last executing test programs: 24.343072919s ago: executing program 4 (id=766): openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x671, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0) write$rfkill(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, 0x0) 21.731408629s ago: executing program 4 (id=768): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002400010025bd70e9ffff070000000000060004"], 0x1c}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@private1}}}, 0xb8}}, 0x0) r3 = accept(r0, &(0x7f0000000380)=@l2tp, &(0x7f0000000400)=0x80) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={0x1, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b0406002600020002004788aa96a13bb10000000000894f0020", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'syztnl2\x00', 0x0, 0x2f, 0x7, 0x4, 0xda, 0x40, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x8, 0x7, 0x1, 0x7fffffff}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000700)=0x0, &(0x7f0000000740)=0x4) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000880)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x12000300}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xbc, r4, 0x739cd67458b34173, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_LINKINFO_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_PORT={0x5}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x3}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x8}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xf}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x22}, @ETHTOOL_A_LINKINFO_PORT={0x5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4008001}, 0x4c050) syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x200400, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'], 0x1, 0x21f, &(0x7f0000000000)="$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") 20.431296359s ago: executing program 4 (id=777): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) r3 = gettid() sigaltstack(&(0x7f0000000080)={&(0x7f0000001200)=""/4096, 0x0, 0x1000}, 0x0) rt_sigqueueinfo(r3, 0x21, &(0x7f0000000000)) 18.449563631s ago: executing program 4 (id=779): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESDEC=0x0, @ANYBLOB=',discard,\x00', @ANYBLOB="3a8d75a267b001234a1e919d26dfdd0d8b316510e9c9cf606c6db6505304ee2649c88f03f9ef98bcebc5d721a7081b3509e543147eec5a0fa6d6eb57eed4197249efe6fa10323b6cf959897b3f1908c82c14974d31b0d080f8c86c196c0ee8eb707a73d201bbe15a02a37118aa1d4aaa4d2484b05dbb73e44387f620f46a3a2e06436e6296b05bd07717accf667e0331c0f323a7529f6b471ec30340347d3f405257c8bad57ddef290ea1d376a20", @ANYRESOCT=0x0, @ANYRES8, @ANYBLOB="0002001100000000303030303030303030303030303030303030303135322c796f636884c178f94be4ee34617273657439697300926f38", @ANYBLOB="51060c4f1adb6e795b70e7edcdc5cd30e197bb9cceacee351e08a6e2ee4650101fb28229b16aecf828a55c8aa0efd840e40fef6612e7b389eb304c41e39360e1f5cb6f78bd7100bd30bbd42aa24b2dc9171d068e92ac848e", @ANYRES64, @ANYRESDEC], 0x81, 0x151a, &(0x7f0000002a80)="$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") creat(&(0x7f00000000c0)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x201000, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x202, &(0x7f00000001c0)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000}]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) rename(&(0x7f0000001800)='./file0\x00', &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 17.362685151s ago: executing program 4 (id=785): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00'}) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b15, &(0x7f0000000500)={'wlan1\x00'}) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x410000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000b2eac720d57e394f6594301dee2d0b1f3cfceea846ad0a8a0b046e6d011943f6e5fc068824c336425fd7bf9e8bbe77e9083500f5ffffff0000000000000000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fedbdf250100000005000400010000080900030073797a32000000000900010073797a32000000000900010073797a300000000014000200677265746170300000000000000000000900010073797a300000000005000400010000000900030073797a3200000000"], 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x20004800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x50, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x4, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="940000001100010026bd7000fcdbdf2500000000", @ANYRES32=r6, @ANYBLOB="4068000a43c6037f7300"/26, @ANYRES32=0x0, @ANYBLOB="080023000100000008000d00fffbffff140003006d6163736563300000000000000000001400030076657468315f766972745f776966690024001280090001007866726d000000001400028008000200030000000800010004000000"], 0x94}, 0x1, 0x0, 0x0, 0x4091}, 0x20000000) 15.952862081s ago: executing program 4 (id=791): setreuid(0xee01, 0x0) getresuid(&(0x7f0000000300)=0x0, &(0x7f00000003c0), &(0x7f0000000400)=0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x1}]}]}, {0x0, [0x0]}}, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getresgid(0x0, &(0x7f0000000580), 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1108024, &(0x7f0000000840)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',cache=fscache,access=', @ANYRESDEC=r0, @ANYBLOB, @ANYBLOB]) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "8c0110dc01000000000000000100"}) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x3) setreuid(r1, r0) mount$9p_fd(0x20000000, &(0x7f0000000380)='.\x00', 0x0, 0x2000, 0x0) setresuid(0x0, 0x0, r0) setreuid(0xffffffffffffffff, r0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) 12.827384399s ago: executing program 2 (id=799): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000001300), 0x0, 0x0, &(0x7f0000000380)={0xa, 0x0, 0x0, @private1}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="dd", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x77, &(0x7f0000000080), 0x14) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) write$binfmt_aout(r3, &(0x7f00000000c0), 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0) 12.534346075s ago: executing program 2 (id=801): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0), 0x0, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{}]}}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='signal_generate\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000003440)=@raw={'raw\x00', 0xe501, 0x3, 0x220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x188, 0x230, 0x230, 0x188, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@addrtype={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@AUDIT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280) rt_sigaction(0x19, &(0x7f0000000340)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x7ff, 0x100}}) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2100) 12.246630013s ago: executing program 2 (id=803): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r2, 0x89e2) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) renameat2(r0, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000200)='./bus/file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x7fff7fc, 0x4002}) 9.967994702s ago: executing program 2 (id=808): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x2000040, &(0x7f0000000500)=ANY=[@ANYBLOB='gid=forget,umask=00000000000000000000003,gid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=', @ANYRESDEC=0x0, @ANYBLOB="2c6769643d69676e6f72652c696f636861727365743d6370313235312c706172746974696f6e3d30303030303030303030303030303030303030372c616e63686f723d30303030303030303030303030303030303030312c6d6f64653d30303030303030303030303030303030303030303030332c696f636861727365743d6370313235352c00f30ef2d4a32024f0d43f3aaf7dd27331350bc927b39752d1449bce0154b0d2e76b111883a15d16990746ded67959c66aa76e7f"], 0xfe, 0xc2d, &(0x7f0000000f40)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$msdos(&(0x7f00000011c0), &(0x7f0000001200)='./file0\x00', 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB='\x00'], 0x1, 0x11aa, &(0x7f0000001280)="$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") chdir(&(0x7f0000000140)='./bus\x00') fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mknod(&(0x7f0000004c00)='./bus\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 8.309498804s ago: executing program 2 (id=817): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x4508, &(0x7f0000000300), 0xe, 0x4f8, &(0x7f0000000ac0)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000001480)=ANY=[@ANYBLOB="85000000610000005400000000000000950000000000000015c5d2d381407590995e979c8ab80e29de2978c8f52cc29c2bff0766e0614b449dba3c3e908576de010eb930ccc2"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0xe40, 0x0, &(0x7f00000000c0)="5cdd3086ddffff6633c9bbac88a8862608dffd00139fb7a884bdfc14f4870800", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = open(&(0x7f0000000140)='./bus\x00', 0x14937e, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) recvmmsg(r3, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x41, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r4, 0x2007ffb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffe, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"}) io_submit(0x0, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 8.186643046s ago: executing program 1 (id=819): readv(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) 7.218533615s ago: executing program 1 (id=822): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000080007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000007d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='ext4_writepages\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r5, &(0x7f0000000000), 0x9) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001c40)=@newtaction={0x68, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x3, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040805}, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000040)=0x40, 0x4) 6.413158589s ago: executing program 0 (id=823): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) sendto$l2tp(r0, &(0x7f0000000040)="e5786a0d000000000000c83b", 0x5d, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x7d, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/31, 0x10}}], 0x1, 0x0, 0x0) 6.322014827s ago: executing program 3 (id=824): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000014c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 4.903046228s ago: executing program 0 (id=825): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='U', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x1) read$FUSE(r1, &(0x7f00000002c0)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) quotactl_fd$Q_SETINFO(r2, 0xffffffff80000600, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000e40800010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_DREG={0x8}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) memfd_create(&(0x7f0000001140)='!^*}.\x00', 0x1) mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x0, 0x0, &(0x7f0000000040)) 4.902699649s ago: executing program 3 (id=826): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x40}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000000500e50000070000001ffeff0001000003f1dc7f7c6e870200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x1000000000000000) 4.760358441s ago: executing program 0 (id=827): syz_mount_image$ext4(&(0x7f00000002c0)='ext3\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, &(0x7f0000000380)={[], [{@fsuuid={'fsuuid', 0x3d, {[0x39, 0x64, 0x32, 0x39, 0x65, 0x31, 0x31, 0x31], 0x2d, [0x61, 0x65, 0x61, 0x61], 0x2d, [0x36, 0x35, 0x39, 0x39], 0x2d, [0x37, 0x37, 0x38, 0x63], 0x2d, [0x32, 0x38, 0x62, 0x55, 0x6d, 0x36, 0x31, 0x61]}}}, {@smackfsroot={'smackfsroot', 0x3d, 'GPL\x00'}}, {@audit}]}, 0xfa, 0x244, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) semget$private(0x0, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='sys_enter\x00', r3}, 0x10) getcwd(&(0x7f00000002c0)=""/116, 0x74) socket$packet(0x11, 0x3, 0x300) 3.985444203s ago: executing program 1 (id=828): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) getpgid(0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) chdir(0x0) listen(r2, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x0) r3 = accept4$unix(r2, 0x0, 0x0, 0x0) recvfrom$unix(r3, &(0x7f0000000140)=""/248, 0x40000, 0x0, 0x0, 0x0) 3.936429097s ago: executing program 3 (id=829): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = socket(0x2a, 0x2, 0x0) sendto(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)=@qipcrtr, 0x80) read$qrtrtun(r0, 0x0, 0x0) dup2(r0, r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x52}, [@ldst={0x0, 0x0, 0x2}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x0) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) openat$cgroup(r3, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKIOMIN(r4, 0x1278, &(0x7f0000000040)) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) 3.676580101s ago: executing program 2 (id=830): openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0xff39, 0x3) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x800000000000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2.861670386s ago: executing program 1 (id=832): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000004c0)={[{@jqfmt_vfsv1}, {@mb_optimize_scan}, {@noinit_itable}, {@norecovery}, {@noload}, {@lazytime}, {@usrjquota}, {@bsdgroups}, {@dioread_lock}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000001540), 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r3, 0x1, 0x0, 0x0, {{0x38}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}]}, 0x28}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r1, 0xc1004111, &(0x7f0000001580)={0x0, [], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2578}]}) 2.859530877s ago: executing program 3 (id=833): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) dup3(r1, r0, 0x0) r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = socket(0x1, 0x3, 0x0) recvmsg$inet_nvme(r3, &(0x7f00000014c0)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}, 0x0) close(r4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x5450, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) ioctl$KDDISABIO(r2, 0x5451) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x8902, 0x0) write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) rt_sigprocmask(0x3, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) close(0xffffffffffffffff) 2.810054691s ago: executing program 0 (id=834): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x14, 0x800, 0x1, 0xfffff801, 0x1210, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001300), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000080)={0x0, 0x0, "b2d8f8e77ab2332d21644baf6c907902f9f25f7213c53e80ab517c412c400ec87403532622fe60e1c4d2be1b49d489a406c27759826b565edfddf3ba0231556e5f2a88065c0a960381094ba68dd5dcea98550919fecdafef292fd10b2985aca4426670e0ec35a8c9cb9aad285b776a4541e51908b33655fbb0c03dd0784308c26fed170bc32bfc57409a166228c30fecd7d40d26bbf2b764d350b150b22492789aad27573f2c37e0f5e36cee1027916b381ae45f64805d537d181a56388fba6be8c58aff329074f9ed83d1e6ea2a9e4ee26a66b620166cbb26853926a8be715dc8bd1ec8b6b75144fc6a4fd0b6663cb7006798412710e5deb41e1d03955498e0"}) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000004c0)={0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0}) 2.06028485s ago: executing program 0 (id=835): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000001700)=0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x3a, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.999177976s ago: executing program 3 (id=836): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x8, 0x0, 0x0, 0x400000, {{0x19, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x7, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@dev}, {@dev={0xac, 0x14, 0x14, 0x31}}, {@rand_addr=0xfffffffc}, {@broadcast, 0x52b3}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@multicast2, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.851703529s ago: executing program 1 (id=837): socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r3, 0x101, 0xa, &(0x7f0000000000), &(0x7f0000000080)=0x4) 1.173908862s ago: executing program 3 (id=838): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0x1014800, &(0x7f0000001880)=ANY=[@ANYRES16=0x0, @ANYBLOB="f9cba1923b054572145c2e67b885838cb353bc831573228abfb498e7f1fd8103aceb50858482ddb69dd9112c10e3d66c32cab6609b02bf9f07615fb29a27d49a24de56c84013a0c47945492852bdc34e69ddc25ffb9f4d1dd1af98558daa9974edd7d1abd46ee9d69da503b22758321d5031603da076b28cfc7d9477af38586cb482ad3a187ab4c7b916fad188280cee", @ANYRESOCT=0x0, @ANYRES8, @ANYRES8=0x0, @ANYRES64, @ANYRESOCT, @ANYRES64, @ANYBLOB="7540c430e8d8cb55e0610f65aa69c7eb0e142a7517e581064ff06e9ce239e0442bbf8cf256a108d756ee68844798521e40cb7b7963cd4041f65dc013adbd4ccf55477d30e5c56ff7db509a5cef7b7db994b9626f3e1e66ff309fa925885a36b49f6a215f7990ea209bdf87f38e08ed924527c0e45f594c78d32118cd03202a8875"], 0x1, 