last executing test programs: 30.042294129s ago: executing program 4 (id=696): socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet6(0xa, 0x2, 0x7) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) sendfile(r3, r3, 0x0, 0x9) 28.036440389s ago: executing program 4 (id=700): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2, 0x0, 0x290}}) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/time_for_children\x00') setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000000)=@generic={0x1, 0x5c7, 0x4}) 13.177347031s ago: executing program 2 (id=680): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40901}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xc8}]}]}]}, 0x30}}, 0x0) 12.987973747s ago: executing program 2 (id=734): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x80, &(0x7f0000000200)={[{@resgid}, {@minixdf}, {@jqfmt_vfsold}, {@quota}]}, 0x1, 0x51d, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJpu1d5s2W+gBUKFLKSxotXbibVdVL2xPFUKVED1y2IbEG61ix1HslCbsIXvkjkQlTnDijAQSB6Q9cUfiADcu5YBUYAVqkJBwNWM76/xxYmUTezf+/aSR38yz/b23o3lv9HkzL4CJdTUitiPiYkS8HxGz3eNJd4vbnS1736eP7i/uPLq/mES7/d4/k7w+OxZ9n8k81/3OYkR8/52IHyb7gv4porm5tbJQq1XXu4fKrfpaubm5deNefWG5ulxdrVRuzd+ae/PmG5VT6+sr9V9/cikifv+7L3/8x+1v/Thr1ky3rr8fp6nT9endOJkLEfHdswg2BlPd/lw8yYdP9CFOUxoRn4uIV/Prfzam8rO5197T9O0Rtg4AOAvt9my0Z/v3AYDzLs1zYEla6uYCZiJNS6VODu+luJzWGs3W9buNjdWlTq7sSkynd+/VqnPdXOHD39x+O7tvmM/r8vokq6/s278ZES9GxE8Ll/L90mKjtjTG+x4AmGTP7Zv//1PozP8AwDlXfFwsjLMdAMDoFMfdAABg5Mz/ADB5zP8AMHnM/wAwecz/ADB5zP8AMFG+9+672dbe6T7/eumDzY2Vxgc3lqrNlVJ9Y7G02FhfKy03Gsv5M3vqx31frdFYm389Nj4st6rNVrm5uXWn3thYbd3Jn+t9pzo9kl4BAEd58ZWHf0kiYvutS/kWfc/7P3aufvmsWwecpXTcDQDGZmrcDQDG5uBqX8CkkI+HyfX/drsdfWv3RsSD3VLfw0AH/hehj4YKk1o3FJ4+1774BPl/4Jkm/w+T62T5f/fycB7I/8PkarcTa/4DwISR4weSY+r7f/+fa/ftDPf7PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJxLM/mWpKXuWuAzkaalUsTzEXElppO792rVuYh4ISL+XJguZPvzEWHdIAB4lqV/T7rrf12bfW1mf+3Fwn8L+WtE/Ojn7/3sw4VWa30+4mLyr93jrY+6xyvjaD8AcJzePN2bx3s+fXR/sbeNsj2fvN1ZXDSLu9PdOjUX4kL+WsxzDZf/nXT3O7L7lalTiL/9ICK+cFj/kzw3cqW78un++Fns50caP90TP83rOq/Zv8XnT6EtMGkeZuPP7cOuvzSu5q+HX//FfIR6cr3xb+fA+Jfujn9TA8a/q8PGeP0P3zlwsD3bqXsQ8aULETu9L+8bf3rxkwHxXxsy/l9f/sqrg+rav4i4Fof1P9kTq9yqr5Wbm1s37tUXlqvL1dVK5db8rbk3b75RKec56nIvU33QP966/sKg+Fn/Lw+IXzym/18fsv+//N/7P/jqEfG/+bXDz/9LR8TP5sRvDBl/4fJvi4PqsvhLA/p/3Pm/PmT8j/+2tTTkWwGAEWhubq0s1GrV9ScvFI98T3oaIYYoJBHbZxzicaHwq5+8c/ybCyNrzwkLMahq6mlp4bkpFJ6OZgxRGPfIBJy1xxf9uFsCAAAAAAAAAAAAAAAMMoo/Jxp3HwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADi/PgsAAP//0JTXgA==") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r2, &(0x7f0000000180)=""/43, 0xfd8a, 0x0) 10.82900068s ago: executing program 2 (id=738): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) 9.256422764s ago: executing program 2 (id=740): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x69) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000100008500000082", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$binfmt_script(r3, &(0x7f0000000080), 0x208e24b) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r5 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000000)='./file0\x00', r5, &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) 8.908093243s ago: executing program 1 (id=741): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x2f, &(0x7f00000003c0)={&(0x7f00000004c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x8000000, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) 8.896281284s ago: executing program 1 (id=742): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000a40), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2010410, &(0x7f0000000a80)=ANY=[], 0x3, 0x657, &(0x7f0000003180)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) pipe(&(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a843500140600fe80000000000000e5000000", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000200)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473ba6100b021ee66b9800000c00f146635004000000f300f20e06635800000000f22e0f30fa6c8", 0x54}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001a00000000000000000000000a00000000000000000008"], 0x1c}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.739588607s ago: executing program 2 (id=743): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000340)={0x0, 0x8003}, 0x4) syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[], 0x0) 8.235774741s ago: executing program 1 (id=744): mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() socket$inet_udplite(0x2, 0x2, 0x88) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r4, 0x0, 0xf3a, 0x0) tee(r3, r7, 0xaf5, 0x0) write$binfmt_elf64(r5, &(0x7f0000003380)=ANY=[], 0x18c6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00'}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r8}, 0x18) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r9, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x0, 0x0, 0x0) 7.589729905s ago: executing program 2 (id=745): socket$nl_netfilter(0x10, 0x3, 0xc) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000140)={"9fcaa0504b38d5004b9277c079417ff857dc9b7ac770169aed764b4d2ada8bde"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x2, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0xc0189436, &(0x7f0000000140)) 7.29739931s ago: executing program 1 (id=748): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) bind$inet6(r2, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback=0x7f000002}}}}}}, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r2, &(0x7f0000000100)="bc", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r2) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 7.29706227s ago: executing program 3 (id=749): socket$inet(0x2, 0x3, 0x2) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000fc0)={0x2a, 0x6, 0x0, {0x1, 0x0, 0x1, 0x0, '\x00'}}, 0x2a) 5.336326847s ago: executing program 3 (id=750): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000e00)=ANY=[@ANYBLOB='lastblock=00000000000000000000,adrnicb,dmode=00000000000000004000005,adinicb,shortad,shortad,undelete,uid=', @ANYRESDEC=0x0, @ANYBLOB=',lastblock=00000000000000001023,umask=00000000000000000000006,dmode=00000000000000000000011,nostrict,gid=', @ANYRESDEC=0x0, @ANYBLOB=',umask=00000000000000000000005,\x00'], 0x2, 0xc2d, &(0x7f00000001c0)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001a000100000000000000000002000000000000000000000008000100ac14"], 0x2c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000000202010800000000000000000200000024000280140001"], 0x38}}, 0x0) 4.512715526s ago: executing program 1 (id=753): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000a40), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2010410, &(0x7f0000000a80)=ANY=[], 0x3, 0x657, &(0x7f0000003180)="$eJzs3c1vHGcdB/DvrB3HG0LqpkkbUKVajQQIi8SO5YK5EBAgHypUlQNnK3EaK5u02C5yK0TN+7WH/gHl4BsnJO6RyoUL3Hr1sRISl14wp0UzO+vXtWPnxbsun080+zyzzzPP/J7fzOzsrhVtgP9bcxMZfpgicxOvr5brG+vTrY316fvdepKzSdaS4SSNJMV/2u32J8nNpNgapthT7vPR4uybn36+8Vlnbbheqv6Nw7Y7mrV6yXiSobp8WuPdeuLxiq0Z3kxytS6h784kae/y87+f77SM7OrY7LX16MkECTxTRee+uc9Ycq6+0Mv3AZ27Yueefaqt9TsAAAAAOAHPbWYzq8WFfscBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp8Xa9u//F/XS6NbHU3R//3+kfi51fbC8crzuD59VHAAAAAAAAABwgl7ZzGZWc6G73i6qv/m/Wq1cqh6/lHeznIUs5VpWM5+VrGQpU0nGdgw0sjq/srI0dYQtb/Tc8sYjAj1bl82nM28AAAAAAAAA+IL5Tea2//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACDoEiGOkW1XOrWx9IYTjKaZKTst5b8s1s/zR72OwAAAAB4cs1HdXhuM5tZzYXueruoPvO/WH3uH827eZCVLGYlrSzkdvVdQOdTf2Njfbq1sT59v1z2j/v9fx8rzmrEdL576L3nK1WPZu5ksXrmWm7l7bRyO41qy9KVOp7uqHvi+nUZU/G92hEju12X5cw/rMt9PjjWZA9yzC9TxqqMnNnKyGQdW5mN57tHpvcROubR2bunqTS2gr20Z097JvFYOT9Xl+V8/nBQzvtiVyZGU611z74XD8958vW//vlnd1sP7t29szwxOFM6mqG6bFePzf3nxPSOTLz0Rc7EPpNVJi5vrc/lx/lpJjKeN7KUxfwi81nJQsbzw6o2X5/PxY5L/oBM3dy19sajIhmpz9DOwTpeTK9W217IYn6St3M7C3mt+ncjU/l2ZjKT2R1H+PLhR7i66hsHXPXtL/cM/uo36kp5z/rjUe5dJ6bM6/PdvBbZ9Zo7VrXtfGY7SxePkKVjvjYOf7W+Bst9/LYuB8PeTEztyMQLh2fiT9WUllsP7i3dnX/naLu7+GFdKa+j3w/UXaI8Xy6WB6ta2312lG0v9GybqtoubbU19rVd3mrrXKlrB16pI/V7uP0j3ajaXurZNl21XdnR1uv9FgAD79w3z400/9X8R/Pj5u+ad5uvj/7g7HfOvjySM387893hyaGvNV4u/pKP86vtz/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDjW37v/XvzrdbC0q7KWqvdbn/Qs+l0V7o/Z3aCO/3K+eSRnc8PSH6OWSmKo3b+b7vdrp8pBiT4Qyrt2qDE049Kn1+YgGfu+sr9d64vv/f+txbvz7+18NbCg9mZmdnJ2ZnXpq/fWWwtTHYe92412p9ggadq+6bf70gAAAAAAAAAAACAozqJ/07Q7zkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9vcRIYfpsjU5LXJcn1jfbpVLt36ds/hJI0kxS+T4pPkZjpLxnYMVxy0n48WZ9/89PONz7bHGu72b/TY7kfHm8VavWQ8yVBdPoFd493qBvvYiq0Zlgm72k0c9Nv/AgAA//+08g5/") openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) pipe(&(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a843500140600fe80000000000000e5000000", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000200)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473ba6100b021ee66b9800000c00f146635004000000f300f20e06635800000000f22e0f30fa6c8", 0x54}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001a00000000000000000000000a00000000000000000008"], 0x1c}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.786342449s ago: executing program 3 (id=755): socket$nl_netfilter(0x10, 0x3, 0xc) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000140)={"9fcaa0504b38d5004b9277c079417ff857dc9b7ac770169aed764b4d2ada8bde"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9d4eafc2ae39ce2be18d63433b7dfc78608200e69639ab1530087488555d6d92591d54b3a4b2d398d9c826367e94ff87e48b5c84c384e4da2242cd7", 0x76, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x2, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0xc0189436, &(0x7f0000000140)) 3.785542048s ago: executing program 1 (id=756): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000008c0)={0x0, &(0x7f0000000280)}, 0x8) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000000c0)=0x7, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r3, &(0x7f0000000040)='u', 0xa792a, 0x801, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000240)={0xffffffffffffffff}) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) write$binfmt_elf64(r1, &(0x7f0000000980)=ANY=[], 0x578) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r1, 0x0, 0x0, 0x12, 0x0, 0x0) 3.526548031s ago: executing program 0 (id=757): syz_mount_image$udf(&(0x7f0000000440), &(0x7f0000000500)='./file0\x00', 0x2018008, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRESDEC], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") syz_mount_image$fuse(&(0x7f0000000000), 0x0, 0x20, 0x0, 0x1, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='tran']) mount$nfs(&(0x7f0000000100)='.5.', 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 3.166481201s ago: executing program 4 (id=701): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f0000001e00)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xefE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaa\xc6?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xd1\xa7@\xa1_B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7<\x7f\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xb0\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcd\x90\x95\xdd\x8a\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x00\x00\x00\x00\x01\x00\x00\x04\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1d0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r3, 0x0, 0x0, 0xff00) 2.767214845s ago: executing program 0 (id=760): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f000000c600)={0x2020}, 0x2020) 2.739930208s ago: executing program 3 (id=761): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) flistxattr(r0, &(0x7f00000043c0)=""/207, 0xcf) 2.692303981s ago: executing program 0 (id=762): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x1, 0x84) sendmsg$key(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020f00001500000000000000000000000800120000000100000000000000000006000000000000000000000000000000e00000020000000000000000000000002001000000000000000000000000000205000600000000000a00000000000000fe8000000000000000000000000000bb0000000000000000010018000000000005000500000000000a00000000000000ff02000000000000000000000000000100000000000000"], 0xa8}}, 0x0) bind$inet6(r2, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback=0x7f000002}}}}}}, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r2, &(0x7f0000000100)="bc", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r2) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 1.755972661s ago: executing program 4 (id=763): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0xa, 0x3, 0x6) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1008a, &(0x7f00000003c0)=ANY=[], 0x21, 0x150f, &(0x7f0000000480)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./file1/file0\x00', 0x200000, &(0x7f0000002180)={[{@nobh}], [{@euid_gt}, {@uid_lt}, {@seclabel}]}, 0xfc, 0x561, &(0x7f0000001c00)="$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") openat$binderfs(0xffffffffffffff9c, 0x0, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8) socket$nl_route(0x10, 0x3, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000c80)={'IDLETIMER\x00'}, &(0x7f0000000000)=0x1e) 1.755362721s ago: executing program 3 (id=764): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000640)={0x80000000}) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200)='#$*\x00', 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x0}, &(0x7f0000000180)='R\x10rust\xe3c*sgrVex:De\xbb\x98h}?\x81\xf0&,o\x86\xa0\t\xcbC\x89\x99\x81/c\xa6\x05\x932\xd88\x83r\xfb\xec-II!y\xd6\'}\x91f\x10x\x90|31\x14', r2) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc1}, 0x0, 0x0, r2) syz_read_part_table(0x5ff, &(0x7f0000000e40)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x7fffffff, @loopback}, 0x1c) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000001100)=0xb, 0x4) sendto$inet6(r3, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00'}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'wg1\x00', &(0x7f0000000800)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x4, 0x9a, 0x9, 0x7, 0x8, 0x1, 0x9d, 0x0, 0x81, 0x6, 0x40, 0x1000, 0xfffff2a1, 0x6, 0x8001, 0xed3, 0x200, 0x81, 0x0, 0x5, 0x6, 0x4, 0xe, 0xe, 0x8, 0x7fffffff, 0x16, 0xc, 0x1, 0x4, 0x3, 0xffffffff, 0x7d1f, 0x7, 0x7fff, 0x5, 0xb, 0x4, 0x9, 0xba, 0x6, 0x6, 0x6, 0x4, 0x80000000, 0xa, 0xbd8, 0x1, 0x5, 0x7fffffff, 0x2, 0x0, 0x76609dec, 0x2, 0xffffff00, 0x6, 0x7ff, 0xffff, 0x429, 0x40, 0xcc, 0x2, 0x1ff, 0x7fffffff, 0x0, 0x4, 0x80000000, 0x5, 0x35, 0x3, 0x6, 0xda5d, 0xf92, 0x81, 0x0, 0x7, 0x81, 0x3, 0x7fffffff, 0x8, 0x4, 0x6, 0x7968, 0xdf5, 0x10, 0xa, 0x2, 0x8, 0x80000000, 0x2bd, 0x4, 0x9, 0x1000, 0x6, 0x9f, 0x1, 0x1, 0x80000000, 0x9, 0x20005, 0xbde, 0xfffffffe, 0x2, 0x4, 0x926, 0xa, 0x677, 0x2, 0xe, 0x7, 0x80, 0xf, 0xfffffffe, 0x7f, 0x2ae58175, 0x3, 0x3, 0x9, 0x5, 0x0, 0x3, 0x800, 0x7, 0x101, 0xfffffff1, 0x1, 0x8], "09a5203011438c3ed76ffd293364e27884d960fe7976a956b7fc1b2bb032298e49a7de70804b817152833804e4d11a372bb39b2f7641ac84f13b950451cd48d20d8d167100aac824e5dd823677c1a07c9065f1a6bd37a85d5b758adc24ad2b61c964a61a68e46addf8550e7ca473d2d8416f1d64f87df168329f95de29"}}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 943.39976ms ago: executing program 0 (id=765): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x9362, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r2) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) write$nci(r4, &(0x7f0000001cc0)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x1, @b={0x3, 0x5, 0x1, 0x1f, {0x1, 'g'}, 0x2}}, 0xa) 278.678286ms ago: executing program 4 (id=766): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x10) flock(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 256.103738ms ago: executing program 0 (id=767): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x69) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000100008500000082", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$binfmt_script(r3, &(0x7f0000000080), 