtap left promiscuous mode [ 153.911480][ T9] device veth0_macvtap left promiscuous mode [ 153.934895][ T9] device veth1_vlan left promiscuous mode [ 153.962143][ T9] device veth0_vlan left promiscuous mode [ 153.986649][ T9] device veth1_macvtap left promiscuous mode [ 153.995152][ T9] device veth0_macvtap left promiscuous mode [ 154.004081][ T9] device veth1_vlan left promiscuous mode [ 154.010422][ T9] device veth0_vlan left promiscuous mode [ 155.439422][ T9] team0 (unregistering): Port device team_slave_1 removed [ 155.482310][ T9] team0 (unregistering): Port device team_slave_0 removed [ 155.521613][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.563508][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.952658][ T9] bond0 (unregistering): Released all slaves [ 156.029079][ T9] bond1 (unregistering): Released all slaves [ 156.338717][ T9] team0 (unregistering): Port device team_slave_1 removed [ 156.373803][ T9] team0 (unregistering): Port device team_slave_0 removed [ 156.416192][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.456738][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.857132][ T9] bond0 (unregistering): Released all slaves [ 157.241947][ T9] team0 (unregistering): Port device team_slave_1 removed [ 157.280547][ T9] team0 (unregistering): Port device team_slave_0 removed [ 157.315189][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.352066][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.726436][ T9] bond0 (unregistering): Released all slaves [ 158.054295][ T4808] loop3: detected capacity change from 0 to 512 [ 158.100842][ T4808] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 158.137092][ T4808] EXT4-fs (loop3): 1 truncate cleaned up [ 158.142995][ T4808] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 158.203140][ T3639] EXT4-fs (loop3): unmounting filesystem. [ 159.602866][ T4830] loop3: detected capacity change from 0 to 256 [ 159.651268][ T4830] MINIX-fs: mounting file system with errors, running fsck is recommended [ 160.501365][ T26] audit: type=1326 audit(1723636406.273:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4836 comm="syz.3.217" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe77f7799f9 code=0x0 [ 160.681418][ T4584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.696086][ T4844] loop0: detected capacity change from 0 to 256 [ 160.721496][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 160.732040][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.754962][ T4584] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.800910][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 160.814132][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.833491][ T4115] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.840736][ T4115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.873977][ T4114] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 160.883504][ T4114] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 160.891655][ T4114] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 160.903429][ T4114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 160.912581][ T4114] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 160.931189][ T4114] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.938582][ T4114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.954878][ T4114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 160.977880][ T4524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.047139][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 161.065984][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 161.098487][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 161.151270][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 161.161110][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 161.179049][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 161.200268][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 161.218274][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 161.245178][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 161.279770][ T4504] device veth0_vlan entered promiscuous mode [ 161.333439][ T4851] loop3: detected capacity change from 0 to 2048 [ 161.340118][ T4504] device veth1_vlan entered promiscuous mode [ 161.347190][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 161.355565][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 161.365333][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 161.373930][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 161.383262][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 161.393150][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 161.401368][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 161.410247][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 161.419619][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 161.427856][ T4851] loop3: p3 < > p4 < > [ 161.432062][ T4851] loop3: partition table partially beyond EOD, truncated [ 161.433355][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 161.440559][ T4851] loop3: p3 start 4284289 is beyond EOD, truncated [ 161.464240][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 161.538557][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 161.547336][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 161.559251][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 161.589559][ T4851] loop3: detected capacity change from 0 to 512 [ 161.600056][ T4524] device veth0_vlan entered promiscuous mode [ 161.614742][ T4851] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 161.650100][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 