last executing test programs: 1m24.094900533s ago: executing program 2 (id=226): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043b"], 0xd) 1m24.002300297s ago: executing program 2 (id=228): syz_emit_ethernet(0x3e, &(0x7f0000000980)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5, 0xe}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x8, 0x2c, 0x0, @remote, @local, {[@hopopts={0x5c}]}}}}}, 0x0) 1m23.714462389s ago: executing program 2 (id=231): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0xfffffffffffffd1e}, {0x4}, {0xffffffffffffff7e, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 1m22.957911102s ago: executing program 2 (id=234): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r4) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x4206, r5) ptrace(0x4207, r5) shutdown(0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace(0x11, r5) 1m22.289568152s ago: executing program 2 (id=240): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92F\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) fspick(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1) fsopen(0x0, 0x1) 1m17.310521049s ago: executing program 2 (id=262): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r4) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x4206, r5) ptrace(0x4207, r5) shutdown(0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace(0x11, r5) 1m1.364639897s ago: executing program 32 (id=262): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r4) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x4206, r5) ptrace(0x4207, r5) shutdown(0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace(0x11, r5) 49.536611924s ago: executing program 1 (id=395): r0 = syz_open_procfs(0x0, &(0x7f0000000580)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xd0000009}) 49.346455722s ago: executing program 1 (id=397): socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea11004a35f4667d41", 0x29}], 0x1) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9c9", 0x56}], 0x1}, 0x0) write(r1, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) 49.191282089s ago: executing program 1 (id=400): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000200)={[{@errors_remount}, {@nolazytime}]}, 0x1, 0x46b, &(0x7f0000000600)="$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") link(&(0x7f0000000040)='./file1\x00', 0x0) 47.914681845s ago: executing program 1 (id=405): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8, &(0x7f0000000000)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x800}}, {}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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") 47.639300966s ago: executing program 1 (id=408): write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00), 0x0, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) 44.621412369s ago: executing program 1 (id=423): syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000043c0)=ANY=[@ANYBLOB="003bfa093f92d25f4b42889f58b35b82edd6f82c49e007ed49b9ed030962f330bd57af2a"], 0x2, 0x1a2, &(0x7f0000000440)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") lsetxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000f3ff00000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000c20"], 0x0, 0x96}, 0x28) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) r2 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x6, 0x1, 0x8000000004007, 0xac, 0x1, 0x4, {0x0, 0x4, 0x20fe, 0x40000000005, 0x85, 0xd614, 0x9, 0x7fffffff, 0xfffffffa, 0xc000, 0x0, 0xee00, 0x0, 0x3ff, 0x401}}, {0x0, 0x11}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) 44.471356855s ago: executing program 33 (id=423): syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000043c0)=ANY=[@ANYBLOB="003bfa093f92d25f4b42889f58b35b82edd6f82c49e007ed49b9ed030962f330bd57af2a"], 0x2, 0x1a2, &(0x7f0000000440)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") lsetxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000f3ff00000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000c20"], 0x0, 0x96}, 0x28) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) r2 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x6, 0x1, 0x8000000004007, 0xac, 0x1, 0x4, {0x0, 0x4, 0x20fe, 0x40000000005, 0x85, 0xd614, 0x9, 0x7fffffff, 0xfffffffa, 0xc000, 0x0, 0xee00, 0x0, 0x3ff, 0x401}}, {0x0, 0x11}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) 9.982312373s ago: executing program 6 (id=548): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) 7.661196175s ago: executing program 5 (id=565): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000100)=@default_ap_ssid, 0x6, 0x0) 7.53320149s ago: executing program 5 (id=567): add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) gettid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) 7.508237812s ago: executing program 4 (id=568): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x200, 0x21db}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000140)="aa6e25806dfeab10143dbabe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.298710534s ago: executing program 4 (id=572): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x1000801, &(0x7f00000036c0)=ANY=[@ANYRES64=0x0], 0x0, 0x213, &(0x7f0000000400)="$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") openat$full(0xffffffffffffff9c, 0x0, 0xc840, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) io_submit(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000080), 0x1003, r0}, 0x38) 5.843521354s ago: executing program 4 (id=575): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(0x0, 0x6, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) getpgrp(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x7, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x8002) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x0, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2}) syz_mount_image$ext4(&(0x7f0000000840)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x21081e, &(0x7f0000000440)={[{@quota}, {@nogrpid}, {@nolazytime}]}, 0xff, 0x523, &(0x7f0000000c00)="$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") ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/power/sync_on_suspend', 0x102, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001880)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2c000881}, 0x200008c0) epoll_create1(0x80000) creat(&(0x7f0000000180)='./file2\x00', 0x71283578ac7c5cd) 3.856757411s ago: executing program 5 (id=580): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_setup(0x39e1, &(0x7f0000000bc0)={0x0, 0x49fd, 0x12, 0x400, 0x320}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xb) 3.824655443s ago: executing program 6 (id=581): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x40000008}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x7c8}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000, 0x3, &(0x7f00001c3000/0x2000)=nil) close_range(r5, 0xffffffffffffffff, 0x0) 3.722375857s ago: executing program 3 (id=583): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, 0x0) ioctl$KDSETMODE(r2, 0x4b45, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x2fd, 0xffff, 0x101, 0x300}}) 2.765431109s ago: executing program 6 (id=584): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f0000005300)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000e40)='P', 0x1}], 0x1, &(0x7f00000010c0)=ANY=[], 0x10}}], 0x1, 0x5d2dd0c54751f8e3) 2.686260822s ago: executing program 0 (id=585): fsopen(0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b0, &(0x7f0000000280)="$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") creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 2.681762063s ago: executing program 4 (id=586): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000440)=""/53, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000300)=""/75, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000840)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0xfffffffe) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f0000000400)={0x3}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, 0x0, 0x0, 0x0, 0xeeee0000}) 2.635174205s ago: executing program 6 (id=587): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x1e}]}, 0x24}}, 0x0) 2.566903848s ago: executing program 3 (id=588): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000b00)="1081d9", 0x3, r0) 2.565980367s ago: executing program 5 (id=589): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=']) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = accept(0xffffffffffffffff, &(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000480)=0x80) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x60, 0x1403, 0x802, 0x70bd2c, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_vlan\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macvlan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000a000}, 0x40008c0) socket$nl_route(0x10, 0x3, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r8, 0x80047441, 0xf0ff1f00000000) 2.462454092s ago: executing program 0 (id=590): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000140)={0x0, 0x0, 0x800000000000}) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x0, 0x2, 0x100000001, 0x7}) 2.462221022s ago: executing program 3 (id=591): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x0, 0x27dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.327632508s ago: executing program 4 (id=592): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) 2.237861922s ago: executing program 0 (id=593): r0 