0x208e24b) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r5 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000000)='./file0\x00', r5, &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) 0s ago: executing program 3 (id=768): socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x2, 0x2, 0xf, 0x7}, {0x4, 0x2, 0x13, 0x2}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x9) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000340)='yeah\x00', 0x5) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000080)=[@window, @mss, @window, @window, @sack_perm, @timestamp, @mss, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): 27754][ T3674] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.750758][ T1291] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 189.758687][ T5170] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 189.774347][ T5170] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 189.791856][ T5170] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 189.804654][ T5170] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 189.972416][ T5170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.007918][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 190.017662][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.027547][ T5170] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.117337][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 190.138056][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 190.153646][ T3702] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.160756][ T3702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.168897][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 190.192335][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 190.201385][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.209867][ T3702] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.216945][ T3702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.252295][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 190.272495][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 190.281966][ T1291] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 190.292900][ T1291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.309562][ T1291] usb 2-1: Product: syz [ 190.315214][ T1291] usb 2-1: Manufacturer: syz [ 190.328454][ T1291] usb 2-1: SerialNumber: syz [ 190.364530][ T1291] r8152-cfgselector 2-1: config 0 descriptor?? [ 190.470735][ T3613] Bluetooth: hci2: command 0x040f tx timeout [ 190.499352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 190.521476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 190.541565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 190.589886][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 190.619224][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 190.622476][ T3613] usb 4-1: USB disconnect, device number 4 [ 190.768733][ T5170] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 190.795354][ T3652] Bluetooth: hci0: command 0x040f tx timeout [ 190.821476][ T5170] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 190.843842][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 190.877332][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 190.961556][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 191.049449][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 191.101307][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 191.266684][ T1291] r8152-cfgselector 2-1: Unknown version 0x0000 [ 191.273432][ T1291] r8152-cfgselector 2-1: bad CDC descriptors [ 191.310850][ T1291] r8152-cfgselector 2-1: Unknown version 0x0000 [ 191.342833][ T1291] r8152-cfgselector 2-1: USB disconnect, device number 2 [ 191.439247][ T5168] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 191.460521][ T5168] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 191.486936][ T5168] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 191.596246][ T5168] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 191.677917][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 191.695353][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 191.724439][ T5170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.444621][ T5168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.570924][ T3611] Bluetooth: hci2: command 0x0419 tx timeout [ 192.662554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 192.670277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.726673][ T5168] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.771194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.781959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.792010][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.799067][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.841088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 192.874508][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 192.886459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.915788][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.922893][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.934702][ T26] audit: type=1326 audit(1728730946.806:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5272 comm="syz.1.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e98a9ff9 code=0x7ffc0000 [ 193.024137][ T5278] Context (ID=0x0) not attached to queue pair (handle=0x2:0xfff) [ 193.201891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 193.258557][ T26] audit: type=1326 audit(1728730946.806:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5272 comm="syz.1.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e98a9ff9 code=0x7ffc0000 [ 193.408603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 193.603517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.613571][ T26] audit: type=1326 audit(1728730946.806:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5272 comm="syz.1.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7fe1e98a9ff9 code=0x7ffc0000 [ 193.635956][ T26] audit: type=1326 audit(1728730946.806:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5272 comm="syz.1.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e98a9ff9 code=0x7ffc0000 [ 193.653446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 193.682093][ T26] audit: type=1326 audit(1728730946.806:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5272 comm="syz.1.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e98a9ff9 code=0x7ffc0000 [ 193.738315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.797771][ T26] audit: type=1326 audit(1728730946.836:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5272 comm="syz.1.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fe1e98a9ff9 code=0x7ffc0000 [ 193.836680][ T26] audit: type=1326 audit(1728730947.476:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5272 comm="syz.1.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e98a9ff9 code=0x7ffc0000 [ 193.867926][ T26] audit: type=1326 audit(1728730947.476:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5272 comm="syz.1.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e98a9ff9 code=0x7ffc0000 [ 193.897258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 193.927859][ T5168] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 193.971521][ T5168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 193.991462][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 194.001668][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 194.011758][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 194.020221][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 194.038773][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 194.049893][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 194.068541][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 194.105206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 194.137656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 194.222699][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.229041][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.244728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 194.266340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 194.286204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 194.303387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 194.319793][ T5170] device veth0_vlan entered promiscuous mode [ 194.339029][ T3674] device hsr_slave_0 left promiscuous mode [ 194.362649][ T3674] device hsr_slave_1 left promiscuous mode [ 194.369850][ T3674] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.386442][ T3674] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.431965][ T3674] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.449574][ T3674] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.619871][ T3674] device bridge_slave_1 left promiscuous mode [ 194.633321][ T3674] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.660470][ T3674] device bridge_slave_0 left promiscuous mode [ 194.885195][ T3674] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.271841][ T3674] device hsr_slave_0 left promiscuous mode [ 195.410920][ T3674] device hsr_slave_1 left promiscuous mode [ 195.441156][ T3674] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.449022][ T3674] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.459977][ T3674] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.467573][ T3674] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.478424][ T3674] device bridge_slave_1 left promiscuous mode [ 195.488709][ T3674] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.518413][ T3674] device bridge_slave_0 left promiscuous mode [ 195.550349][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 195.561790][ T3674] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.602512][ T3674] device veth1_macvtap left promiscuous mode [ 195.608623][ T3674] device veth0_macvtap left promiscuous mode [ 195.625002][ T3674] device veth1_vlan left promiscuous mode [ 195.639568][ T3674] device veth0_vlan left promiscuous mode [ 195.994092][ T3674] device veth1_macvtap left promiscuous mode [ 196.010360][ T3674] device veth0_macvtap left promiscuous mode [ 196.030917][ T3674] device veth1_vlan left promiscuous mode [ 196.037329][ T3674] device veth0_vlan left promiscuous mode [ 196.490845][ T5270] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 196.750740][ T5270] usb 4-1: Using ep0 maxpacket: 32 [ 196.815122][ T3674] team0 (unregistering): Port device team_slave_1 removed [ 196.871138][ T3674] team0 (unregistering): Port device team_slave_0 removed [ 196.880988][ T5270] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 196.911715][ T3674] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.938750][ T3674] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.050973][ T5270] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 197.070906][ T5270] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 197.102761][ T5270] usb 4-1: Product: syz [ 197.106938][ T5270] usb 4-1: Manufacturer: syz [ 197.111809][ T5270] usb 4-1: SerialNumber: syz [ 197.120606][ T5270] usb 4-1: config 0 descriptor?? [ 197.134068][ T3674] bond0 (unregistering): Released all slaves [ 197.161099][ T5302] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 197.588612][ T3674] team0 (unregistering): Port device team_slave_1 removed [ 197.608618][ T3674] team0 (unregistering): Port device team_slave_0 removed [ 197.642373][ T3674] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.668670][ T3674] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.772861][ T3674] bond0 (unregistering): Released all slaves [ 197.843067][ T5170] device veth1_vlan entered promiscuous mode [ 197.865153][ T5168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.872373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 197.892868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 197.900436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 198.030995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 198.049525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 198.115002][ T5170] device veth0_macvtap entered promiscuous mode [ 198.126112][ T5313] loop0: detected capacity change from 0 to 128 [ 198.141322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 198.168224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 198.178383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 198.194351][ T5170] device veth1_macvtap entered promiscuous mode [ 198.238939][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 198.252804][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 198.274494][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 198.316084][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 198.358422][ T5313] loop0: detected capacity change from 0 to 512 [ 198.361673][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 198.382714][ T5168] device veth0_vlan entered promiscuous mode [ 198.425561][ T5170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.451624][ T5313] EXT4-fs (loop0): Invalid want_extra_isize 255 [ 198.472378][ T5170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.500178][ T5170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.510736][ T5170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.520771][ T5170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.531272][ T5170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.541758][ T5170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.552305][ T5170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.564157][ T5170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.573154][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 198.592988][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 198.617530][ T5168] device veth1_vlan entered promiscuous mode [ 198.650870][ T5170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.679151][ T5170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.693628][ T5170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.714528][ T5170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.734536][ T5170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.749972][ T5170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.768211][ T5170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.788296][ T5170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.800469][ T5170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.863879][ T2669] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 198.880378][ T2669] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 198.890231][ T2669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 198.910231][ T5170] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.936980][ T5170] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.956086][ T5170] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.980740][ T5170] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.049273][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 199.072051][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 199.083435][ T3611] usb 4-1: USB disconnect, device number 5 [ 199.095920][ T5168] device veth0_macvtap entered promiscuous mode [ 199.112103][ T5168] device veth1_macvtap entered promiscuous mode [ 199.220388][ T5168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.243868][ T5168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.274625][ T5168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.308576][ T5168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.326960][ T5319] loop0: detected capacity change from 0 to 4096 [ 199.330147][ T5168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.358448][ T5168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.370545][ T5168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.388746][ T5168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.421216][ T5168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.458310][ T5168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.482389][ T5168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.522227][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 199.529975][ T3702] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.556689][ T26] audit: type=1326 audit(1728730953.426:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5320 comm="syz.3.