0xda6, &(0x7f0000003c80)="$eJzs3ctvXFf9APBzx544r/7iNO4vJoTEJJSGR+wmtSg7XCksKqQKKX9BFdKS4pZHwqJVKiVZsCVS1T+AqmtY8MyiUtRVUDcg/oGqKzahqlQgQmqNbJ8zHn8zw51xbI/H8/lId87c+z33nnPmcefOfZ0EjKzGyuP8/HSV0tt33rrw4OT4v5ennGzlmFl5HM9jCymlZmu+lCbD8hYmVtPPPrl+qT39PKdVOp+qVLWmpxfut+Y9kFK6kWbS3TSZLn589PYrHzy/+N6Rm0cuvHnm3ta0HgAARsuD77370z8/9d3rh//zmxMLaaI1vWyfL+Txg3m7f6FaHc9J639A1ZZWbePFnpBvPA+NkG+sQ772cpoh33iX8veE5Ta75JuoKX+sbVqndsMwW/sfXzVm1403GrOzq//Jl304tqeafe3K4ktXB1RRYNN9ejLv4jMYDCM3LB0a9BoIYFU8bviQG3HPwqNpLW28t/LvP9foPD9sgu3+/Ct/uMp/96Y1Dptnt36aSrvK9+hgHo/HEcbDfP1+/8vy4vGIZo/17HYcYViOL3Sr59g212OjutU/fi52qy/ltLwOJ0K8/fsT39NheY+Bzh7Y/28wjOywNOgVELBjxfPmlrISj+f1xfhETXxvTXxfTXx/TfxATRxG2W+v/TLdrtb+58f/9P3uDyv72R7L6f/1WZ+4P7Lf8uN5v/161PLj+cSwo5351/FPf373L/H8/8/D+f+n82/pZF5BlP2Fcb9669z/cGFwo0u+x0N1HuuQf+X51Pp81dTaclLbeuahekyvn+9Qt3zH1+ebDPn2522RvaG+cftkf5ivbH+U9Wp5vcZDe5uhHXtCPco7czine0N7DndrV9iRvSfka+bhSGjXVGjXE2G+/w/tqqbXtyvuPy/1ORqmx+MkJV942x76XYrvRbwu41ROb+X0nZy+n9OPOpQ7isrnsdv5/+XzOZ2a1UtXFi8/ncfL5/TeWHNiefq5ba438Oh6vf5nOq2//udga3qz0b5eOLQ2vWpfL0yG6ee7TH8mj5ffsx+O7VuZPnvpx4s/2OzGw4i7+vobP3pxcfHyzzzxxBNPWk/+x0rj1zMXr23jOgrYGnPXXv3J3NXX3zh75dUXX7788uXXzj397W898+yz83MrW/Vz7dv2wO6y9qM/6JoAAAAAAAAAAAAAPav2dZ6c07r725brycv16fH6eIZDed/Kp6Hcx6Bc/9ntvi7l+s3D21BHNt92XE406DYCnf3D/X8NhpEdlpbcxR/YGQbd/1+572FJD5792+HloWS7/9z69WW8fyE8ip3e/5zyd1f/f63+r3pe/4UesyY3Vu7vHuz7a1ux6Viv5cf2l/vATvVX/u9z+aU1T6beyl/6VSg/3qi0R38I5e/vsfyH2n98Y+X/MZdfXrYzp3stf7XGVWN9PeJ+43IfwLjfuPhTaH+5t18/7T91a+Mdtd3J5cMoG5Z+Jvs1LP1/dlOWW9aDefXcOk5X7r8d+zvot/7lvt/ld+CJsPyq5vdN/5/Dra7/z/L5m9P/J+w6Hzr+ZzCM7LC0tDTQrk9Gtd+VnWLQr/+gtyEHXf6gX/86sf/P+H8p9v8Z47H/zxiP/X/GeOxfK8Zj/5/x9Yz9f8b40bDc2D/odE38CzXxYzXxL9bEj9fE4/+3GJ+piZ+oiZ+siT9eEz9VEz9dE/9KTfzJmvhTNfEzNfHd7ss5HdX2wyiL/Ub6/sPoKMd/un3/p2riwPCK/TrH7/dXa+LA8Crnefh+wwiqOt+xI+5vL/txb+X0nZy+n9OPtqyCbIev5fTrOf1GTr+Z07M5nc3pXE71DTncfvH3YyduV2vn+R0K8V7PJ43XA8T7xJzrsT7x+Fy/57Me7bGcrSp/g5eDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyNxsrj/Px0ldLbd9668M+p73x/ecrJVo6ZlcfxPLaQUmqmlKo8Ph6Wd2NiNf3sk+uXOqVVOr/yWMbTC/db8x5Ynj/NpLtpMl38+OjtVz54fvG9IzePXHjzzL2taT0AAACMhv8GAAD//5Cp5/o=") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x3d8}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff9, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) 1.138307945s ago: executing program 0 (id=839): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) accept4$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, &(0x7f0000000340)=0x10, 0x81000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f00000003c0)=ANY=[@ANYBLOB="706172743d3078300002a27f9edc6b44900000c63d5f852c6769643d", @ANYRESOCT, @ANYRESOCT=0x0, @ANYRES8, @ANYRES32, @ANYRES8, @ANYBLOB="2c6e03d465636f6d706f73652c6769643d29ab72f4a2f73b811c7fd9bae7ecd520839bd791f81b6637f549a77ac6cb621635f9c08b2615964a3c43b727df50d049dc760465dea7349206240e6fb4756f276c72f20bab7d507fe4853b18ebe583cbf9009044b021249834326e80399ca072639251325e38177eef4f05093acfe76553919ecca99460ea4ebdbcef9c4e0ed3f10f86889116979b7aa52b38442546b806d6b8964f99a04195ad43adb611", @ANYRES16, @ANYBLOB="4599"], 0x1, 0x701, &(0x7f00000009c0)="$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") ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f00000004c0)={0xc5, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x7}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000680)="66420f3841c5b9f60200000f3266baf80cb870047a85ef66bafc0c66ed66b80c008ee80fe9b300000100b9220000400f322e0f211c26460fc7b0003000000f78e2b8010000000f01c1", 0x49}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 1 (id=840): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40048080}, 0x20000080) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) getdents64(0xffffffffffffffff, &(0x7f0000002080)=""/4108, 0x100c) getdents64(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000280)=[@register_looper], 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f0000000400)={0x9, "506780196937dc60f5b7221e2f7d10795d734c1f5563d084ba25cd6d9883a5d514a2ca41b9050d59452fa5943689b331142a939590652bfc19ad56a96731a4d0", {0x9}}) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x29) kernel console output (not intermixed with test programs): ge from 0 to 512 [ 420.875417][ T5847] EXT4-fs (loop0): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 420.930479][ T5804] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.924779][ T5804] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.387769][ T5014] Bluetooth: hci3: command 0x040f tx timeout [ 424.572797][ T5804] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.335481][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 425.418838][ T5881] loop0: detected capacity change from 0 to 4096 [ 425.494744][ T5881] ntfs3: Bad value for 'fmask' [ 425.576315][ T4485] Bluetooth: hci3: command 0x0419 tx timeout [ 425.763113][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 426.297209][ T4485] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 426.318199][ T5804] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 426.580065][ T5890] loop0: detected capacity change from 0 to 764 [ 426.686522][ T5890] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 426.713088][ T5890] Symlink component flag not implemented [ 426.713117][ T5890] Symlink component flag not implemented [ 426.713370][ T5890] Symlink component flag not implemented (128) [ 426.713407][ T5890] Symlink component flag not implemented (97) [ 427.003907][ T13] Bluetooth: hci5: command 0x0406 tx timeout [ 427.175610][ T4485] usb 3-1: config index 0 descriptor too short (expected 58733, got 36) [ 427.175638][ T4485] usb 3-1: config 39 has too many interfaces: 126, using maximum allowed: 32 [ 427.175658][ T4485] usb 3-1: config 39 has an invalid descriptor of length 0, skipping remainder of the config [ 427.175674][ T4485] usb 3-1: config 39 has 0 interfaces, different from the descriptor's value: 126 [ 427.266070][ T4485] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 427.284586][ T4485] usb 3-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 427.303490][ T4485] usb 3-1: Product: syz [ 427.406532][ T5804] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 427.425816][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 427.428052][ T5804] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 427.588266][ T5804] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 427.636576][ T7] usb 3-1: USB disconnect, device number 3 [ 427.853031][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.860713][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.868820][ T5861] device bridge_slave_0 entered promiscuous mode [ 427.885159][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.892512][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.908138][ T5861] device bridge_slave_1 entered promiscuous mode [ 427.948132][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.968860][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.996804][ T5861] team0: Port device team_slave_0 added [ 428.009728][ T5861] team0: Port device team_slave_1 added [ 428.032024][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.040866][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.048434][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.074995][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.097160][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 428.104922][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 428.118185][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.125133][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.152546][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.169133][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.193414][ T5861] device hsr_slave_0 entered promiscuous mode [ 428.200684][ T5861] device hsr_slave_1 entered promiscuous mode [ 428.208150][ T5861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 428.216047][ T5861] Cannot create hsr debugfs directory [ 428.225297][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 428.235075][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 428.244047][ T3667] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.251138][ T3667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.268670][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 428.287672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 428.298376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 428.307634][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.314693][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.330731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 430.479145][ T4485] Bluetooth: hci4: command 0x040f tx timeout [ 431.756471][ T5861] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.841391][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 431.852676][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 431.865695][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 431.878402][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 431.887893][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 431.896900][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 431.905311][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 431.913742][ T26] audit: type=1326 audit(1728386990.773:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.2.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde9636ff9 code=0x7ffc0000 [ 431.928036][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 431.993874][ T26] audit: type=1326 audit(1728386990.773:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.2.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde9636ff9 code=0x7ffc0000 [ 432.032939][ T5927] loop4: detected capacity change from 0 to 128 [ 432.041744][ T5861] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.085314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 432.103703][ T26] audit: type=1326 audit(1728386990.843:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.2.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fbde9636ff9 code=0x7ffc0000 [ 432.129427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 432.132902][ T26] audit: type=1326 audit(1728386990.843:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.2.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde9636ff9 code=0x7ffc0000 [ 432.160335][ T26] audit: type=1326 audit(1728386990.843:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.2.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde9636ff9 code=0x7ffc0000 [ 432.183127][ T26] audit: type=1326 audit(1728386990.843:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.2.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbde9636ff9 code=0x7ffc0000 [ 432.207544][ T5804] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 432.213251][ T26] audit: type=1326 audit(1728386990.843:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.2.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde9636ff9 code=0x7ffc0000 [ 432.245642][ T26] audit: type=1326 audit(1728386990.843:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.2.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde9636ff9 code=0x7ffc0000 [ 432.270099][ T5861] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.274900][ T26] audit: type=1326 audit(1728386990.843:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.2.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbde9636ff9 code=0x7ffc0000 [ 432.316842][ T26] audit: type=1326 audit(1728386990.843:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.2.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde9636ff9 code=0x7ffc0000 [ 432.422513][ T5861] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.446550][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 432.453987][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 432.470890][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.535952][ T3677] Bluetooth: hci4: command 0x0419 tx timeout [ 432.561678][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 432.578556][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 432.593265][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 432.598460][ T5927] loop4: detected capacity change from 0 to 4096 [ 432.604132][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 432.619093][ T5804] device veth0_vlan entered promiscuous mode [ 432.626521][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 432.634306][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 432.651722][ T5804] device veth1_vlan entered promiscuous mode [ 432.662976][ T5927] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 432.687562][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 432.696612][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 432.704815][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 432.713837][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 432.730288][ T5804] device veth0_macvtap entered promiscuous mode [ 432.743097][ T5861] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 432.781066][ T5861] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 432.803910][ T5804] device veth1_macvtap entered promiscuous mode [ 432.807029][ T5927] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 432.821158][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.831912][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.842739][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.844105][ T9] ntfs3: loop4: ino=1b, Internal error [ 432.861892][ T9] ntfs3: loop4: ntfs3_write_inode r=1b failed, -22. [ 432.865227][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.869059][ T5927] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 432.895139][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.907433][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.917432][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.927931][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.938848][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.949614][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.961191][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.968573][ T5861] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 432.977663][ T5861] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 432.987064][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 432.995112][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 433.003184][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 433.012664][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 433.027826][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.038693][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.048879][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.060868][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.070821][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.081376][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.091489][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.102264][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.112390][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.123159][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.134341][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.142571][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 433.153439][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 433.167424][ T5804] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.176390][ T5804] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.185075][ T5804] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.194125][ T5804] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.281222][ T4509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.296086][ T4509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.311220][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 433.326690][ T5277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.335103][ T5277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.354964][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 433.377837][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.412974][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 433.531210][ T5088] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 433.550374][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 433.566148][ T5088] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22. [ 433.617637][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.897583][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 433.963054][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 433.974654][ T5943] loop0: detected capacity change from 0 to 2048 [ 434.019887][ T3629] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.027205][ T3629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.250690][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 434.276739][ T5943] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 434.300631][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 434.320515][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 434.343982][ T3629] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.351180][ T3629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.380187][ T5943] overlayfs: upper fs needs to support d_type. [ 434.393738][ T5946] loop1: detected capacity change from 0 to 4096 [ 434.394331][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 434.424597][ T5943] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 434.426127][ T5946] ntfs3: Bad value for 'fmask' [ 434.434618][ T5943] overlayfs: failed to set xattr on upper [ 434.444318][ T5943] overlayfs: ...falling back to index=off,metacopy=off. [ 434.456142][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 434.489934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 434.508290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 