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0x0, 0xee01) keyctl$chown(0x4, r0, 0x0, 0x0) 2.010355102s ago: executing program 6 (id=594): ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000040)=""/119) 1.467691895s ago: executing program 3 (id=595): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x70bd2b, 0x25dfdbff, {0xa, 0x18}}, 0x18}, 0x1, 0x0, 0x0, 0x2000c094}, 0x0) 1.337609231s ago: executing program 6 (id=596): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(0x0, 0x6, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) getpgrp(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x7, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x8002) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x0, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2}) syz_mount_image$ext4(&(0x7f0000000840)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x21081e, &(0x7f0000000440)={[{@quota}, {@nogrpid}, {@nolazytime}]}, 0xff, 0x523, &(0x7f0000000c00)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AgiNfbGsrzrtbzrUptIuGeuSFTiBEf+AM49ceeC4MalHJD4YYFqJA5TzezY2di79qaJvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiIdyNipjyelFu81d3y8z7ZfbC4t/tgMYkse+dfSVGeH4uen8ldK19zKiJ+8J2InyRH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5427r9ceozVTx5a+1JwoU1/++I873/hZXq3p8khvO56mbtMrB3FylyPie6cRbAQule2ZGHVF+EzSiHg+Il4urv+ZuFT8NgGAiyzLZiKb6c0DABddWsyBJWm1nAuYjjStVrtzeC/E1bTRandu3W9tri1158quRyW9v9Ko3ynnCq9HJcnzc0X6Yb52KH83Ip6LiF9OXiny1cVWY2mUNz4AMMauHRr//zvZHf8BgAvu+I/NAAAXkfEfAMaP8R8Axo/xHwDGT3f8v/K4P5Zl2c9PozoAwBnw/A8A48f4DwBj5ftvv51v2V75/ddL721trrbeu71Ub69Wm5uL1cXWxnp1udVaLr6zp3nS6zVarfW512Lz/evfXG93Zttb2/earc21zr3ie73v1SvFWTtn0DIAYJDnXvroL0k+Ir95pdiiZy2HykhrBpy2dNQVAEbm0qgrAIyM1b5gfD18xn/sDwGYHoALos8SvY+Y6vcHQlmWZadXJeCU3fyC+X8YVz3z/z4FDGPmpPn/Ym1gbxLChWT+H8ZXliXDrvkfw54IAJxvx8zxXz/L+xBgdAa8//98uf9d+ebAj5YOn/HhadYKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzrf99X+r5TK/05Gm1WrEM8UCQJXk/kqjficino2IP09WJvP83IjrDAA8qfTvSbn+182ZV6cfKXrx2kFyIiJ++ut3fvX+Qqez8aeIieTfk/vHOx+Wx2snBps6jRYAAMfbH6eLfc+D/Ce7Dxb3t7Oszz++3b0ryOPu7U7E3kH8y3G52E9FJSKu/icp811Jz9zFk9j5ICI+36/9SUwXcyDdW5bD8fPYz5xp/PSR+Gm5QHNa/lt87inUBcbNR3n/81a/6y+NG8W+//U/VfRQT67s//KXWtwr+sCH8ff7v0sD+r8bw8Z47Q/f7aauHC37IOKLlyP2Y+/19D/78ZMB8V8dMv5fv/Tiy4PKst9E3Iz+8XtjzXaa67Ptre3bK82F5fpyfa1Wm5+bv/PG3ddrs8Uc9ezg0eCfb956dlBZ3v6rA+JPndD+rw7Z/t/+/90ffuWY+F9/pV/8NF44Jn4+Jn5tyPgLV38/8Lk7j790tP3JML//W0PG//hv20eWDQcARqe9tb260GjUNyTGNPHjOBfVGC6R/5c9B9Xom/jWWcWaiP5Fv3ile00fKsqyzxRrUI/xNGbdgPPg4KKPiP+NujIAAAAAAAAAAAAAAEBfZ/EXS6NuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfXpwEAAP//+E3TQw==") ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/power/sync_on_suspend', 0x102, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001880)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2c000881}, 0x200008c0) epoll_create1(0x80000) creat(&(0x7f0000000180)='./file2\x00', 0x71283578ac7c5cd) 1.325883662s ago: executing program 5 (id=597): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) shutdown(r0, 0x1) 1.274494654s ago: executing program 0 (id=598): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_netdev_private(r0, 0x8943, &(0x7f0000000000)) 1.274104124s ago: executing program 3 (id=599): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x52c, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in=@multicast1, 0xffff, 0x0, 0x1, 0x4, 0xa, 0x0, 0x0, 0x4}, {0x2000000000000bd1, 0xe, 0x3}, {0x81, 0x9}, 0x2000000, 0x0, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x3c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xe7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffe0) 280.006868ms ago: executing program 3 (id=600): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_setup(0x39e1, &(0x7f0000000bc0)={0x0, 0x49fd, 0x12, 0x400, 0x320}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xb) 183.498282ms ago: executing program 0 (id=601): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000240)='svc_stats_latency\x00', r0}, 0x18) syz_emit_ethernet(0x0, 0x0, 0x0) 64.183067ms ago: executing program 4 (id=602): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000440)=""/53, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000300)=""/75, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000840)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0xfffffffe) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f0000000400)={0x3}) 18.272279ms ago: executing program 0 (id=603): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x70bd2c, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e20}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}]}, 0x60}}, 0x0) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x2, 0x1, 0x56, 0x8, 0x9, 0x0, 0x70bd2c, 0x25dfdbfd, [@sadb_x_filter={0x5, 0x1a, @in6=@mcast1, @in6=@private1, 0x22, 0x4, 0x4}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d5}]}, 0x48}}, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=@newsa={0x138, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@private0={0xfc, 0x0, '\x00', 0xfc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x6, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@algo_crypt={0x48, 0x2, {{'cbc-aes-ce\x00'}}}]}, 0x138}}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe91, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x40000000000001, r4, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) timer_settime(0x0, 0x1, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) mincore(&(0x7f0000400000/0xc00000)=nil, 0xc00000, &(0x7f00000000c0)) 0s ago: executing program 5 (id=604): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): 59.075071][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.087415][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.114086][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.124598][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.133809][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.140973][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.151166][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.160271][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.168896][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.176085][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.186281][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.194902][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.203489][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.210632][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.218618][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.228390][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.237562][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.246694][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.255932][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.264916][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.279302][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.287425][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.295762][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.306376][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.314654][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.349181][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.361636][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.371341][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.381696][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.391013][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.400015][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.409040][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.418194][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.427242][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.438707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.447624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.458085][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.468610][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.484207][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.502749][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.525600][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.539748][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.552755][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.568316][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.576912][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.587503][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.596641][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.605906][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.616454][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.630677][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.639727][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.649438][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.658911][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.672645][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.693645][ T23] Bluetooth: hci2: command 0x041b tx timeout [ 59.696538][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.703822][ T23] Bluetooth: hci3: command 0x041b tx timeout [ 59.710901][ T4251] Bluetooth: hci1: command 0x041b tx timeout [ 59.716519][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 59.731666][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.740331][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.754807][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.767963][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.776326][ T1346] Bluetooth: hci4: command 0x041b tx timeout [ 59.785415][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.835434][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.842567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.869947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.885528][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.892633][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.923169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.932196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.942202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.951321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.960111][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.967230][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.975426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.983011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.990436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.999346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.008118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.018624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.026439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.036145][ T4190] device veth0_vlan entered promiscuous mode [ 60.088005][ T4190] device veth1_vlan entered promiscuous mode [ 60.116837][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.136845][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.169272][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.189861][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.205240][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.217042][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.230417][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.242343][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.256743][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.270612][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.280204][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.330202][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.351519][ T4190] device veth0_macvtap entered promiscuous mode [ 60.374414][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.381959][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.390359][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.400469][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.409430][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.418060][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.425833][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.435090][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.444019][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.469631][ T4190] device veth1_macvtap entered promiscuous mode [ 60.479329][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.521995][ T4185] device veth0_vlan entered promiscuous mode [ 60.529520][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.542076][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.558176][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.566959][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.577395][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.591511][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.609985][ T4185] device veth1_vlan entered promiscuous mode [ 60.618556][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.627314][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.636660][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.645676][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.654539][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.678170][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.699987][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.708802][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.718752][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.734244][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.741842][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.751495][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.760131][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.770076][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.781026][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.790173][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.799011][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.815626][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.833585][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.842018][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.864207][ T4184] device veth0_vlan entered promiscuous mode [ 60.888976][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.898337][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.909745][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.918671][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.935807][ T4184] device veth1_vlan entered promiscuous mode [ 60.950861][ T4183] device veth0_vlan entered promiscuous mode [ 60.960593][ T4185] device veth0_macvtap entered promiscuous mode [ 60.969974][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.979539][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.988625][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.000293][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.009344][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.018669][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.027732][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.036593][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.055456][ T4185] device veth1_macvtap entered promiscuous mode [ 61.063317][ T4183] device veth1_vlan entered promiscuous mode [ 61.080200][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.089308][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.140197][ T4196] device veth0_vlan entered promiscuous mode [ 61.170758][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.181379][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.194638][ T4272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.202710][ T4272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.207196][ T4184] device veth0_macvtap entered promiscuous mode [ 61.237268][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.251230][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.262743][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.274231][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.282672][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.291863][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.300190][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.310049][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.319160][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.328297][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.338176][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.348203][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.358950][ T4196] device veth1_vlan entered promiscuous mode [ 61.368924][ T4184] device veth1_macvtap entered promiscuous mode [ 61.384641][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.396504][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.408066][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.418304][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.426972][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.435342][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.443881][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.452482][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.471785][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.483321][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.493404][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.504635][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.516474][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.529326][ T4183] device veth0_macvtap entered promiscuous mode [ 61.539816][ T4183] device veth1_macvtap entered promiscuous mode [ 61.550222][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.559537][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.569813][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.579131][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.590160][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.598430][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.606754][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.616809][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.626006][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.636039][ T4272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.644349][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.655217][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.665503][ T4272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.667747][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.684512][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.701223][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.723776][ T4196] device veth0_macvtap entered promiscuous mode [ 61.731893][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.741081][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.750332][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.760051][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.768599][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.776928][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 61.783384][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 61.785949][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.793320][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 