161.695494][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 161.703487][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 161.755371][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 161.782529][ T4524] device veth1_vlan entered promiscuous mode [ 161.844028][ T4504] device veth0_macvtap entered promiscuous mode [ 161.890749][ T4504] device veth1_macvtap entered promiscuous mode [ 161.959808][ T4504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.981060][ T4504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.991133][ T4504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.001813][ T4504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.013884][ T4504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.039079][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 162.055805][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 162.070306][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 162.079718][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 162.103606][ T4524] device veth0_macvtap entered promiscuous mode [ 162.121585][ T4504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.142215][ T4504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.155275][ T4504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.165888][ T4504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.178724][ T4504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.186889][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 162.196576][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 162.210250][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 162.219179][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 162.233249][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 162.247216][ T4504] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.262537][ T4504] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.272506][ T4504] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.281995][ T4504] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.295177][ T4524] device veth1_macvtap entered promiscuous mode [ 162.337502][ T4524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.358037][ T4524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.378027][ T4524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.389138][ T4524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.399653][ T4524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.411061][ T4524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.423857][ T4524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.432709][ T4862] netlink: 48 bytes leftover after parsing attributes in process `syz.3.223'. [ 162.446268][ T4524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.456794][ T4524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.473696][ T4524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.484195][ T4524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.496115][ T4524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.506688][ T4524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.527024][ T4524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.542127][ T4584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.553967][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 162.568287][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 162.582935][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 162.592322][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 162.601716][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 162.612078][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 162.621026][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 162.691502][ T4524] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.714711][ T4524] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.723562][ T4524] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.730175][ C0] eth0: bad gso: type: 1, size: 1408 [ 162.746020][ T4524] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.757950][ T3658] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 162.767839][ T3658] Bluetooth: hci0: Injecting HCI hardware error event [ 162.778215][ T3658] Bluetooth: hci0: hardware error 0x00 [ 163.071389][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 163.090692][ T4870] loop0: detected capacity change from 0 to 1024 [ 163.099624][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 163.158746][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 163.171973][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 163.307623][ T4584] device veth0_vlan entered promiscuous mode [ 163.316727][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 163.324894][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 163.424733][ T4584] device veth1_vlan entered promiscuous mode [ 163.524023][ T4584] device veth0_macvtap entered promiscuous mode [ 163.562758][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.572869][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 163.580552][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.591609][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 163.782735][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 163.805389][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 163.814147][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 163.873227][ T4584] device veth1_macvtap entered promiscuous mode [ 163.906614][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 163.931010][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.958603][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.044042][ T48] Bluetooth: hci4: command tx timeout [ 164.852545][ T4584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.883721][ T4584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.904116][ T4584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.949912][ T4584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.959869][ T4584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.995963][ T4584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.024578][ T4584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.035122][ T4584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.047015][ T4584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.054431][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 165.062685][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 165.072664][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 165.093805][ T4584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.131150][ T4584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.142774][ T4584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.158136][ T4584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.169669][ T4584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.184863][ T4584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.199594][ T4584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.213183][ T4584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.334246][ T3658] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 165.375890][ T4584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.445542][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 165.462898][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 165.515560][ T4584] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.524313][ T4584] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.548947][ T4883] loop0: detected capacity change from 0 to 32768 [ 165.561113][ T4584] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.581729][ T4584] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.597694][ T4361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.637442][ T4361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.672129][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 165.689022][ T2508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.707938][ T4887] loop4: detected capacity change from 0 to 1024 [ 165.715830][ T4887] EXT4-fs: Ignoring removed i_version option [ 165.740737][ T4887] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 165.757997][ T2508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.787927][ T4883] XFS (loop0): Mounting V5 Filesystem [ 165.807884][ T4887] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 165.839726][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 165.849755][ T4895] loop3: detected capacity change from 0 to 16 [ 165.901121][ T3757] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.930553][ T3758] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.931351][ T4895] erofs: Unknown parameter 't5;} 7_cN"Lam)p'6~' [ 165.955277][ T3757] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.973323][ T3758] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.999214][ T4883] XFS (loop0): Ending clean mount [ 166.022120][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 166.064412][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 166.074523][ T3734] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 166.131966][ T26] audit: type=1326 audit(1723636411.903:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4886 comm="syz.4.158" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ca57799f9 code=0x0 [ 166.212993][ T4619] XFS (loop0): Metadata CRC error detected at xfs_agfl_read_verify+0x1ca/0x290, xfs_agfl block 0x3 [ 166.237234][ T26] audit: type=1800 audit(1723636411.913:53): pid=4883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.229" name="bus" dev="loop0" ino=1065 res=0 errno=0 [ 166.271399][ T4909] loop2: detected capacity change from 0 to 128 [ 166.280531][ T4619] XFS (loop0): Unmount and run xfs_repair [ 166.298807][ T4619] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 166.317493][ T4619] 00000000: 58 41 46 4c 00 00 00 00 00 00 00 00 00 00 80 86 XAFL............ [ 166.354591][ T4619] 00000010: af d4 a8 f7 47 a7 4b ab 00 00 00 00 00 00 00 00 ....G.K......... [ 166.364780][ T4619] 00000020: 5e fe 9e 73 ff ff ff ff 00 00 02 0a 00 00 02 0b ^..s............ [ 166.373693][ T4619] 00000030: 00 00 02 0c 00 00 02 0d 00 00 02 0e 00 00 02 0f ................ [ 166.383183][ T4619] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 166.392382][ T4619] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 166.398798][ T4909] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 166.401755][ T4619] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 166.420061][ T4619] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 166.429890][ T4903] XFS (loop0): metadata I/O error in "xfs_alloc_read_agfl+0x250/0x430" at daddr 0x3 len 1 error 74 [ 166.464770][ T4909] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 166.501908][ T4903] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x6a5/0xb80 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 166.556744][ T4903] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 166.570640][ T4914] loop3: detected capacity change from 0 to 256 [ 166.570809][ T4504] EXT4-fs (loop4): unmounting filesystem. [ 166.661724][ T4914] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 166.681120][ T4916] ebt_among: dst integrity fail: 200 [ 166.733950][ T4283] XFS (loop0): Unmounting Filesystem [ 166.781552][ T26] audit: type=1800 audit(1723636412.553:54): pid=4914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.232" name="file1" dev="loop3" ino=1048619 res=0 errno=0 [ 166.922002][ T4584] EXT4-fs (loop2): unmounting filesystem. [ 168.874600][ T3693] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 169.091352][ T4966] ptrace attach of "./syz-executor exec"[4968] was attempted by "./syz-executor exec"[4966] [ 169.240428][ T4970] loop3: detected capacity change from 0 to 4096 [ 169.303796][ T4970] NILFS (loop3): invalid segment: Checksum error in segment payload [ 169.304948][ T3693] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 169.333890][ T4970] NILFS (loop3): trying rollback from an earlier position [ 169.334529][ T4619] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 169.373377][ T3693] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 169.389596][ T4970] NILFS (loop3): recovery complete [ 169.396380][ T3693] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 169.417257][ T3693] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 169.421753][ T4973] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 169.614868][ T3693] usb 3-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 169.644328][ T3693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.666339][ T3693] usb 3-1: Product: syz [ 169.681901][ T3693] usb 3-1: Manufacturer: syz [ 169.705823][ T3693] usb 3-1: SerialNumber: syz [ 169.745620][ T3693] usb 3-1: config 0 descriptor?? [ 169.764997][ T4619] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 169.774105][ T4619] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.795887][ T3693] kvaser_usb 3-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 169.805710][ T3693] kvaser_usb 3-1:0.0: Failed to initialize card, error -90 [ 169.818041][ T4619] usb 2-1: config 0 descriptor?? [ 169.828329][ T3693] kvaser_usb: probe of 3-1:0.0 failed with error -90 [ 169.905255][ T4977] loop3: detected capacity change from 0 to 1024 [ 170.049648][ T4114] usb 3-1: USB disconnect, device number 3 [ 170.098537][ T4977] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.256: Invalid block bitmap block 0 in block_group 0 [ 170.171396][ T4977] Quota error (device loop3): write_blk: dquota write failed [ 170.253475][ T4977] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 170.307816][ T4977] EXT4-fs error (device loop3): ext4_acquire_dquot:6777: comm syz.3.256: Failed to acquire dquot type 0 [ 170.355981][ T4977] EXT4-fs error (device loop3): ext4_free_blocks:6213: comm syz.3.256: Freeing blocks not in datazone - block = 0, count = 4096 [ 170.384022][ T4977] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.256: Invalid inode bitmap blk 0 in block_group 0 [ 170.397506][ T4977] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 170.402090][ T9] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8 [ 170.425442][ T4977] EXT4-fs (loop3): 1 orphan inode deleted [ 170.431048][ T9] EXT4-fs error (device loop3): ext4_release_dquot:6800: comm kworker/u4:0: Failed to release dquot type 0 [ 170.434557][ T4977] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 170.508495][ T26] audit: type=1326 audit(1723636416.283:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4975 comm="syz.3.256" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe77f7799f9 code=0x0 [ 170.547079][ T4619] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 170.655322][ T4988] EXT4-fs error (device loop3): ext4_lookup:1856: inode #15: comm syz.3.256: iget: bad extra_isize 65535 (inode size 256) [ 170.670410][ T4980] orangefs_mount: mount request failed with -4 [ 171.010720][ T4619] gs_usb 2-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 171.219441][ T4619] gs_usb: probe of 2-1:0.0 failed with error -71 [ 171.515306][ T4619] usb 2-1: USB disconnect, device number 3 [ 171.578256][ T4996] netlink: 3 bytes leftover after parsing attributes in process `syz.2.261'. [ 172.093469][ T3639] EXT4-fs (loop3): unmounting filesystem. [ 172.529758][ T5011] Cannot find set identified by id 0 to match [ 173.126995][ T5017] loop3: detected capacity change from 0 to 164 [ 173.232196][ T5020] loop2: detected capacity change from 0 to 256 [ 173.246329][ T5013] netlink: 44 bytes leftover after parsing attributes in process `syz.0.263'. [ 173.285527][ T5020] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb69a62dc, utbl_chksum : 0xe619d30d) [ 173.329612][ T5013] netlink: 44 bytes leftover after parsing attributes in process `syz.0.263'. [ 175.097503][ T5031] loop1: detected capacity change from 0 to 2048 [ 175.194104][ T5031] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 175.874739][ T4114] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 176.125515][ T4524] UDF-fs: error (device loop1): udf_read_inode: (ino 1440) failed !bh [ 176.191782][ T5039] 9pnet_fd: Insufficient options for proto=fd [ 176.201449][ T4524] UDF-fs: error (device loop1): udf_read_inode: (ino 1440) failed !bh [ 176.251206][ T26] audit: type=1326 audit(1723636422.013:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5038 comm="syz.4.273" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ca57799f9 code=0x0 [ 176.314949][ T4114] usb 4-1: New USB device found, idVendor=0bda, idProduct=818a, bcdDevice=e2.d8 [ 176.496607][ T5037] input: syz0 as /devices/virtual/input/input9 [ 176.648827][ T5044] hub 6-0:1.0: USB hub found [ 176.653747][ T5044] hub 6-0:1.0: 1 port detected [ 176.982913][ T4114] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.060417][ T4114] usb 4-1: config 0 descriptor?? [ 177.104625][ T4114] usb 4-1: can't set