last executing test programs: 8.23456235s ago: executing program 4 (id=668): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x1849, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1000e, &(0x7f0000000300), 0x3, 0x445, &(0x7f0000000b00)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) fchmodat(r1, 0x0, 0x20) write$cgroup_type(r2, 0x0, 0x0) 8.175984485s ago: executing program 0 (id=669): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000000)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000880)='sched_switch\x00', r4}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x401054d5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 7.389631521s ago: executing program 0 (id=675): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) setrlimit(0x40000000000008, &(0x7f0000000000)={0x0, 0x40}) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='mnt\x00', 0x3a0c412, &(0x7f0000000b00)={[{@unhide}, {}, {@map_normal}, {@block={'block', 0x3d, 0x800}}, {@hide}, {}, {@check_strict}, {@hide}, {@unhide}, {@sbsector={'sbsector', 0x3d, 0x1}}, {@sbsector={'sbsector', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'cp950'}}], [], 0x2c}, 0xff, 0x9be, &(0x7f0000000e00)="$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") getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x161) sendmsg$inet(r5, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x14}, 0x10, 0x0}, 0x0) 7.304662088s ago: executing program 4 (id=676): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x5e, &(0x7f0000000340)={[{@errors_remount}, {@nodiscard}, {@dioread_nolock}]}, 0x2, 0x455, &(0x7f0000000a80)="$eJzs28tvG8UfAPDv2k766+uXUMqjD2igICoQSZMW6IFDi0DiABISHMoxJGlV6jaoCRKtKggcyhFV4o44IvEXcIILAk5IXOGOKlWolxZOi9beTZ3EDo7jxGn9+Ugbz+xDM1/Pjj2zEwfQt0ayP0nEroj4PSKG6tmlJ4zUX+7cujr1962rU0mk6dt/JbXzbt+6OlWcWly3s8gs1PMHmpQ7d/nK+clqdeZSnh+bv/DB2NzlK8+fuzB5dubszMWJEyeOHxt/6cWJF1pXPmk/zqxOt/d/PHtw3+vvXn9z6vT1937+NiniXxZHl4w02VcuEk93ubBe292QTip5otyjytC2rImy5hqo9f+hKEdl8dhQvPZZTysHbKg0TdPBVgeTWEiB+1gSva4B0BvFV302/y22TRt8bAE3T9UnQFncd/KtfqQSpfycgWXz227KZlunF/75KttiY55DAAAs8f2p+uvK8V8pHm4472S+NjQcEQ9ExJ6IeDAi9kbEQxG1cx+JiEcbrmlneWb5IsnK8U/pRmeRtScb/72cr20tHf8Vo78YLue53bX4B5Iz56ozRyPi/xFxJAa2ZfnxVcr44dXfvmh1bKRh/JdtWfnFWDCvx43KtqXXTE/OT64n5kY3P43YX2kWf7K4EpC1476I2H+oszLOPfvNwVbH/jv+VVQ6q0+j9OuIZ+rtvxDL4i8kq69Pjv0vqjNHx4q7YqVffr32Vqvy1xV/F2Ttv6Pp/b8Y/3DSuF47t/Yyrv3xecs5Taf3/2DyTi1dPLv+aHJ+/tJ4xGDyRr7/5N39E3evLfLF+Vn8Rw437/974u47cSAispv4sYh4PCIO5XV/IiKejIjDq8T/0ytPvd95/Bsri396Te2/9kT5/I/fLSl0eJX4k2jS/sdrqSP5nnY+/9qt4HrfPwAAALgXlCJiVySl0cV0qTQ6Wv9/+b2xo1SdnZt/7szshxen678RGI6BUvGka6jheeh4/sSgyE/k0/wifyx/bvxleXstPzo1W53udfDQ53a26P+ZP/1+A+5/XVhHA+5Rnfb/NE0/6XJVgE3m+x/6l/4P/atJ/9++LL9ts+oCbK5m3/8m9tAfjP+hf+n/0L/0f+hf+j/0pfX8rr9riezzZwtUo+1Emvao9MHex76YiNKWqIbEBiV6/ckEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQHf8GAAD//zV058U=") bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000186800000000000090737c73267beee600000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x228, 0x320, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x288) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x8, &(0x7f00000003c0)) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) accept(0xffffffffffffffff, &(0x7f00000000c0)=@can, 0x0) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000000)) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) creat(0x0, 0x0) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000300)='./file1\x00', 0x0, 0x200000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280), 0x208e24b) lseek(r5, 0x0, 0x4) 7.100391256s ago: executing program 1 (id=680): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000340)={0xff02, 0x2, 0x0, 0xd, 0xd, "5f730000a9003f00"}) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f00000006c0)=0x5f) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) flock(0xffffffffffffffff, 0x5) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r5, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r5, 0x26, &(0x7f00000031c0)={0x0, 0x2, 0x100000000000000}) 6.772268174s ago: executing program 0 (id=681): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000) 6.386761447s ago: executing program 4 (id=683): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002000000b7080000000000007b8af8ff00000000b70800000002000037e4f0ff00000000bfa100ffbfa400000000000007040000f0ffffffb702000008000000182300"/91, @ANYBLOB="0000000000000000b70500000800000085000000a500000095000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0xc, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000280), &(0x7f0000000340)=[{0x4, 0x2, 0x6, 0x8}, {0x0, 0x1, 0xb, 0x8}, {0x1, 0x2, 0xf, 0x7}, {0x5, 0x2, 0xf, 0x2}], 0x10, 0xfffffffb, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = inotify_init1(0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) close_range(r3, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r5) dup2(0xffffffffffffffff, 0xffffffffffffffff) 6.11260142s ago: executing program 1 (id=685): socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x4000, 0x0, 0x101}}) 5.243681944s ago: executing program 1 (id=688): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) llistxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=""/41, 0x29) 5.220733066s ago: executing program 4 (id=689): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace$getregs(0xc, r0, 0x4, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) io_setup(0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@rr={0x7, 0x3, 0x8b}, @noop]}}}], 0x38}, 0x0) 5.116506445s ago: executing program 1 (id=690): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000680), 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0, 0x0, 0x8b}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8}]}], {0x14}}, 0x50}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) iopl(0x3) getpeername$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0}, &(0x7f00000005c0)=0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000640)={@remote, r2}, 0x14) keyctl$reject(0x13, 0x0, 0x0, 0x100000201, 0xfffffffffffffffc) r3 = socket$unix(0x1, 0x5, 0x0) recvmsg$unix(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}, 0x20040) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='5\x00'], 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x16, 0x98, 0xfa00, {0x0, 0x3, 0xffffffffffffffff, 0x30, 0x1, @ib={0x1b, 0x3, 0x2, {"c94a905074760d46ff0938df1eee9f64"}, 0xea9, 0x7, 0x7fffffffffffffff}}}, 0xa0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r6}, 0x10) r7 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000006c0)='system.posix_acl_default\x00', &(0x7f0000000a00)={{}, {0x1, 0x3}, [{0x2, 0x3}, {0x2, 0x4, r4}], {0x4, 0x1}, [{0x8, 0x4, r5}, {0x8, 0x5, 0xee00}], {0x10, 0x4}, {0x20, 0x4}}, 0x44, 0x0) keyctl$link(0x8, r7, r7) r8 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r8, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000008000000df7f00000280000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES8=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r9}, 0x18) syz_emit_ethernet(0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000004aa"], 0x0) 4.140274908s ago: executing program 2 (id=692): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast1, @loopback}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 4.126950759s ago: executing program 4 (id=693): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x6, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x420, 0x3f4, 0x100, 0x70bd2c, 0x25dfdbfc, {0x4, 0x1, 0xe, [0x2, 0x2, 0xa, 0x1, 0x8, 0x8f, 0x1000, 0x8, 0x10000, 0x6, 0x6, 0x8000, 0x6, 0x1ff, 0x7, 0xff, 0x0, 0xa, 0x0, 0x9, 0xe315, 0x7fff, 0x1, 0x5, 0x3, 0x1ff, 0x1, 0x100, 0x1, 0x7f, 0xa45, 0x2, 0xb, 0x8, 0x6, 0x8, 0x7ff, 0xfffffff3, 0x8, 0x4, 0x7, 0xa67, 0x0, 0x1, 0x9, 0x8, 0x0, 0x1, 0x2, 0x1ff, 0x7, 0x93d5, 0x700e, 0x7, 0x9, 0x2, 0x7, 0x40, 0x81, 0x3, 0x7ff, 0x3, 0x6, 0x5b], [0xfffff1f1, 0x10, 0x6, 0x1000, 0x8001, 0x8, 0x8, 0x4, 0x6, 0x200, 0x80000000, 0x80, 0xb0a, 0x4, 0x1000, 0x4, 0x9f, 0x9, 0x4, 0x80000001, 0x6, 0x6, 0x7fff, 0x1, 0xf1, 0x81, 0x5, 0x80000000, 0x8, 0x9, 0x5, 0x200, 0x6, 0x0, 0x52e, 0x4, 0x3, 0x7, 0x2, 0x5f, 0x90000, 0x101, 0x1, 0x8, 0x4b0, 0x80000001, 0x2, 0x9, 0x3d11635b, 0x9, 0x9, 0x6, 0x401, 0x8, 0xffff, 0x3, 0x933c, 0x3ff, 0xffffffff, 0x5, 0x10000, 0x625, 0x10000, 0x9a60], [0x0, 0x8, 0x1, 0x0, 0x800, 0x4, 0x3, 0x8, 0x200, 0x7fffffff, 0x5, 0x4, 0x18, 0xfffffff7, 0x5f8, 0xffff8000, 0x5f, 0xbc72, 0x7, 0x32d80000, 0x2ab0, 0x5, 0x8, 0xc2ba, 0x0, 0xc, 0x4, 0xffffffc0, 0x1, 0x401, 0x8, 0x4, 0x78, 0x9, 0x7, 0xa1f, 0x81, 0x7ff, 0x9, 0x400, 0x3, 0xff, 0x400, 0x52, 0x0, 0x9, 0x6, 0x0, 0x5c, 0x1, 0x5, 0xffff, 0x8, 0x1, 0x6, 0xa, 0x3, 0x4, 0x2, 0x8000, 0x8, 0x2, 0x1, 0x2], [0x3606, 0x6, 0xe, 0x0, 0xfffffffb, 0x3ff, 0x7, 0x7, 0xfffeffff, 0x40004, 0xffff, 0x5e, 0x5, 0x5, 0x69, 0x7fffffff, 0x8, 0x1970, 0x2, 0x0, 0xe, 0x9, 0x8, 0x5d3, 0x0, 0x200, 0x9, 0x0, 0x4, 0x1, 0x3, 0x9, 0xfffeffff, 0x3, 0xfffffff4, 0xffffffff, 0x3, 0x1, 0x8, 0xf, 0xb61, 0xb031, 0x0, 0x9, 0xfff, 0x100, 0xd, 0x10001, 0x1, 0xfffffff7, 0x40, 0x2, 0xff, 0xbc1, 0x9, 0xe6, 0x7389, 0x401, 0x7, 0x3, 0xf, 0x3f, 0x19, 0x1000]}}, 0x420}, 0x1, 0x0, 0x0, 0x4008000}, 0x50) 3.87674351s ago: executing program 3 (id=694): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x900, 0x0) read$rfkill(r2, 0x0, 0x0) 3.87631538s ago: executing program 0 (id=695): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002000000b7080000000000007b8af8ff00000000b70800000002000037e4f0ff00000000bfa100ffbfa400000000000007040000f0ffffffb702000008000000182300"/91, @ANYBLOB="0000000000000000b70500000800000085000000a500000095000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0xc, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280), &(0x7f0000000340)=[{0x4, 0x2, 0x6, 0x8}, {0x0, 0x1, 0xb, 0x8}, {0x1, 0x2, 0xf, 0x7}, {0x5, 0x2, 0xf, 0x2}, {0x5, 0x5, 0x3, 0x9}], 0x10, 0xfffffffb, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = inotify_init1(0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) close_range(r3, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r5) dup2(0xffffffffffffffff, 0xffffffffffffffff) 3.87614698s ago: executing program 2 (id=696): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$vcsa(0x0, 0x1, 0x0) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$TCFLSH(r0, 0x5608, 0x0) 3.721531594s ago: executing program 3 (id=697): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000188", @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 3.572232446s ago: executing program 2 (id=698): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0xffffffffffffffff}}) 3.224338936s ago: executing program 2 (id=699): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002000000b7080000000000007b8af8ff00000000b70800000002000037e4f0ff00000000bfa100ffbfa400000000000007040000f0ffffffb702000008000000182300"/91, @ANYBLOB="0000000000000000b70500000800000085000000a500000095000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0xc, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000280), &(0x7f0000000340)=[{0x4, 0x2, 0x6, 0x8}, {0x0, 0x1, 0xb, 0x8}, {0x1, 0x2, 0xf, 0x7}, {0x5, 0x2, 0xf, 0x2}], 0x10, 0xfffffffb, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = inotify_init1(0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) close_range(r3, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r5) dup2(0xffffffffffffffff, 0xffffffffffffffff) 2.915172682s ago: executing program 3 (id=700): mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) mremap(&(0x7f0000e95000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x15) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 2.163078716s ago: executing program 2 (id=701): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x22400049, &(0x7f00000002c0)={[{@dioread_nolock}, {@noinit_itable}, {@nomblk_io_submit}, {@noblock_validity}, {@data_err_abort}, {@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@barrier_val={'barrier', 0x3d, 0xd95a}}, {@debug}]}, 0x84, 0x471, &(0x7f0000000bc0)="$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") r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 1.891393019s ago: executing program 0 (id=702): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe, &(0x7f0000000440), 0x3, 0x440, &(0x7f00000006c0)="$eJzs28tvG8UfAPDvrpP019cvoZRHH0CgICIeSZMW6IEDIJA4FAkJDnCMkrQqdRvUBIlWFRSEygkhJO6II/8CJ7ggxAmJK9xRpQr10paT0dq7ie3YbuLaNcWfj7TtzO5sZr7eHXtmxw5gaE1m/yQRuyLi94gYr2UbC0zW/rtx7eLCzWsXF5KoVN76K6mWu37t4kJRtDhvZ56ZSiPSz5I40KLelfMXTs+Xy0vn8vzM6pn3Z1bOX3j21Jn5k0snl87OHTt29MjsC8/PPdeTOLM2Xd//0fLBfa+/+9Ubx79oiL8pjh6Z7HTwiUqlx9UN1u66dDIywIawJaWIyC7XaLX/j0cp1i/eeLz26UAbB/RVpVKp7Gx/+FIF+A9LojGvy8OwKD7os/lvsTUPAl7q3/Bj4K6+XJsAZXHfyLfakZFI8zKjTfPbXpqMiHcu/f1NtkV/nkMAADT4IRv/PNNq/JfG/XXl/p+vDU1ExD0RsSci7o2IvRFxX0S17AMR8eAW629eJNk4/kmvdBXYJmXjvxfzta3G8V8x+ouJUp7bXY1/NDlxqrx0OH9NpmJ0W5af7VDHj6/+9mW7Y/Xjv2zL6i/Ggnk7roxsazxncX51/nZirnf1k4j9I63iT9ZWApKI2BcR+7us49RT3x1sd+zW8XfQg3WmyrcRT9au/6Voir+QdF6fnPlflJcOzxR3xUa//Hr5zXb131b8PZBd/x0t7/+1+CeS+vXala3XcfmPz9vOabq9/8eSt6vpsXzfh/Orq+dmI8aS47VG1++fWz+3yBfls/inDrXu/3ti/ZU4EBHZTfxQRDwcEY/kbX80Ih6LiEMd4v/5lcff6z7+/sriX9zS9V9PjEXzntaJ0umfvm+odGJD/Dc7X/+j1dRUvmcz73+baVd3dzMAAADcfdKI2BVJOr2WTtPp6dr35ffGjrS8vLL69InlD84u1n4jMBGjafGka7zueehsPq0v8nNR+2pBkT+SPzf+urS9mp9eWC4vDjp4GHI72/T/zJ+lQbcO6Du/14Lhpf/D8NL/YXjp/zC8WvT/7YNoB3Dntfr8/3gA7QDuvKb+b9kPhoj5Pwwv/R+Gl/4PQ2lle9z6R/IdE8Vf6vJ0ibs0Eem/ohkSfUoM9n0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgV/4JAAD//3sE4iY=") bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_GET_CPUID(0x1e, 0x0, 0x0, 0x1011) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x780, 0x12) 1.688649196s ago: executing program 3 (id=703): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000000)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000880)='sched_switch\x00', r4}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x401054d5, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000640), 0x2a, 0x0, &(0x7f0000000480)="5a59ffd76a275af071ff9f194beed30fe0a63df0ef4a0f6eb8b456e59c727ebae8478d071b61a483f813"}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 1.334851457s ago: executing program 2 (id=704): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x5e, &(0x7f0000000340)={[{@errors_remount}, {@nodiscard}, {@dioread_nolock}]}, 0x2, 0x455, &(0x7f0000000a80)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000186800000000000090737c73267beee600000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x228, 0x320, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x288) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x8, &(0x7f00000003c0)) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) accept(0xffffffffffffffff, &(0x7f00000000c0)=@can, 0x0) ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f0000000000)) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) creat(0x0, 0x0) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000300)='./file1\x00', 0x0, 0x200000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280), 0x208e24b) lseek(r7, 0x0, 0x4) 480.056269ms ago: executing program 4 (id=705): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xef) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8a, 0xe7c9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 356.61559ms ago: executing program 0 (id=706): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000480)={0x41, 0x3}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [], [], 'veth0_to_hsr\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xc8, 0x0, {0x308}}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="24010000", @ANYRES16=r2, @ANYBLOB="2b0300000ec00000000005000000080003"], 0x124}}, 0x0) 354.58942ms ago: executing program 3 (id=707): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940001000000fcffc50000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) 343.220321ms ago: executing program 1 (id=708): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="74020000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d78430800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542fc010880c801008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c9f010980ac000080060001000200000008000200000000000500030001000000060001000a00000014000200fc0100000000000000000000000000000500030002000000060001000a00000014000200fe800000000000000000ffff000000360500030001000000060001000a00000014000200fe8000000000000000000000000000aa0500030002000000060001000a000000140002000000000000000000000000000000000105000300000000001c000080060001000200000008000200ac1414aa05000300030000001c00008006000100"], 0x274}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 130.927768ms ago: executing program 3 (id=709): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001c2df6f270000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b15000000000000000000004888", @ANYRES32=0x0, @ANYBLOB="d530d995212cf95a2000128008000100687372001400028008000200", @ANYRES32], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d00"], 0x44}}, 0x0) 0s ago: executing program 1 (id=710): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): hsr_slave_1 entered promiscuous mode [ 199.652737][ T26] audit: type=1326 audit(1728620158.384:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5177 comm="syz.1.