61.804802][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 61.806077][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.821646][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.830967][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.842634][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.853912][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.854232][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 61.864784][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.880236][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.890634][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.901484][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.915991][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.928902][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.941167][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.951958][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.963346][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.973317][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.983983][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.997209][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.014739][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.031461][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.042284][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.052085][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.060919][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.074072][ T4196] device veth1_macvtap entered promiscuous mode [ 62.083737][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.092564][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.102741][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.111912][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.144903][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.170336][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.187901][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.211068][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.222253][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.232514][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.244377][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.273712][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.295164][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.311228][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.437520][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.447252][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.458331][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.469056][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.489042][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.586512][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.654919][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.729167][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.808161][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.870467][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.004877][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.212705][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.242278][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.248326][ T4299] loop3: detected capacity change from 0 to 256 [ 63.255160][ T4196] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.271667][ T4196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.274011][ T4299] ======================================================= [ 63.274011][ T4299] WARNING: The mand mount option has been deprecated and [ 63.274011][ T4299] and is ignored by this kernel. Remove the mand [ 63.274011][ T4299] option from the mount to silence this warning. [ 63.274011][ T4299] ======================================================= [ 63.285533][ T4196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.335439][ T4196] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.346881][ T4299] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x09066d1f, utbl_chksum : 0xe619d30d) [ 63.485349][ T3032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.511943][ T3032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.526983][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.534823][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.548136][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.567992][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.591783][ T3032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.599079][ T1231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.607150][ T3032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.645442][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.653045][ T1231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.665159][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.684695][ T1231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.686825][ T4302] binder: 4301:4302 unknown command 0 [ 63.692715][ T1231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.746295][ T3032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.756218][ T4302] binder: 4301:4302 ioctl c0306201 200000000080 returned -22 [ 63.764072][ T3032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.771386][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.820085][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.825198][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.850994][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.859927][ T4236] Bluetooth: hci2: command 0x0419 tx timeout [ 63.873250][ T4236] Bluetooth: hci3: command 0x0419 tx timeout [ 63.906510][ T4236] Bluetooth: hci0: command 0x0419 tx timeout [ 63.919984][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.953035][ T4236] Bluetooth: hci1: command 0x0419 tx timeout [ 63.960203][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.977580][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.990297][ T4236] Bluetooth: hci4: command 0x0419 tx timeout [ 64.029951][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.036465][ T4311] loop3: detected capacity change from 0 to 1024 [ 64.131716][ T4311] EXT4-fs (loop3): Ignoring removed bh option [ 64.141585][ T4311] EXT4-fs (loop3): Ignoring removed nobh option [ 64.151845][ T4311] EXT4-fs (loop3): Ignoring removed bh option [ 64.163021][ T4311] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 64.283678][ T4317] loop2: detected capacity change from 0 to 1024 [ 65.326057][ T4311] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,bh,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 65.554507][ T4236] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 65.678646][ T4300] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 66.950897][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 66.960375][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 66.969520][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 66.978513][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 66.987755][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 66.996876][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 67.006449][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 67.015783][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 67.024970][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 67.034280][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 67.163774][ T4334] sched: RT throttling activated [ 67.231423][ T4337] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3871: comm syz.3.8: Allocating blocks 497-513 which overlap fs metadata [ 67.933177][ T4236] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.973699][ T4236] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.037360][ T4236] usb 5-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 68.071667][ T4337] EXT4-fs (loop3): pa ffff888073d388c0: logic 128, phys. 385, len 8 [ 68.082905][ T4337] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 1 [ 68.086486][ T4236] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.173428][ T4300] usb 2-1: Using ep0 maxpacket: 16 [ 68.838705][ T4236] usb 5-1: config 0 descriptor?? [ 68.967981][ T4300] usb 2-1: device descriptor read/all, error -71 [ 69.118823][ T4236] usb 5-1: can't set config #0, error -71 [ 69.145411][ T4236] usb 5-1: USB disconnect, device number 2 [ 69.622043][ T4364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19'. [ 70.401064][ T4366] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.489701][ T4370] loop3: detected capacity change from 0 to 512 [ 70.569462][ T4370] EXT4-fs (loop3): Test dummy encryption mode enabled [ 70.609631][ T4370] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 70.718768][ T4370] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 70.784459][ T4370] EXT4-fs (loop3): 1 truncate cleaned up [ 70.790284][ T4370] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,min_batch_time=0x0000000000000fff,max_batch_time=0x0000000000000001,test_dummy_encryption=v1,errors=remount-ro,errors=continue,. Quota mode: none. [ 70.907330][ T4386] loop1: detected capacity change from 0 to 1024 [ 71.166553][ T4392] loop0: detected capacity change from 0 to 128 [ 71.439180][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.463394][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.605468][ T4392] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 73.650885][ T4392] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 75.868152][ T4429] input: syz0 as /devices/virtual/input/input5 [ 76.119593][ T4438] loop2: detected capacity change from 0 to 128 [ 76.401813][ T4438] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 76.629650][ T4438] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 78.163109][ T4466] capability: warning: `syz.1.50' uses 32-bit capabilities (legacy support in use) [ 79.525372][ T4500] loop4: detected capacity change from 0 to 512 [ 79.625115][ T4500] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 79.632456][ T4500] EXT4-fs (loop4): inline encryption not supported [ 79.665642][ T4502] loop1: detected capacity change from 0 to 128 [ 79.690805][ T4500] EXT4-fs (loop4): Test dummy encryption mode enabled [ 79.719328][ T4500] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 79.747138][ T4500] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 79.784553][ T4500] EXT4-fs (loop4): 1 truncate cleaned up [ 79.790353][ T4500] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 79.898580][ T4502] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 80.049452][ T4502] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 80.292474][ T4500] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 80.512659][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 80.973644][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.060587][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.142023][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 81.201898][ T26] audit: type=1326 audit(1764022098.783:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4528 comm="syz.2.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10c270b749 code=0x7ffc0000 [ 81.220517][ T23] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 81.225096][ T26] audit: type=1326 audit(1764022098.803:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4528 comm="syz.2.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f10c270b749 code=0x7ffc0000 [ 81.267724][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.304171][ T26] audit: type=1326 audit(1764022098.803:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4528 comm="syz.2.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10c270b749 code=0x7ffc0000 [ 81.321451][ T23] usb 4-1: config 0 descriptor?? [ 81.616273][ T1109] cfg80211: failed to load regulatory.db [ 81.914204][ T4290] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 81.928735][ T23] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 81.951253][ T23] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 82.041412][ T4545] Invalid ELF header type: 25773 != 1 [ 82.093965][ T4545] loop1: detected capacity change from 0 to 1024 [ 82.641219][ T4226] usb 4-1: USB disconnect, device number 2 [ 82.806956][ T4548] loop0: detected capacity change from 0 to 8 [ 82.889080][ T4546] fido_id[4546]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 82.931505][ T4548] unable to read xattr id index table [ 82.952917][ T4290] usb 5-1: Using ep0 maxpacket: 8 [ 83.133246][ T4290] usb 5-1: unable to get BOS descriptor or descriptor too short [ 83.454129][ T4290] usb 5-1: config 7 has an invalid interface number: 213 but max is 0 [ 83.683022][ T4290] usb 5-1: config 7 has no interface number 0 [ 83.866305][ T4290] usb 5-1: config 7 interface 213 altsetting 15 bulk endpoint 0x8F has invalid maxpacket 16 [ 83.901269][ T4290] usb 5-1: config 7 interface 213 altsetting 15 endpoint 0xD has an invalid bInterval 128, changing to 7 [ 83.932054][ T4290] usb 5-1: config 7 interface 213 altsetting 15 endpoint 0xD has invalid wMaxPacketSize 0 [ 83.943380][ T4290] usb 5-1: config 7 interface 213 altsetting 15 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 84.003044][ T4290] usb 5-1: config 7 interface 213 has no altsetting 0 [ 84.139579][ T4567] loop2: detected capacity change from 0 to 16 [ 84.247132][ T4567] erofs: (device loop2): mounted with root inode @ nid 36. [ 84.296994][ T4567] erofs: (device loop2): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 84.308034][ T4567] attempt to access beyond end of device [ 84.308034][ T4567] loop2: rw=524288, want=34359740336, limit=16 [ 84.607055][ T26] audit: type=1326 audit(1764022102.183:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4568 comm="syz.1.82" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f894070c749 code=0x0 [ 84.629624][ T4290] usb 5-1: language id specifier not provided by device, defaulting to English [ 85.361466][ T4290] usb 5-1: New USB device found, idVendor=15e8, idProduct=9100, bcdDevice=61.61 [ 85.393863][ T4290] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.423123][ T4290] usb 5-1: can't set config #7, error -71 [ 85.446112][ T4290] usb 5-1: USB disconnect, device number 3 [ 85.532946][ T4226] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 85.793307][ T4226] usb 2-1: Using ep0 maxpacket: 32 [ 85.943321][ T4226] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 86.005520][ T4226] usb 2-1: config 0 has no interface number 0 [ 86.113711][ T4226] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 49455, setting to 1024 [ 86.261350][ T4226] usb 2-1: config 0 interface 2 has no altsetting 0 [ 86.523387][ T4226] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 86.574823][ T4226] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.643954][ T4226] usb 2-1: Product: syz [ 86.682852][ T4226] usb 2-1: Manufacturer: syz [ 86.697915][ T4226] usb 2-1: SerialNumber: syz [ 86.752852][ T4226] usb 2-1: config 0 descriptor?? [ 87.854751][ T4226] usb 2-1: USB disconnect, device number 4 [ 88.237614][ T4200] udevd[4200]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 88.327390][ T26] audit: type=1326 audit(1764022105.913:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4619 comm="syz.2.97" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f10c270b749 code=0x0 [ 89.265426][ T4636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.101'. [ 89.470209][ T4636] bond0: (slave bond_slave_1): Releasing backup interface [ 89.699579][ T4640] loop1: detected capacity change from 0 to 128 [ 90.178964][ T4640] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 90.190314][ T4640] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 91.697057][ T4651] loop3: detected capacity change from 0 to 1024 [ 91.858204][ T4651] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.901108][ T4651] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.983217][ T4651] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz.3.107: inode has both inline data and extents flags [ 93.165020][ T26] audit: type=1326 audit(1764022110.753:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4669 comm="syz.3.111" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f58bcc5d749 code=0x0 [ 93.323111][ T4685] loop4: detected capacity change from 0 to 2048 [ 93.449263][ T4685] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 93.945099][ T4697] loop3: detected capacity change from 0 to 512 [ 94.367433][ T4697] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #12: comm syz.3.123: iget: bad extra_isize 64544 (inode size 256) [ 94.422523][ T4697] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.123: couldn't read orphan inode 12 (err -117) [ 94.594895][ T4697] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 94.627867][ T4707] loop4: detected capacity change from 0 to 1024 [ 94.660120][ T4697] EXT4-fs warning (device loop3): __ext4fs_dirhash:283: invalid/unsupported hash tree version 9 [ 95.065194][ T4707] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 2: comm syz.4.125: lblock 2 mapped to illegal pblock 2 (length 1) [ 95.216016][ T4707] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 95.258694][ T4707] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 48: comm syz.4.125: lblock 0 mapped to illegal pblock 48 (length 1) [ 95.287255][ T4707] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 95.336928][ T4725] loop0: detected capacity change from 0 to 128 [ 95.339355][ T4727] loop1: detected capacity change from 0 to 512 [ 95.363125][ T4707] EXT4-fs error (device loop4): ext4_acquire_dquot:6209: comm syz.4.125: Failed to acquire dquot type 0 [ 95.429873][ T4727] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 95.453589][ T4725] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 95.480849][ T4707] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5850: Corrupt filesystem [ 95.496022][ T4707] EXT4-fs error (device loop4): ext4_evict_inode:282: inode #11: comm syz.4.125: mark_inode_dirty error [ 95.508870][ T4707] EXT4-fs warning (device loop4): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 95.519365][ T4727] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.530360][ T4707] EXT4-fs (loop4): 1 orphan inode deleted [ 95.536362][ T4707] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 95.544908][ T4725] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 95.560602][ T4280] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 95.647214][ T26] audit: type=1326 audit(1764022113.233:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4732 comm="syz.3.133" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f58bcc5d749 code=0x0 [ 95.673629][ T4280] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 95.709803][ T4725] EXT4-fs error (device loop0): __ext4_find_entry:1696: inode #2: comm syz.0.131: checksumming directory block 0 [ 95.744395][ T4280] EXT4-fs error (device loop4): ext4_release_dquot:6245: comm kworker/u4:6: Failed to release dquot type 0 [ 95.815654][ T9] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 95.859721][ T9] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 95.869646][ T9] EXT4-fs error (device loop4): ext4_release_dquot:6245: comm kworker/u4:0: Failed to release dquot type 0 [ 95.884052][ T4185] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 95.914069][ T4727] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 95.915116][ T4185] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5850: Corrupt filesystem [ 95.959578][ T4737] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 95.969047][ T4185] EXT4-fs error (device loop4): ext4_quota_off:6515: inode #3: comm syz-executor: mark_inode_dirty error [ 97.215462][ T26] audit: type=1326 audit(1764022114.803:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4751 comm="syz.4.