config #0, error -71 [ 177.163250][ T4114] usb 4-1: USB disconnect, device number 5 [ 177.381124][ T5054] loop3: detected capacity change from 0 to 128 [ 177.390478][ T5054] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 177.592338][ T5061] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 177.983884][ T5056] input: syz1 as /devices/virtual/input/input10 [ 177.987146][ T5059] loop4: detected capacity change from 0 to 1024 [ 178.004068][ T5059] hfsplus: unable to parse mount options [ 178.065765][ T3733] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 178.291168][ T4247] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.582727][ T5065] loop3: detected capacity change from 0 to 40427 [ 178.610911][ T5065] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 178.619603][ T5065] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 178.711279][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 178.720958][ T5065] F2FS-fs (loop3): Found nat_bits in checkpoint [ 178.783756][ T5065] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 178.790970][ T5065] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 178.859080][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 178.881092][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 179.165570][ T5072] netlink: 28 bytes leftover after parsing attributes in process `syz.3.280'. [ 179.478730][ T5077] loop2: detected capacity change from 0 to 16 [ 179.490410][ T5077] erofs: Unknown parameter ')|' [ 180.422619][ T4247] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.637551][ T4247] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.856276][ T4247] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.985693][ T3659] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 182.005937][ T3659] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 182.026059][ T3659] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 182.045510][ T3659] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 182.053376][ T3659] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 182.062689][ T3659] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 183.696972][ T5120] loop4: detected capacity change from 0 to 4096 [ 183.909546][ T5124] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 183.920507][ T5124] Zero length message leads to an empty skb [ 184.126233][ T3658] Bluetooth: hci2: command tx timeout [ 184.838691][ T5126] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 185.212733][ T5094] chnl_net:caif_netlink_parms(): no params data found [ 185.344728][ T5120] loop4: detected capacity change from 4096 to 0 [ 185.390971][ T5131] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 185.452549][ T5135] loop2: detected capacity change from 0 to 64 [ 185.459254][ T5131] Remounting filesystem read-only [ 185.601617][ T5108] loop3: detected capacity change from 0 to 40427 [ 185.627814][ T5108] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 185.669838][ T4504] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 185.697548][ T5108] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 185.725507][ T4504] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 185.752293][ T5108] F2FS-fs (loop3): invalid crc value [ 185.761819][ T4504] NILFS (loop4): discard dirty block: blocknr=14, size=4096 [ 185.785125][ T4504] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 185.810167][ T4504] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 185.814748][ T5094] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.840725][ T5108] F2FS-fs (loop3): Found nat_bits in checkpoint [ 185.849119][ T4504] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 185.860887][ T5094] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.882296][ T4504] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 185.902928][ T5094] device bridge_slave_0 entered promiscuous mode [ 185.930058][ T4504] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 185.976072][ T4504] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 186.013733][ T5094] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.036456][ T5094] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.055261][ T5094] device bridge_slave_1 entered promiscuous mode [ 186.126170][ T5154] syz.2.301 uses obsolete (PF_INET,SOCK_PACKET) [ 186.145181][ T5108] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 186.152279][ T5108] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 186.194745][ T3658] Bluetooth: hci2: command tx timeout [ 186.287475][ T26] audit: type=1800 audit(1723636432.053:57): pid=5108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.294" name="bus" dev="loop3" ino=455 res=0 errno=0 [ 186.345094][ T26] audit: type=1800 audit(1723636432.063:58): pid=5108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.294" name="bus" dev="loop3" ino=455 res=0 errno=0 [ 186.366766][ T5160] block nbd4: shutting down sockets [ 186.436129][ T4015] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 186.497470][ T4015] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 186.585283][ T5094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.656488][ T5094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.688308][ T5167] loop4: detected capacity change from 0 to 1024 [ 186.713360][ T5167] EXT4-fs: Ignoring removed orlov option [ 186.724843][ T5167] EXT4-fs: Ignoring removed nomblk_io_submit option [ 186.982682][ T5167] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 187.323363][ T5094] team0: Port device team_slave_0 added [ 187.368872][ T5177] loop2: detected capacity change from 0 to 2048 [ 187.389925][ T5094] team0: Port device team_slave_1 added [ 187.454419][ T5177] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 187.486857][ T5177] NILFS (loop2): mounting unchecked fs [ 187.492400][ T5177] NILFS (loop2): recovery required for readonly filesystem [ 187.498974][ T3734] udevd[3734]: incorrect nilfs2 checksum on /dev/loop2 [ 187.500485][ T5177] NILFS (loop2): write access will be enabled during recovery [ 187.567239][ T5177] NILFS (loop2): norecovery option specified, skipping roll-forward recovery [ 187.578050][ T5094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.594986][ T5094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.642151][ T5177] NILFS (loop2): couldn't remount because the filesystem is in an incomplete recovery state [ 187.668915][ T3733] udevd[3733]: incorrect nilfs2 checksum on /dev/loop2 [ 187.732739][ T4504] EXT4-fs (loop4): unmounting filesystem. [ 187.755075][ T5094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.847419][ T4247] device hsr_slave_0 left promiscuous mode [ 187.875557][ T4247] device hsr_slave_1 left promiscuous mode [ 187.895544][ T4247] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.903019][ T4247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.936038][ T4247] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.994540][ T4247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.016481][ T4247] device bridge_slave_1 left promiscuous mode [ 188.037432][ T4247] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.125092][ T4247] device bridge_slave_0 left promiscuous mode [ 188.131413][ T4247] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.272376][ T4247] device veth1_macvtap left promiscuous mode [ 188.279294][ T3658] Bluetooth: hci2: command tx timeout [ 188.294954][ T4247] device veth0_macvtap left promiscuous mode [ 188.302999][ T4247] device veth1_vlan left promiscuous mode [ 188.320375][ T4247] device veth0_vlan left promiscuous mode [ 188.377496][ T5201] loop3: detected capacity change from 0 to 1024 [ 190.725103][ T3658] Bluetooth: hci2: command tx timeout [ 190.907441][ T5218] loop3: detected capacity change from 0 to 8192 [ 190.942920][ T5218] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 192.000907][ T3639] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 192.015481][ T3639] FAT-fs (loop3): Filesystem has been set read-only [ 192.996667][ T4622] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 193.018237][ T4247] team0 (unregistering): Port device team_slave_1 removed [ 193.067303][ T4247] team0 (unregistering): Port device team_slave_0 removed [ 193.106425][ T4247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.149808][ T4247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.414820][ T4622] usb 4-1: config 0 has an invalid interface number: 186 but max is 1 [ 193.427350][ T4622] usb 4-1: config 0 has no interface number 1 [ 193.576207][ T4247] bond0 (unregistering): Released all slaves [ 193.604836][ T4622] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=e5.83 [ 193.618660][ T4622] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.627126][ T4622] usb 4-1: Product: syz [ 193.631319][ T4622] usb 4-1: Manufacturer: syz [ 193.640553][ T4622] usb 4-1: SerialNumber: syz [ 193.651151][ T4622] usb 4-1: config 0 descriptor?? [ 193.671121][ T5094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.678260][ T5094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.711947][ T5094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.719468][ T4622] hub 4-1:0.186: bad descriptor, ignoring hub [ 193.735984][ T5196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.311'. [ 193.741419][ T4622] hub: probe of 4-1:0.186 failed with error -5 [ 193.779120][ T5212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.314'. [ 193.788368][ T5212] (unnamed net_device) (uninitialized): option lacp_active: invalid value (139) [ 193.849392][ T5236] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 194.054829][ T7] usb 4-1: USB disconnect, device number 6 [ 194.116438][ T5094] device hsr_slave_0 entered promiscuous mode [ 194.171407][ T5094] device hsr_slave_1 entered promiscuous mode [ 194.358356][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.365714][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.820341][ T26] audit: type=1326 audit(2000000000.100:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5258 comm="syz.4.327" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ca57799f9 code=0x0 [ 299.794420][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 299.801499][ C1] rcu: 0-...!: (1 GPs behind) idle=554c/1/0x4000000000000000 softirq=18249/18250 fqs=2 [ 299.812667][ C1] (detected by 1, t=10506 jiffies, g=22605, q=242 ncpus=2) [ 299.819979][ C1] Sending NMI from CPU 1 to CPUs 0: [ 299.825213][ C0] NMI backtrace for cpu 0 [ 299.825235][ C0] CPU: 0 PID: 5252 Comm: syz.0.326 Not tainted 6.1.104-syzkaller #0 [ 299.825252][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 299.825271][ C0] RIP: 0010:check_preemption_disabled+0x4/0x110 [ 299.825302][ C0] Code: 48 89 de e8 0e c5 be f9 e9 6d ff ff ff cc cc cc cc cc cc cc cc cc 48 c7 c7 c0 5d 5d 8b 48 c7 c6 00 5e 5d 8b eb 00 41 57 41 56 <41> 54 53 48 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 65 [ 299.825317][ C0] RSP: 0018:ffffc90000007c60 EFLAGS: 00000046 [ 299.825332][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffff88807cef9dc0 [ 299.825343][ C0] RDX: ffff88807cef9dc0 RSI: ffffffff8b0c13e0 RDI: ffffffff8b5d5e20 [ 299.825356][ C0] RBP: 0000000000000001 R08: ffffffff88ce9d57 R09: 0000000000000003 [ 299.825368][ C0] R10: ffffffffffffffff