434.549545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 434.580215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 434.594547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 434.635639][ T4478] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 434.647537][ T5861] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 434.688793][ T5861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 434.723197][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 434.735661][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 434.746420][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 434.814082][ T5951] loop1: detected capacity change from 0 to 764 [ 434.913345][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 434.994354][ T5951] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 435.025608][ T5951] Symlink component flag not implemented [ 435.031334][ T5951] Symlink component flag not implemented [ 435.037388][ T5951] Symlink component flag not implemented (128) [ 435.043612][ T5951] Symlink component flag not implemented (97) [ 435.418035][ T4902] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh [ 435.435547][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 435.447691][ T4902] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh [ 435.576082][ T4478] usb 5-1: config index 0 descriptor too short (expected 58733, got 36) [ 435.585654][ T4478] usb 5-1: config 39 has too many interfaces: 126, using maximum allowed: 32 [ 435.594554][ T4478] usb 5-1: config 39 has an invalid descriptor of length 0, skipping remainder of the config [ 435.603979][ T5957] loop1: detected capacity change from 0 to 2048 [ 435.605011][ T4478] usb 5-1: config 39 has 0 interfaces, different from the descriptor's value: 126 [ 435.669293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 435.679967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 435.691673][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.706073][ T4478] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 435.716935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 435.726776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 435.727586][ T5957] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 435.745727][ T4478] usb 5-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 435.753835][ T4478] usb 5-1: Product: syz [ 435.759089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 435.761995][ T5957] ext4 filesystem being mounted at /2/bus supports timestamps until 2038 (0x7fffffff) [ 435.801599][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 435.820235][ T5861] device veth0_vlan entered promiscuous mode [ 435.833150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 435.842123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 435.853209][ T5861] device veth1_vlan entered promiscuous mode [ 435.937887][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.973095][ T5861] device veth0_macvtap entered promiscuous mode [ 436.020147][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 436.049159][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 436.064620][ T4485] usb 5-1: USB disconnect, device number 9 [ 436.066257][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 436.090301][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 436.107840][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 436.138158][ T5861] device veth1_macvtap entered promiscuous mode [ 436.175250][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.225049][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.246652][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.262893][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.275545][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.292640][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.318054][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.344772][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.358976][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.369287][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.380166][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.606993][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.682622][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.715054][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.762924][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 436.795099][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 436.816393][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 436.999745][ T5976] xt_hashlimit: overflow, rate too high: 0 [ 437.298961][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.327114][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.345260][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.367772][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.387610][ T5970] XFS (nullb0): Invalid superblock magic number [ 437.399679][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.452196][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.463970][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.491597][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.513192][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.523247][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.535183][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.545245][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.556052][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.602460][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.621032][ T5861] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.633133][ T5861] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.644830][ T5861] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.653856][ T5861] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.693514][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 437.702485][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 437.724689][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.944775][ T302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.005549][ T302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.033824][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 438.102399][ T3629] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.137654][ T3629] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.227351][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 438.760932][ T4478] Bluetooth: hci5: command 0x0409 tx timeout [ 439.105170][ T6015] netlink: 32 bytes leftover after parsing attributes in process `syz.2.502'. [ 439.144861][ T6001] loop4: detected capacity change from 0 to 4096 [ 439.175244][ T6015] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 439.210824][ T6021] vhci_hcd: invalid port number 0 [ 439.233616][ T5965] chnl_net:caif_netlink_parms(): no params data found [ 439.247003][ T6001] ntfs3: Bad value for 'fmask' [ 439.260892][ T6021] binder: 6020:6021 ioctl c00c6211 0 returned -22 [ 439.309231][ T6017] loop2: detected capacity change from 0 to 8192 [ 439.477284][ T6025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.504'. [ 439.506465][ T6017] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 439.550225][ T6017] REISERFS (device loop2): using ordered data mode [ 439.570127][ T6017] reiserfs: using flush barriers [ 439.581686][ T6017] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 439.674726][ T6037] loop4: detected capacity change from 0 to 764 [ 439.760473][ T6017] REISERFS (device loop2): checking transaction log (loop2) [ 439.794592][ T6037] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 439.831392][ T6037] Symlink component flag not implemented [ 439.837114][ T6037] Symlink component flag not implemented [ 439.843113][ T6037] Symlink component flag not implemented (128) [ 439.849330][ T6037] Symlink component flag not implemented (97) [ 440.129309][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.135655][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.462733][ T6017] REISERFS (device loop2): Using tea hash to sort names [ 440.494116][ T6017] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 440.527191][ T3663] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 440.537460][ T5965] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.546470][ T5965] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.558556][ T5965] device bridge_slave_0 entered promiscuous mode [ 440.567700][ T5965] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.575021][ T5965] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.583224][ T5965] device bridge_slave_1 entered promiscuous mode [ 440.855775][ T3663] usb 4-1: Using ep0 maxpacket: 16 [ 441.136245][ T3663] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 441.236159][ T4478] Bluetooth: hci5: command 0x041b tx timeout [ 441.262766][ T3663] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.295653][ T3663] usb 4-1: Product: syz [ 441.299875][ T3663] usb 4-1: Manufacturer: syz [ 441.343736][ T3663] usb 4-1: SerialNumber: syz [ 441.364533][ T3663] usb 4-1: config 0 descriptor?? [ 441.482948][ T5965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.530252][ T6050] loop4: detected capacity change from 0 to 64 [ 441.554341][ T5965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.687859][ T6050] attempt to access beyond end of device [ 441.687859][ T6050] loop4: rw=0, want=32784, limit=64 [ 442.344435][ T3663] usb 4-1: Not enough endpoints found in device, aborting! [ 442.588540][ T3615] usb 4-1: USB disconnect, device number 5 [ 442.623015][ T5965] team0: Port device team_slave_0 added [ 442.658629][ T5965] team0: Port device team_slave_1 added [ 442.798324][ T5965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.805288][ T5965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.853029][ T6069] loop1: detected capacity change from 0 to 2048 [ 442.881719][ T5965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.938989][ T5965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.063514][ T5965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.103147][ T5965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.109198][ T6069] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 443.125194][ T6069] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038 (0x7fffffff) [ 443.900596][ T5965] device hsr_slave_0 entered promiscuous mode [ 443.914477][ T5965] device hsr_slave_1 entered promiscuous mode [ 443.925569][ T3590] Bluetooth: hci5: command 0x040f tx timeout [ 443.943726][ T5965] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 443.951806][ T5965] Cannot create hsr debugfs directory [ 444.308785][ T6098] loop1: detected capacity change from 0 to 4096 [ 444.844681][ T6098] EXT4-fs (loop1): Test dummy encryption mode enabled [ 444.851633][ T6098] EXT4-fs (loop1): bad block size 8192 [ 444.914069][ T6091] loop2: detected capacity change from 0 to 8192 [ 445.025636][ T9] device hsr_slave_0 left promiscuous mode [ 445.060735][ T9] device hsr_slave_1 left promiscuous mode [ 445.123934][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 445.146096][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 445.164123][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 445.173883][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 445.184988][ T9] device team0 left promiscuous mode [ 445.190522][ T9] device team_slave_0 left promiscuous mode [ 445.200816][ T26] kauditd_printk_skb: 33 callbacks suppressed [ 445.200830][ T26] audit: type=1326 audit(1728387004.063:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6090 comm="syz.2.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde9636ff9 code=0x7ffc0000 [ 445.205091][ T9] device team_slave_1 left promiscuous mode [ 445.209972][ T26] audit: type=1326 audit(1728387004.063:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6090 comm="syz.2.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde9636ff9 code=0x7ffc0000 [ 445.238098][ T9] bridge0: port 3(team0) entered disabled state [ 445.275132][ T9] device bridge_slave_1 left promiscuous mode [ 445.283079][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.300423][ T9] device bridge_slave_0 left promiscuous mode [ 445.304623][ T26] audit: type=1326 audit(1728387004.063:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6090 comm="syz.2.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fbde9636ff9 code=0x7ffc0000 [ 445.310868][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.352841][ T9] device veth1_macvtap left promiscuous mode [ 445.353417][ T26] audit: type=1326 audit(1728387004.063:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6090 comm="syz.2.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde9636ff9 code=0x7ffc0000 [ 445.360470][ T9] device veth0_macvtap left promiscuous mode [ 445.382083][ T26] audit: type=1326 audit(1728387004.063:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6090 comm="syz.2.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde9636ff9 code=0x7ffc0000 [ 445.388951][ T9] device veth1_vlan left promiscuous mode [ 445.415844][ T9] device veth0_vlan left promiscuous mode [ 445.418827][ T26] audit: type=1326 audit(1728387004.063:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6090 comm="syz.2.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbde9635990 code=0x7ffc0000 [ 445.445562][ T26] audit: type=1326 audit(1728387004.063:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6090 comm="syz.2.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbde9636bfb code=0x7ffc0000 [ 445.467797][ T26] audit: type=1326 audit(1728387004.063:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6090 comm="syz.2.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbde9636bfb code=0x7ffc0000 [ 445.490504][ T26] audit: type=1326 audit(1728387004.063:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6090 comm="syz.2.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbde9636bfb code=0x7ffc0000 [ 445.495740][ T4478] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 445.512820][ T26] audit: type=1326 audit(1728387004.063:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6090 comm="syz.2.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbde9636bfb code=0x7ffc0000 [ 445.680615][ T9] team0 (unregistering): Port device team_slave_1 removed [ 445.692699][ T9] team0 (unregistering): Port device team_slave_0 removed [ 445.704048][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 445.722783][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.786807][ T9] bond0 (unregistering): Released all slaves [ 445.881567][ T3615] bridge0 speed is unknown, defaulting to 1000 [ 445.895948][ T4478] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 445.915957][ T4478] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 445.985853][ T3590] Bluetooth: hci5: command 0x0419 tx timeout [ 446.025850][ T4478] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 446.034918][ T4478] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 446.056351][ T4478] usb 3-1: SerialNumber: syz [ 446.319376][ T5965] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 446.333163][ T5965] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 446.371604][ T4478] usb 3-1: 0:2 : does not exist [ 446.386791][ T5965] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 446.407462][ T5965] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 446.487458][ T4478] usb 3-1: USB disconnect, device number 4 [ 446.624712][ T5965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.650849][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 446.659453][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 446.678185][ T5965] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.711510][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 446.726186][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 446.753495][ T302] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.760610][ T302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.794277][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 446.805975][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 446.814484][ T302] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.821614][ T302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.846794][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 446.858868][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 446.894798][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 446.911744][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 446.933799][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 446.945043][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 446.960496][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 446.972908][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 446.983383][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 447.019116][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 447.036913][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 447.194870][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 447.242139][ T5965] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 448.097131][ T6165] netlink: 32 bytes leftover after parsing attributes in process `syz.3.519'. [ 448.156533][ T6165] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 448.272429][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 448.289663][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 448.396459][ T5965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.402828][ T6168] loop2: detected capacity change from 0 to 4096 [ 448.498825][ T6182] loop1: detected capacity change from 0 to 64 [ 448.750027][ T6168] ntfs3: Bad value for 'fmask' [ 449.160311][ T6182] attempt to access beyond end of device [ 449.160311][ T6182] loop1: rw=0, want=32784, limit=64 [ 449.176435][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 449.185247][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 449.274816][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 449.284049][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 449.325432][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 449.347949][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 449.442974][ T6186] loop4: detected capacity change from 0 to 1024 [ 449.464920][ T5965] device veth0_vlan entered promiscuous mode [ 449.495704][ T6182] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 449.504293][ T5965] device veth1_vlan entered promiscuous mode [ 449.613254][ T6193] loop2: detected capacity change from 0 to 764 [ 450.238872][ T6186] hfsplus: part requires an argument [ 450.258528][ T6186] hfsplus: unable to parse mount options [ 450.285557][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 450.354895][ T6193] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 450.381023][ T6191] Symlink component flag not implemented [ 450.386799][ T6191] Symlink component flag not implemented [ 450.392501][ T6191] Symlink component flag not implemented (128) [ 450.398833][ T6191] Symlink component flag not implemented (97) [ 450.450705][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 450.471633][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 450.578146][ T5965] device veth0_macvtap entered promiscuous mode [ 450.612617][ T5965] device veth1_macvtap entered promiscuous mode [ 450.729892][ T5965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.252482][ T5965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.327175][ T5965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.410535][ T5965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.427750][ T5965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.456230][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 451.456364][ T5965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.462837][ T26] audit: type=1326 audit(1728387010.323:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6203 comm="syz.3.