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb279049ff9 code=0x7ffc0000 [ 200.399344][ T5147] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.683147][ T5147] Cannot create hsr debugfs directory [ 200.885335][ T5193] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 200.899149][ T5193] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 200.906879][ T5193] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 201.053694][ T3634] Bluetooth: hci0: command 0x040f tx timeout [ 201.439571][ T5147] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.066459][ T5205] loop1: detected capacity change from 0 to 256 [ 202.316014][ T5147] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.904097][ T3579] Bluetooth: hci0: command 0x0419 tx timeout [ 203.972004][ T5147] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.156061][ T5147] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.418414][ T5219] loop0: detected capacity change from 0 to 2048 [ 204.508642][ T5147] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 204.542688][ T5147] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 204.577998][ T5219] EXT4-fs (loop0): Ignoring removed orlov option [ 204.610165][ T5147] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 204.610318][ T5219] EXT4-fs (loop0): Unrecognized mount option "fsuuid=" or missing value [ 204.635383][ T5147] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 204.944833][ T5147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.987779][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 205.044680][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 205.233374][ T5147] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.246808][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 205.267257][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 205.423192][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 205.423258][ T26] audit: type=1326 audit(1728620165.024:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5224 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaef376ff9 code=0x7ffc0000 [ 205.570342][ T3759] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.577471][ T3759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.894233][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 205.901705][ T26] audit: type=1326 audit(1728620165.024:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5224 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaef376ff9 code=0x7ffc0000 [ 205.943694][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 205.952300][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 205.991007][ T26] audit: type=1326 audit(1728620165.024:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5224 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffaef376ff9 code=0x7ffc0000 [ 206.004859][ T3759] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.020222][ T3759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.067180][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 206.102612][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 206.148603][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 206.180384][ T26] audit: type=1326 audit(1728620165.034:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5224 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaef376ff9 code=0x7ffc0000 [ 206.246208][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 206.266306][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 206.329732][ T26] audit: type=1326 audit(1728620165.034:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5224 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaef376ff9 code=0x7ffc0000 [ 206.413993][ T26] audit: type=1326 audit(1728620165.034:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5224 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffaef376ff9 code=0x7ffc0000 [ 206.437525][ T26] audit: type=1326 audit(1728620165.034:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5224 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaef376ff9 code=0x7ffc0000 [ 206.459873][ T26] audit: type=1326 audit(1728620165.034:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5224 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaef376ff9 code=0x7ffc0000 [ 206.486165][ T26] audit: type=1326 audit(1728620165.034:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5224 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffaef376ff9 code=0x7ffc0000 [ 206.513263][ T26] audit: type=1326 audit(1728620165.044:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5224 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaef376ff9 code=0x7ffc0000 [ 207.086421][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 207.125878][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 207.193796][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 207.211881][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 207.265453][ T5147] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 207.320522][ T5147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 207.349587][ T5241] loop0: detected capacity change from 0 to 512 [ 207.362061][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 207.381384][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 207.490587][ T5241] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 207.544955][ T5241] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038 (0x7fffffff) [ 207.585225][ T9] device hsr_slave_0 left promiscuous mode [ 207.594324][ T9] device hsr_slave_1 left promiscuous mode [ 207.627815][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.656688][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.682562][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.722941][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.735428][ T5241] EXT4-fs error (device loop0): ext4_search_dir:1549: inode #2: block 3: comm syz.0.359: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 207.757326][ T9] device bridge_slave_1 left promiscuous mode [ 207.764415][ T5241] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.359: Directory hole found for htree leaf block 0 [ 207.782551][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.817053][ T9] device bridge_slave_0 left promiscuous mode [ 207.844430][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.906883][ T9] device veth1_macvtap left promiscuous mode [ 207.953601][ T9] device veth0_macvtap left promiscuous mode [ 207.969964][ T9] device veth1_vlan left promiscuous mode [ 207.975781][ T9] device veth0_vlan left promiscuous mode [ 208.102843][ T5255] loop1: detected capacity change from 0 to 256 [ 209.419852][ T9] team0 (unregistering): Port device team_slave_1 removed [ 209.480235][ T9] team0 (unregistering): Port device team_slave_0 removed [ 209.502336][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.527388][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.624387][ T9] bond0 (unregistering): Released all slaves [ 210.433391][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 210.440925][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 210.515317][ T5262] chnl_net:caif_netlink_parms(): no params data found [ 210.605688][ T5147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.358806][ T5262] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.378461][ T5262] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.404674][ T5262] device bridge_slave_0 entered promiscuous mode [ 211.436149][ T5262] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.443504][ T2989] Bluetooth: hci4: command 0x0409 tx timeout [ 211.483485][ T5262] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.525286][ T5262] device bridge_slave_1 entered promiscuous mode [ 211.622453][ T5262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.645866][ T5262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.857396][ T5262] team0: Port device team_slave_0 added [ 211.897027][ T5262] team0: Port device team_slave_1 added [ 212.061922][ T5262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.088460][ T5262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.175955][ T5262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.262403][ T5262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.275249][ T5262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.397894][ T5262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.419625][ T5298] loop1: detected capacity change from 0 to 2048 [ 212.561428][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 212.571804][ T5298] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 212.590503][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 212.810733][ T5262] device hsr_slave_0 entered promiscuous mode [ 212.839951][ T5262] device hsr_slave_1 entered promiscuous mode [ 213.365980][ T5262] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.393231][ T5262] Cannot create hsr debugfs directory [ 213.508786][ T21] Bluetooth: hci4: command 0x041b tx timeout [ 213.547742][ T5147] device veth0_vlan entered promiscuous mode [ 213.576323][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 213.614481][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 213.670192][ T5306] loop1: detected capacity change from 0 to 512 [ 213.672374][ T5147] device veth1_vlan entered promiscuous mode [ 213.712415][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 213.732192][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 213.763698][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 213.850818][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 213.854532][ T5306] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 213.859756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 213.879128][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 213.898969][ T5147] device veth0_macvtap entered promiscuous mode [ 213.919055][ T5147] device veth1_macvtap entered promiscuous mode [ 213.934079][ T5306] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038 (0x7fffffff) [ 214.129808][ T5306] EXT4-fs error (device loop1): ext4_search_dir:1549: inode #2: block 3: comm syz.1.370: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 214.151557][ T5306] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.370: Directory hole found for htree leaf block 0 [ 214.216599][ T5262] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.315925][ T5147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.344648][ T5147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.363055][ T5147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.383145][ T5147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.392972][ T5147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.564026][ T5147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.623635][ T5147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.641004][ T5147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.662833][ T5147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.698842][ T5147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.730443][ T5147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.770687][ T5147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.810205][ T5147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.100912][ T5147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.365290][ T5147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.438672][ T5147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.528696][ T5147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.554321][ T5147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.568081][ T1292] Bluetooth: hci4: command 0x040f tx timeout [ 215.598009][ T5324] loop3: detected capacity change from 0 to 256 [ 215.623510][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 215.644117][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 215.669156][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 215.694347][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 215.725083][ T5326] loop1: detected capacity change from 0 to 512 [ 215.732587][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 215.753461][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 215.956308][ T5262] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.977633][ T5326] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 215.988918][ T5326] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038 (0x7fffffff) [ 216.006815][ T5326] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.374: Directory hole found for htree leaf block 0 [ 216.025063][ T5147] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.035575][ T5147] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.050508][ T5147] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.060119][ T5147] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.104886][ T5262] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.238313][ T5332] ÿÿÿÿÿÿ: renamed from vlan1 [ 216.279992][ T5262] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.235879][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.253326][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.266106][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 217.349488][ T3779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.363570][ T3779] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.410844][ T5262] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 217.449388][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 217.468584][ T5262] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 217.512236][ T5262] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 217.651892][ T3579] Bluetooth: hci4: command 0x0419 tx timeout [ 218.277177][ T5262] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 222.574923][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 222.610384][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 222.610399][ T26] audit: type=1326 audit(1728620181.494:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5365 comm="syz.4.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41dd729ff9 code=0x7ffc0000 [ 222.762635][ T26] audit: type=1326 audit(1728620181.494:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5365 comm="syz.4.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41dd729ff9 code=0x7ffc0000 [ 222.903454][ T5376] loop3: detected capacity change from 0 to 256 [ 222.917373][ T26] audit: type=1326 audit(1728620181.494:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5365 comm="syz.4.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41dd729ff9 code=0x7ffc0000 [ 224.355935][ T26] audit: type=1326 audit(1728620181.504:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5365 comm="syz.4.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41dd729ff9 code=0x7ffc0000 [ 224.673444][ T3649] Bluetooth: hci1: command 0x041b tx timeout [ 224.687129][ T26] audit: type=1326 audit(1728620181.504:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5365 comm="syz.4.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41dd729ff9 code=0x7ffc0000 [ 224.913279][ T5262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.951915][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 224.962221][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 224.987518][ T5262] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.082722][ T26] audit: type=1326 audit(1728620181.514:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5365 comm="syz.4.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41dd729ff9 code=0x7ffc0000 [ 225.120563][ T26] audit: type=1326 audit(1728620181.524:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5365 comm="syz.4.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41dd729ff9 code=0x7ffc0000 [ 225.573904][ T26] audit: type=1326 audit(1728620181.524:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5365 comm="syz.4.