R11: dffffc0000000001 R12: 0000000000000046 [ 299.825380][ C0] R13: ffff88807cef9dc0 R14: 00000000ffffffff R15: ffff88805a943300 [ 299.825393][ C0] FS: 00007fd884db76c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 299.825408][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 299.825420][ C0] CR2: 000000110c2d0eb9 CR3: 00000000626d1000 CR4: 00000000003506f0 [ 299.825436][ C0] Call Trace: [ 299.825442][ C0] [ 299.825451][ C0] ? nmi_cpu_backtrace+0x3de/0x560 [ 299.825485][ C0] ? read_lock_is_recursive+0x10/0x10 [ 299.825522][ C0] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 299.825569][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 299.825605][ C0] ? nmi_handle+0x12e/0x440 [ 299.825637][ C0] ? nmi_handle+0x25/0x440 [ 299.825662][ C0] ? check_preemption_disabled+0x4/0x110 [ 299.825682][ C0] ? default_do_nmi+0x62/0x150 [ 299.825708][ C0] ? exc_nmi+0xa8/0x100 [ 299.825732][ C0] ? end_repeat_nmi+0x16/0x31 [ 299.825758][ C0] ? advance_sched+0x57/0x970 [ 299.825780][ C0] ? check_preemption_disabled+0x4/0x110 [ 299.825800][ C0] ? check_preemption_disabled+0x4/0x110 [ 299.825819][ C0] ? check_preemption_disabled+0x4/0x110 [ 299.825839][ C0] [ 299.825844][ C0] [ 299.825849][ C0] lock_is_held_type+0xfd/0x180 [ 299.825868][ C0] advance_sched+0x69/0x970 [ 299.825889][ C0] ? _raw_spin_unlock+0x40/0x40 [ 299.825907][ C0] ? debug_object_deactivate+0x63/0x380 [ 299.825935][ C0] ? taprio_free_sched_cb+0x1a0/0x1a0 [ 299.825956][ C0] ? taprio_free_sched_cb+0x1a0/0x1a0 [ 299.825978][ C0] __hrtimer_run_queues+0x5e5/0xe50 [ 299.826007][ C0] ? hrtimer_interrupt+0x980/0x980 [ 299.826027][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 299.826055][ C0] hrtimer_interrupt+0x392/0x980 [ 299.826086][ C0] __sysvec_apic_timer_interrupt+0x156/0x580 [ 299.826110][ C0] sysvec_apic_timer_interrupt+0x8c/0xb0 [ 299.826181][ C0] [ 299.826186][ C0] [ 299.826191][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 299.826215][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x41/0x60 [ 299.826237][ C0] Code: ff 00 74 11 f7 c2 00 01 00 00 74 35 83 b9 1c 16 00 00 00 74 2c 8b 91 f8 15 00 00 83 fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 <48> 8d 7e 01 8b 89 fc 15 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 [ 299.826251][ C0] RSP: 0018:ffffc900044ffa68 EFLAGS: 00000246 [ 299.826265][ C0] RAX: ffffffff81cdd6ad RBX: 0000000000000000 RCX: ffff88807cef9dc0 [ 299.826278][ C0] RDX: ffffc9000f506000 RSI: 000000000003ffff RDI: ffffffff8c04fdc0 [ 299.826290][ C0] RBP: ffffc900044ffe50 R08: ffffffff88913c8c R09: fffff5200089fedd [ 299.826303][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 299.826315][ C0] R13: 1ffff9200089ff80 R14: 0000000000000b3b R15: ffffffff8c04fdc0 [ 299.826330][ C0] ? do_recvmmsg+0x5bc/0xad0 [ 299.826355][ C0] ? __might_fault+0x1d/0x110 [ 299.826380][ C0] ? rcu_is_watching+0x11/0xb0 [ 299.826395][ C0] __might_fault+0x1d/0x110 [ 299.826416][ C0] do_recvmmsg+0x5da/0xad0 [ 299.826444][ C0] ? futex_wait_queue+0x149/0x1d0 [ 299.826465][ C0] ? __sys_recvmmsg+0x270/0x270 [ 299.826489][ C0] ? futex_wait+0x30e/0x5c0 [ 299.826507][ C0] ? plist_del+0x3ed/0x410 [ 299.826538][ C0] ? futex_wake+0x4ea/0x590 [ 299.826564][ C0] ? __lock_acquire+0x1f80/0x1f80 [ 299.826595][ C0] ? __ia32_sys_get_robust_list+0x80/0x80 [ 299.826619][ C0] ? fd_install+0x57/0x540 [ 299.826641][ C0] __x64_sys_recvmmsg+0x195/0x240 [ 299.826668][ C0] ? do_recvmmsg+0xad0/0xad0 [ 299.826693][ C0] ? syscall_enter_from_user_mode+0x2e/0x230 [ 299.826711][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 299.826728][ C0] ? syscall_enter_from_user_mode+0x2e/0x230 [ 299.826748][ C0] do_syscall_64+0x3b/0xb0 [ 299.826771][ C0] ? clear_bhb_loop+0x45/0xa0 [ 299.826793][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 299.826815][ C0] RIP: 0033:0x7fd883f799f9 [ 299.826835][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.826849][ C0] RSP: 002b:00007fd884db7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 299.826865][ C0] RAX: ffffffffffffffda RBX: 00007fd884116058 RCX: 00007fd883f799f9 [ 299.826878][ C0] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 299.826889][ C0] RBP: 00007fd883fe78ee R08: 0000000000000000 R09: 0000000000000000 [ 299.826900][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 299.826910][ C0] R13: 0000000000000000 R14: 00007fd884116058 R15: 00007fff1d8f2df8 [ 299.826928][ C0] [ 299.827200][ C1] rcu: rcu_preempt kthread starved for 10495 jiffies! g22605 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 300.365157][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 300.375143][ C1] rcu: RCU grace-period kthread stack dump: [ 300.381051][ C1] task:rcu_preempt state:R running task stack:26712 pid:16 ppid:2 flags:0x00004000 [ 300.391857][ C1] Call Trace: [ 300.395149][ C1] [ 300.398099][ C1] __schedule+0x143f/0x4570 [ 300.402640][ C1] ? _raw_spin_unlock+0x40/0x40 [ 300.407531][ C1] ? __mod_timer+0x956/0xee0 [ 300.412149][ C1] ? release_firmware_map_entry+0x186/0x186 [ 300.418070][ C1] ? lockdep_softirqs_off+0x420/0x420 [ 300.423469][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 300.429387][ C1] ? _raw_spin_unlock+0x40/0x40 [ 300.434283][ C1] schedule+0xbf/0x180 [ 300.438399][ C1] schedule_timeout+0x1b9/0x300 [ 300.443290][ C1] ? console_conditional_schedule+0x40/0x40 [ 300.449215][ C1] ? update_process_times+0x1b0/0x1b0 [ 300.454621][ C1] ? prepare_to_swait_event+0x329/0x350 [ 300.460204][ C1] rcu_gp_fqs_loop+0x2d2/0x1150 [ 300.465090][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 300.471269][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 300.476491][ C1] ? rcu_gp_init+0x15f0/0x15f0 [ 300.481275][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 300.487202][ C1] ? finish_swait+0xcf/0x1e0 [ 300.491826][ C1] rcu_gp_kthread+0xa3/0x3b0 [ 300.496443][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 300.501579][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 300.507503][ C1] ? __kthread_parkme+0x168/0x1c0 [ 300.512563][ C1] kthread+0x28d/0x320 [ 300.516662][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 300.521800][ C1] ? kthread_blkcg+0xd0/0xd0 [ 300.526424][ C1] ret_from_fork+0x1f/0x30 [ 300.530928][ C1] [ 300.533979][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 300.540310][ C1] CPU: 1 PID: 3758 Comm: kworker/u4:7 Not tainted 6.1.104-syzkaller #0 [ 300.548566][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 300.558640][ C1] Workqueue: events_unbound toggle_allocation_gate [ 300.565173][ C1] RIP: 0010:smp_call_function_many_cond+0x1fb0/0x3460 [ 300.571963][ C1] Code: 2f 44 89 ee 83 e6 01 31 ff e8 4c 40 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 0a e8 d7 3c 0b 00 e9 1b ff ff ff f3 90 <42> 0f b6 04 2b 84 c0 75 14 41 f7 07 01 00 00 00 0f 84 fe fe ff ff [ 300.591586][ C1] RSP: 0018:ffffc90004b875a0 EFLAGS: 00000293 [ 300.597673][ C1] RAX: ffffffff817f634b RBX: 1ffff11017308595 RCX: ffff888027c79dc0 [ 300.605660][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 300.613656][ C1] RBP: ffffc90004b87980 R08: ffffffff817f6314 R09: fffffbfff20e7445 [ 300.621646][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000800000000 [ 300.629633][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880b9842ca8 [ 300.637795][ C1] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 300.646826][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 300.653509][ C1] CR2: 00007fa076e1d6c2 CR3: 000000000d08e000 CR4: 00000000003506e0 [ 300.661499][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 300.669480][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 300.677477][ C1] Call Trace: [ 300.680795][ C1] [ 300.683657][ C1] ? rcu_check_gp_kthread_starvation+0x1b8/0x220 [ 300.690198][ C1] ? print_other_cpu_stall+0x150c/0x1640 [ 300.695881][ C1] ? print_cpu_stall+0x5f0/0x5f0 [ 300.700864][ C1] ? rcu_sched_clock_irq+0xaf6/0x1200 [ 300.706270][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 300.711147][ C1] ? hrtimer_run_queues+0x163/0x450 [ 300.716374][ C1] ? acct_account_cputime+0x26e/0x270 [ 300.721941][ C1] ? update_process_times+0x147/0x1b0 [ 300.727428][ C1] ? tick_sched_timer+0x386/0x550 [ 300.732471][ C1] ? tick_setup_sched_timer+0x2f0/0x2f0 [ 300.738033][ C1] ? __hrtimer_run_queues+0x5a7/0xe50 [ 300.743453][ C1] ? hrtimer_interrupt+0x980/0x980 [ 300.748675][ C1] ? ktime_get_update_offsets_now+0x407/0x420 [ 300.754772][ C1] ? hrtimer_interrupt+0x392/0x980 [ 300.759926][ C1] ? __sysvec_apic_timer_interrupt+0x156/0x580 [ 300.766103][ C1] ? sysvec_apic_timer_interrupt+0x8c/0xb0 [ 300.771924][ C1] [ 300.774866][ C1] [ 300.777809][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 300.783991][ C1] ? smp_call_function_many_cond+0x1f94/0x3460 [ 300.790166][ C1] ? smp_call_function_many_cond+0x1fcb/0x3460 [ 300.796347][ C1] ? smp_call_function_many_cond+0x1fb0/0x3460 [ 300.802542][ C1] ? text_poke_sync+0x20/0x20 [ 300.807245][ C1] ? __text_poke+0x81a/0x9a0 [ 300.811854][ C1] ? mark_lock+0x9a/0x340 [ 300.816209][ C1] ? smp_call_function_many+0x30/0x30 [ 300.821603][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 300.827618][ C1] ? do_raw_spin_unlock+0x137/0x8a0 [ 300.832838][ C1] ? _raw_spin_unlock+0x24/0x40 [ 300.837704][ C1] ? kmem_cache_alloc_bulk+0x11a/0x4d0 [ 300.843185][ C1] ? __text_poke+0x81a/0x9a0 [ 300.847808][ C1] ? kmem_cache_alloc_bulk+0x11a/0x4d0 [ 300.853283][ C1] ? __text_poke+0x9a0/0x9a0 [ 300.857896][ C1] ? text_poke+0x90/0x90 [ 300.862159][ C1] ? read_lock_is_recursive+0x10/0x10 [ 300.867561][ C1] ? __mutex_trylock_common+0x17e/0x2e0 [ 300.873131][ C1] ? __might_sleep+0xb0/0xb0 [ 300.877747][ C1] ? trace_raw_output_contention_end+0xd0/0xd0 [ 300.883919][ C1] ? kmem_cache_alloc_bulk+0x11a/0x4d0 [ 300.889403][ C1] ? text_poke_sync+0x20/0x20 [ 300.894104][ C1] on_each_cpu_cond_mask+0x3b/0x80 [ 300.899254][ C1] ? kmem_cache_alloc_bulk+0x11a/0x4d0 [ 300.904821][ C1] text_poke_bp_batch+0x2bb/0x940 [ 300.909873][ C1] ? arch_jump_label_transform_apply+0xe/0x20 [ 300.915962][ C1] ? text_poke_loc_init+0x680/0x680 [ 300.921190][ C1] ? arch_jump_label_transform_queue+0x7d/0xd0 [ 300.927371][ C1] text_poke_finish+0x16/0x30 [ 300.932064][ C1] arch_jump_label_transform_apply+0x13/0x20 [ 300.938060][ C1] static_key_enable_cpuslocked+0x12e/0x250 [ 300.943975][ C1] ? process_one_work+0x7a9/0x11d0 [ 300.949110][ C1] static_key_enable+0x16/0x20 [ 300.953900][ C1] toggle_allocation_gate+0xbf/0x480 [ 300.959210][ C1] ? show_object+0xa0/0xa0 [ 300.963651][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 300.969662][ C1] ? print_irqtrace_events+0x210/0x210 [ 300.975148][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 300.981074][ C1] ? do_raw_spin_unlock+0x137/0x8a0 [ 300.986382][ C1] ? process_one_work+0x7a9/0x11d0 [ 300.991515][ C1] process_one_work+0x8a9/0x11d0 [ 300.996492][ C1] ? worker_detach_from_pool+0x260/0x260 [ 301.002148][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 301.007715][ C1] ? kthread_data+0x4e/0xc0 [ 301.012251][ C1] ? wq_worker_running+0x97/0x190 [ 301.017306][ C1] worker_thread+0xa47/0x1200 [ 301.022029][ C1] kthread+0x28d/0x320 [ 301.026199][ C1] ? worker_clr_flags+0x190/0x190 [ 301.031241][ C1] ? kthread_blkcg+0xd0/0xd0 [ 301.035850][ C1] ret_from_fork+0x1f/0x30 [ 301.040307][ C1]