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a8a5aff9 code=0x7ffc0000 [ 451.472264][ T5965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.472281][ T5965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.472299][ T5965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.472310][ T5965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.472327][ T5965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.603851][ T6218] loop2: detected capacity change from 0 to 2048 [ 451.634157][ T26] audit: type=1326 audit(1728387010.323:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6203 comm="syz.3.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a8a5aff9 code=0x7ffc0000 [ 451.653941][ T5965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.688049][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.705570][ T26] audit: type=1326 audit(1728387010.413:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6203 comm="syz.3.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7ff3a8a5aff9 code=0x7ffc0000 [ 451.718621][ T5965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.935862][ T3613] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 452.133289][ T26] audit: type=1326 audit(1728387010.443:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6203 comm="syz.3.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a8a5aff9 code=0x7ffc0000 [ 452.232746][ T5965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.363786][ T26] audit: type=1326 audit(1728387010.443:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6203 comm="syz.3.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a8a5aff9 code=0x7ffc0000 [ 452.396067][ T6218] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 452.415783][ T3613] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 452.425428][ T5965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.428164][ T26] audit: type=1326 audit(1728387010.443:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6203 comm="syz.3.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff3a8a59990 code=0x7ffc0000 [ 452.442397][ T6218] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 452.495502][ T3613] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 452.524558][ T5965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.554977][ T5965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.583673][ T5965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.613525][ T5965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.626363][ T26] audit: type=1326 audit(1728387010.443:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6203 comm="syz.3.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff3a8a5abfb code=0x7ffc0000 [ 452.649071][ T3613] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 452.655037][ T5965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.664324][ T3613] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 452.685018][ T5965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.696916][ T3613] usb 4-1: SerialNumber: syz [ 452.717240][ T5965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.757409][ T26] audit: type=1326 audit(1728387010.443:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6203 comm="syz.3.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff3a8a5abfb code=0x7ffc0000 [ 452.767889][ T5371] UDF-fs: error (device loop2): udf_read_inode: (ino 1440) failed !bh [ 452.795890][ T5371] UDF-fs: error (device loop2): udf_read_inode: (ino 1440) failed !bh [ 452.805198][ T5965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.823553][ T26] audit: type=1326 audit(1728387010.453:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6203 comm="syz.3.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff3a8a5abfb code=0x7ffc0000 [ 452.846836][ T5965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.875404][ T26] audit: type=1326 audit(1728387010.453:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6203 comm="syz.3.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff3a8a5abfb code=0x7ffc0000 [ 452.883068][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.961523][ T6238] loop4: detected capacity change from 0 to 4096 [ 452.962080][ T5276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 452.999854][ T3613] usb 4-1: 0:2 : does not exist [ 453.008055][ T5276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 453.031875][ T5276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 453.041721][ T5276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 453.078157][ T3613] usb 4-1: USB disconnect, device number 6 [ 453.126040][ T5276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 453.140220][ T4962] udevd[4962]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 453.188060][ T5276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 453.195958][ T6238] ntfs3: loop4: failed to convert "0080" to cp1250 [ 453.288218][ T6238] ntfs3: loop4: failed to convert name for inode 1e. [ 453.637551][ T5965] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.650949][ T5088] ntfs3: loop4: failed to convert "0080" to cp1250 [ 453.661369][ T5088] ntfs3: loop4: failed to convert name for inode 1e. [ 453.681437][ T5965] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.690421][ T5965] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.699451][ T5965] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.739998][ T6256] netlink: 32 bytes leftover after parsing attributes in process `syz.1.534'. [ 453.773424][ T6256] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 453.926781][ T6262] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 454.086102][ T302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.113604][ T302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.168521][ T6256] loop1: detected capacity change from 0 to 8192 [ 454.206525][ T5276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.217085][ T6256] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 454.222755][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 454.255962][ T6256] REISERFS (device loop1): using ordered data mode [ 454.264141][ T5276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.272013][ T6256] reiserfs: using flush barriers [ 454.283331][ T6256] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 454.322560][ T6018] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 454.348544][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.353501][ T6256] REISERFS (device loop1): checking transaction log (loop1) [ 454.432429][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.491861][ T6277] loop0: detected capacity change from 0 to 512 [ 454.613288][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.841751][ T6256] REISERFS (device loop1): Using tea hash to sort names [ 458.332172][ T6256] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 458.342947][ T3620] Bluetooth: hci0: command 0x0409 tx timeout [ 458.350568][ T3620] Bluetooth: hci2: command 0x0409 tx timeout [ 458.459351][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.537143][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.576151][ T6279] chnl_net:caif_netlink_parms(): no params data found [ 459.613580][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.655601][ T4478] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 459.663044][ T6273] chnl_net:caif_netlink_parms(): no params data found [ 459.757073][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.145699][ T4478] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 460.388382][ T4478] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 460.446964][ T6279] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.456852][ T3620] Bluetooth: hci0: command 0x041b tx timeout [ 460.464398][ T6279] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.475596][ T5008] Bluetooth: hci2: command 0x041b tx timeout [ 460.516691][ T6279] device bridge_slave_0 entered promiscuous mode [ 460.526413][ T4478] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 460.544668][ T4478] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 460.554891][ T4478] usb 2-1: SerialNumber: syz [ 460.583531][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.620802][ T6279] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.628248][ T6279] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.637314][ T6279] device bridge_slave_1 entered promiscuous mode [ 460.672163][ T6335] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 460.684060][ T6335] Cannot find add_set index 0 as target [ 460.692112][ T6279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.719316][ T6279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.751971][ T6273] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.759513][ T6273] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.767760][ T6273] device bridge_slave_0 entered promiscuous mode [ 460.817239][ T6273] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.826722][ T6273] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.840194][ T6273] device bridge_slave_1 entered promiscuous mode [ 460.869735][ T6299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.548'. [ 460.873356][ T6279] team0: Port device team_slave_0 added [ 460.892622][ T6279] team0: Port device team_slave_1 added [ 460.948638][ T4478] usb 2-1: 0:2 : does not exist [ 460.960969][ T4478] usb 2-1: unit 5 not found! [ 461.033059][ T4478] usb 2-1: USB disconnect, device number 5 [ 461.169730][ T6273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.180875][ T6279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.188910][ T6279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.216088][ T6279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.227326][ T9] tipc: Disabling bearer [ 461.237551][ T9] tipc: Left network mode [ 461.240641][ T6273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.254306][ T6279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.263020][ T6279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.289360][ T6279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.334639][ T6273] team0: Port device team_slave_0 added [ 461.344380][ T6273] team0: Port device team_slave_1 added [ 461.399857][ T6273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.412257][ T6273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.442864][ T6273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.464839][ T6273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.487612][ T6273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.561784][ T6273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.614851][ T6355] loop0: detected capacity change from 0 to 8192 [ 461.768908][ T6279] device hsr_slave_0 entered promiscuous mode [ 462.987841][ T6279] device hsr_slave_1 entered promiscuous mode [ 463.019272][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 463.019285][ T26] audit: type=1326 audit(1728387021.883:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6353 comm="syz.0.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e8d06ff9 code=0x7ffc0000 [ 463.073334][ T6279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 463.092960][ T6279] Cannot create hsr debugfs directory [ 463.161969][ T26] audit: type=1326 audit(1728387021.913:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6353 comm="syz.0.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e8d06ff9 code=0x7ffc0000 [ 463.234861][ T3615] Bluetooth: hci2: command 0x040f tx timeout [ 463.241854][ T3615] Bluetooth: hci0: command 0x040f tx timeout [ 463.248907][ T26] audit: type=1326 audit(1728387021.913:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6353 comm="syz.0.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fa2e8d06ff9 code=0x7ffc0000 [ 463.275453][ T26] audit: type=1326 audit(1728387021.913:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6353 comm="syz.0.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e8d06ff9 code=0x7ffc0000 [ 463.300953][ T26] audit: type=1326 audit(1728387021.913:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6353 comm="syz.0.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e8d06ff9 code=0x7ffc0000 [ 463.323221][ T26] audit: type=1326 audit(1728387021.913:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6353 comm="syz.0.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa2e8d05990 code=0x7ffc0000 [ 463.365391][ T26] audit: type=1326 audit(1728387021.913:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6353 comm="syz.0.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa2e8d06bfb code=0x7ffc0000 [ 463.392868][ T26] audit: type=1326 audit(1728387021.913:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6353 comm="syz.0.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa2e8d06bfb code=0x7ffc0000 [ 463.445406][ T26] audit: type=1326 audit(1728387021.923:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6353 comm="syz.0.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa2e8d06bfb code=0x7ffc0000 [ 463.489120][ T3613] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 463.518676][ T6273] device hsr_slave_0 entered promiscuous mode [ 463.529379][ T6273] device hsr_slave_1 entered promiscuous mode [ 463.596774][ T6273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 463.885815][ T3613] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 464.304689][ T26] audit: type=1326 audit(1728387021.923:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6353 comm="syz.0.