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41dd729ff9 code=0x7ffc0000 [ 225.619717][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 225.654137][ T5394] loop3: detected capacity change from 0 to 512 [ 225.662899][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 225.670154][ T26] audit: type=1326 audit(1728620181.534:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5365 comm="syz.4.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41dd729ff9 code=0x7ffc0000 [ 225.693545][ T26] audit: type=1326 audit(1728620181.534:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5365 comm="syz.4.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41dd729ff9 code=0x7ffc0000 [ 225.693683][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.722771][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.799945][ T5394] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 225.841369][ T5394] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038 (0x7fffffff) [ 225.872730][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 225.881950][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 225.890789][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.897890][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.906878][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 225.916389][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 225.970681][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 225.989305][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 226.002940][ T5406] EXT4-fs error (device loop3): ext4_search_dir:1549: inode #2: block 3: comm syz.3.390: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 226.025371][ T5406] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.390: Directory hole found for htree leaf block 0 [ 226.034419][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 226.057859][ T5355] chnl_net:caif_netlink_parms(): no params data found [ 226.090233][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 226.124259][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 226.147953][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 226.162661][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 226.179624][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 226.190917][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 226.211703][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 226.248400][ T5262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 226.366325][ T5355] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.374502][ T5355] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.382566][ T5355] device bridge_slave_0 entered promiscuous mode [ 226.425824][ T5355] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.434985][ T5355] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.445130][ T5355] device bridge_slave_1 entered promiscuous mode [ 226.497876][ T5355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.509765][ T5355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.706595][ T5355] team0: Port device team_slave_0 added [ 226.726167][ T5355] team0: Port device team_slave_1 added [ 226.753656][ T3615] Bluetooth: hci1: command 0x040f tx timeout [ 226.842004][ T5034] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 226.849667][ T5034] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 226.860657][ T5262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.903716][ T3779] device hsr_slave_0 left promiscuous mode [ 226.916880][ T3779] device hsr_slave_1 left promiscuous mode [ 226.924913][ T3779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.943454][ T3779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.961637][ T3779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.969919][ T3779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.999700][ T3779] device bridge_slave_1 left promiscuous mode [ 227.011838][ T3779] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.029270][ T3779] device bridge_slave_0 left promiscuous mode [ 227.037993][ T3779] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.938623][ T3779] device veth1_macvtap left promiscuous mode [ 227.954153][ T3779] device veth0_macvtap left promiscuous mode [ 227.961234][ T3779] device veth1_vlan left promiscuous mode [ 227.961369][ T3779] device veth0_vlan left promiscuous mode [ 228.118808][ T5430] loop1: detected capacity change from 0 to 256 [ 228.547623][ T3779] team0 (unregistering): Port device team_slave_1 removed [ 228.562649][ T3779] team0 (unregistering): Port device team_slave_0 removed [ 228.578715][ T3779] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.599627][ T3779] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.709889][ T3779] bond0 (unregistering): Released all slaves [ 228.760914][ T5355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.768405][ T5355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.803504][ T5355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.833230][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 228.914103][ T5355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.921102][ T5355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.003840][ T5355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.146599][ T5355] device hsr_slave_0 entered promiscuous mode [ 229.164297][ T5355] device hsr_slave_1 entered promiscuous mode [ 229.529240][ T5355] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.644499][ T5355] Cannot create hsr debugfs directory [ 229.693273][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 229.705052][ T5441] No such timeout policy "syz1" [ 229.716972][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 229.815054][ T5262] device veth0_vlan entered promiscuous mode [ 229.887125][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 229.895908][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 229.908358][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 229.917015][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 229.986077][ T5262] device veth1_vlan entered promiscuous mode [ 230.044808][ T5262] device veth0_macvtap entered promiscuous mode [ 230.098887][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 230.123486][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 230.163629][ T5262] device veth1_macvtap entered promiscuous mode [ 230.826542][ T5450] loop1: detected capacity change from 0 to 512 [ 230.871863][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 230.884181][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 230.967235][ T5355] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.077645][ T5450] EXT4-fs (loop1): 1 orphan inode deleted [ 231.099245][ T5450] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 231.124946][ T5262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.140922][ T5450] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038 (0x7fffffff) [ 231.188455][ T5262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.199491][ T5262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.210104][ T5262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.220454][ T5262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.231060][ T5262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.241323][ T5262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.256510][ T5262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.268503][ T5262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.285273][ T5355] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.312702][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 231.364495][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 231.385623][ T5262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.423268][ T5262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.489453][ T5262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.500696][ T5262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.510858][ T5262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.531615][ T5262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.544254][ T5262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.585135][ T5262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.223558][ T5262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.268693][ T7] Bluetooth: hci2: command 0x0406 tx timeout [ 232.294009][ T5355] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.325044][ T4227] EXT4-fs error (device loop1): ext4_lookup:1860: inode #2: comm syz-executor: deleted inode referenced: 16 [ 232.338174][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 232.342719][ T4227] EXT4-fs (loop1): Remounting filesystem read-only [ 232.361240][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 232.369721][ T4227] EXT4-fs error (device loop1): ext4_lookup:1860: inode #2: comm syz-executor: deleted inode referenced: 16 [ 232.392765][ T5262] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.409762][ T5262] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.439736][ T5262] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.464158][ T5262] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.504525][ T5355] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.744784][ T3663] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.763826][ T3663] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.800653][ T5355] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 232.807966][ T3719] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.827361][ T3719] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.830239][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 232.847508][ T5355] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 232.872258][ T5355] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 232.908717][ T5355] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 232.938349][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 233.248956][ T5355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.301448][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 233.500107][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 233.837283][ T5355] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.028386][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 234.037556][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 234.045106][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 234.074178][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 234.107343][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 234.127355][ T5474] loop3: detected capacity change from 0 to 256 [ 234.155727][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.162833][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.213448][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 234.222263][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 234.232168][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.239270][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.250526][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 234.616094][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 235.861979][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 235.904019][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 235.951691][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 235.991346][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 236.031976][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 236.074776][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 236.083350][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 236.105432][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 236.146667][ T5486] loop4: detected capacity change from 0 to 256 [ 236.218682][ T1077] Bluetooth: hci2: command 0x0409 tx timeout [ 236.225065][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 236.225686][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 236.247357][ T5355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 236.928016][ T5498] No such timeout policy "syz1" [ 237.078242][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 237.098929][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 237.145873][ T5355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.359724][ T5471] chnl_net:caif_netlink_parms(): no params data found [ 237.395676][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 237.474428][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 237.686734][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 237.712607][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 238.379323][ T3634] Bluetooth: hci2: command 0x041b tx timeout [ 238.519834][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 238.553773][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 238.563880][ T5355] device veth0_vlan entered promiscuous mode [ 238.811056][ T5355] device veth1_vlan entered promiscuous mode [ 239.060657][ T5471] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.100444][ T5471] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.108935][ T5471] device bridge_slave_0 entered promiscuous mode [ 239.130007][ T5471] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.142787][ T5471] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.158885][ T5471] device bridge_slave_1 entered promiscuous mode [ 240.443142][ T1292] Bluetooth: hci2: command 0x040f tx timeout [ 241.345851][ T5536] loop4: detected capacity change from 0 to 512 [ 241.461285][ T5538] loop2: detected capacity change from 0 to 512 [ 241.478359][ T5355] device veth0_macvtap entered promiscuous mode [ 241.504126][ T5471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.504649][ T5538] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 241.521720][ T5536] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 241.527075][ T5471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.546734][ T5538] EXT4-fs (loop2): 1 truncate cleaned up [ 241.551282][ T5536] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038 (0x7fffffff) [ 241.552425][ T5538] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,stripe=0x0000000000000200,,errors=continue. Quota mode: none. [ 241.566675][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 241.612882][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 241.621692][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 241.637182][ T5355] device veth1_macvtap entered promiscuous mode [ 241.714860][ T3779] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.753712][ T5471] team0: Port device team_slave_0 added [ 241.770839][ T5355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.823139][ T5355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.833190][ T5355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.844055][ T5355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.608738][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 243.293222][ T5355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.306878][ T5355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.317493][ T5355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.328299][ T5355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.339381][ T5355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.350308][ T5355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.365324][ T5355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.373861][ T5471] team0: Port device team_slave_1 added [ 243.379865][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 243.571928][ T5555] No such timeout policy "syz1" [ 244.144893][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 244.154898][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 244.167922][ T5355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.186711][ T5355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.197781][ T5355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.208659][ T5355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.218816][ T5355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.229682][ T5355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.239553][ T5355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.251174][ T5355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.261658][ T5355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.272100][ T5355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.283761][ T5355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.333317][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 244.342045][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 244.358947][ T5355] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.374377][ T5355] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.388992][ T5355] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.419560][ T5355] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.614060][ T3779] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.869915][ T3779] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.963299][ T3779] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.075717][ T5471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.086849][ T5471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.120165][ T5471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.196680][ T5471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.240946][ T5471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.508360][ T5471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.813691][ T5550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.821873][ T5550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.092300][ T5550] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 246.147764][ T5471] device hsr_slave_0 entered promiscuous mode [ 246.163352][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.171383][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.184724][ T5471] device hsr_slave_1 entered promiscuous mode [ 246.204146][ T5471] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.212597][ T5471] Cannot create hsr debugfs directory [ 246.262546][ T5550] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 247.814845][ T5592] loop4: detected capacity change from 0 to 512 [ 247.923175][ T5592] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 247.995801][ T5592] EXT4-fs (loop4): 1 truncate cleaned up [ 248.001450][ T5592] EXT4-fs (loop4): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,stripe=0x0000000000000200,,errors=continue. Quota mode: none. [ 248.088663][ T5570] chnl_net:caif_netlink_parms(): no params data found [ 248.485008][ T4773] Bluetooth: hci3: command 0x0409 tx timeout [ 248.593938][ T5601] loop3: detected capacity change from 0 to 512 [ 248.848485][ T5601] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 248.856854][ T5588] loop0: detected capacity change from 0 to 40427 [ 248.900621][ T5601] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038 (0x7fffffff) [ 248.965618][ T5588] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 248.972565][ T5588] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 249.250437][ T5588] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 249.254418][ T5570] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.317171][ T5628] No such timeout policy "syz1" [ 249.347431][ T5570] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.358324][ T5629] EXT4-fs error (device loop3): ext4_search_dir:1549: inode #2: block 3: comm syz.3.435: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 249.408646][ T5570] device bridge_slave_0 entered promiscuous mode [ 249.454776][ T5570] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.491652][ T5570] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.550862][ T5570] device bridge_slave_1 entered promiscuous mode [ 249.589279][ T5588] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 249.621068][ T5588] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 249.642813][ T5629] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.435: Directory hole found for htree leaf block 0 [ 249.818201][ T5570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.057392][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 250.057604][ T26] audit: type=1804 audit(1728620209.704:181): pid=5641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.433" name="/newroot/2/file1/file1" dev="loop0" ino=10 res=1 errno=0 [ 250.355849][ T5640] netlink: 64 bytes leftover after parsing attributes in process `syz.0.433'. [ 250.355877][ T5640] netlink: 64 bytes leftover after parsing attributes in process `syz.0.433'. [ 250.539881][ T5570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.549605][ T5355] attempt to access beyond end of device [ 250.549605][ T5355] loop0: rw=2049, want=45104, limit=40427 [ 250.603219][ T4773] Bluetooth: hci3: command 0x041b tx timeout [ 250.734152][ T5471] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 250.758542][ T5570] team0: Port device team_slave_0 added [ 250.782889][ T5471] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 250.823567][ T5570] team0: Port device team_slave_1 added [ 250.851504][ T5471] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 251.583676][ T5471] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 251.692302][ T5570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.701879][ T5570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.843078][ T5570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.861448][ T5570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.883108][ T5570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.953273][ T5570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.673175][ T3579] Bluetooth: hci3: command 0x040f tx timeout [ 252.961976][ T5570] device hsr_slave_0 entered promiscuous mode [ 252.989832][ T5570] device hsr_slave_1 entered promiscuous mode [ 253.020531][ T5570] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.054616][ T5570] Cannot create hsr debugfs directory [ 254.524822][ T5471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.618824][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 254.670657][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 254.753561][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 255.339852][ T5471] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.419480][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 255.429801][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 255.439172][ T3663] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.446264][ T3663] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.483402][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.489698][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.494051][ T5684] loop3: detected capacity change from 0 to 1024 [ 255.658321][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 255.666319][ T5684] EXT4-fs (loop3): Test dummy encryption mode enabled [ 255.667173][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 255.682065][ T3663] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.689182][ T3663] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.689588][ T5684] EXT4-fs (loop3): Ignoring removed orlov option [ 255.696946][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 255.786527][ T5687] No such timeout policy "syz1" [ 255.962780][ T5684] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 256.583511][ T5684] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 256.664269][ T5570] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.823992][ T5694] tmpfs: Unknown parameter 'usrquota' [ 256.827874][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 257.130544][ T5697] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 257.164882][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 257.314945][ T5471] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 257.398027][ T5471] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 257.562067][ T5570] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.676149][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 257.704134][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 257.762349][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 257.782680][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 257.811830][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 257.839827][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 257.874198][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 257.898145][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 257.914126][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 258.055822][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 258.742287][ T5570] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.870788][ T5570] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.964959][ T3779] device hsr_slave_0 left promiscuous mode [ 259.040141][ T3779] device hsr_slave_1 left promiscuous mode [ 259.090539][ T3779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.238406][ T3779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.382247][ T3779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.497695][ T3779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.603967][ T3779] device bridge_slave_1 left promiscuous mode [ 259.613334][ T3779] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.664248][ T3779] device bridge_slave_0 left promiscuous mode [ 259.670488][ T3779] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.697172][ T3779] device hsr_slave_0 left promiscuous mode [ 259.703636][ T3779] device hsr_slave_1 left promiscuous mode [ 259.710071][ T3779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.733857][ T3779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.778160][ T3779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.793161][ T3779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.811139][ T3779] device bridge_slave_1 left promiscuous mode [ 259.841064][ T3779] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.859263][ T3779] device bridge_slave_0 left promiscuous mode [ 259.870186][ T3779] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.911503][ T3779] device veth1_macvtap left promiscuous mode [ 259.921100][ T3779] device veth0_macvtap left promiscuous mode [ 259.991089][ T3779] device veth1_vlan left promiscuous mode [ 259.999974][ T3779] device veth1_macvtap left promiscuous mode [ 260.009300][ T3779] device veth0_macvtap left promiscuous mode [ 260.015507][ T3779] device veth1_vlan left promiscuous mode [ 260.021338][ T3779] device veth0_vlan left promiscuous mode [ 261.816597][ T3779] team0 (unregistering): Port device team_slave_1 removed [ 261.839692][ T3779] team0 (unregistering): Port device team_slave_0 removed [ 261.856298][ T3779] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.869522][ T3779] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.674009][ T1077] Bluetooth: hci5: command 0x0406 tx timeout [ 262.711819][ T3779] bond0 (unregistering): Released all slaves [ 262.832415][ T3779] team0 (unregistering): Port device team_slave_1 removed [ 262.861542][ T3779] team0 (unregistering): Port device team_slave_0 removed [ 262.874261][ T3779] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.887780][ T3779] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.954532][ T3779] bond0 (unregistering): Released all slaves [ 263.038062][ T5749] loop4: detected capacity change from 0 to 512 [ 263.039616][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 263.072694][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 263.090486][ T5471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.103708][ T5749] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 263.172519][ T2598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 263.187704][ T2598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 263.187907][ T5749] EXT4-fs (loop4): 1 truncate cleaned up [ 263.239393][ T5749] EXT4-fs (loop4): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,stripe=0x0000000000000200,,errors=continue. Quota mode: none. [ 263.256643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 263.295490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 263.312801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 263.322070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 263.487464][ T5570] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 263.496901][ T5570] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 264.344950][ T5471] device veth0_vlan entered promiscuous mode [ 264.359691][ T5570] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 264.387985][ T5570] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 264.520541][ T5471] device veth1_vlan entered promiscuous mode [ 265.151396][ T5771] loop4: detected capacity change from 0 to 512 [ 265.762110][ T5771] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 265.770996][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 266.118695][ T5771] EXT4-fs (loop4): 1 orphan inode deleted [ 266.124726][ T5771] EXT4-fs (loop4): 1 truncate cleaned up [ 266.130551][ T5771] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,grpjquota=,dioread_lock,inode_readahead_blks=0x0000000000010000,errors=remount-ro,journal_ioprio=0x0000000000000001,. Quota mode: none. [ 266.366150][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 266.414824][ T5471] device veth0_macvtap entered promiscuous mode [ 266.432822][ T5471] device veth1_macvtap entered promiscuous mode [ 266.451992][ T5471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.463152][ T5471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.476773][ T5471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.501371][ T5471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.511288][ T5471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.522858][ T5471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.534559][ T5471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.545454][ T5471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.557960][ T5471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.617793][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 266.633929][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 266.649477][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 266.679421][ T5471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.698328][ T5471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.708745][ T5471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.721417][ T5471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.733233][ T5471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.744083][ T5471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.754650][ T5471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.765430][ T5471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.777457][ T5471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.794610][ T5570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.822409][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 266.835580][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 266.929826][ T5471] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.938573][ T5471] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.947308][ T5471] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.956484][ T5471] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.017672][ T5570] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.570637][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 267.579143][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 267.587669][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 267.596924][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 267.605743][ T3724] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.612807][ T3724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.627224][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 267.663549][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 267.679134][ T3724] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.686267][ T3724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.718056][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 267.728747][ T26] audit: type=1326 audit(1728620227.394:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5786 comm="syz.0.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062c515ff9 code=0x7ffc0000 [ 267.733985][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 267.751936][ T26] audit: type=1326 audit(1728620227.394:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5786 comm="syz.0.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062c515ff9 code=0x7ffc0000 [ 267.783829][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 267.794489][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 267.802639][ T26] audit: type=1326 audit(1728620227.394:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5786 comm="syz.0.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f062c515ff9 code=0x7ffc0000 [ 267.826347][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 267.841979][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 267.850284][ T26] audit: type=1326 audit(1728620227.394:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5786 comm="syz.0.