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd743675749 code=0x7ffc0000 [ 97.249392][ T4757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.136'. [ 97.291274][ T26] audit: type=1326 audit(1764022114.803:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4751 comm="syz.4.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd743675749 code=0x7ffc0000 [ 97.335205][ T26] audit: type=1326 audit(1764022114.833:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4751 comm="syz.4.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fd743675749 code=0x7ffc0000 [ 97.358003][ T4757] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.457615][ T26] audit: type=1326 audit(1764022114.833:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4751 comm="syz.4.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd743675749 code=0x7ffc0000 [ 97.582021][ T26] audit: type=1326 audit(1764022114.833:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4751 comm="syz.4.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd743675749 code=0x7ffc0000 [ 97.634972][ T4757] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.508506][ T4786] loop0: detected capacity change from 0 to 1024 [ 100.645527][ T4793] IPv6: NLM_F_CREATE should be specified when creating new route [ 100.922697][ T4803] loop1: detected capacity change from 0 to 512 [ 100.946461][ T4786] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000001,usrjquota=,,errors=continue. Quota mode: none. [ 100.996995][ T4786] EXT4-fs error (device loop0): ext4_search_dir:1549: inode #12: block 7: comm syz.0.149: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 101.026828][ T4805] UHID_CREATE from different security context by process 107 (syz.2.154), this is not allowed. [ 101.321455][ T4803] EXT4-fs error (device loop1): ext4_quota_enable:6417: inode #3: comm syz.1.155: iget: special inode unallocated [ 101.340002][ T4803] EXT4-fs error (device loop1): ext4_quota_enable:6420: comm syz.1.155: Bad quota inode: 3, type: 0 [ 101.545201][ T4803] EXT4-fs warning (device loop1): ext4_enable_quotas:6461: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 102.217115][ T4803] EXT4-fs (loop1): mount failed [ 103.832908][ T1109] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 103.883223][ T4842] loop3: detected capacity change from 0 to 2048 [ 103.988103][ T4842] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 104.534113][ T1109] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 104.544200][ T1109] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 105.092883][ T1109] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 105.169767][ T1109] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 105.210201][ T1109] usb 3-1: SerialNumber: syz [ 105.276375][ T4831] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 106.561913][ T4879] loop1: detected capacity change from 0 to 512 [ 106.578536][ T1109] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 106.597349][ T1109] usb 3-1: USB disconnect, device number 2 [ 106.680594][ T4879] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 106.698828][ T4879] ext4 filesystem being mounted at /44/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.759459][ T4879] EXT4-fs error (device loop1): ext4_do_update_inode:5218: inode #2: comm syz.1.180: corrupted inode contents [ 106.839490][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 106.839729][ T26] audit: type=1326 audit(1764022124.423:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4885 comm="syz.2.183" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f10c270b749 code=0x0 [ 106.918070][ T4879] EXT4-fs error (device loop1): ext4_dirty_inode:6054: inode #2: comm syz.1.180: mark_inode_dirty error [ 106.976932][ T4879] EXT4-fs error (device loop1): ext4_do_update_inode:5218: inode #2: comm syz.1.180: corrupted inode contents [ 107.005259][ T4882] loop3: detected capacity change from 0 to 8192 [ 107.088645][ T4879] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.180: mark_inode_dirty error [ 107.160956][ T26] audit: type=1800 audit(1764022124.743:16): pid=4882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.182" name="file2" dev="loop3" ino=1048590 res=0 errno=0 [ 107.219980][ T4882] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 107.251444][ T4882] FAT-fs (loop3): Filesystem has been set read-only [ 107.262951][ T4882] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 107.565271][ T4902] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 108.742931][ T1346] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 109.005381][ T26] audit: type=1326 audit(1764022126.543:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4928 comm="syz.4.196" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd743675749 code=0x0 [ 109.143122][ T1346] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 109.191855][ T1346] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.213701][ T4939] loop1: detected capacity change from 0 to 2048 [ 109.221093][ T1346] usb 3-1: config 0 interface 0 has no altsetting 0 [ 109.262445][ T1346] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 109.292756][ T4939] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 109.309482][ T1346] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.394338][ T1346] usb 3-1: config 0 descriptor?? [ 109.461637][ T4948] netlink: 'syz.0.204': attribute type 1 has an invalid length. [ 109.472182][ T4948] netlink: 'syz.0.204': attribute type 2 has an invalid length. [ 109.570884][ T4952] tap0: tun_chr_ioctl cmd 35108 [ 110.192756][ T1346] hid-steam 0003:28DE:1102.0002: unknown main item tag 0x0 [ 110.662874][ T1346] hid-steam 0003:28DE:1102.0002: unknown main item tag 0x0 [ 110.670995][ T1346] hid-steam 0003:28DE:1102.0002: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 110.686742][ T1346] hid-steam 0003:28DE:1102.0003: unknown main item tag 0x0 [ 110.698944][ T1346] hid-steam 0003:28DE:1102.0003: unknown main item tag 0x0 [ 110.710585][ T1346] hid-steam 0003:28DE:1102.0003: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 110.793507][ T1346] hid-steam 0003:28DE:1102.0002: Steam Controller 'XXXXXXXXXX' connected [ 110.804767][ T1346] input: Steam Controller as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1102.0002/input/input7 [ 110.814924][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 110.825245][ T1346] usb 3-1: USB disconnect, device number 3 [ 110.874439][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 110.892253][ T4970] loop3: detected capacity change from 0 to 128 [ 110.914660][ T1346] hid-steam 0003:28DE:1102.0002: Steam Controller 'XXXXXXXXXX' disconnected [ 110.951358][ T4973] loop1: detected capacity change from 0 to 1024 [ 110.953541][ T4972] fido_id[4972]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 110.983554][ T4965] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 111.038242][ T4970] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 111.051446][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 111.060689][ T4973] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 111.085587][ T4970] ext4 filesystem being mounted at /40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 111.086985][ T4973] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.346420][ T4973] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.211: inode has both inline data and extents flags [ 111.350084][ T4979] loop4: detected capacity change from 0 to 1024 [ 111.617077][ T4979] EXT4-fs (loop4): Ignoring removed nobh option [ 111.643760][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.842216][ T4985] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.211: inode has both inline data and extents flags [ 111.864693][ T4979] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 111.882121][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.963516][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 111.980016][ T4983] loop2: detected capacity change from 0 to 2048 [ 112.031691][ T4983] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 112.041808][ T23] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 112.053604][ T4979] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,data_err=abort,init_itable,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b0,i_version,bsdgroups,nobh,user_xattr,inode_readahead_blks=0x0000000000000004,dioread_nolock,,errors=continue. Quota mode: none. [ 112.082360][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.096554][ T23] usb 1-1: config 0 descriptor?? [ 112.468565][ T26] audit: type=1326 audit(1764022130.053:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4988 comm="syz.3.214" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f58bcc5d749 code=0x0 [ 112.565135][ T23] plantronics 0003:047F:FFFF.0004: item 0 4 0 8 parsing failed [ 112.599263][ T23] plantronics 0003:047F:FFFF.0004: parse failed [ 