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8003553ff9 code=0x7ffc0000 [ 199.584098][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 199.600781][ T3702] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.611399][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 199.671329][ T26] audit: type=1326 audit(1728730953.426:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5320 comm="syz.3.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8003553ff9 code=0x7ffc0000 [ 199.693780][ T26] audit: type=1326 audit(1728730953.426:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5320 comm="syz.3.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8003553ff9 code=0x7ffc0000 [ 199.765238][ T26] audit: type=1326 audit(1728730953.426:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5320 comm="syz.3.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8003553ff9 code=0x7ffc0000 [ 199.806989][ T5319] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 199.897111][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 200.100487][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 200.216289][ T26] audit: type=1326 audit(1728730953.426:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5320 comm="syz.3.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8003553ff9 code=0x7ffc0000 [ 200.277632][ T5168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.330978][ T5168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.360364][ T5168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.483678][ T26] audit: type=1326 audit(1728730953.456:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5320 comm="syz.3.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f8003553ff9 code=0x7ffc0000 [ 200.505927][ T26] audit: type=1326 audit(1728730954.046:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5320 comm="syz.3.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8003553ff9 code=0x7ffc0000 [ 200.562271][ T5336] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 200.725970][ T26] audit: type=1326 audit(1728730954.046:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5320 comm="syz.3.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8003553ff9 code=0x7ffc0000 [ 200.750946][ T5168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.779260][ T5168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.839381][ T5168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.882638][ T5168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.910833][ T5168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.921208][ T5168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.936413][ T5168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.974505][ T5168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.986091][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 201.018053][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 201.052580][ T4605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.063665][ T5168] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.073651][ T4605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.110235][ T5168] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.148326][ T5168] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.210221][ T5168] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.214203][ T2669] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 201.550520][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.584538][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.660967][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 201.690961][ T3944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.759427][ T3944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.863782][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 202.213072][ T5344] loop2: detected capacity change from 0 to 1024 [ 202.452225][ T5344] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 203.203353][ T5360] loop2: detected capacity change from 0 to 128 [ 203.606926][ T26] audit: type=1326 audit(1728730957.336:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5361 comm="syz.0.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0737fd6ff9 code=0x7ffc0000 [ 203.819033][ T5366] loop1: detected capacity change from 0 to 512 [ 203.839587][ T5367] loop2: detected capacity change from 0 to 512 [ 203.991020][ T5367] EXT4-fs (loop2): Invalid want_extra_isize 255 [ 204.008730][ T26] audit: type=1326 audit(1728730957.336:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5361 comm="syz.0.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0737fd6ff9 code=0x7ffc0000 [ 204.047990][ T5366] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 204.087351][ T5366] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038 (0x7fffffff) [ 204.162731][ T5377] loop4: detected capacity change from 0 to 1024 [ 204.672764][ T5385] loop1: detected capacity change from 0 to 512 [ 204.895850][ T5385] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 204.971242][ T5385] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x0000000000000000,minixdf,jqfmt=vfsold,quota,,errors=continue. Quota mode: writeback. [ 205.010933][ T5385] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038 (0x7fffffff) [ 205.671156][ T5402] netlink: 48 bytes leftover after parsing attributes in process `syz.2.438'. [ 205.796177][ T5404] loop1: detected capacity change from 0 to 1024 [ 206.050108][ T5408] loop0: detected capacity change from 0 to 512 [ 206.447915][ T5417] xt_CT: You must specify a L4 protocol and not use inversions on it [ 207.144553][ T5408] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.441: bg 0: block 248: padding at end of block bitmap is not set [ 207.194086][ T5408] __quota_error: 4 callbacks suppressed [ 207.194102][ T5408] Quota error (device loop0): write_blk: dquota write failed [ 207.269276][ T5421] loop2: detected capacity change from 0 to 1024 [ 207.281075][ T5408] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 207.332072][ T5408] EXT4-fs error (device loop0): ext4_acquire_dquot:6196: comm syz.0.441: Failed to acquire dquot type 1 [ 207.389630][ T5408] EXT4-fs (loop0): 1 truncate cleaned up [ 207.447871][ T5408] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,noload,,errors=continue. Quota mode: writeback. [ 207.502083][ T5408] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038 (0x7fffffff) [ 207.576954][ T5408] netlink: 20 bytes leftover after parsing attributes in process `syz.0.441'. [ 207.670797][ T21] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 207.772735][ T5431] loop4: detected capacity change from 0 to 512 [ 208.045415][ T5431] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 208.076987][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.090333][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.100515][ T21] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 208.117948][ T21] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 208.127327][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.295331][ T21] usb 4-1: config 0 descriptor?? [ 209.256027][ T21] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 209.415522][ T21] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 209.445497][ T21] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 209.840833][ T21] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 210.041290][ T21] usb 5-1: device descriptor read/64, error -71 [ 210.362710][ T5464] loop1: detected capacity change from 0 to 512 [ 210.410958][ T21] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 210.440476][ T5464] EXT4-fs error (device loop1): ext4_fill_super:4840: inode #2: comm syz.1.457: casefold flag without casefold feature [ 210.461553][ T5464] EXT4-fs (loop1): get root inode failed [ 210.481139][ T5464] EXT4-fs (loop1): mount failed [ 210.561832][ C1] plantronics 0003:047F:FFFF.0001: usb_submit_urb(ctrl) failed: -1 [ 210.646762][ T5068] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 210.654840][ T21] usb 5-1: device descriptor read/64, error -71 [ 210.714327][ T5068] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 210.781259][ T21] usb usb5-port1: attempt power cycle [ 212.122834][ T1074] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 212.201009][ T21] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 212.362291][ T5270] usb 4-1: USB disconnect, device number 6 [ 212.465024][ T21] usb 5-1: device descriptor read/8, error -71 [ 213.434370][ T21] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 213.701537][ T21] usb 5-1: device descriptor read/8, error -71 [ 214.109337][ T5494] loop4: detected capacity change from 0 to 16 [ 214.656889][ T21] usb usb5-port1: unable to enumerate USB device [ 214.720493][ T1074] usb 2-1: unable to get BOS descriptor or descriptor too short [ 214.881188][ T1074] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 214.893086][ T1074] usb 2-1: can't read configurations, error -71 [ 215.218289][ T5494] erofs: (device loop4): mounted with root inode @ nid 36. [ 216.233954][ T5170] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 46 [ 216.273874][ T5170] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 216.300378][ T5170] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 216.377577][ T5524] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 216.590184][ T5533] loop2: detected capacity change from 0 to 164 [ 216.673944][ T26] audit: type=1326 audit(1728730970.546:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5530 comm="syz.4.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb45d0e5ff9 code=0x7ffc0000 [ 217.463380][ T26] audit: type=1326 audit(1728730970.546:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5530 comm="syz.4.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb45d0e5ff9 code=0x7ffc0000 [ 217.637803][ T26] audit: type=1326 audit(1728730970.546:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5530 comm="syz.4.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7fb45d0e5ff9 code=0x7ffc0000 [ 217.929143][ T5547] xt_CT: You must specify a L4 protocol and not use inversions on it [ 218.631346][ T5533] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 218.655803][ T26] audit: type=1326 audit(1728730970.546:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5530 comm="syz.4.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb45d0e5ff9 code=0x7ffc0000 [ 218.688405][ T26] audit: type=1326 audit(1728730970.546:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5530 comm="syz.4.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb45d0e5ff9 code=0x7ffc0000 [ 218.858320][ T5533] rock: directory entry would overflow storage [ 219.871278][ T5533] rock: sig=0x4f50, size=4, remaining=3 [ 219.882730][ T5533] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 219.911358][ T26] audit: type=1326 audit(1728730970.576:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5530 comm="syz.4.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fb45d0e5ff9 code=0x7ffc0000 [ 221.128549][ T5588] xt_CT: You must specify a L4 protocol and not use inversions on it [ 222.590966][ T3708] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 222.870899][ T3708] usb 5-1: Using ep0 maxpacket: 32 [ 223.110948][ T3708] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 223.190799][ T3610] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 223.238313][ T5616] loop1: detected capacity change from 0 to 512 [ 223.280821][ T3708] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 223.289900][ T3708] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 223.307696][ T3708] usb 5-1: Product: syz [ 223.312250][ T3708] usb 5-1: Manufacturer: syz [ 223.316898][ T3708] usb 5-1: SerialNumber: syz [ 223.317865][ T5616] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 223.332673][ T3708] usb 5-1: config 0 descriptor?? [ 223.350976][ T5587] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 223.383027][ T5616] EXT4-fs (loop1): 1 truncate cleaned up [ 223.413163][ T5616] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 223.591153][ T3610] usb 4-1: not running at top speed; connect to a high speed hub [ 223.683606][ T3610] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 223.694929][ T3610] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 223.706116][ T3610] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 223.814726][ T5622] netlink: 'syz.1.500': attribute type 12 has an invalid length. [ 223.870963][ T3610] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 223.880010][ T3610] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.898275][ T3610] usb 4-1: Product: syz [ 223.902503][ T3610] usb 4-1: Manufacturer: syz [ 223.908056][ T3610] usb 4-1: SerialNumber: syz [ 224.280939][ T3610] usb 4-1: 0:2 : does not exist [ 224.323444][ T3610] usb 4-1: USB disconnect, device number 7 [ 224.516667][ T5633] loop2: detected capacity change from 0 to 512 [ 224.569448][ T5633] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 224.608553][ T5633] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x0000000000000000,minixdf,jqfmt=vfsold,quota,,errors=continue. Quota mode: writeback. [ 224.626295][ T5633] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038 (0x7fffffff) [ 224.851645][ T7] usb 5-1: USB disconnect, device number 9 [ 225.340939][ T5643] xt_CT: You must specify a L4 protocol and not use inversions on it [ 225.912293][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 226.054541][ T26] audit: type=1326 audit(1728730979.916:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5646 comm="syz.0.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0737fd6ff9 code=0x7ffc0000 [ 226.102954][ T26] audit: type=1326 audit(1728730979.916:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5646 comm="syz.0.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0737fd6ff9 code=0x7ffc0000 [ 226.188454][ T26] audit: type=1326 audit(1728730979.916:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5646 comm="syz.0.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0737fd6ff9 code=0x7ffc0000 [ 226.278403][ T26] audit: type=1326 audit(1728730979.916:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5646 comm="syz.0.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0737fd6ff9 code=0x7ffc0000 [ 226.347529][ T26] audit: type=1326 audit(1728730979.916:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5646 comm="syz.0.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0737fd6ff9 code=0x7ffc0000 [ 226.437458][ T26] audit: type=1326 audit(1728730979.926:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5646 comm="syz.0.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f0737fd6ff9 code=0x7ffc0000 [ 226.471071][ T26] audit: type=1326 audit(1728730979.926:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5646 comm="syz.0.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0737fd6ff9 code=0x7ffc0000 [ 226.493650][ T26] audit: type=1326 audit(1728730979.926:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5646 comm="syz.0.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0737fd6ff9 code=0x7ffc0000 [ 226.517474][ T26] audit: type=1326 audit(1728730979.926:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5646 comm="syz.0.