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa2e8d06bfb code=0x7ffc0000 [ 464.344873][ T3613] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 464.365799][ T6273] Cannot create hsr debugfs directory [ 464.435522][ T3613] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 464.465516][ T3613] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 464.497024][ T3613] usb 1-1: SerialNumber: syz [ 464.635559][ T3613] usb 1-1: can't set config #1, error -71 [ 464.642655][ T3613] usb 1-1: USB disconnect, device number 7 [ 464.724916][ T6402] loop1: detected capacity change from 0 to 128 [ 464.783231][ T6402] ufs: Invalid option: "0x000000000000000400000000000000000000003" or missing value [ 464.835081][ T6402] ufs: wrong mount options [ 466.731837][ T6417] loop0: detected capacity change from 0 to 512 [ 466.849490][ T3615] Bluetooth: hci0: command 0x0419 tx timeout [ 466.856827][ T3615] Bluetooth: hci2: command 0x0419 tx timeout [ 466.880690][ T6417] EXT4-fs (loop0): Invalid want_extra_isize 497 [ 466.888123][ T6402] tipc: Started in network mode [ 466.893041][ T6402] tipc: Node identity f7, cluster identity 4711 [ 466.902959][ T6402] tipc: Node number set to 247 [ 469.258804][ T6279] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 469.304056][ T6279] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 469.313497][ T6279] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 469.336474][ T6279] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 469.403352][ T6273] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 469.420642][ T6273] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 469.438078][ T6273] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 469.450129][ T9] device hsr_slave_0 left promiscuous mode [ 469.458508][ T9] device hsr_slave_1 left promiscuous mode [ 469.466189][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.473734][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.484278][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.492784][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.501019][ T9] device bridge_slave_1 left promiscuous mode [ 469.507618][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.539683][ T9] device bridge_slave_0 left promiscuous mode [ 469.546078][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.584738][ T9] device hsr_slave_0 left promiscuous mode [ 469.598666][ T9] device hsr_slave_1 left promiscuous mode [ 469.616524][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.629577][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.656402][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.675668][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.701807][ T9] device bridge_slave_1 left promiscuous mode [ 469.720006][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.732628][ T9] device bridge_slave_0 left promiscuous mode [ 469.763173][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.827126][ T9] device veth1_macvtap left promiscuous mode [ 469.835659][ T9] device veth0_macvtap left promiscuous mode [ 469.857422][ T9] device veth1_vlan left promiscuous mode [ 469.864061][ T9] device veth0_vlan left promiscuous mode [ 469.879374][ T6473] loop1: detected capacity change from 0 to 8192 [ 469.889024][ T9] device veth1_macvtap left promiscuous mode [ 469.911798][ T9] device veth0_macvtap left promiscuous mode [ 469.976965][ T9] device veth1_vlan left promiscuous mode [ 469.999432][ T9] device veth0_vlan left promiscuous mode [ 470.678331][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 470.678347][ T26] audit: type=1326 audit(1728387029.543:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6472 comm="syz.1.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87c9ad9ff9 code=0x7ffc0000 [ 470.734877][ T26] audit: type=1326 audit(1728387029.593:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6472 comm="syz.1.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87c9ad9ff9 code=0x7ffc0000 [ 470.953220][ T6503] loop0: detected capacity change from 0 to 128 [ 471.041285][ T6503] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 471.064199][ T6503] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 471.075415][ T3613] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 471.151428][ T3582] Bluetooth: Wrong link type (-22) [ 471.159613][ T9] team0 (unregistering): Port device team_slave_1 removed [ 471.175060][ T9] team0 (unregistering): Port device team_slave_0 removed [ 471.187978][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.202150][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.264946][ T9] bond0 (unregistering): Released all slaves [ 471.393354][ T9] team0 (unregistering): Port device team_slave_1 removed [ 471.411402][ T9] team0 (unregistering): Port device team_slave_0 removed [ 471.422982][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.436961][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.504090][ T9] bond0 (unregistering): Released all slaves [ 471.510545][ T3613] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 471.527584][ T3613] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 471.581012][ T6273] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 471.625557][ T3613] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 471.640318][ T3613] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 471.658312][ T3613] usb 2-1: SerialNumber: syz [ 471.858514][ T6279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.916700][ T6273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.960844][ T6279] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.973934][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 471.986170][ T3613] usb 2-1: 0:2 : does not exist [ 471.989373][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 472.065996][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 472.096507][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 472.107225][ T3613] usb 2-1: USB disconnect, device number 6 [ 472.130128][ T3706] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.137288][ T3706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.189142][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 472.210323][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 472.233054][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 472.244522][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 472.254725][ T3706] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.261854][ T3706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.277197][ T6273] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.292070][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 472.301746][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 472.322320][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 472.387915][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 472.403290][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 472.415101][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 472.426876][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 472.436760][ T302] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.443810][ T302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.480653][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 472.492146][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 472.503114][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 472.517674][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 472.529353][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 472.558215][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 472.570957][ T302] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.578102][ T302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.602441][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 472.641343][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 472.671907][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 472.706364][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 472.740336][ T6279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 472.765710][ T6279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 472.797927][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 472.820700][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 472.933912][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 473.152438][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 473.292980][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 473.447508][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 473.637233][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 473.666909][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 473.680538][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 473.709848][ T6273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 473.749015][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 473.803732][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 473.826371][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 474.750578][ T6556] loop1: detected capacity change from 0 to 4096 [ 474.829523][ T6565] loop0: detected capacity change from 0 to 64 [ 474.874446][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 474.885448][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 474.922356][ T6556] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 474.933808][ T6273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.959753][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 475.122051][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 475.162285][ T6279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.526999][ T6565] attempt to access beyond end of device [ 475.526999][ T6565] loop0: rw=0, want=32784, limit=64 [ 475.578985][ T6565] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 475.729536][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 475.740449][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 475.802928][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 475.837021][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 475.850419][ T6273] device veth0_vlan entered promiscuous mode [ 475.866583][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 475.875022][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 475.930434][ T6273] device veth1_vlan entered promiscuous mode [ 475.978605][ T6273] device veth0_macvtap entered promiscuous mode [ 476.000233][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 476.043859][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 476.090605][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 476.101830][ T6273] device veth1_macvtap entered promiscuous mode [ 476.153120][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 476.170286][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 476.184515][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 476.219135][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.238714][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.253467][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.274156][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.284387][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.303389][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.313652][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.332793][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.343090][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.361712][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.384901][ T6273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.403740][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 476.414506][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 476.432524][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 476.441664][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 476.461169][ T6279] device veth0_vlan entered promiscuous mode [ 476.475058][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.495177][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.514799][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.533270][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.543357][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.562431][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.574607][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.593424][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.604782][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.623877][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.643906][ T6273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.651476][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 476.668636][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 476.683623][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 476.695222][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 476.722551][ T6273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.740329][ T6273] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.752605][ T6273] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.769967][ T6273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.784327][ T6279] device veth1_vlan entered promiscuous mode [ 476.869438][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 476.878620][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 476.896408][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 476.905135][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 476.931808][ T6279] device veth0_macvtap entered promiscuous mode [ 476.990570][ T6279] device veth1_macvtap entered promiscuous mode [ 476.996634][ T5222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.035487][ T5222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.041689][ T6279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.063551][ T6279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.073587][ T6279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.093279][ T6279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.118530][ T6279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.136870][ T6279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.155013][ T6279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.174290][ T6279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.185157][ T6279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.205144][ T6279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.223303][ T6279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.234280][ T6279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.253801][ T6279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.263819][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 477.271791][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.282055][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 477.289626][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.299198][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 477.320255][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 477.339944][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 477.358713][ T6279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.371017][ T6279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.388400][ T6279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.402930][ T6279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.412943][ T6279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.423813][ T6279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.434034][ T6279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.444803][ T6279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.455002][ T6279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.465881][ T6279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.477253][ T6279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.488099][ T6279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.500425][ T6279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.522139][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 477.536368][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 477.592326][ T6279] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.631184][ T6279] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.651419][ T6279] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.711866][ T6279] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.540183][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.560735][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 478.643355][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.690412][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 478.729381][ T3706] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.792844][ T3706] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.863753][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 481.306974][ T6625] loop0: detected capacity change from 0 to 16 [ 481.437889][ T6625] erofs: (device loop0): mounted with root inode @ nid 36. [ 481.503459][ T6632] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 482.218114][ T6635] erofs: (device loop0): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 482.227489][ T6635] erofs: (device loop0): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 482.236581][ T6635] erofs: (device loop0): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 482.245741][ T6635] erofs: (device loop0): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 482.254930][ T6635] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 45055 of nid 36 [ 482.264874][ T6635] erofs: (device loop0): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 482.274997][ T6635] attempt to access beyond end of device [ 482.274997][ T6635] loop0: rw=524288, want=6536, limit=16 [ 482.289006][ T6635] attempt to access beyond end of device [ 482.289006][ T6635] loop0: rw=524288, want=34359736344, limit=16 [ 482.301529][ T6635] attempt to access beyond end of device [ 482.301529][ T6635] loop0: rw=524288, want=736, limit=16 [ 482.315091][ T6635] attempt to access beyond end of device [ 482.315091][ T6635] loop0: rw=524288, want=536576872, limit=16 [ 482.327294][ T6635] attempt to access beyond end of device [ 482.327294][ T6635] loop0: rw=524288, want=24, limit=16 [ 482.340489][ T6635] attempt to access beyond end of device [ 482.340489][ T6635] loop0: rw=524288, want=13478624040, limit=16 [ 482.648242][ T6639] kvm: pic: single mode not supported [ 482.649905][ T6639] kvm: pic: level sensitive irq not supported [ 482.656791][ T6639] kvm: pic: level sensitive irq not supported [ 483.019952][ T6651] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(230530453223006) <= P.seqno(0) <= S.SWH(230530453223080)) and (P.ackno exists or LAWL(210508577196852) <= P.ackno(210508577196856) <= S.AWH(210508577196856), sending SYNC... [ 483.441225][ T6656] xt_socket: unknown flags 0x50 [ 484.155735][ T6628] loop2: detected capacity change from 