112.627111][ T23] plantronics: probe of 0003:047F:FFFF.0004 failed with error -22 [ 112.952222][ T1109] usb 1-1: USB disconnect, device number 2 [ 112.998526][ T5015] loop1: detected capacity change from 0 to 128 [ 113.034548][ T5017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.223'. [ 113.060709][ T5015] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 113.125287][ T5015] ext4 filesystem being mounted at /55/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 114.142127][ T5037] netlink: 32 bytes leftover after parsing attributes in process `syz.2.231'. [ 114.197173][ T5037] netlink: 32 bytes leftover after parsing attributes in process `syz.2.231'. [ 114.281349][ T5038] xt_TPROXY: Can be used only with -p tcp or -p udp [ 114.583254][ T26] audit: type=1326 audit(1764022132.123:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5042 comm="syz.2.234" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f10c270b749 code=0x0 [ 114.656987][ T5055] loop1: detected capacity change from 0 to 164 [ 114.796657][ T5055] rock: directory entry would overflow storage [ 114.850462][ T5055] rock: sig=0x66, size=4, remaining=3 [ 114.965369][ T5055] rock: directory entry would overflow storage [ 114.993285][ T5055] rock: sig=0x66, size=4, remaining=3 [ 115.163829][ T5066] loop0: detected capacity change from 0 to 128 [ 115.252486][ T5066] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 115.278018][ T5066] ext4 filesystem being mounted at /38/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 117.195346][ T5085] binfmt_misc: register: failed to install interpreter file ./cgroup [ 117.529646][ T26] audit: type=1326 audit(1764022135.113:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5091 comm="syz.3.250" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f58bcc5d749 code=0x0 [ 117.708334][ T5064] ODEBUG: Out of memory. ODEBUG disabled [ 118.382510][ T5112] loop4: detected capacity change from 0 to 128 [ 118.542870][ T5112] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.587077][ T5112] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 119.574087][ T5119] loop1: detected capacity change from 0 to 512 [ 119.674643][ T5119] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 119.736328][ T5119] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 119.802345][ T5119] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 not in group (block 0)! [ 119.885614][ T5119] EXT4-fs (loop1): group descriptors corrupted! [ 120.225739][ T5130] loop1: detected capacity change from 0 to 2048 [ 120.280354][ T5130] UDF-fs: bad mount option "rootdir=00000000000000000129" or missing value [ 120.534145][ T5138] loop3: detected capacity change from 0 to 128 [ 120.584175][ T5138] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 120.612972][ T5138] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 122.000562][ T5148] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 122.406842][ T5162] loop0: detected capacity change from 0 to 512 [ 122.422605][ T5164] loop4: detected capacity change from 0 to 1024 [ 122.470014][ T5162] EXT4-fs (loop0): Ignoring removed bh option [ 122.570024][ T5162] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 122.649653][ T5164] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 122.667713][ T5162] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.868840][ T26] audit: type=1326 audit(1764022140.453:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5172 comm="syz.4.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd743611829 code=0x7ffc0000 [ 123.004163][ T26] audit: type=1326 audit(1764022140.483:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5172 comm="syz.4.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd743611829 code=0x7ffc0000 [ 123.177606][ T26] audit: type=1326 audit(1764022140.483:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5172 comm="syz.4.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd743675749 code=0x7ffc0000 [ 123.309905][ T26] audit: type=1326 audit(1764022140.483:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5172 comm="syz.4.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd743675749 code=0x7ffc0000 [ 123.452838][ T26] audit: type=1326 audit(1764022140.483:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5172 comm="syz.4.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd743611829 code=0x7ffc0000 [ 123.581955][ T26] audit: type=1326 audit(1764022140.483:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5172 comm="syz.4.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd743675749 code=0x7ffc0000 [ 123.746933][ T26] audit: type=1326 audit(1764022140.483:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5172 comm="syz.4.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd743611829 code=0x7ffc0000 [ 123.894939][ T26] audit: type=1326 audit(1764022140.483:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5172 comm="syz.4.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd743675749 code=0x7ffc0000 [ 124.038994][ T26] audit: type=1326 audit(1764022140.493:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5172 comm="syz.4.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd743611829 code=0x7ffc0000 [ 124.139175][ T26] audit: type=1326 audit(1764022140.493:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5172 comm="syz.4.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd743675749 code=0x7ffc0000 [ 124.376061][ T5198] xt_limit: Overflow, try lower: 65536/2147483648 [ 124.468977][ T5203] capability: warning: `syz.4.288' uses deprecated v2 capabilities in a way that may be insecure [ 125.051390][ T5217] loop1: detected capacity change from 0 to 128 [ 125.144335][ T5217] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 125.155287][ T5217] ext4 filesystem being mounted at /71/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 125.812946][ T4226] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 126.283201][ T4226] usb 1-1: config 0 has an invalid interface number: 11 but max is 0 [ 126.432998][ T4226] usb 1-1: config 0 has no interface number 0 [ 126.439240][ T4226] usb 1-1: config 0 interface 11 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 1024 [ 126.510472][ T4226] usb 1-1: config 0 interface 11 has no altsetting 0 [ 126.549022][ T4226] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 126.619306][ T4226] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.678906][ T4226] usb 1-1: config 0 descriptor?? [ 126.705035][ T5227] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 126.727370][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 126.740450][ T4226] keyspan 1-1:0.11: Keyspan 2 port adapter converter detected [ 126.757815][ T4226] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 81 [ 126.771116][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 126.780419][ T4226] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 82 [ 126.794816][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 126.802255][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 126.819241][ T4226] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 1 [ 126.828643][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 126.841373][ T4226] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 2 [ 126.851863][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 126.865815][ T4226] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 85 [ 126.876524][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 126.887996][ T4226] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 5 [ 126.899070][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 126.911634][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 126.924794][ T4226] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 126.948244][ T4226] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 83 [ 126.961404][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 126.970746][ T4226] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 84 [ 126.985516][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 126.997121][ T4226] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 3 [ 127.007957][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 127.021475][ T4226] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 4 [ 127.032602][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 127.056682][ T4226] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 86 [ 127.066682][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 127.087000][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 127.100952][ T4226] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 6 [ 127.120904][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 127.142315][ T4226] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 127.154592][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 127.197925][ T4226] usb 1-1: USB disconnect, device number 3 [ 127.210095][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 127.232628][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 127.247277][ T4226] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 127.259384][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 127.274570][ T4226] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 127.290213][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 127.304257][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 127.319654][ T4226] keyspan 1-1:0.11: device disconnected [ 127.348384][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 127.359244][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 