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062c515ff9 code=0x7ffc0000 [ 267.887424][ T26] audit: type=1326 audit(1728620227.394:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5786 comm="syz.0.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062c515ff9 code=0x7ffc0000 [ 267.923998][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 267.947626][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 267.959332][ T5789] syz.0.470 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 267.962645][ T26] audit: type=1326 audit(1728620227.424:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5786 comm="syz.0.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f062c515ff9 code=0x7ffc0000 [ 268.016128][ T26] audit: type=1326 audit(1728620227.424:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5786 comm="syz.0.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062c515ff9 code=0x7ffc0000 [ 268.052208][ T26] audit: type=1326 audit(1728620227.424:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5786 comm="syz.0.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062c515ff9 code=0x7ffc0000 [ 268.075219][ T26] audit: type=1326 audit(1728620227.444:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5786 comm="syz.0.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f062c515ff9 code=0x7ffc0000 [ 268.101287][ T5570] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 268.112887][ T5570] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 268.116829][ T5791] loop0: detected capacity change from 0 to 256 [ 268.125592][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 268.138210][ T26] audit: type=1326 audit(1728620227.444:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5786 comm="syz.0.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062c515ff9 code=0x7ffc0000 [ 268.140491][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 268.169181][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 268.178945][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 268.187427][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 268.209226][ T5791] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 269.645108][ T3724] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.671557][ T3724] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.691284][ T2598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.722254][ T5034] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 269.730817][ T2598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.761522][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 269.819939][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 269.835788][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 269.898691][ T5570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.107448][ T2598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 270.124839][ T2598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 270.179357][ T2598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 270.198945][ T2598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 270.230294][ T5570] device veth0_vlan entered promiscuous mode [ 270.247840][ T2598] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 270.270268][ T2598] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 270.316446][ T5570] device veth1_vlan entered promiscuous mode [ 271.178875][ T2598] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 271.223694][ T2598] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 271.234836][ T5808] loop3: detected capacity change from 0 to 256 [ 271.271849][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 271.354633][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 271.388176][ T5570] device veth0_macvtap entered promiscuous mode [ 271.455234][ T5570] device veth1_macvtap entered promiscuous mode [ 271.471569][ T5570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.593973][ T5570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.553071][ T5570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.764771][ T5816] fuse: Unknown parameter '0x000000000000000c' [ 272.955328][ T5570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.006039][ T5570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.060645][ T5570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.111363][ T5570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.149664][ T5570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.159589][ T5570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.170148][ T5570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.182199][ T5570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.191607][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 273.209952][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 273.253723][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 273.279311][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 273.300022][ T5570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.324790][ T5570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.340537][ T5570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.363134][ T5570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.384342][ T5570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.423500][ T5570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.453163][ T5570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.485445][ T5570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.528560][ T5570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.619437][ T5570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.855541][ T5570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.872773][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 273.889254][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 273.958278][ T5570] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.017773][ T5570] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.096393][ T5570] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.130986][ T5570] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.455280][ T403] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.483133][ T403] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.656979][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 274.705341][ T3663] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.741977][ T3663] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.825619][ T5659] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 275.497478][ T5837] loop1: detected capacity change from 0 to 512 [ 275.624513][ T5835] loop0: detected capacity change from 0 to 8192 [ 275.634930][ T5837] EXT4-fs (loop1): 1 orphan inode deleted [ 275.648390][ T5837] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 275.670029][ T5837] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038 (0x7fffffff) [ 276.415007][ T5833] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 276.658792][ T5471] EXT4-fs error (device loop1): ext4_lookup:1860: inode #2: comm syz-executor: deleted inode referenced: 16 [ 276.764636][ T5471] EXT4-fs (loop1): Remounting filesystem read-only [ 276.771402][ T5471] EXT4-fs error (device loop1): ext4_lookup:1860: inode #2: comm syz-executor: deleted inode referenced: 16 [ 278.676046][ T5862] ªªªªªª: renamed from vlan0 [ 279.005439][ T3634] Bluetooth: hci2: command 0x0409 tx timeout [ 279.083719][ T5867] loop0: detected capacity change from 0 to 512 [ 279.328918][ T5867] EXT4-fs (loop0): 1 orphan inode deleted [ 279.384095][ T5867] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 279.583178][ T5867] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038 (0x7fffffff) [ 279.674912][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 280.014337][ T5881] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 280.023209][ T5881] overlayfs: missing 'lowerdir' [ 280.196813][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.257070][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.311050][ T5851] device bridge_slave_0 entered promiscuous mode [ 280.405577][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.405618][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.406537][ T5851] device bridge_slave_1 entered promiscuous mode [ 280.497991][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.009817][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.244311][ T3615] Bluetooth: hci2: command 0x041b tx timeout [ 282.288426][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 282.293995][ T5899] loop0: detected capacity change from 0 to 1024 [ 282.510656][ T5899] EXT4-fs (loop0): Test dummy encryption mode enabled [ 282.633544][ T5903] loop2: detected capacity change from 0 to 512 [ 282.645669][ T5899] EXT4-fs (loop0): Ignoring removed orlov option [ 282.808783][ T3779] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.962070][ T5899] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 283.035568][ T5903] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 283.046966][ T5903] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038 (0x7fffffff) [ 283.098340][ T5851] team0: Port device team_slave_0 added [ 283.137942][ T3779] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.206116][ T5851] team0: Port device team_slave_1 added [ 283.333186][ T3615] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 283.357273][ T3779] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.421584][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.631111][ T5911] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 283.702113][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.801388][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.831894][ T5880] chnl_net:caif_netlink_parms(): no params data found [ 283.851847][ T3779] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.921377][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.930776][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.958326][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.043240][ T3615] usb 3-1: Using ep0 maxpacket: 8 [ 284.130215][ T5851] device hsr_slave_0 entered promiscuous mode [ 284.276253][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 284.353285][ T21] Bluetooth: hci4: command 0x041b tx timeout [ 284.743291][ T3615] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.884259][ T3615] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.926308][ T3615] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 284.957693][ T3615] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.001833][ T3615] usb 3-1: config 0 descriptor?? [ 285.008505][ T5851] device hsr_slave_1 entered promiscuous mode [ 285.409535][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.424295][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.446436][ T5880] device bridge_slave_0 entered promiscuous mode [ 285.547293][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.561409][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.581046][ T5880] device bridge_slave_1 entered promiscuous mode [ 285.687423][ T5880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.701790][ T5851] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.717518][ T5880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.850651][ T5851] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.887126][ T5880] team0: Port device team_slave_0 added [ 285.956440][ T5880] team0: Port device team_slave_1 added [ 285.979978][ T5851] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.061538][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.078354][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.121391][ T5880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.170019][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.187740][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.234526][ T5880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.259420][ T5851] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.361959][ T3612] Bluetooth: hci2: command 0x0419 tx timeout [ 286.453355][ T3615] usbhid 3-1:0.0: can't add hid device: -71 [ 286.459578][ T3615] usbhid: probe of 3-1:0.0 failed with error -71 [ 286.527208][ T3615] usb 3-1: USB disconnect, device number 3 [ 286.555596][ T1292] Bluetooth: hci4: command 0x040f tx timeout [ 287.433208][ T5969] loop2: detected capacity change from 0 to 256 [ 287.482829][ T5880] device hsr_slave_0 entered promiscuous mode [ 287.500058][ T5880] device hsr_slave_1 entered promiscuous mode [ 287.513784][ T5880] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 287.549977][ T5880] Cannot create hsr debugfs directory [ 287.571496][ T5969] FAT-fs (loop2): Directory bread(block 64) failed [ 287.590962][ T5969] FAT-fs (loop2): Directory bread(block 65) failed [ 287.614488][ T5969] FAT-fs (loop2): Directory bread(block 66) failed [ 287.636858][ T5969] FAT-fs (loop2): Directory bread(block 67) failed [ 287.659552][ T5969] FAT-fs (loop2): Directory bread(block 68) failed [ 287.683158][ T5969] FAT-fs (loop2): Directory bread(block 69) failed [ 287.691602][ T5851] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 287.703475][ T5969] FAT-fs (loop2): Directory bread(block 70) failed [ 287.720432][ T5851] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 287.726866][ T5969] FAT-fs (loop2): Directory bread(block 71) failed [ 287.750771][ T5969] FAT-fs (loop2): Directory bread(block 72) failed [ 287.767068][ T5851] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 287.773266][ T5969] FAT-fs (loop2): Directory bread(block 73) failed [ 287.800700][ T5851] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 288.066358][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.092724][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.211022][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 288.246700][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 288.484216][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 288.603386][ T3612] Bluetooth: hci4: command 0x0419 tx timeout [ 288.734540][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 288.940254][ T3719] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.947416][ T3719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.057201][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 289.067451][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 289.076961][ T3719] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.084224][ T3719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.096747][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 289.359861][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 289.985517][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 290.261687][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 290.275969][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 290.287949][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 290.298718][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 290.311178][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 290.347532][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 290.360173][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 290.381239][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 290.385961][ T6009] hub 6-0:1.0: USB hub found [ 290.393975][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 290.418114][ T3779] device hsr_slave_0 left promiscuous mode [ 290.422836][ T6009] hub 6-0:1.0: 1 port detected [ 290.431751][ T3779] device hsr_slave_1 left promiscuous mode [ 290.453886][ T3779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.471882][ T3779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.489396][ T3779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.497271][ T3779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.505820][ T3779] device bridge_slave_1 left promiscuous mode [ 290.512190][ T3779] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.528910][ T3779] device bridge_slave_0 left promiscuous mode [ 290.535393][ T3779] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.570731][ T3779] device hsr_slave_0 left promiscuous mode [ 290.591278][ T3779] device hsr_slave_1 left promiscuous mode [ 290.814467][ T3779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.820731][ T6014] loop0: detected capacity change from 0 to 256 [ 290.821950][ T3779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.851112][ T3779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.948520][ T3779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.079372][ T6014] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 291.130480][ T3779] device bridge_slave_1 