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f0737fd6ff9 code=0x7ffc0000 [ 227.168989][ T1074] Bluetooth: hci1: command 0x0406 tx timeout [ 227.459989][ T5670] loop0: detected capacity change from 0 to 512 [ 227.617744][ T5670] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 227.633627][ T5670] EXT4-fs (loop0): 1 truncate cleaned up [ 227.639291][ T5670] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x0000000000000009,noblock_validity,usrquota,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000008,jqfmt=vfsold,usrjquota=min_batch_time=0x0000000000000a9f,nodiscard,,errors=continue. Quota mode: writeback. [ 228.252574][ T5665] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 229.242587][ T5693] loop2: detected capacity change from 0 to 512 [ 229.414655][ T5693] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 229.414655][ T5693] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 229.414655][ T5693] [ 230.313416][ T5693] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #3: comm syz.2.518: corrupted inode contents [ 230.376819][ T5693] EXT4-fs (loop2): Remounting filesystem read-only [ 230.401563][ T5693] EXT4-fs error (device loop2): ext4_dirty_inode:6007: inode #3: comm syz.2.518: mark_inode_dirty error [ 230.471008][ T5693] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #3: comm syz.2.518: corrupted inode contents [ 230.513159][ T5707] loop4: detected capacity change from 0 to 256 [ 230.568073][ T5693] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.518: mark_inode_dirty error [ 230.607931][ T5693] Quota error (device loop2): write_blk: dquota write failed [ 230.644031][ T5693] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz.2.518: Failed to acquire dquot type 0 [ 230.692632][ T5693] EXT4-fs (loop2): 1 truncate cleaned up [ 230.710225][ T5707] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 230.726793][ T5693] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=continue,bsdgroups,stripe=0x0000000000000008,nouser_xattr,data_err=ignore,nodioread_nolock,barrier=0x000000000000002c,usrquota,norecovery,errors=remount-ro,. Quota mode: writeback. [ 230.785500][ T5713] loop0: detected capacity change from 0 to 1024 [ 230.869161][ T5707] exFAT-fs (loop4): hint_cluster is invalid (1) [ 230.885030][ T5693] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038 (0x7fffffff) [ 230.916229][ T5707] exFAT-fs (loop4): error, invalid access to exfat cache (entry 0x00000000) [ 230.983270][ T5707] exFAT-fs (loop4): Filesystem has been set read-only [ 231.018570][ T5707] exFAT-fs (loop4): error, failed to bmap (inode : ffff88806731c260 iblock : 9, err : -5) [ 231.033947][ T5707] exFAT-fs (loop4): error, tried to truncate zeroed cluster. [ 231.108514][ T5707] exFAT-fs (loop4): error, tried to truncate zeroed cluster. [ 231.153495][ T5719] loop2: detected capacity change from 0 to 512 [ 231.165281][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 231.165293][ T26] audit: type=1804 audit(1728730985.036:310): pid=5715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.521" name="/newroot/18/file2/file0/file0" dev="loop4" ino=1048696 res=1 errno=0 [ 231.210425][ T5715] exFAT-fs (loop4): error, invalid access to exfat cache (entry 0x00000000) [ 231.292601][ T5715] exFAT-fs (loop4): error, failed to bmap (inode : ffff88806731c260 iblock : 0, err : -5) [ 231.352321][ T5715] exFAT-fs (loop4): error, invalid access to exfat cache (entry 0x00000000) [ 231.373189][ T5719] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 231.387658][ T5715] exFAT-fs (loop4): error, failed to bmap (inode : ffff88806731c260 iblock : 1, err : -5) [ 231.391927][ T5719] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038 (0x7fffffff) [ 231.401154][ T5715] exFAT-fs (loop4): error, invalid access to exfat cache (entry 0x00000000) [ 231.416374][ T5715] exFAT-fs (loop4): error, failed to bmap (inode : ffff88806731c260 iblock : 2, err : -5) [ 231.426606][ T26] audit: type=1800 audit(1728730985.306:311): pid=5715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.521" name="file0" dev="loop4" ino=1048696 res=0 errno=0 [ 234.204825][ T5755] loop2: detected capacity change from 0 to 256 [ 234.335278][ T5755] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 239.367360][ T5827] loop1: detected capacity change from 0 to 1024 [ 241.072023][ T5850] netlink: 'syz.1.561': attribute type 11 has an invalid length. [ 241.415932][ T5856] loop1: detected capacity change from 0 to 512 [ 241.754888][ T5856] EXT4-fs (loop1): 1 orphan inode deleted [ 241.765979][ T5856] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 241.816063][ T5856] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038 (0x7fffffff) [ 243.613116][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 244.984401][ T5894] loop4: detected capacity change from 0 to 512 [ 245.585912][ T5894] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 245.597827][ T5894] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038 (0x7fffffff) [ 246.813691][ T5919] loop4: detected capacity change from 0 to 256 [ 246.879076][ T5919] exfat: Deprecated parameter 'namecase' [ 246.897735][ T5919] exfat: Deprecated parameter 'namecase' [ 247.076551][ T5919] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 247.094008][ T5929] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 247.429505][ T5936] loop1: detected capacity change from 0 to 16 [ 247.464008][ T5170] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000005) [ 247.529667][ T5936] erofs: (device loop1): mounted with root inode @ nid 36. [ 247.542798][ T5170] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000005) [ 248.940652][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.191279][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.266953][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 250.327073][ T5963] loop1: detected capacity change from 0 to 256 [ 250.479501][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.619886][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.326760][ T5964] chnl_net:caif_netlink_parms(): no params data found [ 251.659868][ T5991] loop0: detected capacity change from 0 to 1024 [ 251.670955][ T5964] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.698223][ T5964] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.812686][ T5964] device bridge_slave_0 entered promiscuous mode [ 251.857938][ T5991] EXT4-fs error (device loop0): ext4_fill_super:4840: inode #2: comm syz.0.597: casefold flag without casefold feature [ 251.899596][ T5964] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.979204][ T5991] EXT4-fs (loop0): get root inode failed [ 252.000505][ T5964] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.014517][ T5991] EXT4-fs (loop0): mount failed [ 252.048460][ T5964] device bridge_slave_1 entered promiscuous mode [ 252.082553][ T6000] loop1: detected capacity change from 0 to 1024 [ 252.149205][ T5964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.278065][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 252.416320][ T5964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.739277][ T6014] loop0: detected capacity change from 0 to 1764 [ 253.252160][ T5964] team0: Port device team_slave_0 added [ 253.280232][ T5964] team0: Port device team_slave_1 added [ 254.521650][ T5964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.625566][ T3610] Bluetooth: hci2: command 0x041b tx timeout [ 254.631930][ T5964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.666609][ T5964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.741660][ T5964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.947626][ T5964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.982780][ T5964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.430570][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.436865][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.491889][ T5964] device hsr_slave_0 entered promiscuous mode [ 255.525766][ T5964] device hsr_slave_1 entered promiscuous mode [ 255.661810][ T5964] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.683755][ T5964] Cannot create hsr debugfs directory [ 255.970312][ T6058] loop3: detected capacity change from 0 to 8 [ 256.602356][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 256.743040][ T6066] loop3: detected capacity change from 0 to 512 [ 256.814586][ T6066] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 256.932405][ T6066] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,minixdf,jqfmt=vfsold,quota,,errors=continue. Quota mode: writeback. [ 256.967134][ T6066] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038 (0x7fffffff) [ 259.307636][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 259.313843][ T9] device hsr_slave_0 left promiscuous mode [ 259.353641][ T9] device hsr_slave_1 left promiscuous mode [ 259.371354][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.384117][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.400065][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.420509][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.462167][ T1291] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 259.480880][ T9] device bridge_slave_1 left promiscuous mode [ 259.492152][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.061001][ T9] device bridge_slave_0 left promiscuous mode [ 260.105415][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.120728][ T6116] loop0: detected capacity change from 0 to 512 [ 260.163901][ T9] device veth1_macvtap left promiscuous mode [ 260.193349][ T9] device veth0_macvtap left promiscuous mode [ 260.210397][ T9] device veth1_vlan left promiscuous mode [ 260.229890][ T1291] usb 4-1: Using ep0 maxpacket: 32 [ 260.249949][ T9] device veth0_vlan left promiscuous mode [ 260.351550][ T1291] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 260.444543][ T6122] loop1: detected capacity change from 0 to 16 [ 260.456059][ T6116] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 260.476304][ T6116] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038 (0x7fffffff) [ 260.508025][ T6116] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #2: block 3: comm syz.0.617: lblock 0 mapped to illegal pblock 3 (length 1) [ 260.529845][ T6122] erofs: Unknown parameter 'ÿÿÿÿ)|' [ 260.539474][ T1291] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 260.546935][ T4851] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 260.551102][ T1291] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 260.582886][ T4851] EXT4-fs error (device loop0): __ext4_get_inode_loc:4320: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 260.586141][ T1291] usb 4-1: Product: syz [ 260.601495][ T6122] loop1: detected capacity change from 0 to 1024 [ 260.610634][ T1291] usb 4-1: Manufacturer: syz [ 260.615234][ T1291] usb 4-1: SerialNumber: syz [ 260.653297][ T1291] usb 4-1: config 0 descriptor?? [ 260.653657][ T4851] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5803: Corrupt filesystem [ 260.673858][ T4851] EXT4-fs error (device loop0): ext4_dirty_inode:6007: inode #2: comm syz-executor: mark_inode_dirty error [ 260.676741][ T6122] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.619: Invalid block bitmap block 0 in block_group 0 [ 260.699240][ T6095] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 260.736595][ T9] team0 (unregistering): Port device team_slave_1 removed [ 260.752482][ T144] EXT4-fs error (device loop0): __ext4_get_inode_loc:4320: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [ 260.758045][ T6122] Quota error (device loop1): write_blk: dquota write failed [ 260.772956][ T6122] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 260.784768][ T9] team0 (unregistering): Port device team_slave_0 removed [ 260.794942][ T144] EXT4-fs error (device loop0): __ext4_get_inode_loc:4320: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [ 260.806969][ T6122] EXT4-fs error (device loop1): ext4_acquire_dquot:6196: comm syz.1.619: Failed to acquire dquot type 0 [ 260.819508][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.830116][ T144] EXT4-fs error (device loop0): __ext4_get_inode_loc:4320: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [ 260.835948][ T6122] EXT4-fs error (device loop1): ext4_free_blocks:6225: comm syz.1.619: Freeing blocks not in datazone - block = 0, count = 4096 [ 260.857781][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.860962][ T6122] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.619: Invalid inode bitmap blk 0 in block_group 0 [ 260.881378][ T3672] Quota error (device loop1): remove_tree: Getting block too big (0 >= 9) [ 260.883469][ T6122] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 260.902256][ T3672] EXT4-fs error (device loop1): ext4_release_dquot:6219: comm kworker/u4:6: Failed to release dquot type 0 [ 260.915214][ T6122] EXT4-fs (loop1): 1 orphan inode deleted [ 260.920946][ T6122] EXT4-fs (loop1): mounted filesystem without journal. Opts: €; ,errors=continue. Quota mode: writeback. [ 260.943204][ T5316] EXT4-fs error (device loop0): __ext4_get_inode_loc:4320: comm syz.0.417: Invalid inode table block 0 in block_group 0 [ 260.965640][ T5316] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5803: Corrupt filesystem [ 261.050200][ T9] bond0 (unregistering): Released all slaves [ 261.101888][ T6128] loop1: detected capacity change from 0 to 160 [ 261.743654][ T5964] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 261.784985][ T5964] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 261.835314][ T5964] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 261.891158][ T5964] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 262.070545][ T3610] usb 4-1: USB disconnect, device number 8 [ 262.200289][ T6135] chnl_net:caif_netlink_parms(): no params data found [ 262.252481][ T26] audit: type=1326 audit(1728731016.457:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6152 comm="syz.3.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8003553ff9 code=0x7ffc0000 [ 262.282103][ T6153] Context (ID=0x0) not attached to queue pair (handle=0x2:0xfff) [ 262.463430][ T26] audit: type=1326 audit(1728731016.457:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6152 comm="syz.3.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8003553ff9 code=0x7ffc0000 [ 262.613002][ T26] audit: type=1326 audit(1728731016.457:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6152 comm="syz.3.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8003553ff9 code=0x7ffc0000 [ 262.745496][ T5964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.827902][ T5964] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.276525][ T26] audit: type=1326 audit(1728731016.457:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6152 comm="syz.3.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8003553ff9 code=0x7ffc0000 [ 263.304389][ T26] audit: type=1326 audit(1728731016.457:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6152 comm="syz.3.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8003553ff9 code=0x7ffc0000 [ 263.352285][ T26] audit: type=1326 audit(1728731016.487:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6152 comm="syz.3.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f8003553ff9 code=0x7ffc0000 [ 263.734880][ T26] audit: type=1326 audit(1728731016.487:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6152 comm="syz.3.