0 to 32768 [ 484.266891][ T6658] loop4: detected capacity change from 0 to 512 [ 484.280128][ T6660] binder: 6659:6660 ioctl c0306201 20000100 returned -14 [ 484.362859][ T6658] EXT4-fs (loop4): filesystem is read-only [ 484.368889][ T6660] netlink: 2 bytes leftover after parsing attributes in process `syz.3.599'. [ 484.653529][ T6658] loop4: detected capacity change from 0 to 512 [ 485.153505][ T6658] EXT4-fs (loop4): Unsupported blocksize for fs-verity [ 485.316893][ T6645] loop0: detected capacity change from 0 to 40427 [ 485.374016][ T6658] loop4: detected capacity change from 0 to 128 [ 485.391371][ T6645] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 485.405422][ T6645] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 485.435633][ T6645] F2FS-fs (loop0): invalid crc value [ 485.517643][ T6645] F2FS-fs (loop0): Found nat_bits in checkpoint [ 487.278907][ T6683] loop4: detected capacity change from 0 to 512 [ 487.366129][ T6683] devtmpfs: Unknown parameter 'errors' [ 487.644838][ T6692] binder: BINDER_SET_CONTEXT_MGR already set [ 487.651089][ T6692] binder: 6685:6692 ioctl 4018620d 200002c0 returned -16 [ 488.335222][ T6700] loop2: detected capacity change from 0 to 128 [ 488.342586][ T6698] loop1: detected capacity change from 0 to 512 [ 489.148314][ T6698] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 489.366327][ T6700] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 489.388802][ T6698] EXT4-fs (loop1): 1 truncate cleaned up [ 489.406282][ T6700] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 489.448333][ T6698] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,resuid=0x000000000000ee01,resgid=0x0000000000000000,data=journal,nombcache,block_validity,,errors=continue. Quota mode: none. [ 489.520562][ T6698] 9pnet: Insufficient options for proto=fd [ 490.658473][ T6728] loop4: detected capacity change from 0 to 128 [ 490.718686][ T6728] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 491.126076][ T6728] loop_set_status: loop4 () has still dirty pages (nrpages=2) [ 491.235438][ T3615] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 491.485487][ T3615] usb 1-1: Using ep0 maxpacket: 8 [ 491.605752][ T3615] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 491.620668][ T3615] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 491.643494][ T3615] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 45856, setting to 1024 [ 491.655822][ T3615] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 491.669387][ T3615] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 491.709388][ T3615] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 491.779959][ T3615] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.789855][ T6279] UDF-fs: error (device loop4): udf_read_inode: (ino 114) failed !bh [ 491.828926][ T6279] UDF-fs: error (device loop4): udf_read_inode: (ino 114) failed !bh [ 492.065736][ T3615] usb 1-1: GET_CAPABILITIES returned 0 [ 492.075286][ T3615] usbtmc 1-1:16.0: can't read capabilities [ 493.098013][ T6755] loop1: detected capacity change from 0 to 256 [ 493.110507][ T302] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.212436][ T302] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.254095][ T6755] FAT-fs (loop1): Directory bread(block 64) failed [ 493.263302][ T6755] FAT-fs (loop1): Directory bread(block 65) failed [ 493.288079][ T6755] FAT-fs (loop1): Directory bread(block 66) failed [ 493.328970][ T6755] FAT-fs (loop1): Directory bread(block 67) failed [ 493.345144][ T302] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.362398][ T6755] FAT-fs (loop1): Directory bread(block 68) failed [ 493.372594][ T6755] FAT-fs (loop1): Directory bread(block 69) failed [ 493.488533][ T6755] FAT-fs (loop1): Directory bread(block 70) failed [ 493.500934][ T6755] FAT-fs (loop1): Directory bread(block 71) failed [ 493.534891][ T5009] usb 1-1: USB disconnect, device number 8 [ 493.553535][ T6755] FAT-fs (loop1): Directory bread(block 72) failed [ 493.560271][ T6755] FAT-fs (loop1): Directory bread(block 73) failed [ 493.569090][ T302] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.023588][ T6788] loop2: detected capacity change from 0 to 8 [ 495.078700][ T6763] chnl_net:caif_netlink_parms(): no params data found [ 495.256060][ T3663] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 495.505557][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 496.137072][ T3663] usb 1-1: Using ep0 maxpacket: 16 [ 496.265772][ T3663] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 496.286637][ T3663] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 496.303548][ T3663] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.313813][ T3663] usb 1-1: config 0 descriptor?? [ 496.370474][ T6763] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.422925][ T6763] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.479086][ T6763] device bridge_slave_0 entered promiscuous mode [ 496.551749][ T6763] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.585581][ T6763] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.629414][ T6763] device bridge_slave_1 entered promiscuous mode [ 496.769439][ T6763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.993340][ T6767] udc-core: couldn't find an available UDC or it's busy [ 497.110598][ T6763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.170796][ T6767] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 497.246720][ T3663] hid (null): invalid report_size 18828 [ 497.252571][ T3663] hid (null): invalid report_count 336899251 [ 497.310616][ T3663] hid (null): unknown global tag 0xe [ 497.335650][ T3663] hid (null): unknown global tag 0xe [ 497.357924][ T3663] hid-generic 0003:0158:0100.0002: unknown main item tag 0x1 [ 497.380181][ T3663] hid-generic 0003:0158:0100.0002: unexpected long global item [ 497.392025][ T3663] hid-generic: probe of 0003:0158:0100.0002 failed with error -22 [ 497.457398][ T6763] team0: Port device team_slave_0 added [ 497.464242][ T3612] usb 1-1: USB disconnect, device number 9 [ 497.694408][ T6763] team0: Port device team_slave_1 added [ 497.937321][ T3611] Bluetooth: hci2: command 0x041b tx timeout [ 498.483174][ T6763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.522281][ T6763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.568648][ T6839] syz.0.645 (6839): attempted to duplicate a private mapping with mremap. This is not supported. [ 498.588919][ T6763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.639749][ T26] audit: type=1326 audit(1728387057.473:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6838 comm="syz.2.646" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f811daf3ff9 code=0x0 [ 498.679812][ T6763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.729005][ T26] audit: type=1326 audit(1728387057.523:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6838 comm="syz.2.646" exe="/root/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7f811daf3ff9 code=0x0 [ 498.751027][ T6763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.796012][ T6763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.679572][ T26] audit: type=1326 audit(1728387058.533:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6848 comm="syz.3.649" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff3a8a5aff9 code=0x0 [ 499.771947][ T26] audit: type=1326 audit(1728387058.623:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6848 comm="syz.3.649" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff3a8a5aff9 code=0x0 [ 499.858067][ T6852] loop0: detected capacity change from 0 to 4096 [ 499.868541][ T6763] device hsr_slave_0 entered promiscuous mode [ 499.871428][ T6846] loop1: detected capacity change from 0 to 8192 [ 499.896996][ T6763] device hsr_slave_1 entered promiscuous mode [ 499.933877][ T6763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 499.950517][ T6763] Cannot create hsr debugfs directory [ 499.985891][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 500.015194][ T302] device hsr_slave_0 left promiscuous mode [ 500.042121][ T6862] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 500.052991][ T302] device hsr_slave_1 left promiscuous mode [ 500.098363][ T302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 500.115537][ T302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 500.133120][ T302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 500.238950][ T302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 500.835825][ T302] device bridge_slave_1 left promiscuous mode [ 500.842334][ T302] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.883782][ T302] device bridge_slave_0 left promiscuous mode [ 500.898206][ T302] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.432609][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.591185][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.995925][ T302] device veth1_macvtap left promiscuous mode [ 502.007094][ T302] device veth0_macvtap left promiscuous mode [ 502.013166][ T302] device veth1_vlan left promiscuous mode [ 502.031681][ T302] device veth0_vlan left promiscuous mode [ 502.077717][ T3590] Bluetooth: hci2: command 0x0419 tx timeout [ 502.152730][ T6891] loop2: detected capacity change from 0 to 2048 [ 502.213706][ T6891] EXT4-fs error (device loop2): ext4_fill_super:4840: inode #2: comm syz.2.655: casefold flag without casefold feature [ 502.239876][ T6891] EXT4-fs (loop2): get root inode failed [ 502.253454][ T6891] EXT4-fs (loop2): mount failed [ 502.554293][ T302] team0 (unregistering): Port device team_slave_1 removed [ 502.570035][ T302] team0 (unregistering): Port device team_slave_0 removed [ 502.912355][ T302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 503.176729][ T302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 503.470129][ T302] bond0 (unregistering): Released all slaves [ 503.547423][ T6903] netlink: 16 bytes leftover after parsing attributes in process `syz.1.657'. [ 503.888056][ T6884] netlink: 'syz.3.653': attribute type 10 has an invalid length. [ 504.023788][ T6884] device geneve0 entered promiscuous mode [ 504.133040][ T6884] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 504.392679][ T6915] netlink: 277 bytes leftover after parsing attributes in process `syz.0.660'. [ 505.117524][ T6917] loop1: detected capacity change from 0 to 2048 [ 505.196556][ T6917] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 505.265499][ T6917] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 505.315917][ T6917] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 506.273140][ T6949] loop2: detected capacity change from 0 to 128 [ 506.357910][ T6949] FAT-fs (loop2): Directory bread(block 32) failed [ 506.424189][ T6949] FAT-fs (loop2): Directory bread(block 33) failed [ 506.446542][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 506.475175][ T6949] FAT-fs (loop2): Directory bread(block 34) failed [ 506.497151][ T6958] loop1: detected capacity change from 0 to 128 [ 506.517105][ T6949] FAT-fs (loop2): Directory bread(block 35) failed [ 506.524171][ T6949] FAT-fs (loop2): Directory bread(block 36) failed [ 506.617714][ T6949] FAT-fs (loop2): Directory bread(block 37) failed [ 506.624342][ T6949] FAT-fs (loop2): Directory bread(block 38) failed [ 506.740740][ T6949] FAT-fs (loop2): Directory bread(block 39) failed [ 506.765485][ T6949] FAT-fs (loop2): Directory bread(block 40) failed [ 506.772053][ T6949] FAT-fs (loop2): Directory bread(block 41) failed [ 506.968682][ T6763] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 506.971689][ T6949] attempt to access beyond end of device [ 506.971689][ T6949] loop2: rw=0, want=4112, limit=128 [ 507.009174][ T6763] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 507.022570][ T6949] FAT-fs (loop2): Filesystem has been set read-only [ 507.042046][ T6763] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 507.057200][ T6949] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 507.110655][ T6763] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 507.696584][ T6763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 507.880979][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 507.946127][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 508.703230][ T6763] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.757794][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 508.847620][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 509.173162][ T1235] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.180291][ T1235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.615808][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 509.758827][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 509.832710][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 509.843034][ T1235] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.850128][ T1235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.859209][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 510.134919][ T7014] loop0: detected capacity change from 0 to 1764 [ 510.206996][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 510.256365][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 510.350391][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 510.376166][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 510.384966][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 510.476820][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 510.489691][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 510.500530][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 510.648900][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 510.678131][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 511.494327][ T6763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 512.709903][ T7042] autofs4:pid:7042:autofs_fill_super: called with bogus options [ 513.522909][ T7050] loop2: detected capacity change from 0 to 256 [ 513.541714][ T7052] loop0: detected capacity change from 0 to 512 [ 513.590756][ T7052] EXT4-fs (loop0): Test dummy encryption mode enabled [ 513.633083][ T7052] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 513.701818][ T7045] loop2: detected capacity change from 0 to 512 [ 513.741076][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 513.761892][ T7052] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #17: comm syz.0.691: iget: bogus i_mode (0) [ 513.765697][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 513.789541][ T7052] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.691: couldn't read orphan inode 17 (err -117) [ 513.822891][ T7052] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,abort,barrier,barrier,test_dummy_encryption,nomblk_io_submit,,errors=continue. Quota mode: none. [ 513.831410][ T6763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.057360][ T7045] loop2: detected capacity change from 0 to 512 [ 515.428444][ T7045] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.689: Parent and EA inode have the same ino 15 [ 515.451326][ T7045] EXT4-fs (loop2): 1 orphan inode deleted [ 515.464404][ T7045] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 515.652180][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 515.663447][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 515.791876][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 515.814450][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 515.884408][ T7090] netlink: 'syz.0.695': attribute type 1 has an invalid length. [ 516.115883][ T6763] device veth0_vlan entered promiscuous mode [ 516.210567][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 516.331151][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 516.512146][ T6763] device veth1_vlan entered promiscuous mode [ 516.572591][ T7099] loop0: detected capacity change from 0 to 1024 [ 516.658060][ T6763] device veth0_macvtap entered promiscuous mode [ 516.702625][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 516.722814][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 516.742239][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 516.818678][ T7105] Zero length message leads to an empty skb [ 516.834788][ T7099] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 516.903943][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 517.158744][ T6763] device veth1_macvtap entered promiscuous mode [ 517.571794][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 517.612491][ T7113] hfsplus: bad catalog entry type [ 517.683649][ T6763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.126271][ T6763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.161478][ T6763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.360107][ T7114] loop1: detected capacity change from 0 to 65536 [ 518.370971][ T6763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.391563][ T6763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.404664][ T6763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.422673][ T6763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.433225][ T6763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.444318][ T6763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.458646][ T6763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.468630][ T6763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.480342][ T6763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.502071][ T6763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 518.521388][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 518.534380][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 518.669199][ T6763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.691492][ T6763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.703137][ T6763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.713991][ T6763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.732194][ T6763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.743427][ T7114] XFS (loop1): Mounting V5 Filesystem [ 518.761148][ T6763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.772377][ T6763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.796332][ T6763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.811390][ T7114] XFS (loop1): Ending clean mount [ 518.825989][ T6763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.838943][ T7114] XFS (loop1): Quotacheck needed: Please wait. [ 518.851797][ T6763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.861829][ T6763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.872967][ T6763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.884403][ T6763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 518.901076][ T7140] netlink: 40 bytes leftover after parsing attributes in process `syz.0.704'. [ 518.918329][ T3612] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 518.926072][ T6018] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 518.955890][ T7114] XFS (loop1): Quotacheck: Done. [ 518.958584][ T6018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 519.009604][ T7148] netlink: 104 bytes leftover after parsing attributes in process `syz.0.706'. [ 519.077444][ T6763] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.098950][ T6763] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.115657][ T6763] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.124531][ T6763] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.209222][ T7151] netlink: 'syz.0.707': attribute type 1 has an invalid length. [ 519.266852][ T7151] device bridge_slave_1 left promiscuous mode [ 519.336264][ T7151] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.443022][ T7151] device bridge_slave_0 left promiscuous mode [ 519.465483][ T3612] usb 4-1: unable to get BOS descriptor or descriptor too short [ 519.499319][ T7151] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.545771][ T3612] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 519.553518][ T3612] usb 4-1: can't read configurations, error -71 [ 519.661092][ T5804] XFS (loop1): Unmounting Filesystem [ 519.777991][ T5277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.806364][ T5277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.889334][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 519.907747][ T6018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.976509][ T6018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.022848][ T7164] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 520.086512][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 520.108068][ T7164] kvm: pic: non byte read [ 520.112760][ T7164] kvm: pic: level sensitive irq not supported [ 520.112845][ T7164] kvm: pic: non byte read [ 520.219493][ T7164] kvm: pic: level sensitive irq not supported [ 520.219554][ T7164] kvm: pic: non byte read [ 520.270878][ T7164] kvm: pic: level sensitive irq not supported [ 520.270941][ T7164] kvm: pic: non byte read [ 521.105123][ T7193] loop0: detected capacity change from 0 to 1024 [ 521.396361][ T7193] hfsplus: extend alloc file! (8192,65536,366) [ 521.498913][ T7201] netlink: 'syz.1.708': attribute type 1 has an invalid length. [ 521.593710][ T7204] loop2: detected capacity change from 0 to 64 [ 522.832394][ T7224] loop4: detected capacity change from 0 to 128 [ 522.884493][ T7210] device syzkaller0 entered promiscuous mode [ 522.893345][ T7219] loop0: detected capacity change from 0 to 256 [ 522.930586][ T7224] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 522.964232][ T7224] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038 (0x7fffffff) [ 523.204272][ T7230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.720'. [ 524.751030][ T7235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.723'. [ 524.779469][ T7219] FAT-fs (loop0): Directory bread(block 64) failed [ 524.805468][ T7219] FAT-fs (loop0): Directory bread(block 65) failed [ 524.825923][ T7219] FAT-fs (loop0): Directory bread(block 66) failed [ 524.854753][ T7219] FAT-fs (loop0): Directory bread(block 67) failed [ 524.886190][ T7219] FAT-fs (loop0): Directory bread(block 68) failed [ 524.945757][ T7219] FAT-fs (loop0): Directory bread(block 69) failed [ 524.952972][ T7219] FAT-fs (loop0): Directory bread(block 70) failed [ 527.592548][ T7219] FAT-fs (loop0): Directory bread(block 71) failed [ 527.599250][ T7219] FAT-fs (loop0): Directory bread(block 72) failed [ 527.605819][ T7219] FAT-fs (loop0): Directory bread(block 73) failed [ 527.703783][ T7255] loop2: detected capacity change from 0 to 256 [ 527.718444][ T7257] loop1: detected capacity change from 0 to 256 [ 527.739204][ T7] Bluetooth: hci0: command 0x0c1a tx timeout [ 527.845674][ T7261] binder: 7260:7261 ioctl c00c620f 20000040 returned -22 [ 527.875577][ T7261] loop4: detected capacity change from 0 to 512 [ 527.927780][ T7257] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 530.253033][ T7261] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 530.305603][ T7261] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038 (0x7fffffff) [ 530.609488][ T3580] Bluetooth: hci0: unexpected event for opcode 0x2019 [ 530.827958][ T7290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.739'. [ 530.883000][ T7290] netlink: 60 bytes leftover after parsing attributes in process `syz.2.739'. [ 531.135409][ T3615] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 531.200027][ T7296] block nbd1: shutting down sockets [ 531.605923][ T3615] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 531.639420][ T3615] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 531.939732][ T3615] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 531.949035][ T3615] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.957301][ T3615] usb 4-1: Product: Э [ 531.959198][ T7308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.755'. [ 531.961380][ T3615] usb 4-1: Manufacturer: 忯긐檆嶹ȁ踶⅏烈⍉쉴ꡙ␅䏲ﯭ䖍﨣⺭헄ꮟ荢巆仚퀚㫪垀φᇆᐸ堵쬗塙㈏縻ꯦ湰腠Ƈ [ 532.001275][ T3615] usb 4-1: SerialNumber: syz [ 532.034099][ T7308] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 532.059641][ T7308] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 532.365595][ T3615] usb 4-1: 0:2 : does not exist [ 532.405523][ T3615] usb 4-1: USB disconnect, device number 9 [ 533.359024][ T7325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.750'. [ 535.112520][ T7354] netlink: 40 bytes leftover after parsing attributes in process `syz.4.760'. [ 536.283468][ T7371] loop2: detected capacity change from 0 to 128 [ 536.330032][ T7371] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 538.459748][ T7382] netlink: 104 bytes leftover after parsing attributes in process `syz.4.768'. [ 538.592096][ T7382] loop4: detected capacity change from 0 to 8 [ 538.609594][ T7385] netlink: 'syz.2.769': attribute type 10 has an invalid length. [ 538.639448][ T7385] device geneve0 entered promiscuous mode [ 538.676684][ T7385] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 538.779897][ T7382] SQUASHFS error: xz decompression failed, data probably corrupt [ 538.820878][ T7382] SQUASHFS error: Failed to read block 0x108: -5 [ 538.831512][ T7382] SQUASHFS error: Unable to read metadata cache entry [106] [ 538.839629][ T7382] SQUASHFS error: Unable to read inode 0x7ff [ 538.880592][ T7393] netlink: 'syz.2.772': attribute type 1 has an invalid length. [ 539.631630][ T7398] loop1: detected capacity change from 0 to 128 [ 539.826860][ T3612] Bluetooth: hci3: command 0x0406 tx timeout [ 539.866710][ T7398] FAT-fs (loop1): Unrecognized mount option "0x0000000000000000" or missing value [ 541.438263][ T7398] loop1: detected capacity change from 0 to 256 [ 541.485955][ T7398] exfat: Bad value for 'allow_utime' [ 541.697601][ T7416] loop4: detected capacity change from 0 to 256 [ 542.129229][ T7416] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 542.414128][ T7421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.780'. [ 542.508260][ T7416] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000005) [ 542.524343][ T7426] 9pnet: Insufficient options for proto=fd [ 542.596777][ T7416] exFAT-fs (loop4): Filesystem has been set read-only [ 542.669281][ T7430] netlink: 'syz.1.783': attribute type 10 has an invalid length. [ 542.685955][ T7430] device geneve0 entered promiscuous mode [ 542.736536][ T6763] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000005) [ 542.756527][ T7430] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 542.778817][ T6763] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000005) [ 542.802081][ T7424] loop0: detected capacity change from 0 to 8192 [ 542.875541][ T5009] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 543.793069][ T5009] usb 3-1: Using ep0 maxpacket: 8 [ 543.841409][ T7455] /dev/loop0: Can't open blockdev [ 543.958009][ T5009] usb 3-1: New USB device found, idVendor=2639, idProduct=0002, bcdDevice=27.3c [ 543.958043][ T5009] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.959423][ T5009] usb 3-1: config 0 descriptor?? [ 544.148225][ T7462] loop1: detected capacity change from 0 to 512 [ 544.162437][ T3667] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.279987][ T7462] EXT4-fs (loop1): 1 orphan inode deleted [ 544.365385][ T7462] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,nojournal_checksum,noquota,barrier=0x0000000000000006,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,bsddf,dioread_lock,,errors=continue. Quota mode: writeback. [ 544.418330][ T3667] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.485757][ T7462] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038 (0x7fffffff) [ 544.705598][ T26] audit: type=1326 audit(1728387103.423:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7468 comm="syz.0.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e8d06ff9 code=0x7ffc0000 [ 544.727785][ C1] vkms_vblank_simulate: vblank timer overrun [ 545.126120][ T26] audit: type=1326 audit(1728387103.433:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7468 comm="syz.0.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e8d06ff9 code=0x7ffc0000 [ 545.204636][ T26] audit: type=1326 audit(1728387103.443:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7468 comm="syz.0.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2e8d06ff9 code=0x7ffc0000 [ 545.226825][ C1] vkms_vblank_simulate: vblank timer overrun [ 545.268935][ T3667] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.294409][ T3615] usb 3-1: USB disconnect, device number 5 [ 545.364206][ T26] audit: type=1326 audit(1728387103.443:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7468 comm="syz.0.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e8d06ff9 code=0x7ffc0000 [ 545.413428][ T26] audit: type=1326 audit(1728387103.443:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7468 comm="syz.0.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e8d06ff9 code=0x7ffc0000 [ 545.436450][ T26] audit: type=1326 audit(1728387103.443:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7468 comm="syz.0.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa2e8d06ff9 code=0x7ffc0000 [ 545.458569][ C1] vkms_vblank_simulate: vblank timer overrun [ 545.469514][ T26] audit: type=1326 audit(1728387103.443:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7468 comm="syz.0.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e8d06ff9 code=0x7ffc0000 [ 545.491713][ C1] vkms_vblank_simulate: vblank timer overrun [ 545.518673][ T26] audit: type=1326 audit(1728387103.453:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7468 comm="syz.0.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e8d06ff9 code=0x7ffc0000 [ 545.540858][ C1] vkms_vblank_simulate: vblank timer overrun [ 545.547840][ T26] audit: type=1326 audit(1728387103.453:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7468 comm="syz.0.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa2e8d06ff9 code=0x7ffc0000 [ 545.570277][ T26] audit: type=1326 audit(1728387103.513:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7468 comm="syz.0.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e8d06ff9 code=0x7ffc0000 [ 545.592420][ C1] vkms_vblank_simulate: vblank timer overrun [ 545.647563][ T3667] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.408299][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 547.430726][ T7479] chnl_net:caif_netlink_parms(): no params data found [ 547.617247][ T7479] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.630080][ T7479] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.653638][ T7479] device bridge_slave_0 entered promiscuous mode [ 547.655411][ T3615] Bluetooth: hci2: command 0x0409 tx timeout [ 547.691799][ T7515] loop0: detected capacity change from 0 to 256 [ 547.717958][ T7479] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.725235][ T7479] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.739988][ T7479] device bridge_slave_1 entered promiscuous mode [ 547.806003][ T7515] /dev/loop0: Can't open blockdev [ 547.903542][ T7519] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 547.942375][ T7519] kvm: pic: non byte read [ 547.985753][ T7519] kvm: pic: level sensitive irq not supported [ 547.985817][ T7519] kvm: pic: non byte read [ 548.013488][ T7519] kvm: pic: level sensitive irq not supported [ 548.013549][ T7519] kvm: pic: non byte read [ 548.032779][ T7479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.067463][ T7519] kvm: pic: level sensitive irq not supported [ 548.067523][ T7519] kvm: pic: non byte read [ 548.080250][ T7479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.187860][ T7527] loop2: detected capacity change from 0 to 8192 [ 548.218950][ T7479] team0: Port device team_slave_0 added [ 548.274155][ T7479] team0: Port device team_slave_1 added [ 548.443776][ T7479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.471749][ T7479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.497777][ C1] vkms_vblank_simulate: vblank timer overrun [ 548.524296][ T7479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.589108][ T7479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.600057][ T7479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.575650][ T3615] Bluetooth: hci4: command 0x0406 tx timeout [ 549.735709][ T5009] Bluetooth: hci2: command 0x041b tx timeout [ 550.130392][ T7479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.393508][ T7569] loop2: detected capacity change from 0 to 2048 [ 550.397980][ T7479] device hsr_slave_0 entered promiscuous mode [ 550.425849][ T7479] device hsr_slave_1 entered promiscuous mode [ 550.452680][ T7479] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 550.484212][ T7479] Cannot create hsr debugfs directory [ 550.533167][ T7569] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 550.575238][ T7569] overlayfs: upper fs needs to support d_type. [ 550.607214][ T7569] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 550.636218][ T7569] overlayfs: failed to set xattr on upper [ 550.682789][ T7569] overlayfs: ...falling back to index=off,metacopy=off. [ 551.815741][ T5009] Bluetooth: hci2: command 0x040f tx timeout [ 551.829983][ T6273] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh [ 551.875576][ T6273] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh [ 552.018956][ T3667] device hsr_slave_0 left promiscuous mode [ 552.030372][ T3667] device hsr_slave_1 left promiscuous mode [ 552.037397][ T3667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 552.045730][ T3667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 552.053645][ T3667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 552.063134][ T3667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 552.082477][ T3667] device bridge_slave_1 left promiscuous mode [ 552.102994][ T3667] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.149724][ T3667] device bridge_slave_0 left promiscuous mode [ 552.156150][ T3667] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.463128][ T3667] device veth1_macvtap left promiscuous mode [ 552.516414][ T3667] device veth0_macvtap left promiscuous mode [ 552.585768][ T3667] device veth1_vlan left promiscuous mode [ 552.696168][ T3667] device veth0_vlan left promiscuous mode [ 553.895421][ T5009] Bluetooth: hci2: command 0x0419 tx timeout [ 553.953433][ T3667] team0 (unregistering): Port device team_slave_1 removed [ 554.003929][ T3667] team0 (unregistering): Port device team_slave_0 removed [ 554.725862][ T3667] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 554.985222][ T3667] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 555.271392][ T7625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.825'. [ 555.396634][ T7628] loop0: detected capacity change from 0 to 128 [ 555.408733][ T3667] bond0 (unregistering): Released all slaves [ 555.771411][ T7628] EXT4-fs (loop0): Unrecognized mount option "fsuuid=9d29e111-aeaa-6599-778c-28bUm61a" or missing