left promiscuous mode [ 291.255486][ T3779] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.459786][ T3779] device bridge_slave_0 left promiscuous mode [ 291.536539][ T3779] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.597291][ T3779] device veth1_macvtap left promiscuous mode [ 291.611138][ T3779] device veth0_macvtap left promiscuous mode [ 291.619976][ T3779] device veth1_vlan left promiscuous mode [ 291.663257][ T3779] device veth0_vlan left promiscuous mode [ 291.679374][ T3779] device veth1_macvtap left promiscuous mode [ 291.695717][ T3779] device veth0_macvtap left promiscuous mode [ 291.715989][ T3779] device veth1_vlan left promiscuous mode [ 291.743263][ T3779] device veth0_vlan left promiscuous mode [ 293.391351][ T3779] team0 (unregistering): Port device team_slave_1 removed [ 293.412504][ T3779] team0 (unregistering): Port device team_slave_0 removed [ 293.424025][ T3779] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.436837][ T3779] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.500174][ T3779] bond0 (unregistering): Released all slaves [ 293.600695][ T3779] team0 (unregistering): Port device team_slave_1 removed [ 293.619040][ T3779] team0 (unregistering): Port device team_slave_0 removed [ 293.630309][ T3779] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.646131][ T3779] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.709010][ T3779] bond0 (unregistering): Released all slaves [ 293.794472][ T5851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 293.856317][ T5880] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 293.865884][ T5880] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 293.930999][ T5880] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 293.987330][ T5880] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 294.188802][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 294.199055][ T6036] loop0: detected capacity change from 0 to 256 [ 294.250098][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 294.992519][ T5880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.997210][ T6036] FAT-fs (loop0): Directory bread(block 64) failed [ 295.005810][ T6036] FAT-fs (loop0): Directory bread(block 65) failed [ 295.012390][ T6036] FAT-fs (loop0): Directory bread(block 66) failed [ 295.033199][ T6036] FAT-fs (loop0): Directory bread(block 67) failed [ 295.039779][ T6036] FAT-fs (loop0): Directory bread(block 68) failed [ 295.113190][ T6036] FAT-fs (loop0): Directory bread(block 69) failed [ 295.135327][ T6036] FAT-fs (loop0): Directory bread(block 70) failed [ 295.136798][ T5880] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.141876][ T6036] FAT-fs (loop0): Directory bread(block 71) failed [ 295.317597][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 295.351106][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 295.391919][ T6036] FAT-fs (loop0): Directory bread(block 72) failed [ 295.405873][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.422885][ T6036] FAT-fs (loop0): Directory bread(block 73) failed [ 295.497536][ T2598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 295.604871][ T2598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 295.681880][ T2598] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.689050][ T2598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.760377][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 295.760392][ T26] audit: type=1800 audit(1728620255.414:208): pid=6036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.520" name="bus" dev="loop0" ino=1048629 res=0 errno=0 [ 295.820378][ T2598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 295.874200][ T2598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 295.914986][ T2598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 295.951631][ T2598] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.958755][ T2598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.017369][ T2598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 296.089977][ T2598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 296.691061][ T5880] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 296.763165][ T5880] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 296.782957][ T2598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 296.795870][ T2598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 296.821274][ T2598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 296.863976][ T2598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 296.885068][ T2598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 296.983845][ T2598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 297.023248][ T2598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 297.074452][ T2598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 297.082988][ T2598] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 297.095070][ T2598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 297.131621][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 297.147918][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 297.227459][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 297.248597][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 297.280556][ T5851] device veth0_vlan entered promiscuous mode [ 297.297268][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 297.313762][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 297.346169][ T5851] device veth1_vlan entered promiscuous mode [ 297.386916][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 297.401773][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 297.419655][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 297.437580][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 297.462749][ T5851] device veth0_macvtap entered promiscuous mode [ 297.488198][ T5880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.505025][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 297.515331][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 297.536089][ T5851] device veth1_macvtap entered promiscuous mode [ 297.599732][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 297.614342][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 297.632902][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 297.644435][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 297.692319][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.761265][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.837914][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.923109][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.974969][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.026275][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.064353][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.076082][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.091342][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.188403][ T5880] device veth0_vlan entered promiscuous mode [ 298.522942][ T5880] device veth1_vlan entered promiscuous mode [ 298.795049][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 298.826133][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 298.844021][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 298.858193][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 298.867368][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 298.875911][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 298.894251][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 298.946156][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 299.004834][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.020394][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.034151][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.045523][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.055781][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.259173][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.414755][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.581664][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.723206][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.774903][ T5880] device veth0_macvtap entered promiscuous mode [ 299.812598][ T6104] netlink: 144 bytes leftover after parsing attributes in process `syz.2.528'. [ 299.841007][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 299.853778][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 299.868850][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 299.887576][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 299.914170][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 299.955872][ T5851] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.025964][ T5851] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.045520][ T5851] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.930038][ T5851] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.195610][ T5880] device veth1_macvtap entered promiscuous mode [ 301.203816][ T3634] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 301.593604][ T3634] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.609527][ T3634] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.626715][ T3634] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 301.638840][ T3634] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.655839][ T3634] usb 4-1: config 0 descriptor?? [ 301.675860][ T5880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.757535][ T5880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.775432][ T5880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.792241][ T5880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.893962][ T5880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.933265][ T5880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.953117][ T5880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.007578][ T5880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.028568][ T5880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.049299][ T5880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.070756][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.138430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 302.150114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 302.180271][ T5880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.187121][ T3634] pyra 0003:1E7D:2CF6.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 302.206065][ T5880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.216605][ T5880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.230152][ T5880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.250649][ T5880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.375385][ T5880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.408075][ T5880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.458804][ T6144] loop0: detected capacity change from 0 to 1024 [ 302.493149][ T5880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.505244][ T5880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.522625][ T5880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.639789][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.648180][ T3634] pyra 0003:1E7D:2CF6.0004: couldn't init struct pyra_device [ 302.662680][ T3634] pyra 0003:1E7D:2CF6.0004: couldn't install mouse [ 302.793961][ T3634] pyra: probe of 0003:1E7D:2CF6.0004 failed with error -71 [ 302.946518][ T3681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.981639][ T3634] usb 4-1: USB disconnect, device number 3 [ 302.995422][ T3681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.141209][ T6144] EXT4-fs (loop0): Ignoring removed orlov option [ 303.163822][ T6144] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 303.183871][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 303.204547][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 303.224500][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 303.271335][ T5880] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.281220][ T6144] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,block_validity,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 303.349275][ T5880] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.379297][ T5880] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.407055][ T5880] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.962224][ T3663] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.304902][ T3663] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.434075][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 304.623191][ T3663] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.656513][ T3663] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.795125][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 304.850529][ T5550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.858793][ T5550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.574692][ T6179] loop4: detected capacity change from 0 to 512 [ 305.604597][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 305.647914][ T6179] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 305.779743][ T6179] EXT4-fs error (device loop4): mb_free_blocks:1865: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 305.804205][ T6179] EXT4-fs (loop4): Remounting filesystem read-only [ 305.813383][ T6179] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.545: invalid indirect mapped block 1 (level 1) [ 305.834739][ T6179] EXT4-fs (loop4): 1 truncate cleaned up [ 305.842716][ T6179] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,dioread_nolock,. Quota mode: none. [ 306.047974][ T6190] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.545: corrupted in-inode xattr [ 306.064766][ T6190] EXT4-fs (loop4): Remounting filesystem read-only [ 307.883672][ T26] audit: type=1326 audit(1728620267.114:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm="syz.4.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f05b26ff9 code=0x7ffc0000 [ 307.884903][ T26] audit: type=1326 audit(1728620267.114:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm="syz.4.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f05b26ff9 code=0x7ffc0000 [ 307.913393][ T26] audit: type=1326 audit(1728620267.114:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm="syz.4.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f05b26ff9 code=0x7ffc0000 [ 307.915187][ T26] audit: type=1326 audit(1728620267.114:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm="syz.4.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f05b26ff9 code=0x7ffc0000 [ 307.917242][ T26] audit: type=1326 audit(1728620267.114:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm="syz.4.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f05b26ff9 code=0x7ffc0000 [ 307.920063][ T26] audit: type=1326 audit(1728620267.114:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm="syz.4.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f05b26ff9 code=0x7ffc0000 [ 307.921390][ T26] audit: type=1326 audit(1728620267.114:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm="syz.4.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f05b26ff9 code=0x7ffc0000 [ 307.922195][ T26] audit: type=1326 audit(1728620267.114:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm="syz.4.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f05b26ff9 code=0x7ffc0000 [ 307.922848][ T26] audit: type=1326 audit(1728620267.114:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm="syz.4.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f05b26ff9 code=0x7ffc0000 [ 307.923876][ T26] audit: type=1326 audit(1728620267.114:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm="syz.4.