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8003553ff9 code=0x7ffc0000 [ 263.875023][ T6135] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.902368][ T6135] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.922941][ T3610] Bluetooth: hci3: command 0x0409 tx timeout [ 264.093654][ T6135] device bridge_slave_0 entered promiscuous mode [ 264.142228][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 264.160875][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 264.194051][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 264.234234][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 264.278074][ T3702] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.285167][ T3702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.333622][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 264.370207][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 264.409512][ T3702] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.416605][ T3702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.424919][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 264.434387][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 264.443506][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 264.453765][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 264.466321][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 264.480056][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 264.496343][ T6135] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.514068][ T6135] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.545226][ T6135] device bridge_slave_1 entered promiscuous mode [ 264.643820][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 264.654254][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 264.666592][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 264.681874][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 264.698291][ T6135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.722191][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 264.738384][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 264.768459][ T5964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 264.869512][ T6135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.001184][ T6135] team0: Port device team_slave_0 added [ 265.047320][ T6135] team0: Port device team_slave_1 added [ 265.163370][ T6135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.189260][ T6135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.301143][ T6135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.368143][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 265.382547][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 265.421633][ T5964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.441259][ T6135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.453940][ T6135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.649395][ T6135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.884055][ T6217] loop3: detected capacity change from 0 to 512 [ 265.893355][ T6135] device hsr_slave_0 entered promiscuous mode [ 265.916711][ T6135] device hsr_slave_1 entered promiscuous mode [ 265.945973][ T5480] Bluetooth: hci3: command 0x041b tx timeout [ 265.965456][ T6135] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.985496][ T6217] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 265.986085][ T6135] Cannot create hsr debugfs directory [ 266.086227][ T6217] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,minixdf,jqfmt=vfsold,quota,,errors=continue. Quota mode: writeback. [ 266.125051][ T6217] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038 (0x7fffffff) [ 266.395381][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 266.424468][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 266.503728][ T6135] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.609007][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 266.684680][ T6237] loop2: detected capacity change from 0 to 128 [ 266.716555][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 266.726909][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 266.735110][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 266.781620][ T6135] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.864406][ T5964] device veth0_vlan entered promiscuous mode [ 266.910125][ T6237] loop2: detected capacity change from 0 to 512 [ 266.940413][ T6135] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.986321][ T5964] device veth1_vlan entered promiscuous mode [ 267.034670][ T6135] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.085957][ T6237] EXT4-fs (loop2): 1 orphan inode deleted [ 267.164076][ T5964] device veth0_macvtap entered promiscuous mode [ 267.170805][ T6237] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,bsddf,dioread_lock,. Quota mode: writeback. [ 267.258388][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 267.283180][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 267.296686][ T6237] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038 (0x7fffffff) [ 267.364890][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 267.402991][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 267.423145][ T5964] device veth1_macvtap entered promiscuous mode [ 267.447144][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 267.457847][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 267.477796][ T6135] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 267.496179][ T5964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.508310][ T5964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.519096][ T5964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.539832][ T5964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.571882][ T5964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.590415][ T5964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.613912][ T5964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.666694][ T5964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.682229][ T5964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.701061][ T5964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.729125][ T5964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.746902][ T6135] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 267.767169][ T6135] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 267.804808][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 267.822330][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 267.902538][ T5964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.928707][ T5964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.950292][ T5964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.981398][ T5964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.009202][ T5068] Bluetooth: hci3: command 0x040f tx timeout [ 268.011717][ T5964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.076606][ T5964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.098612][ T5964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.138973][ T5964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.168823][ T5964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.187589][ T5964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.218452][ T5964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.229277][ T6135] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 268.276383][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 268.290856][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 268.313488][ T5964] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.352818][ T5964] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.389437][ T5964] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.399197][ T5964] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.544265][ T6135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.696030][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.760551][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.806419][ T6135] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.068095][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 270.099940][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 270.118995][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 270.211288][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 270.220590][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 270.239687][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 270.256220][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.263273][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.280595][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 270.294977][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 270.311543][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.318655][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.328399][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 270.346708][ T3629] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.368093][ T3629] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.376110][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 270.416469][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 270.457340][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 270.471671][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 270.493012][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 270.521948][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 270.541413][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 270.550632][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 270.589915][ T6135] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 270.648480][ T6135] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 270.661791][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 270.699309][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 270.746492][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 270.758226][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 270.769847][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 270.786901][ T6281] loop2: detected capacity change from 0 to 1024 [ 271.222168][ T6135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.238442][ T26] kauditd_printk_skb: 37 callbacks suppressed [ 271.238454][ T26] audit: type=1326 audit(1728731025.508:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8003553ff9 code=0x7ffc0000 [ 271.266102][ T6135] device veth0_vlan entered promiscuous mode [ 271.326459][ T26] audit: type=1326 audit(1728731025.508:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8003553ff9 code=0x7ffc0000 [ 271.356731][ T26] audit: type=1326 audit(1728731025.508:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8003553ff9 code=0x7ffc0000 [ 271.388540][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 271.398269][ T26] audit: type=1326 audit(1728731025.508:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8003553ff9 code=0x7ffc0000 [ 271.399766][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 271.445709][ T26] audit: type=1326 audit(1728731025.508:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8003553ff9 code=0x7ffc0000 [ 271.456898][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 271.471430][ T26] audit: type=1326 audit(1728731025.548:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f8003553ff9 code=0x7ffc0000 [ 271.515455][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 271.516788][ T26] audit: type=1326 audit(1728731025.548:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8003553ff9 code=0x7ffc0000 [ 271.563911][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 271.584734][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 271.613430][ T26] audit: type=1326 audit(1728731025.548:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8003553ff9 code=0x7ffc0000 [ 271.623580][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 271.694748][ T26] audit: type=1326 audit(1728731025.548:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f8003553ff9 code=0x7ffc0000 [ 271.697151][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 271.755977][ T26] audit: type=1326 audit(1728731025.548:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8003553ff9 code=0x7ffc0000 [ 272.246716][ T6135] device veth1_vlan entered promiscuous mode [ 272.345913][ T9] device hsr_slave_0 left promiscuous mode [ 272.363437][ T9] device hsr_slave_1 left promiscuous mode [ 272.379692][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.401142][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.422823][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.442822][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.462062][ T5480] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 272.503339][ T9] device bridge_slave_1 left promiscuous mode [ 272.509457][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.686831][ T9] device bridge_slave_0 left promiscuous mode [ 272.743624][ T6313] xt_CT: You must specify a L4 protocol and not use inversions on it [ 272.760282][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.843700][ T9] device veth1_macvtap left promiscuous mode [ 272.891621][ T9] device veth0_macvtap left promiscuous mode [ 272.937813][ T9] device veth1_vlan left promiscuous mode [ 272.972270][ T9] device veth0_vlan left promiscuous mode [ 273.049480][ T5480] usb 2-1: unable to get BOS descriptor or descriptor too short [ 273.178772][ T5480] usb 2-1: config 1 interface 0 altsetting 64 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 273.202400][ T5480] usb 2-1: config 1 interface 0 has no altsetting 0 [ 273.377703][ T5480] usb 2-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.40 [ 273.401681][ T5480] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.424553][ T5480] usb 2-1: Product: syz [ 273.433243][ T9] team0 (unregistering): Port device team_slave_1 removed [ 273.437018][ T5480] usb 2-1: Manufacturer: syz [ 273.463358][ T5480] usb 2-1: SerialNumber: syz [ 273.483954][ T9] team0 (unregistering): Port device team_slave_0 removed [ 273.514504][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.526939][ T6308] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 273.592820][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.806851][ T9] bond0 (unregistering): Released all slaves [ 273.989769][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 273.997829][ T5480] usbhid 2-1:1.0: can't add hid device: -71 [ 274.006296][ T5480] usbhid: probe of 2-1:1.0 failed with error -71 [ 274.019629][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 274.045261][ T5480] usb 2-1: USB disconnect, device number 5 [ 274.060855][ T6135] device veth0_macvtap entered promiscuous mode [ 274.112784][ T6135] device veth1_macvtap entered promiscuous mode [ 274.201083][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.221984][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.232521][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.252021][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.262581][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.282362][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.303235][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.325867][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.376172][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.391980][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.424546][ T6333] loop1: detected capacity change from 0 to 128 [ 274.480953][ T6135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.495212][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.506400][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.516274][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.529267][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.539246][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.559907][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.577505][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.598407][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.617905][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.659547][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.686159][ T6135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.699502][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 274.718810][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 274.738174][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 274.748834][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 274.767213][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 274.779103][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 274.954158][ T6135] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.990267][ T6135] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.257914][ T6135] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.267823][ T6135] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.659433][ T6344] loop1: detected capacity change from 0 to 256 [ 275.715408][ T3702] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.763147][ T3702] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.809344][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 275.871967][ T3672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.940682][ T3672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.038674][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 277.100909][ T6368] xt_CT: You must specify a L4 protocol and not use inversions on it [ 277.779115][ T26] kauditd_printk_skb: 140 callbacks suppressed [ 277.779130][ T26] audit: type=1326 audit(1728731032.089:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6377 comm="syz.2.