value [ 556.106901][ T7608] netlink: 'syz.1.822': attribute type 3 has an invalid length. [ 556.234066][ T7479] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 556.359012][ T7479] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 556.407177][ T7479] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 556.485951][ T7479] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 557.331507][ T7647] loop1: detected capacity change from 0 to 1024 [ 557.764693][ T7479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 557.852294][ T7647] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,mb_optimize_scan=0x0000000000000000,noinit_itable,norecovery,noload,lazytime,usrjquota=,bsdgroups,dioread_lock,,errors=continue. Quota mode: none. [ 557.916645][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 557.924700][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 557.975856][ T7479] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.083870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 558.093183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 558.102854][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.110010][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.153419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 558.161908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 558.914885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 558.923460][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.930587][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.953287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 559.049690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 559.146842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 559.176576][ T7684] loop0: detected capacity change from 0 to 1024 [ 559.202312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 559.249426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 559.263744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 559.272694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 559.281522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 559.290747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 559.302056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 559.348684][ T7684] hfsplus: extend alloc file! (8192,65536,366) [ 559.702874][ T7479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 560.059012][ T3613] Bluetooth: hci0: command 0x0409 tx timeout [ 560.065134][ T3613] Bluetooth: hci5: command 0x0406 tx timeout [ 560.091374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 560.201481][ T7653] chnl_net:caif_netlink_parms(): no params data found [ 560.221450][ T7684] kvm: vcpu 0: requested 394 ns lapic timer period limited to 200000 ns [ 560.295704][ T27] INFO: task syz.3.439:5746 blocked for more than 143 seconds. [ 560.304194][ T27] Not tainted 5.15.167-syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 560.345067][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 560.428781][ T27] task:syz.3.439 state:D stack:24032 pid: 5746 ppid: 5126 flags:0x00004004 [ 560.495903][ T27] Call Trace: [ 560.499264][ T27] [ 560.502248][ T27] __schedule+0x12c4/0x45b0 [ 560.508165][ T27] ? blk_flush_plug_list+0x452/0x490 [ 560.513535][ T27] ? release_firmware_map_entry+0x190/0x190 [ 560.524146][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 560.533546][ T27] ? blk_check_plugged+0x250/0x250 [ 560.540577][ T27] ? print_irqtrace_events+0x210/0x210 [ 560.547991][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 560.553183][ T27] schedule+0x11b/0x1f0 [ 560.565370][ T27] io_schedule+0x88/0x100 [ 560.569759][ T27] wait_on_page_bit_common+0xa13/0x1180 [ 560.583574][ T27] ? wait_on_page_bit+0x50/0x50 [ 560.590208][ T27] ? rcu_lock_release+0x20/0x20 [ 560.595125][ T27] ? bio_add_page+0x2b3/0x450 [ 560.601132][ T27] z_erofs_runqueue+0x788/0x1a80 [ 560.606935][ T27] ? tick_nohz_tick_stopped+0x77/0xb0 [ 560.612422][ T27] ? z_erofs_do_read_page+0x2600/0x2600 [ 560.620338][ T27] ? __bpf_trace_erofs_destroy_inode+0x20/0x20 [ 560.631639][ T27] z_erofs_readahead+0xc9a/0x1280 [ 560.637830][ T27] ? z_erofs_readpage+0x840/0x840 [ 560.642979][ T27] read_pages+0x159/0x8e0 [ 560.653973][ T27] ? page_cache_ra_unbounded+0x930/0x930 [ 560.674126][ T27] ? add_to_page_cache_locked+0x40/0x40 [ 560.686472][ T27] ? down_read+0x1b3/0x2e0 [ 560.695373][ T27] page_cache_ra_unbounded+0x7b0/0x930 [ 560.700861][ T27] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 560.722683][ T27] force_page_cache_ra+0x378/0x3e0 [ 560.735264][ T27] generic_fadvise+0x5ba/0x8b0 [ 560.740396][ T27] ? dump_task+0x5f0/0x5f0 [ 560.744971][ T27] ? __fdget+0x191/0x220 [ 560.765649][ T27] __x64_sys_fadvise64+0x138/0x180 [ 560.770863][ T27] do_syscall_64+0x3b/0xb0 [ 560.783447][ T27] ? clear_bhb_loop+0x15/0x70 [ 560.788293][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 560.794244][ T27] RIP: 0033:0x7f2bcedfaff9 [ 560.805679][ T27] RSP: 002b:00007f2bcd273038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd [ 560.814274][ T27] RAX: ffffffffffffffda RBX: 00007f2bcefb2f80 RCX: 00007f2bcedfaff9 [ 560.832435][ T27] RDX: 0000000000004101 RSI: 0000000000e0ffff RDI: 0000000000000004 [ 560.849634][ T27] RBP: 00007f2bcee6d296 R08: 0000000000000000 R09: 0000000000000000 [ 560.857963][ T27] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 560.866082][ T27] R13: 0000000000000000 R14: 00007f2bcefb2f80 R15: 00007fff44af5f48 [ 560.874133][ T27] [ 560.877285][ T27] INFO: task syz.3.439:5750 blocked for more than 143 seconds. [ 560.884827][ T27] Not tainted 5.15.167-syzkaller #0 [ 560.890824][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 560.899993][ T27] task:syz.3.439 state:D stack:27040 pid: 5750 ppid: 5126 flags:0x00004004 [ 560.909453][ T27] Call Trace: [ 560.912774][ T27] [ 560.915981][ T27] __schedule+0x12c4/0x45b0 [ 560.920572][ T27] ? release_firmware_map_entry+0x190/0x190 [ 560.927698][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 560.933746][ T27] ? print_irqtrace_events+0x210/0x210 [ 560.939733][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 560.944917][ T27] schedule+0x11b/0x1f0 [ 560.949304][ T27] io_schedule+0x88/0x100 [ 560.954086][ T27] wait_on_page_bit_common+0xa13/0x1180 [ 560.959801][ T27] ? wait_on_page_bit+0x50/0x50 [ 560.964715][ T27] ? rcu_lock_release+0x20/0x20 [ 560.969716][ T27] ? rcu_lock_release+0x5/0x20 [ 560.974546][ T27] do_read_cache_page+0x9c1/0x1040 [ 560.979951][ T27] erofs_namei+0x15e/0x1700 [ 560.984533][ T27] erofs_lookup+0x1c0/0x460 [ 560.989131][ T27] ? erofs_namei+0x1700/0x1700 [ 560.993948][ T27] ? d_hash_and_lookup+0x1b0/0x1b0 [ 560.999168][ T27] ? __init_waitqueue_head+0xaa/0x140 [ 561.004605][ T27] __lookup_slow+0x275/0x3d0 [ 561.009424][ T27] ? lookup_one_len+0x2d0/0x2d0 [ 561.014296][ T27] ? down_read+0x1b3/0x2e0 [ 561.018836][ T27] lookup_slow+0x53/0x70 [ 561.023138][ T27] walk_component+0x48c/0x610 [ 561.027980][ T27] ? nd_alloc_stack+0xf0/0xf0 [ 561.032728][ T27] ? generic_permission+0x21c/0x4f0 [ 561.039311][ T27] ? inode_permission+0xf7/0x450 [ 561.044311][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 561.049597][ T27] ? bpf_lsm_inode_permission+0x5/0x10 [ 561.055675][ T27] ? security_inode_permission+0xad/0xf0 [ 561.061392][ T27] link_path_walk+0x642/0xd90 [ 561.066475][ T27] ? handle_lookup_down+0x130/0x130 [ 561.071751][ T27] path_lookupat+0xa9/0x450 [ 561.076328][ T27] filename_lookup+0x230/0x5c0 [ 561.081105][ T27] ? hashlen_string+0x110/0x110 [ 561.086197][ T27] ? getname_flags+0x1ec/0x4e0 [ 561.091019][ T27] user_path_at_empty+0x40/0x180 [ 561.096247][ T27] path_setxattr+0xae/0x2a0 [ 561.100817][ T27] ? simple_xattr_list_add+0xf0/0xf0 [ 561.106204][ T27] ? syscall_enter_from_user_mode+0x2e/0x240 [ 561.112250][ T27] __x64_sys_setxattr+0xb7/0xd0 [ 561.117315][ T27] do_syscall_64+0x3b/0xb0 [ 561.121865][ T27] ? clear_bhb_loop+0x15/0x70 [ 561.126868][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 561.132762][ T27] RIP: 0033:0x7f2bcedfaff9 [ 561.137279][ T27] RSP: 002b:00007f2bcd252038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 561.147026][ T27] RAX: ffffffffffffffda RBX: 00007f2bcefb3058 RCX: 00007f2bcedfaff9 [ 561.155064][ T27] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000020000180 [ 561.163961][ T27] RBP: 00007f2bcee6d296 R08: 0000000000000000 R09: 0000000000000000 [ 561.172050][ T27] R10: 0000000000000386 R11: 0000000000000246 R12: 0000000000000000 [ 561.185784][ T27] R13: 0000000000000000 R14: 00007f2bcefb3058 R15: 00007fff44af5f48 [ 561.193861][ T27] [ 561.196994][ T27] [ 561.196994][ T27] Showing all locks held in the system: [ 561.204702][ T27] 2 locks held by kworker/0:0/7: [ 561.209867][ T27] #0: ffff888017070938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 561.221238][ T27] #1: ffffc90000cc7d20 (xfrm_state_gc_work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 561.231945][ T27] 1 lock held by khungtaskd/27: [ 561.237271][ T27] #0: ffffffff8c91fc60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 561.247363][ T27] 5 locks held by kworker/u4:3/302: [ 561.252607][ T27] #0: ffff8880b903a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 561.264802][ T27] #1: ffff8880b9027848 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x53d/0x810 [ 561.277335][ T27] #2: ffff8880b903a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 561.305636][ T27] #3: ffffffff8c91fc60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 561.315187][ T27] #4: ffff8880b9027e78 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x1b5/0x8a0 [ 561.324884][ T27] 2 locks held by getty/3329: [ 561.330038][ T27] #0: ffff88802963f098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 561.340428][ T27] #1: ffffc9000228e2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0 [ 561.351115][ T27] 3 locks held by kworker/0:5/3611: [ 561.356659][ T27] #0: ffff888017070938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 561.369555][ T27] #1: ffffc90002f67d20 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 561.380260][ T27] #2: ffffffff8c924228 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x350/0x740 [ 561.391674][ T27] 2 locks held by kworker/0:6/3613: [ 561.397962][ T27] #0: ffff888017072138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 561.408895][ T27] #1: ffffc900030b7d20 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 561.420995][ T27] 3 locks held by kworker/1:6/3615: [ 561.426827][ T27] #0: ffff888017070938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 561.438117][ T27] #1: ffffc900030d7d20 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 561.450667][ T27] #2: ffff888022b63240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2cd/0x4120 [ 561.461571][ T27] 4 locks held by kworker/u4:6/3667: [ 561.468094][ T27] 1 lock held by syz.3.439/5746: [ 561.473087][ T27] #0: ffff8880572f4320 (mapping.invalidate_lock#5){.+.+}-{3:3}, at: page_cache_ra_unbounded+0x1a6/0x930 [ 561.495130][ T27] 1 lock held by syz.3.439/5750: [ 561.500452][ T27] #0: ffff8880572f4180 (&type->i_mutex_dir_key#18){.+.+}-{3:3}, at: lookup_slow+0x45/0x70 [ 561.523635][ T27] 3 locks held by syz-executor/5861: [ 561.532660][ T27] #0: ffff8880682fcff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x63/0x1070 [ 561.542979][ T27] #1: ffff8880682fc078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_do_close+0x431/0x1070 [ 561.552955][ T27] #2: ffffffff8db7b128 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x220 [ 561.563521][ T27] 1 lock held by syz-executor/7653: [ 561.569868][ T27] #0: ffffffff8c924228 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x350/0x740 [ 561.582802][ T27] 3 locks held by syz.0.839/7684: [ 561.588240][ T27] #0: ffff888075780ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x63/0x1070 [ 561.598318][ T27] #1: ffff888075780078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_do_close+0x431/0x1070 [ 561.608024][ T27] #2: ffffffff8db7b128 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x220 [ 561.618370][ T27] [ 561.620733][ T27] ============================================= [ 561.620733][ T27] [ 561.644395][ T27] NMI backtrace for cpu 1 [ 561.648755][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.167-syzkaller #0 [ 561.656737][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 561.666824][ T27] Call Trace: [ 561.670102][ T27] [ 561.673032][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 561.677713][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 561.683348][ T27] ? panic+0x860/0x860 [ 561.687427][ T27] ? nmi_cpu_backtrace+0x23b/0x4a0 [ 561.692537][ T27] nmi_cpu_backtrace+0x46a/0x4a0 [ 561.697473][ T27] ? __wake_up_klogd+0xd5/0x100 [ 561.702397][ T27] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 561.708530][ T27] ? _printk+0xd1/0x120 [ 561.712668][ T27] ? panic+0x860/0x860 [ 561.716713][ T27] ? __wake_up_klogd+0xcc/0x100 [ 561.721547][ T27] ? panic+0x860/0x860 [ 561.725595][ T27] ? __rcu_read_unlock+0x92/0x100 [ 561.730602][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 561.736647][ T27] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 561.742611][ T27] watchdog+0xe72/0xeb0 [ 561.746756][ T27] kthread+0x3f6/0x4f0 [ 561.750804][ T27] ? hungtask_pm_notify+0x50/0x50 [ 561.755810][ T27] ? kthread_blkcg+0xd0/0xd0 [ 561.760382][ T27] ret_from_fork+0x1f/0x30 [ 561.764789][ T27] [ 561.768882][ T27] Sending NMI from CPU 1 to CPUs 0: [ 561.774558][ C0] NMI backtrace for cpu 0 [ 561.774573][ C0] CPU: 0 PID: 3613 Comm: kworker/0:6 Not tainted 5.15.167-syzkaller #0 [ 561.774591][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 561.774599][ C0] Workqueue: events pwq_unbound_release_workfn [ 561.774622][ C0] RIP: 0010:zap_class+0x163/0x870 [ 561.774639][ C0] Code: 8b 3b eb 03 4d 8b 3f 4d 85 ff 74 bc 49 83 c7 f8 74 b6 4d 89 fd 49 c1 ed 03 43 0f b6 44 35 00 84 c0 0f 85 35 02 00 00 41 8b 1f c3 fc 0f 84 06 02 00 00 48 c1 eb 08 81 fb 00 00 50 00 73 7b 48 [ 561.774650][ C0] RSP: 0018:ffffc900030b7ae8 EFLAGS: 00000046 [ 561.774662][ C0] RAX: 0000000000000000 RBX: 0000000000fc1514 RCX: 0000000000015eb7 [ 561.774671][ C0] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff96819eb8 [ 561.774680][ C0] RBP: ffffffff8f6d5d34 R08: dffffc0000000000 R09: fffffbfff2d033d8 [ 561.774690][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000dc0 [ 561.774700][ C0] R13: 1ffffffff2113c60 R14: dffffc0000000000 R15: ffffffff9089e300 [ 561.774710][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 561.774722][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 561.774731][ C0] CR2: 00005648512116d8 CR3: 000000007c85a000 CR4: 00000000003506f0 [ 561.774744][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 561.774752][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 561.774761][ C0] Call Trace: [ 561.774766][ C0] [ 561.774772][ C0] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 561.774787][ C0] ? read_lock_is_recursive+0x10/0x10 [ 561.774801][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 561.774820][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 561.774834][ C0] ? nmi_handle+0xf7/0x370 [ 561.774848][ C0] ? zap_class+0x163/0x870 [ 561.774860][ C0] ? default_do_nmi+0x62/0x150 [ 561.774876][ C0] ? exc_nmi+0xa8/0x100 [ 561.774889][ C0] ? end_repeat_nmi+0x16/0x31 [ 561.774905][ C0] ? zap_class+0x163/0x870 [ 561.774917][ C0] ? zap_class+0x163/0x870 [ 561.774930][ C0] ? zap_class+0x163/0x870 [ 561.774942][ C0] [ 561.774946][ C0] [ 561.774952][ C0] lockdep_unregister_key+0x369/0x5b0 [ 561.774967][ C0] ? lockdep_reset_lock+0x3c0/0x3c0 [ 561.774980][ C0] ? print_irqtrace_events+0x210/0x210 [ 561.774995][ C0] pwq_unbound_release_workfn+0x23d/0x290 [ 561.775012][ C0] process_one_work+0x8a1/0x10c0 [ 561.775031][ C0] ? worker_detach_from_pool+0x260/0x260 [ 561.775046][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 561.775060][ C0] ? kthread_data+0x4e/0xc0 [ 561.775073][ C0] ? wq_worker_running+0x97/0x170 [ 561.775086][ C0] worker_thread+0xaca/0x1280 [ 561.775108][ C0] kthread+0x3f6/0x4f0 [ 561.775120][ C0] ? rcu_lock_release+0x20/0x20 [ 561.775133][ C0] ? kthread_blkcg+0xd0/0xd0 [ 561.775145][ C0] ret_from_fork+0x1f/0x30 [ 561.775164][ C0] [ 561.811853][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 562.069197][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.167-syzkaller #0 [ 562.077158][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 562.087197][ T27] Call Trace: [ 562.090456][ T27] [ 562.093371][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 562.098035][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 562.103649][ T27] ? panic+0x860/0x860 [ 562.107710][ T27] panic+0x318/0x860 [ 562.111586][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 562.117197][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 562.123333][ T27] ? fb_is_primary_device+0xd0/0xd0 [ 562.128512][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 562.134561][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 562.140693][ T27] ? nmi_trigger_cpumask_backtrace+0x281/0x2a0 [ 562.146830][ T27] ? nmi_trigger_cpumask_backtrace+0x286/0x2a0 [ 562.152966][ T27] watchdog+0xeb0/0xeb0 [ 562.157110][ T27] kthread+0x3f6/0x4f0 [ 562.161158][ T27] ? hungtask_pm_notify+0x50/0x50 [ 562.166162][ T27] ? kthread_blkcg+0xd0/0xd0 [ 562.170733][ T27] ret_from_fork+0x1f/0x30 [ 562.175140][ T27] [ 562.178330][ T27] Kernel Offset: disabled [ 562.182660][ T27] Rebooting in 86400 seconds..