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f05b26ff9 code=0x7ffc0000 [ 310.435585][ T6236] loop3: detected capacity change from 0 to 512 [ 311.188478][ T6238] netlink: 44 bytes leftover after parsing attributes in process `syz.4.561'. [ 311.218196][ T6236] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 311.278389][ T6236] EXT4-fs error (device loop3): mb_free_blocks:1865: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 311.329374][ T6236] EXT4-fs (loop3): Remounting filesystem read-only [ 311.336982][ T6236] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.560: invalid indirect mapped block 1 (level 1) [ 311.372375][ T6236] EXT4-fs (loop3): 1 truncate cleaned up [ 311.385260][ T6236] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,dioread_nolock,. Quota mode: none. [ 311.798614][ T6259] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.560: corrupted in-inode xattr [ 312.512026][ T6259] EXT4-fs (loop3): Remounting filesystem read-only [ 312.721570][ T6266] netlink: 176 bytes leftover after parsing attributes in process `syz.0.569'. [ 314.038626][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 314.326395][ T6298] loop1: detected capacity change from 0 to 256 [ 316.872272][ T6318] loop3: detected capacity change from 0 to 512 [ 316.923545][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.929857][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.267447][ T6318] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 317.337029][ T6318] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038 (0x7fffffff) [ 317.403484][ T3779] device hsr_slave_0 left promiscuous mode [ 317.433916][ T3779] device hsr_slave_1 left promiscuous mode [ 317.475327][ T6318] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.585: Directory hole found for htree leaf block 0 [ 317.583155][ T3779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.590614][ T3779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.664489][ T3779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.723109][ T3779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.763707][ T3779] device bridge_slave_1 left promiscuous mode [ 317.769922][ T3779] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.830252][ T3779] device bridge_slave_0 left promiscuous mode [ 317.875432][ T3779] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.083541][ T3779] device veth1_macvtap left promiscuous mode [ 318.089636][ T3779] device veth0_macvtap left promiscuous mode [ 318.123309][ T3779] device veth1_vlan left promiscuous mode [ 318.129153][ T3779] device veth0_vlan left promiscuous mode [ 318.180076][ T6348] loop4: detected capacity change from 0 to 256 [ 319.125440][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 319.125454][ T26] audit: type=1326 audit(1728620278.784:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6352 comm="syz.0.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062c515ff9 code=0x7ffc0000 [ 319.342117][ T6359] loop3: detected capacity change from 0 to 512 [ 319.366270][ T26] audit: type=1326 audit(1728620278.824:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6352 comm="syz.0.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062c515ff9 code=0x7ffc0000 [ 319.434357][ T6359] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 319.642796][ T26] audit: type=1326 audit(1728620278.824:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6352 comm="syz.0.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f062c515ff9 code=0x7ffc0000 [ 319.704678][ T6359] EXT4-fs error (device loop3): mb_free_blocks:1865: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 319.794646][ T26] audit: type=1326 audit(1728620278.864:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6352 comm="syz.0.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062c515ff9 code=0x7ffc0000 [ 319.830796][ T6359] EXT4-fs (loop3): Remounting filesystem read-only [ 319.877693][ T6359] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.599: invalid indirect mapped block 1 (level 1) [ 319.949662][ T6359] EXT4-fs (loop3): 1 truncate cleaned up [ 319.957414][ T6359] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,dioread_nolock,. Quota mode: none. [ 320.230180][ T26] audit: type=1326 audit(1728620279.884:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6371 comm="syz.2.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a9d10ff9 code=0x7ffc0000 [ 320.256677][ T6373] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.599: corrupted in-inode xattr [ 320.269013][ T6373] EXT4-fs (loop3): Remounting filesystem read-only [ 320.287397][ T3779] team0 (unregistering): Port device team_slave_1 removed [ 320.290287][ T26] audit: type=1326 audit(1728620279.884:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6371 comm="syz.2.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a9d10ff9 code=0x7ffc0000 [ 320.318158][ T3779] team0 (unregistering): Port device team_slave_0 removed [ 320.346871][ T3779] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.369730][ T26] audit: type=1326 audit(1728620279.884:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6371 comm="syz.2.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73a9d10ff9 code=0x7ffc0000 [ 320.398134][ T3779] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.425524][ T26] audit: type=1326 audit(1728620279.884:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6371 comm="syz.2.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a9d10ff9 code=0x7ffc0000 [ 320.487088][ T26] audit: type=1326 audit(1728620279.884:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6371 comm="syz.2.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a9d10ff9 code=0x7ffc0000 [ 320.535378][ T26] audit: type=1326 audit(1728620279.914:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6371 comm="syz.2.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73a9d10ff9 code=0x7ffc0000 [ 320.612234][ T3779] bond0 (unregistering): Released all slaves [ 320.728637][ T6377] loop3: detected capacity change from 0 to 256 [ 320.774422][ T6368] netlink: 36 bytes leftover after parsing attributes in process `syz.0.600'. [ 321.051118][ T6381] loop4: detected capacity change from 0 to 512 [ 321.121240][ T6381] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 321.143203][ T6381] EXT4-fs (loop4): Unrecognized mount option "=" or missing value [ 321.276540][ T6377] FAT-fs (loop3): Directory bread(block 64) failed [ 321.280367][ T6392] loop0: detected capacity change from 0 to 512 [ 321.334392][ T6377] FAT-fs (loop3): Directory bread(block 65) failed [ 321.383670][ T6377] FAT-fs (loop3): Directory bread(block 66) failed [ 321.411666][ T6377] FAT-fs (loop3): Directory bread(block 67) failed [ 321.423179][ T6377] FAT-fs (loop3): Directory bread(block 68) failed [ 321.431731][ T6377] FAT-fs (loop3): Directory bread(block 69) failed [ 321.525498][ T6377] FAT-fs (loop3): Directory bread(block 70) failed [ 321.561634][ T6377] FAT-fs (loop3): Directory bread(block 71) failed [ 321.599837][ T6377] FAT-fs (loop3): Directory bread(block 72) failed [ 321.606762][ T6377] FAT-fs (loop3): Directory bread(block 73) failed [ 321.652638][ T6392] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 321.800239][ T6392] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038 (0x7fffffff) [ 322.221328][ T6377] attempt to access beyond end of device [ 322.221328][ T6377] loop3: rw=2049, want=1228, limit=256 [ 322.450282][ T6407] loop4: detected capacity change from 0 to 256 [ 323.648302][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 324.400581][ T6438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.623'. [ 325.508647][ T26] kauditd_printk_skb: 28 callbacks suppressed [ 325.508662][ T26] audit: type=1326 audit(1728620285.164:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.1.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4408a07ff9 code=0x7ffc0000 [ 325.652929][ T26] audit: type=1326 audit(1728620285.164:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.1.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f4408a07ff9 code=0x7ffc0000 [ 325.792083][ T26] audit: type=1326 audit(1728620285.164:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.1.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4408a07ff9 code=0x7ffc0000 [ 325.958031][ T26] audit: type=1326 audit(1728620285.204:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6444 comm="syz.1.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4408a07ff9 code=0x7ffc0000 [ 326.327876][ T26] audit: type=1326 audit(1728620285.984:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.0.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062c515ff9 code=0x7ffc0000 [ 326.374792][ T26] audit: type=1326 audit(1728620285.984:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.0.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062c515ff9 code=0x7ffc0000 [ 326.449034][ T26] audit: type=1326 audit(1728620285.984:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.0.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f062c515ff9 code=0x7ffc0000 [ 327.035381][ T26] audit: type=1326 audit(1728620285.984:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.0.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062c515ff9 code=0x7ffc0000 [ 327.057634][ T26] audit: type=1326 audit(1728620285.984:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.0.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062c515ff9 code=0x7ffc0000 [ 327.093058][ T26] audit: type=1326 audit(1728620286.004:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.0.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f062c515ff9 code=0x7ffc0000 [ 327.385022][ T6478] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 328.269714][ T6488] loop4: detected capacity change from 0 to 512 [ 328.598447][ T6488] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 328.625743][ T6488] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038 (0x7fffffff) [ 329.029882][ T6503] loop3: detected capacity change from 0 to 512 [ 329.121211][ T6505] No such timeout policy "syz1" [ 329.332824][ T6503] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 329.756021][ T6503] EXT4-fs error (device loop3): mb_free_blocks:1865: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 329.810691][ T6503] EXT4-fs (loop3): Remounting filesystem read-only [ 329.837889][ T6503] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.644: invalid indirect mapped block 1 (level 1) [ 329.975186][ T6503] EXT4-fs (loop3): 1 truncate cleaned up [ 329.982982][ T6512] EXT4-fs error (device loop4): ext4_search_dir:1549: inode #2: block 3: comm syz.4.639: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 330.006884][ T6512] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.639: Directory hole found for htree leaf block 0 [ 330.025416][ T6503] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,dioread_nolock,. Quota mode: none. [ 330.206204][ T6513] netlink: 'syz.0.646': attribute type 4 has an invalid length. [ 330.287502][ T6513] netlink: 'syz.0.646': attribute type 4 has an invalid length. [ 330.409192][ T6515] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.644: corrupted in-inode xattr [ 330.438058][ T6515] EXT4-fs (loop3): Remounting filesystem read-only [ 330.997136][ T6523] loop3: detected capacity change from 0 to 512 [ 331.028552][ T6525] tipc: Started in network mode [ 331.044035][ T6525] tipc: Node identity , cluster identity 4711 [ 331.054311][ T6525] tipc: Failed to set node id, please configure manually [ 331.061466][ T6525] tipc: Enabling of bearer rejected, failed to enable media [ 331.111477][ T6523] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 331.659665][ T6523] EXT4-fs (loop3): 1 truncate cleaned up [ 331.772175][ T6523] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 333.151985][ T6548] loop0: detected capacity change from 0 to 512 [ 333.170926][ T6551] loop3: detected capacity change from 0 to 512 [ 333.219826][ T6552] loop1: detected capacity change from 0 to 256 [ 333.277078][ T6548] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 333.350943][ T6551] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nouid32,minixdf,,errors=continue. Quota mode: writeback. [ 333.382632][ T6552] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 196) [ 333.402373][ T6548] EXT4-fs error (device loop0): mb_free_blocks:1865: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 333.462395][ T6552] FAT-fs (loop1): Filesystem has been set read-only [ 333.469421][ T6551] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038 (0x7fffffff) [ 333.479415][ T6548] EXT4-fs (loop0): Remounting filesystem read-only [ 333.493175][ T6548] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.659: invalid indirect mapped block 1 (level 1) [ 333.543194][ T6548] EXT4-fs (loop0): 1 truncate cleaned up [ 333.548978][ T6548] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,dioread_nolock,. Quota mode: none. [ 333.644022][ T6551] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 333.813585][ T6559] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.659: corrupted in-inode xattr [ 333.841880][ T6559] EXT4-fs (loop0): Remounting filesystem read-only [ 333.984356][ T6563] loop2: detected capacity change from 0 to 128 [ 334.051893][ T5880] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 196) [ 334.149634][ T6563] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 334.450774][ T6576] xt_CT: You must specify a L4 protocol and not use inversions on it [ 334.620141][ T6580] loop4: detected capacity change from 0 to 512 [ 334.967175][ T6580] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 335.033461][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 335.033474][ T26] audit: type=1326 audit(1728620294.694:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6592 comm="syz.3.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae45c0fff9 code=0x7ffc0000 [ 335.061025][ T6580] EXT4-fs (loop4): 1 truncate cleaned up [ 335.096433][ T6589] netlink: 56 bytes leftover after parsing attributes in process `syz.1.671'. [ 335.111524][ T6580] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 335.311463][ T26] audit: type=1326 audit(1728620294.724:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6592 comm="syz.3.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae45c0fff9 code=0x7ffc0000 [ 335.351052][ T26] audit: type=1326 audit(1728620294.724:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6592 comm="syz.3.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae45c0fff9 code=0x7ffc0000 [ 335.366103][ T6601] loop0: detected capacity change from 0 to 1764 [ 335.421416][ T26] audit: type=1326 audit(1728620294.734:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6592 comm="syz.3.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae45c0fff9 code=0x7ffc0000 [ 335.522394][ T6611] loop4: detected capacity change from 0 to 512 [ 335.587696][ T6611] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 335.597014][ T26] audit: type=1326 audit(1728620294.734:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6592 comm="syz.3.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae45c0fff9 code=0x7ffc0000 [ 335.629299][ T6609] loop2: detected capacity change from 0 to 2048 [ 335.679981][ T26] audit: type=1326 audit(1728620294.744:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6592 comm="syz.3.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fae45c0fff9 code=0x7ffc0000 [ 335.732598][ T6611] EXT4-fs error (device loop4): mb_free_blocks:1865: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 335.788479][ T6611] EXT4-fs (loop4): Remounting filesystem read-only [ 335.804261][ T26] audit: type=1326 audit(1728620294.744:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6592 comm="syz.3.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae45c0fff9 code=0x7ffc0000 [ 335.841199][ T6611] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.676: invalid indirect mapped block 1 (level 1) [ 335.859212][ T6609] loop2: p1 < > p4 [ 335.898335][ T6609] loop2: p4 size 8388608 extends beyond EOD, truncated [ 335.905680][ T6611] EXT4-fs (loop4): 1 truncate cleaned up [ 335.950104][ T6611] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,dioread_nolock,. Quota mode: none. [ 336.166681][ T6611] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.676: corrupted in-inode xattr [ 336.179059][ T6611] EXT4-fs (loop4): Remounting filesystem read-only [ 336.258321][ T6613] xt_hashlimit: max too large, truncated to 1048576 [ 336.331897][ T3706] udevd[3706]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 336.364113][ T6613] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 336.624410][ T3706] udevd[3706]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 336.625593][ T3562] udevd[3562]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 337.394711][ T3562] udevd[3562]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 337.448984][ T26] audit: type=1326 audit(1728620297.104:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6638 comm="syz.1.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4408a07ff9 code=0x7ffc0000 [ 337.602841][ T26] audit: type=1326 audit(1728620297.104:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6638 comm="syz.1.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4408a07ff9 code=0x7ffc0000 [ 337.699007][ T26] audit: type=1326 audit(1728620297.144:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6638 comm="syz.1.