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986972fff9 code=0x7ffc0000 [ 277.997046][ T26] audit: type=1326 audit(1728731032.089:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6377 comm="syz.2.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986972fff9 code=0x7ffc0000 [ 278.087199][ T26] audit: type=1326 audit(1728731032.089:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6377 comm="syz.2.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f986972fff9 code=0x7ffc0000 [ 278.160620][ T26] audit: type=1326 audit(1728731032.089:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6377 comm="syz.2.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986972fff9 code=0x7ffc0000 [ 278.367078][ T26] audit: type=1326 audit(1728731032.089:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6377 comm="syz.2.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986972fff9 code=0x7ffc0000 [ 278.408154][ T26] audit: type=1326 audit(1728731032.129:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6377 comm="syz.2.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f986972fff9 code=0x7ffc0000 [ 278.983289][ T26] audit: type=1326 audit(1728731032.129:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6377 comm="syz.2.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986972fff9 code=0x7ffc0000 [ 279.122003][ T26] audit: type=1326 audit(1728731032.129:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6377 comm="syz.2.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986972fff9 code=0x7ffc0000 [ 279.156750][ T6396] loop2: detected capacity change from 0 to 512 [ 279.197923][ T26] audit: type=1326 audit(1728731032.129:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6377 comm="syz.2.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f986972fff9 code=0x7ffc0000 [ 279.247512][ T26] audit: type=1326 audit(1728731032.129:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6377 comm="syz.2.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986972fff9 code=0x7ffc0000 [ 279.400114][ T6396] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 279.481222][ T6396] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038 (0x7fffffff) [ 279.644609][ T6396] EXT4-fs error (device loop2): ext4_map_blocks:628: inode #2: block 3: comm syz.2.668: lblock 0 mapped to illegal pblock 3 (length 1) [ 280.457407][ T5168] EXT4-fs error (device loop2): ext4_map_blocks:628: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 280.558496][ T5168] EXT4-fs error (device loop2): __ext4_get_inode_loc:4320: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 280.649508][ T6413] xt_CT: You must specify a L4 protocol and not use inversions on it [ 280.662508][ T5168] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5803: Corrupt filesystem [ 280.732241][ T5168] EXT4-fs error (device loop2): ext4_dirty_inode:6007: inode #2: comm syz-executor: mark_inode_dirty error [ 280.944424][ T3702] EXT4-fs error (device loop2): __ext4_get_inode_loc:4320: comm kworker/u4:8: Invalid inode table block 0 in block_group 0 [ 280.959123][ T3702] EXT4-fs error (device loop2): __ext4_get_inode_loc:4320: comm kworker/u4:8: Invalid inode table block 0 in block_group 0 [ 281.033501][ T3702] EXT4-fs error (device loop2): __ext4_get_inode_loc:4320: comm kworker/u4:8: Invalid inode table block 0 in block_group 0 [ 281.113277][ T6420] xt_CT: You must specify a L4 protocol and not use inversions on it [ 281.183018][ T5368] EXT4-fs error (device loop2): __ext4_get_inode_loc:4320: comm syz.2.427: Invalid inode table block 0 in block_group 0 [ 281.247215][ T5368] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5803: Corrupt filesystem [ 283.227151][ T5068] Bluetooth: hci5: command 0x0406 tx timeout [ 284.011672][ T6438] loop0: detected capacity change from 0 to 8 [ 284.113352][ T6438] SQUASHFS error: Failed to read block 0x4e8: -5 [ 284.149725][ T6438] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 284.164359][ T26] kauditd_printk_skb: 40 callbacks suppressed [ 284.164371][ T26] audit: type=1800 audit(1728731038.489:556): pid=6438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.682" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 284.391158][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.450199][ T6435] chnl_net:caif_netlink_parms(): no params data found [ 284.669991][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.497981][ T6456] loop1: detected capacity change from 0 to 1024 [ 285.524307][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.726680][ T6435] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.754189][ T6435] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.794181][ T6435] device bridge_slave_0 entered promiscuous mode [ 285.839731][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.850245][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 285.906129][ T6435] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.913187][ T6435] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.982962][ T6435] device bridge_slave_1 entered promiscuous mode [ 286.003174][ T6462] loop1: detected capacity change from 0 to 512 [ 286.077836][ T6462] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 286.098914][ T6435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.184419][ T6463] xt_CT: You must specify a L4 protocol and not use inversions on it [ 286.214843][ T6435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.476968][ T6435] team0: Port device team_slave_0 added [ 286.485339][ T6462] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x0000000000000000,minixdf,jqfmt=vfsold,quota,,errors=continue. Quota mode: writeback. [ 286.502616][ T6462] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038 (0x7fffffff) [ 287.612349][ T6435] team0: Port device team_slave_1 added [ 287.911236][ T6435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.918208][ T6435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.944460][ T6435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.944727][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 288.431009][ T6435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.473582][ T6435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.642314][ T3610] Bluetooth: hci6: command 0x0409 tx timeout [ 288.649990][ T6435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.761610][ T6504] loop4: detected capacity change from 0 to 512 [ 289.691229][ T6435] device hsr_slave_0 entered promiscuous mode [ 289.699716][ T6435] device hsr_slave_1 entered promiscuous mode [ 289.736003][ T6511] loop0: detected capacity change from 0 to 256 [ 289.775886][ T6504] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 289.788648][ T6504] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038 (0x7fffffff) [ 289.819641][ T6504] EXT4-fs error (device loop4): ext4_map_blocks:628: inode #2: block 3: comm syz.4.693: lblock 0 mapped to illegal pblock 3 (length 1) [ 289.854504][ T6511] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 289.937105][ T5964] EXT4-fs error (device loop4): ext4_map_blocks:628: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 289.954487][ T5964] EXT4-fs error (device loop4): __ext4_get_inode_loc:4320: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 289.968965][ T5964] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5803: Corrupt filesystem [ 289.982468][ T5964] EXT4-fs error (device loop4): ext4_dirty_inode:6007: inode #2: comm syz-executor: mark_inode_dirty error [ 290.062635][ T3629] EXT4-fs error (device loop4): __ext4_get_inode_loc:4320: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 290.076994][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 290.113502][ T3629] EXT4-fs error (device loop4): __ext4_get_inode_loc:4320: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 290.155646][ T3629] EXT4-fs error (device loop4): __ext4_get_inode_loc:4320: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 290.174714][ T5964] EXT4-fs error (device loop4): __ext4_get_inode_loc:4320: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 290.197334][ T6468] chnl_net:caif_netlink_parms(): no params data found [ 290.240921][ T5964] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5803: Corrupt filesystem [ 290.662089][ T9] device hsr_slave_0 left promiscuous mode [ 290.686008][ T9] device hsr_slave_1 left promiscuous mode [ 290.713836][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.725610][ T23] Bluetooth: hci6: command 0x041b tx timeout [ 290.755897][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.766327][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.773727][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.799542][ T9] device bridge_slave_1 left promiscuous mode [ 290.806842][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.823167][ T9] device bridge_slave_0 left promiscuous mode [ 290.830279][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.857262][ T9] device veth1_macvtap left promiscuous mode [ 290.863297][ T9] device veth0_macvtap left promiscuous mode [ 290.869901][ T9] device veth1_vlan left promiscuous mode [ 290.876420][ T9] device veth0_vlan left promiscuous mode [ 291.001324][ T6535] loop1: detected capacity change from 0 to 1024 [ 291.423122][ T9] team0 (unregistering): Port device team_slave_1 removed [ 291.454651][ T9] team0 (unregistering): Port device team_slave_0 removed [ 291.481714][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.518846][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.660908][ T9] bond0 (unregistering): Released all slaves [ 292.159509][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 292.296836][ T6468] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.314476][ T6468] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.348800][ T6468] device bridge_slave_0 entered promiscuous mode [ 292.358312][ T6468] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.365967][ T6468] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.374688][ T6468] device bridge_slave_1 entered promiscuous mode [ 292.425958][ T6468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.446468][ T6468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.478055][ T6468] team0: Port device team_slave_0 added [ 292.485884][ T6468] team0: Port device team_slave_1 added [ 292.558356][ T6468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.717785][ T6468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.829276][ T23] Bluetooth: hci6: command 0x040f tx timeout [ 293.076857][ T6468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.205983][ T6468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.240761][ T6468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.299397][ T6468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.342694][ T6468] device hsr_slave_0 entered promiscuous mode [ 293.349511][ T6468] device hsr_slave_1 entered promiscuous mode [ 293.356501][ T6468] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.366612][ T6468] Cannot create hsr debugfs directory [ 293.478137][ T6565] xt_CT: You must specify a L4 protocol and not use inversions on it [ 294.275967][ T6435] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 294.639149][ T3609] Bluetooth: hci2: command 0x0409 tx timeout [ 294.948381][ T5068] Bluetooth: hci6: command 0x0419 tx timeout [ 295.488452][ T6435] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 295.505989][ T6587] loop1: detected capacity change from 0 to 512 [ 295.597921][ T6435] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 295.638836][ T6587] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 295.666037][ T6435] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 295.772402][ T6587] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x0000000000000000,minixdf,jqfmt=vfsold,quota,,errors=continue. Quota mode: writeback. [ 295.807413][ T6587] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038 (0x7fffffff) [ 295.871837][ T6595] loop0: detected capacity change from 0 to 1024 [ 296.029648][ T6468] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.036480][ T6595] hfsplus: extend alloc file! (8192,65536,366) [ 296.179682][ T6468] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.285318][ T6550] chnl_net:caif_netlink_parms(): no params data found [ 296.296327][ T6595] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2037023801 (65184761632 ns) > initial count (20561400768 ns). Using initial count to start timer. [ 296.386771][ T6468] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.433746][ T6435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.542354][ T6468] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.599238][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 296.617044][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 296.644171][ T6435] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.706514][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 296.796152][ T5068] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 296.838401][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 296.867438][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 296.897717][ T3910] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.904792][ T3910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.922851][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 296.936466][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 296.956723][ T3910] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.963796][ T3910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.007383][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 297.020951][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 297.065861][ T5068] usb 1-1: Using ep0 maxpacket: 32 [ 297.075519][ T6550] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.083120][ T6550] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.091768][ T6550] device bridge_slave_0 entered promiscuous mode [ 297.107929][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 297.119471][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 297.131091][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 297.140558][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 297.160017][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 297.179007][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 297.193556][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 297.201653][ T5068] usb 1-1: config 0 has no interfaces? [ 297.221706][ T6435] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 297.234591][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 297.252483][ T6550] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.263165][ T6550] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.287042][ T6550] device bridge_slave_1 entered promiscuous mode [ 297.295717][ T5068] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 297.304763][ T5068] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 297.326941][ T5068] usb 1-1: SerialNumber: syz [ 297.345283][ T5068] usb 1-1: config 0 descriptor?? [ 297.404781][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 297.423272][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 297.457224][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 297.495364][ T6550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.528938][ T6550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.616907][ T3652] usb 1-1: USB disconnect, device number 2 [ 297.720925][ T6468] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 297.750849][ T6468] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 297.965257][ T6468] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 298.216398][ T6550] team0: Port device team_slave_0 added [ 298.303852][ T6468] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 298.439279][ T6550] team0: Port device team_slave_1 added [ 299.232325][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 299.283775][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 299.291258][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 299.354368][ T6550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.364976][ T6550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.406875][ T6550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.490506][ T6435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.521687][ T6550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.530653][ T6550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.563271][ T6660] autofs4:pid:6660:autofs_fill_super: called with bogus options [ 299.645012][ T6550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.744106][ T6666] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 299.764023][ T6665] loop0: detected capacity change from 0 to 512 [ 299.794711][ T6550] device hsr_slave_0 entered promiscuous mode [ 299.802262][ T6550] device hsr_slave_1 entered promiscuous mode [ 299.809714][ T6550] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.841625][ T6550] Cannot create hsr debugfs directory [ 300.011656][ T6665] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 300.025376][ T6665] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038 (0x7fffffff) [ 300.125355][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 300.205991][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 300.790244][ T6468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.861900][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 300.875104][ T6679] loop0: detected capacity change from 0 to 512 [ 300.882772][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 300.891360][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 300.900958][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 300.915317][ T6435] device veth0_vlan entered promiscuous mode [ 300.926086][ T6679] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 300.954268][ T6550] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.974788][ T6679] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,minixdf,jqfmt=vfsold,quota,,errors=continue. Quota mode: writeback. [ 300.991271][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 300.997126][ T6679] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038 (0x7fffffff) [ 301.009935][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 301.043854][ T6435] device veth1_vlan entered promiscuous mode [ 301.059918][ T6468] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.209857][ T6550] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.226992][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 301.235223][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 301.245108][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 301.254478][ T3950] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.261521][ T3950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.274410][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 301.367948][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 301.380130][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 301.388966][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 301.399428][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 301.408608][ T3950] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.415764][ T3950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.425022][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 301.440139][ T6435] device veth0_macvtap entered promiscuous mode [ 301.460546][ T6550] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.533019][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 301.546222][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 301.555481][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 301.576172][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 301.594014][ T6435] device veth1_macvtap entered promiscuous mode [ 301.635197][ T6550] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.732376][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 301.752192][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 301.779811][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 301.805889][ T6468] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 301.829715][ T6468] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 301.941392][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 301.961922][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 302.101262][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 302.172272][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 302.260774][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 302.331543][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 302.424706][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 303.517951][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.529581][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.539586][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.552083][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.564304][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.585971][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.601069][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.620785][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.639898][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.659611][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.672562][ T6435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.810713][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 303.829613][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 303.858968][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 304.061955][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.088317][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.098658][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.117585][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.127799][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.138363][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.150674][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.161225][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.171160][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.182855][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.204543][ T6435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.236372][ T6435] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.257133][ T6435] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.274933][ T6435] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.284156][ T6435] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.305196][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 304.314265][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 305.192505][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 305.200316][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 305.379282][ T6468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.187200][ T6550] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 306.270592][ T6722] loop1: detected capacity change from 0 to 512 [ 306.426841][ T3950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.440537][ T3950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.450153][ T6550] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 306.469600][ T6550] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 306.500747][ T6725] loop0: detected capacity change from 0 to 1024 [ 306.522418][ T6550] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 306.541567][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 306.551724][ T6722] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 306.566338][ T6722] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038 (0x7fffffff) [ 306.657952][ T3910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.666116][ T3910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.682760][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 306.715166][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 306.733688][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 306.782967][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 306.838643][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 306.851026][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 306.859391][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 306.909846][ T6468] device veth0_vlan entered promiscuous mode [ 306.943721][ T6468] device veth1_vlan entered promiscuous mode [ 307.058339][ T6736] loop2: detected capacity change from 0 to 512 [ 307.096938][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 307.117172][ T6736] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 307.148141][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 307.156345][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 307.179835][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 307.184106][ T6736] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x0000000000000000,minixdf,jqfmt=vfsold,quota,,errors=continue. Quota mode: writeback. [ 307.201978][ T6550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.210455][ T6736] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038 (0x7fffffff) [ 307.222664][ T6468] device veth0_macvtap entered promiscuous mode [ 307.327176][ T9] device hsr_slave_0 left promiscuous mode [ 307.338312][ T9] device hsr_slave_1 left promiscuous mode [ 307.361013][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.392755][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.411118][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.428996][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.456919][ T9] device bridge_slave_1 left promiscuous mode [ 307.465064][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.482354][ T9] device bridge_slave_0 left promiscuous mode [ 307.500236][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.523607][ T9] device veth1_macvtap left promiscuous mode [ 307.537937][ T9] device veth0_macvtap left promiscuous mode [ 307.545903][ T9] device veth1_vlan left promiscuous mode [ 307.559577][ T9] device veth0_vlan left promiscuous mode [ 308.047214][ T9] team0 (unregistering): Port device team_slave_1 removed [ 308.063259][ T9] team0 (unregistering): Port device team_slave_0 removed [ 308.078719][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.094320][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.363794][ T9] bond0 (unregistering): Released all slaves [ 308.457044][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 308.475756][ T6468] device veth1_macvtap entered promiscuous mode [ 308.498147][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 308.512987][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 308.572256][ T6550] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.608364][ T6468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.636817][ T6468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.656947][ T6468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.676801][ T6468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.696914][ T6468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.717401][ T6468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.729772][ T6468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.754399][ T6468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.765745][ T6468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.780911][ T6468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.794468][ T6468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.829732][ T6550] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 308.840350][ T6550] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 308.860573][ T6468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.889519][ T6468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.920052][ T6468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.940047][ T6468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.950014][ T6468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.960995][ T6468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.970868][ T6468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.981454][ T6468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.991521][ T6468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.006602][ T6468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.071803][ T6468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.149407][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 309.216985][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 309.305749][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 309.396347][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 309.472698][ T3702] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.479856][ T3702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.659665][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 309.683497][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 309.715869][ T3702] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.723006][ T3702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.803381][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 309.830657][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 309.876433][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 309.885335][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 309.902655][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 309.915691][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 309.930870][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 309.945264][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 309.960227][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 310.003187][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 310.042268][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 310.061779][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 310.806779][ T6766] loop2: detected capacity change from 0 to 512 [ 310.848207][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 310.876927][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 310.897324][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 310.912248][ T6766] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 310.928884][ T6468] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.956464][ T6468] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.975246][ T6766] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038 (0x7fffffff) [ 310.983989][ T6468] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.994210][ T6468] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.099453][ T6766] EXT4-fs error (device loop2): ext4_map_blocks:628: inode #18: block 20: comm syz.2.740: lblock 0 mapped to illegal pblock 20 (length 1) [ 311.197378][ T6777] loop1: detected capacity change from 0 to 1024 [ 311.253328][ T6435] EXT4-fs error (device loop2): ext4_map_blocks:628: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 311.265873][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 311.275044][ T6435] EXT4-fs error (device loop2): __ext4_get_inode_loc:4320: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 311.287254][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 