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f4408a07ff9 code=0x7ffc0000 [ 338.386543][ T6654] loop1: detected capacity change from 0 to 128 [ 338.664030][ T6660] netlink: 'syz.2.692': attribute type 4 has an invalid length. [ 338.759648][ T6654] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 338.837698][ T6654] ext4 filesystem being mounted at /37/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 339.242221][ T6654] syz.1.690[6654] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 339.242324][ T6654] syz.1.690[6654] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 340.595873][ T6695] loop2: detected capacity change from 0 to 512 [ 340.729541][ T6693] capability: warning: `syz.3.700' uses deprecated v2 capabilities in a way that may be insecure [ 340.823731][ T6695] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 340.831106][ T6695] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 340.887540][ T6705] loop0: detected capacity change from 0 to 512 [ 340.902461][ T6695] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 340.913487][ T6695] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 340.932928][ T6695] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 340.942668][ T6695] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 340.951880][ T6695] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,noinit_itable,nomblk_io_submit,noblock_validity,data_err=abort,jqfmt=vfsold,jqfmt=vfsv0,barrier=0x000000000000d95a,debug,,errors=continue. Quota mode: none. [ 341.011439][ T6705] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 341.041912][ T6695] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: none. [ 341.083802][ T6695] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 341.296457][ T6705] EXT4-fs (loop0): 1 truncate cleaned up [ 341.302274][ T6705] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 341.600418][ T6727] loop2: detected capacity change from 0 to 512 [ 342.240507][ T6727] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 342.357757][ T6727] EXT4-fs error (device loop2): mb_free_blocks:1865: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 342.441793][ T6727] EXT4-fs (loop2): Remounting filesystem read-only [ 342.480901][ T6727] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.704: invalid indirect mapped block 1 (level 1) [ 342.489828][ T6740] loop0: detected capacity change from 0 to 4096 [ 342.504203][ T6744] netlink: 16 bytes leftover after parsing attributes in process `syz.1.708'. [ 342.566188][ T6740] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 342.587955][ T6727] EXT4-fs (loop2): 1 truncate cleaned up [ 342.598231][ T6740] netlink: 264 bytes leftover after parsing attributes in process `syz.0.706'. [ 342.609405][ T6740] ------------[ cut here ]------------ [ 342.616650][ T6740] WARNING: CPU: 1 PID: 6740 at net/wireless/core.h:220 wdev_lock+0x96/0xc0 [ 342.625488][ T6740] Modules linked in: [ 342.629405][ T6740] CPU: 1 PID: 6740 Comm: syz.0.706 Not tainted 5.15.167-syzkaller #0 [ 342.637646][ T6740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 342.647873][ T6740] RIP: 0010:wdev_lock+0x96/0xc0 [ 342.653593][ T6727] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,dioread_nolock,. Quota mode: none. [ 342.671483][ T6740] Code: a4 d2 f7 85 ed 74 1e e8 f8 a0 d2 f7 eb 05 e8 f1 a0 d2 f7 48 83 c3 48 48 89 df 31 f6 5b 41 5e 5d e9 9f 21 8f 00 e8 da a0 d2 f7 <0f> 0b eb e5 48 c7 c1 44 94 e9 8d 80 e1 07 80 c1 03 38 c1 0f 8c 7b [ 342.712356][ T6740] RSP: 0018:ffffc90003026ee0 EFLAGS: 00010287 [ 342.730447][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 342.730460][ T26] audit: type=1326 audit(1728620302.384:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6748 comm="syz.1.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4408a07ff9 code=0x7ffc0000 [ 342.731146][ T6740] RAX: ffffffff89adb996 RBX: ffff888077d68c90 RCX: 0000000000040000 [ 342.745471][ T26] audit: type=1326 audit(1728620302.404:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6748 comm="syz.1.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4408a07ff9 code=0x7ffc0000 [ 342.766181][ T6740] RDX: ffffc90003be9000 RSI: 0000000000005755 RDI: 0000000000005756 [ 342.805923][ T26] audit: type=1326 audit(1728620302.404:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6748 comm="syz.1.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4408a07ff9 code=0x7ffc0000 [ 342.829043][ T6740] RBP: 0000000000000000 R08: ffffffff89adb96f R09: ffffed100edfb412 [ 342.838172][ T26] audit: type=1326 audit(1728620302.404:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6748 comm="syz.1.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4408a07ff9 code=0x7ffc0000 [ 342.866902][ T6750] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz.2.704: corrupted in-inode xattr [ 342.880423][ T6740] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888027d5fb40 [ 342.885883][ T6750] EXT4-fs (loop2): Remounting filesystem read-only [ 342.895065][ T6740] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffff888076fda014 [ 342.899902][ T26] audit: type=1326 audit(1728620302.434:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6748 comm="syz.1.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4408a07ff9 code=0x7ffc0000 [ 342.925606][ T26] audit: type=1326 audit(1728620302.434:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6748 comm="syz.1.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4408a07ff9 code=0x7ffc0000 [ 342.931610][ T6740] FS: 00007f062a98e6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 342.947827][ T26] audit: type=1326 audit(1728620302.444:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6748 comm="syz.1.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4408a07ff9 code=0x7ffc0000 [ 342.947860][ T26] audit: type=1326 audit(1728620302.444:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6748 comm="syz.1.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f4408a07ff9 code=0x7ffc0000 [ 342.947886][ T26] audit: type=1326 audit(1728620302.444:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6748 comm="syz.1.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4408a07ff9 code=0x7ffc0000 [ 342.947915][ T26] audit: type=1326 audit(1728620302.454:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6748 comm="syz.1.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f4408a07ff9 code=0x7ffc0000 [ 343.053425][ T6740] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 343.061539][ T6740] CR2: 000000110c2aef84 CR3: 0000000063625000 CR4: 00000000003506f0 [ 343.069893][ T6740] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 343.084189][ T6740] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 343.092161][ T6740] Call Trace: [ 343.097468][ T6740] [ 343.100395][ T6740] ? __warn+0x15b/0x300 [ 343.106017][ T6740] ? wdev_lock+0x96/0xc0 [ 343.110253][ T6740] ? report_bug+0x1b7/0x2e0 [ 343.133329][ T6740] ? handle_bug+0x3d/0x70 [ 343.137685][ T6740] ? exc_invalid_op+0x16/0x40 [ 343.142371][ T6740] ? asm_exc_invalid_op+0x16/0x20 [ 343.147592][ T6740] ? wdev_lock+0x6f/0xc0 [ 343.162046][ T6740] ? wdev_lock+0x96/0xc0 [ 343.181468][ T6740] ? wdev_lock+0x96/0xc0 [ 343.185811][ T6740] nl80211_send_iface+0x763/0xe10 [ 343.190850][ T6740] ? nl80211_notify_iface+0x160/0x160 [ 343.196714][ T6740] ? slab_free_freelist_hook+0xdd/0x160 [ 343.202273][ T6740] ? nl80211_dump_wiphy_parse+0x19c/0x580 [ 343.208352][ T6740] ? kfree+0xf1/0x270 [ 343.212352][ T6740] ? nl80211_dump_wiphy_parse+0x19c/0x580 [ 343.218095][ T6740] ? nl80211_dump_wiphy_done+0x40/0x40 [ 343.223633][ T6740] nl80211_dump_interface+0x490/0x6a0 [ 343.229014][ T6740] ? nl80211_get_interface+0x1f0/0x1f0 [ 343.234497][ T6740] ? __alloc_skb+0x397/0x590 [ 343.239101][ T6740] netlink_dump+0x5a4/0xca0 [ 343.243663][ T6740] ? netlink_lookup+0x1d0/0x1d0 [ 343.248518][ T6740] ? genl_start+0x144/0x490 [ 343.253059][ T6740] ? genl_start+0x2e1/0x490 [ 343.257576][ T6740] __netlink_dump_start+0x50f/0x6d0 [ 343.262789][ T6740] genl_rcv_msg+0xd89/0x14a0 [ 343.267432][ T6740] ? genl_bind+0x420/0x420 [ 343.271850][ T6740] ? local_bh_enable+0x5/0x20 [ 343.278199][ T6740] ? _local_bh_enable+0xa0/0xa0 [ 343.287866][ T6740] ? __lock_acquire+0x1295/0x1ff0 [ 343.292886][ T6740] ? genl_rcv_msg+0x14a0/0x14a0 [ 343.297869][ T6740] ? nl80211_get_interface+0x1f0/0x1f0 [ 343.303504][ T6740] ? genl_lock_done+0xd0/0xd0 [ 343.308197][ T6740] ? nl80211_set_wiphy+0x28c0/0x28c0 [ 343.318487][ T6740] ? nl80211_get_interface+0x1f0/0x1f0 [ 343.324107][ T6740] netlink_rcv_skb+0x1cf/0x410 [ 343.328880][ T6740] ? genl_bind+0x420/0x420 [ 343.333331][ T6740] ? netlink_ack+0xb10/0xb10 [ 343.337943][ T6740] ? down_read+0x1b3/0x2e0 [ 343.342361][ T6740] ? genl_rcv+0x9/0x40 [ 343.346476][ T6740] genl_rcv+0x24/0x40 [ 343.350468][ T6740] netlink_unicast+0x7b6/0x980 [ 343.356558][ T6740] ? netlink_detachskb+0x90/0x90 [ 343.361519][ T6740] ? __virt_addr_valid+0x3bb/0x460 [ 343.366721][ T6740] ? 0xffffffff81000000 [ 343.370879][ T6740] ? __check_object_size+0x300/0x410 [ 343.376366][ T6740] ? bpf_lsm_netlink_send+0x5/0x10 [ 343.381500][ T6740] netlink_sendmsg+0xa30/0xd60 [ 343.388792][ T6740] ? netlink_getsockopt+0x5b0/0x5b0 [ 343.394372][ T6740] ? plist_check_list+0x20d/0x220 [ 343.399418][ T6740] ? aa_sock_msg_perm+0x91/0x150 [ 343.404442][ T6740] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 343.409729][ T6740] ? security_socket_sendmsg+0x7d/0xa0 [ 343.415283][ T6740] ? netlink_getsockopt+0x5b0/0x5b0 [ 343.420490][ T6740] ____sys_sendmsg+0x59e/0x8f0 [ 343.425321][ T6740] ? iovec_from_user+0x300/0x390 [ 343.430266][ T6740] ? __sys_sendmsg_sock+0x30/0x30 [ 343.435362][ T6740] ___sys_sendmsg+0x252/0x2e0 [ 343.440055][ T6740] ? __sys_sendmsg+0x260/0x260 [ 343.444917][ T6740] ? __fdget+0x191/0x220 [ 343.449172][ T6740] __se_sys_sendmsg+0x19a/0x260 [ 343.454252][ T6740] ? __x64_sys_sendmsg+0x80/0x80 [ 343.459221][ T6740] ? syscall_enter_from_user_mode+0x2e/0x240 [ 343.465308][ T6740] ? lockdep_hardirqs_on+0x94/0x130 [ 343.470523][ T6740] ? syscall_enter_from_user_mode+0x2e/0x240 [ 343.476609][ T6740] do_syscall_64+0x3b/0xb0 [ 343.481032][ T6740] ? clear_bhb_loop+0x15/0x70 [ 343.486446][ T6740] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 343.492360][ T6740] RIP: 0033:0x7f062c515ff9 [ 343.497933][ T6740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.517628][ T6740] RSP: 002b:00007f062a98e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.526191][ T6740] RAX: ffffffffffffffda RBX: 00007f062c6cdf80 RCX: 00007f062c515ff9 [ 343.534238][ T6740] RDX: 0000000000000000 RSI: 0000000020000c40 RDI: 0000000000000008 [ 343.542209][ T6740] RBP: 00007f062c588296 R08: 0000000000000000 R09: 0000000000000000 [ 343.550210][ T6740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.558233][ T6740] R13: 0000000000000000 R14: 00007f062c6cdf80 R15: 00007ffe96b877a8 [ 343.566271][ T6740] [ 343.569305][ T6740] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 343.576578][ T6740] CPU: 0 PID: 6740 Comm: syz.0.706 Not tainted 5.15.167-syzkaller #0 [ 343.584621][ T6740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 343.594659][ T6740] Call Trace: [ 343.597923][ T6740] [ 343.600835][ T6740] dump_stack_lvl+0x1e3/0x2d0 [ 343.605502][ T6740] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 343.611133][ T6740] ? panic+0x860/0x860 [ 343.615187][ T6740] ? rdev_set_ap_chanwidth+0x260/0x260 [ 343.620630][ T6740] ? rdev_set_ap_chanwidth+0x260/0x260 [ 343.626073][ T6740] panic+0x318/0x860 [ 343.629981][ T6740] ? __warn+0x16a/0x300 [ 343.634134][ T6740] ? fb_is_primary_device+0xd0/0xd0 [ 343.639321][ T6740] ? wdev_lock+0x96/0xc0 [ 343.643546][ T6740] __warn+0x2b2/0x300 [ 343.647512][ T6740] ? wdev_lock+0x96/0xc0 [ 343.651741][ T6740] report_bug+0x1b7/0x2e0 [ 343.656054][ T6740] handle_bug+0x3d/0x70 [ 343.660190][ T6740] exc_invalid_op+0x16/0x40 [ 343.664675][ T6740] asm_exc_invalid_op+0x16/0x20 [ 343.669508][ T6740] RIP: 0010:wdev_lock+0x96/0xc0 [ 343.674353][ T6740] Code: a4 d2 f7 85 ed 74 1e e8 f8 a0 d2 f7 eb 05 e8 f1 a0 d2 f7 48 83 c3 48 48 89 df 31 f6 5b 41 5e 5d e9 9f 21 8f 00 e8 da a0 d2 f7 <0f> 0b eb e5 48 c7 c1 44 94 e9 8d 80 e1 07 80 c1 03 38 c1 0f 8c 7b [ 343.693958][ T6740] RSP: 0018:ffffc90003026ee0 EFLAGS: 00010287 [ 343.700006][ T6740] RAX: ffffffff89adb996 RBX: ffff888077d68c90 RCX: 0000000000040000 [ 343.707958][ T6740] RDX: ffffc90003be9000 RSI: 0000000000005755 RDI: 0000000000005756 [ 343.715914][ T6740] RBP: 0000000000000000 R08: ffffffff89adb96f R09: ffffed100edfb412 [ 343.723872][ T6740] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888027d5fb40 [ 343.731843][ T6740] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffff888076fda014 [ 343.739800][ T6740] ? wdev_lock+0x6f/0xc0 [ 343.744025][ T6740] ? wdev_lock+0x96/0xc0 [ 343.748259][ T6740] nl80211_send_iface+0x763/0xe10 [ 343.753272][ T6740] ? nl80211_notify_iface+0x160/0x160 [ 343.758627][ T6740] ? slab_free_freelist_hook+0xdd/0x160 [ 343.764157][ T6740] ? nl80211_dump_wiphy_parse+0x19c/0x580 [ 343.769879][ T6740] ? kfree+0xf1/0x270 [ 343.773855][ T6740] ? nl80211_dump_wiphy_parse+0x19c/0x580 [ 343.779581][ T6740] ? nl80211_dump_wiphy_done+0x40/0x40 [ 343.785048][ T6740] nl80211_dump_interface+0x490/0x6a0 [ 343.790411][ T6740] ? nl80211_get_interface+0x1f0/0x1f0 [ 343.795856][ T6740] ? __alloc_skb+0x397/0x590 [ 343.800542][ T6740] netlink_dump+0x5a4/0xca0 [ 343.805059][ T6740] ? netlink_lookup+0x1d0/0x1d0 [ 343.809887][ T6740] ? genl_start+0x144/0x490 [ 343.814376][ T6740] ? genl_start+0x2e1/0x490 [ 343.818864][ T6740] __netlink_dump_start+0x50f/0x6d0 [ 343.824064][ T6740] genl_rcv_msg+0xd89/0x14a0 [ 343.828673][ T6740] ? genl_bind+0x420/0x420 [ 343.833080][ T6740] ? local_bh_enable+0x5/0x20 [ 343.837736][ T6740] ? _local_bh_enable+0xa0/0xa0 [ 343.842579][ T6740] ? __lock_acquire+0x1295/0x1ff0 [ 343.847590][ T6740] ? genl_rcv_msg+0x14a0/0x14a0 [ 343.852445][ T6740] ? nl80211_get_interface+0x1f0/0x1f0 [ 343.857888][ T6740] ? genl_lock_done+0xd0/0xd0 [ 343.862549][ T6740] ? nl80211_set_wiphy+0x28c0/0x28c0 [ 343.867837][ T6740] ? nl80211_get_interface+0x1f0/0x1f0 [ 343.873295][ T6740] netlink_rcv_skb+0x1cf/0x410 [ 343.878071][ T6740] ? genl_bind+0x420/0x420 [ 343.882497][ T6740] ? netlink_ack+0xb10/0xb10 [ 343.887085][ T6740] ? down_read+0x1b3/0x2e0 [ 343.891483][ T6740] ? genl_rcv+0x9/0x40 [ 343.895546][ T6740] genl_rcv+0x24/0x40 [ 343.899537][ T6740] netlink_unicast+0x7b6/0x980 [ 343.904291][ T6740] ? netlink_detachskb+0x90/0x90 [ 343.909212][ T6740] ? __virt_addr_valid+0x3bb/0x460 [ 343.914304][ T6740] ? 0xffffffff81000000 [ 343.918439][ T6740] ? __check_object_size+0x300/0x410 [ 343.923710][ T6740] ? bpf_lsm_netlink_send+0x5/0x10 [ 343.928832][ T6740] netlink_sendmsg+0xa30/0xd60 [ 343.933608][ T6740] ? netlink_getsockopt+0x5b0/0x5b0 [ 343.938789][ T6740] ? plist_check_list+0x20d/0x220 [ 343.943794][ T6740] ? aa_sock_msg_perm+0x91/0x150 [ 343.948711][ T6740] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 343.953982][ T6740] ? security_socket_sendmsg+0x7d/0xa0 [ 343.959428][ T6740] ? netlink_getsockopt+0x5b0/0x5b0 [ 343.964608][ T6740] ____sys_sendmsg+0x59e/0x8f0 [ 343.969355][ T6740] ? iovec_from_user+0x300/0x390 [ 343.974290][ T6740] ? __sys_sendmsg_sock+0x30/0x30 [ 343.979325][ T6740] ___sys_sendmsg+0x252/0x2e0 [ 343.983988][ T6740] ? __sys_sendmsg+0x260/0x260 [ 343.988754][ T6740] ? __fdget+0x191/0x220 [ 343.992988][ T6740] __se_sys_sendmsg+0x19a/0x260 [ 343.997848][ T6740] ? __x64_sys_sendmsg+0x80/0x80 [ 344.002793][ T6740] ? syscall_enter_from_user_mode+0x2e/0x240 [ 344.008764][ T6740] ? lockdep_hardirqs_on+0x94/0x130 [ 344.013957][ T6740] ? syscall_enter_from_user_mode+0x2e/0x240 [ 344.019925][ T6740] do_syscall_64+0x3b/0xb0 [ 344.024330][ T6740] ? clear_bhb_loop+0x15/0x70 [ 344.029005][ T6740] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 344.034882][ T6740] RIP: 0033:0x7f062c515ff9 [ 344.039279][ T6740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.058874][ T6740] RSP: 002b:00007f062a98e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.067291][ T6740] RAX: ffffffffffffffda RBX: 00007f062c6cdf80 RCX: 00007f062c515ff9 [ 344.075255][ T6740] RDX: 0000000000000000 RSI: 0000000020000c40 RDI: 0000000000000008 [ 344.083243][ T6740] RBP: 00007f062c588296 R08: 0000000000000000 R09: 0000000000000000 [ 344.091215][ T6740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.099165][ T6740] R13: 0000000000000000 R14: 00007f062c6cdf80 R15: 00007ffe96b877a8 [ 344.107143][ T6740] [ 344.110383][ T6740] Kernel Offset: disabled [ 344.114952][ T6740] Rebooting in 86400 seconds..