311.329484][ T6550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.336838][ T3910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.344781][ T3910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.355740][ T6435] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5803: Corrupt filesystem [ 311.422045][ T6435] EXT4-fs error (device loop2): ext4_dirty_inode:6007: inode #2: comm syz-executor: mark_inode_dirty error [ 311.463093][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 311.472917][ T4605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.481739][ T4605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.535823][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 311.552180][ T3910] EXT4-fs error (device loop2): __ext4_get_inode_loc:4320: comm kworker/u4:11: Invalid inode table block 0 in block_group 0 [ 311.617665][ T3910] EXT4-fs error (device loop2): __ext4_get_inode_loc:4320: comm kworker/u4:11: Invalid inode table block 0 in block_group 0 [ 311.650979][ T6435] EXT4-fs error (device loop2): __ext4_get_inode_loc:4320: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 311.667773][ T6435] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5803: Corrupt filesystem [ 311.700133][ T6435] EXT4-fs error (device loop2): ext4_quota_off:6485: inode #3: comm syz-executor: mark_inode_dirty error [ 312.307748][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 312.321724][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 312.355927][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 312.371851][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 312.394979][ T6550] device veth0_vlan entered promiscuous mode [ 312.420690][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 312.448827][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 312.587345][ T6550] device veth1_vlan entered promiscuous mode [ 312.703671][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 312.726323][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 314.662327][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 314.670985][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 314.684640][ T6550] device veth0_macvtap entered promiscuous mode [ 314.712859][ T6550] device veth1_macvtap entered promiscuous mode [ 314.743578][ T6550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.754592][ T6550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.770111][ T6550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.781207][ T6550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.791040][ T6550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.801678][ T6550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.904655][ T6550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.915226][ T6550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.970078][ T6550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.144702][ T6550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.154740][ T6550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.165226][ T6550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.342956][ T6550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.453106][ T6817] loop0: detected capacity change from 0 to 1024 [ 315.465972][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 315.480296][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 315.512573][ T6819] loop3: detected capacity change from 0 to 2048 [ 315.538158][ T6550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.553763][ T6817] EXT4-fs (loop0): Ignoring removed oldalloc option [ 315.561189][ T6821] loop1: detected capacity change from 0 to 1024 [ 315.581789][ T6817] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 315.600710][ T6550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.616359][ T6550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.627066][ T6550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.637405][ T6550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.648623][ T6550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.661084][ T6550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.680435][ T6817] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 315.711815][ T6550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.721698][ T6550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.773868][ T6550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.783689][ T6550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.843878][ T6550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.874092][ T6550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.905303][ T6819] UDF-fs: bad mount option "adrnicb" or missing value [ 315.965694][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 315.993936][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 316.009439][ T6550] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.024393][ T6819] netlink: 12 bytes leftover after parsing attributes in process `syz.3.750'. [ 316.035303][ T6550] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.053555][ T6550] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.073817][ T6819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.750'. [ 316.082025][ T6550] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.095316][ T6819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.750'. [ 316.368623][ T3672] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.387062][ T3910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.413778][ T3672] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.432060][ T3910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.506017][ T6843] loop0: detected capacity change from 0 to 128 [ 316.576087][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 316.587446][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 316.625018][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.631329][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.640056][ T6843] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 316.834737][ T6807] chnl_net:caif_netlink_parms(): no params data found [ 316.854243][ T3610] Bluetooth: hci0: command 0x0409 tx timeout [ 318.244730][ T6870] loop4: detected capacity change from 0 to 256 [ 318.298521][ T6807] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.333735][ T6807] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.358952][ T6807] device bridge_slave_0 entered promiscuous mode [ 318.418384][ T6807] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.458138][ T6868] loop3: detected capacity change from 0 to 2048 [ 318.480451][ T6807] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.519213][ T6807] device bridge_slave_1 entered promiscuous mode [ 319.607363][ T3652] Bluetooth: hci0: command 0x041b tx timeout [ 319.758998][ T6807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.839342][ T6881] loop0: detected capacity change from 0 to 512 [ 319.845256][ T6807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.098741][ T6807] team0: Port device team_slave_0 added [ 320.114187][ T6881] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 320.174105][ T6881] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038 (0x7fffffff) [ 320.347971][ T6807] team0: Port device team_slave_1 added [ 321.541413][ T6890] sched: RT throttling activated [ 425.168658][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 425.175631][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9/1:b..l [ 425.183775][ C1] (detected by 1, t=10502 jiffies, g=27949, q=72) [ 425.190276][ C1] task:kworker/u4:0 state:R running task stack:21856 pid: 9 ppid: 2 flags:0x00004000 [ 425.202009][ C1] Workqueue: netns cleanup_net [ 425.206794][ C1] Call Trace: [ 425.210066][ C1] [ 425.212996][ C1] __schedule+0x12c4/0x45b0 [ 425.217515][ C1] ? mark_lock+0x98/0x340 [ 425.221851][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 425.227831][ C1] ? release_firmware_map_entry+0x190/0x190 [ 425.233722][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 425.238926][ C1] ? preempt_schedule_irq+0xec/0x1c0 [ 425.244208][ C1] preempt_schedule_irq+0xf7/0x1c0 [ 425.249323][ C1] ? __cond_resched+0x20/0x20 [ 425.254037][ C1] irqentry_exit+0x53/0x80 [ 425.258460][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 425.264438][ C1] RIP: 0010:lock_acquire+0x252/0x4f0 [ 425.269718][ C1] Code: 2b 00 74 08 4c 89 f7 e8 0c 75 67 00 f6 44 24 61 02 0f 85 84 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 425.289327][ C1] RSP: 0018:ffffc90000ce78c0 EFLAGS: 00000206 [ 425.295414][ C1] RAX: 0000000000000001 RBX: 1ffff9200019cf24 RCX: 1ffff9200019cec4 [ 425.303382][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8b3da0 RDI: ffffffff8ad904c0 [ 425.311350][ C1] RBP: ffffc90000ce7a20 R08: dffffc0000000000 R09: fffffbfff20e2419 [ 425.319315][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff9200019cf20 [ 425.327289][ C1] R13: dffffc0000000000 R14: ffffc90000ce7920 R15: 0000000000000246 [ 425.335283][ C1] ? read_lock_is_recursive+0x10/0x10 [ 425.340666][ C1] ? __might_sleep+0xc0/0xc0 [ 425.345268][ C1] rcu_lock_acquire+0x2a/0x30 [ 425.349944][ C1] ? rcu_lock_acquire+0x5/0x30 [ 425.354701][ C1] inet_twsk_purge+0x129/0x9d0 [ 425.359464][ C1] ? __local_bh_enable_ip+0x164/0x1f0 [ 425.364838][ C1] ? __inet_twsk_schedule+0x130/0x130 [ 425.370211][ C1] ? tcp_sk_exit+0xa0/0xa0 [ 425.374627][ C1] tcp_sk_exit_batch+0x28/0x90 [ 425.379386][ C1] ? tcp_sk_exit+0xa0/0xa0 [ 425.383796][ C1] cleanup_net+0x763/0xb60 [ 425.388215][ C1] ? ops_free_list+0x340/0x340 [ 425.392984][ C1] process_one_work+0x8a1/0x10c0 [ 425.397933][ C1] ? worker_detach_from_pool+0x260/0x260 [ 425.403567][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 425.409109][ C1] ? kthread_data+0x4e/0xc0 [ 425.413608][ C1] ? wq_worker_running+0x97/0x170 [ 425.418627][ C1] worker_thread+0xaca/0x1280 [ 425.423333][ C1] kthread+0x3f6/0x4f0 [ 425.427398][ C1] ? rcu_lock_release+0x20/0x20 [ 425.432241][ C1] ? kthread_blkcg+0xd0/0xd0 [ 425.436826][ C1] ret_from_fork+0x1f/0x30 [ 425.441254][ C1] [ 425.444265][ C1] rcu: rcu_preempt kthread starved for 10509 jiffies! g27949 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 425.455451][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 425.465407][ C1] rcu: RCU grace-period kthread stack dump: [ 425.471284][ C1] task:rcu_preempt state:R running task stack:26168 pid: 15 ppid: 2 flags:0x00004000 [ 425.482064][ C1] Call Trace: [ 425.485339][ C1] [ 425.488265][ C1] __schedule+0x12c4/0x45b0 [ 425.492766][ C1] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 425.498657][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 425.504560][ C1] ? __mod_timer+0xa8e/0xeb0 [ 425.509150][ C1] ? release_firmware_map_entry+0x190/0x190 [ 425.515040][ C1] ? mod_timer_pending+0x20/0x20 [ 425.519973][ C1] ? lockdep_softirqs_off+0x420/0x420 [ 425.525350][ C1] schedule+0x11b/0x1f0 [ 425.529501][ C1] schedule_timeout+0x1b9/0x300 [ 425.534347][ C1] ? console_conditional_schedule+0x40/0x40 [ 425.540240][ C1] ? update_process_times+0x200/0x200 [ 425.545615][ C1] ? prepare_to_swait_event+0x321/0x340 [ 425.551159][ C1] rcu_gp_fqs_loop+0x2bf/0x1080 [ 425.556013][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 425.561218][ C1] ? dyntick_save_progress_counter+0x230/0x230 [ 425.567367][ C1] ? rcu_gp_init+0xdae/0x1140 [ 425.572041][ C1] ? rcu_gp_init+0x1140/0x1140 [ 425.576804][ C1] ? finish_swait+0xc5/0x1d0 [ 425.581393][ C1] rcu_gp_kthread+0xa4/0x360 [ 425.585981][ C1] ? _raw_spin_unlock+0x40/0x40 [ 425.590837][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 425.595954][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 425.601945][ C1] ? __kthread_parkme+0x15c/0x1c0 [ 425.606971][ C1] kthread+0x3f6/0x4f0 [ 425.611040][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 425.616157][ C1] ? kthread_blkcg+0xd0/0xd0 [ 425.620749][ C1] ret_from_fork+0x1f/0x30 [ 425.625177][ C1] [ 425.628187][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 425.634498][ C1] Sending NMI from CPU 1 to CPUs 0: [ 425.639698][ C0] NMI backtrace for cpu 0 [ 425.639707][ C0] CPU: 0 PID: 6882 Comm: syz.4.766 Not tainted 5.15.167-syzkaller #0 [ 425.639722][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 425.639730][ C0] RIP: 0010:do_softirq+0xa8/0x240 [ 425.639746][ C0] Code: 00 4c 8d 74 24 40 4c 89 f3 48 c1 eb 03 42 80 3c 23 00 74 08 4c 89 f7 e8 66 a4 7c 00 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 <42> 80 3c 23 00 74 08 4c 89 f7 e8 c9 a3 7c 00 4c 8b 6c 24 40 fa 41 [ 425.639757][ C0] RSP: 0018:ffffc90003447b20 EFLAGS: 00000046 [ 425.639770][ C0] RAX: 0000000080000001 RBX: 1ffff92000688f6c RCX: ffffffff96868f03 [ 425.639780][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8a11c0 RDI: ffffffff8ad904c0 [ 425.639790][ C0] RBP: ffffc90003447bd0 R08: ffffffff8186df90 R09: ffffed100fbd6771 [ 425.639800][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 425.639810][ C0] R13: 1ffff92000688f84 R14: ffffc90003447b60 R15: 1ffff92000688f64 [ 425.639821][ C0] FS: 000055557f91e500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 425.639833][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 425.639843][ C0] CR2: 000000110c2d4a0d CR3: 00000000674f9000 CR4: 00000000003506f0 [ 425.639856][ C0] DR0: 0000000000002800 DR1: 0000000000000000 DR2: 0000000000000000 [ 425.639864][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 425.639873][ C0] Call Trace: [ 425.639879][ C0] [ 425.639885][ C0] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 425.639900][ C0] ? read_lock_is_recursive+0x10/0x10 [ 425.639915][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 425.639929][ C0] ? unknown_nmi_error+0xd0/0xd0 [ 425.639949][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 425.639963][ C0] ? nmi_handle+0xf7/0x370 [ 425.639977][ C0] ? do_softirq+0xa8/0x240 [ 425.639989][ C0] ? default_do_nmi+0x62/0x150 [ 425.640004][ C0] ? exc_nmi+0xa8/0x100 [ 425.640017][ C0] ? end_repeat_nmi+0x16/0x31 [ 425.640031][ C0] ? trace_hardirqs_off+0x50/0x70 [ 425.640047][ C0] ? do_softirq+0xa8/0x240 [ 425.640060][ C0] ? do_softirq+0xa8/0x240 [ 425.640072][ C0] ? do_softirq+0xa8/0x240 [ 425.640085][ C0] [ 425.640089][ C0] [ 425.640093][ C0] ? __local_bh_enable_ip+0x1f0/0x1f0 [ 425.640106][ C0] ? lockdep_hardirqs_on_prepare+0x7a0/0x7a0 [ 425.640121][ C0] ? __local_bh_enable_ip+0x102/0x1f0 [ 425.640133][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 425.640149][ C0] __local_bh_enable_ip+0x1b1/0x1f0 [ 425.640162][ C0] ? local_bh_enable+0x5/0x20 [ 425.640176][ C0] ? _local_bh_enable+0xa0/0xa0 [ 425.640190][ C0] ? fpu__clear_user_states+0x1af/0x260 [ 425.640205][ C0] arch_do_signal_or_restart+0x1488/0x1890 [ 425.640231][ C0] ? get_sigframe_size+0x10/0x10 [ 425.640245][ C0] ? __ia32_sys_sigaltstack+0x60/0x60 [ 425.640265][ C0] ? __do_sys_rt_sigreturn+0x19d/0x250 [ 425.640281][ C0] ? exit_to_user_mode_loop+0x39/0x130 [ 425.640296][ C0] exit_to_user_mode_loop+0x97/0x130 [ 425.640310][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 425.640324][ C0] syscall_exit_to_user_mode+0x5d/0x240 [ 425.640339][ C0] do_syscall_64+0x47/0xb0 [ 425.640352][ C0] ? clear_bhb_loop+0x15/0x70 [ 425.640364][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 425.640379][ C0] RIP: 0033:0x7f7795ce0230 [ 425.640392][ C0] Code: 83 c0 16 83 e0 f7 74 12 50 48 8d 3d 9a c2 06 00 e8 15 92 f8 ff 0f 1f 44 00 00 c3 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 <83> ff 21 74 0b c3 66 2e 0f 1f 84 00 00 00 00 00 55 53 48 89 f3 48 [ 425.640402][ C0] RSP: 002b:00007ffd4f0790b8 EFLAGS: 00000293 [ 425.640413][ C0] RAX: 0000000000000000 RBX: 00007f7795e6ff80 RCX: 00007f7795cea0e5 [ 425.640422][ C0] RDX: 00007ffd4f0790c0 RSI: 00007ffd4f0791f0 RDI: 0000000000000021 [ 425.640432][ C0] RBP: 00007f7795e71a80 R08: 0000000000000000 R09: 0000000000000010 [ 425.640440][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000004e656 [ 425.640449][ C0] R13: 00007ffd4f0797f0 R14: 0000000000000226 R15: ffffffffffffffff [ 425.640465][ C0]