127.391961][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 127.408065][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 127.416171][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 127.431883][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 127.439955][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 127.453890][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 127.461562][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 127.507972][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 127.526207][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 127.542646][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 127.555360][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 127.609585][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 127.621303][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 127.636088][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 127.648037][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 127.658385][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 127.670044][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 127.680894][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 127.692357][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 127.742342][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 127.753484][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 127.771193][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 127.782734][ T5250] loop4: detected capacity change from 0 to 736 [ 127.789265][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 127.839427][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 127.875088][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 127.883996][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 127.891538][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 127.920037][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 127.941612][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 127.953671][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 127.961273][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 127.975331][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 127.985584][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 127.997169][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 128.007304][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 128.018876][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 128.029307][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 128.042060][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 128.052241][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 128.063761][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 128.071196][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 128.085149][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 128.092722][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 128.106650][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 128.115678][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 128.128184][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 128.137206][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 128.151425][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 128.160447][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 128.174193][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 128.181834][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 128.195660][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 128.205804][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 128.217236][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 128.227463][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 128.239000][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 128.250994][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 128.262554][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 128.276518][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 128.293246][ T7] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 128.425527][ T5252] fido_id[5252]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 128.577103][ T5261] loop3: detected capacity change from 0 to 128 [ 128.606651][ T5266] netlink: 28 bytes leftover after parsing attributes in process `syz.1.313'. [ 128.633645][ T5261] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 128.683330][ T5261] ext4 filesystem being mounted at /67/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 129.568352][ T5279] netlink: 'syz.1.317': attribute type 10 has an invalid length. [ 129.621037][ T5279] netlink: 17 bytes leftover after parsing attributes in process `syz.1.317'. [ 129.641818][ T5283] loop0: detected capacity change from 0 to 16 [ 129.721708][ T5283] erofs: (device loop0): mounted with root inode @ nid 36. [ 130.219951][ T5306] loop4: detected capacity change from 0 to 512 [ 131.258672][ T5312] loop1: detected capacity change from 0 to 128 [ 131.289339][ T5312] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 131.408018][ T5312] ext4 filesystem being mounted at /80/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 131.531692][ T5326] netlink: 268 bytes leftover after parsing attributes in process `syz.0.337'. [ 131.578519][ T26] kauditd_printk_skb: 89 callbacks suppressed [ 131.578536][ T26] audit: type=1326 audit(1764022149.163:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5327 comm="syz.3.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58bcc5d749 code=0x7ffc0000 [ 131.740259][ T26] audit: type=1326 audit(1764022149.163:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5327 comm="syz.3.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f58bcc5d749 code=0x7ffc0000 [ 132.152971][ T26] audit: type=1326 audit(1764022149.163:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5327 comm="syz.3.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58bcc5d749 code=0x7ffc0000 [ 132.375393][ T26] audit: type=1326 audit(1764022149.163:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5327 comm="syz.3.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f58bcc5d749 code=0x7ffc0000 [ 132.479209][ T26] audit: type=1326 audit(1764022149.163:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5327 comm="syz.3.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58bcc5d749 code=0x7ffc0000 [ 132.578839][ T26] audit: type=1326 audit(1764022149.163:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5327 comm="syz.3.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f58bcc5d749 code=0x7ffc0000 [ 132.659680][ T26] audit: type=1326 audit(1764022149.163:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5327 comm="syz.3.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58bcc5d749 code=0x7ffc0000 [ 132.828085][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.838450][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.783436][ T5362] loop1: detected capacity change from 0 to 512 [ 134.117497][ T5362] EXT4-fs (loop1): 1 orphan inode deleted [ 134.123556][ T5362] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 134.135183][ T5362] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.718856][ T5377] loop3: detected capacity change from 0 to 128 [ 136.204500][ T5377] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 136.225161][ T5377] ext4 filesystem being mounted at /78/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 137.258536][ T5389] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 137.788580][ T145] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.847674][ T5401] loop1: detected capacity change from 0 to 128 [ 138.565288][ T5398] Zero length message leads to an empty skb [ 139.856733][ T1109] Bluetooth: hci4: command 0x0409 tx timeout [ 139.917398][ T26] audit: type=1326 audit(1764022157.503:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5410 comm="syz.3.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58bcc5d749 code=0x7ffc0000 [ 139.954177][ T145] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.016692][ T5415] tap0: tun_chr_ioctl cmd 1074025677 [ 140.022920][ T5412] Illegal XDP return value 4294967282, expect packet loss! [ 140.029361][ T26] audit: type=1326 audit(1764022157.503:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5410 comm="syz.3.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58bcc5d749 code=0x7ffc0000 [ 140.030872][ T5415] tap0: linktype set to 773 [ 140.057570][ T26] audit: type=1326 audit(1764022157.583:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5410 comm="syz.3.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f58bcc5d749 code=0x7ffc0000 [ 140.082002][ T26] audit: type=1326 audit(1764022157.583:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5410 comm="syz.3.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58bcc5d749 code=0x7ffc0000 [ 140.151012][ T145] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.182723][ T26] audit: type=1326 audit(1764022157.583:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5410 comm="syz.3.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58bcc5d749 code=0x7ffc0000 [ 140.231193][ T5419] loop3: detected capacity change from 0 to 1024 [ 140.311590][ T145] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.389730][ T5419] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.366: Invalid block bitmap block 0 in block_group 0 [ 140.441076][ T5419] Quota error (device loop3): write_blk: dquota write failed [ 140.450150][ T5419] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 140.467054][ T5419] EXT4-fs error (device loop3): ext4_acquire_dquot:6209: comm syz.3.366: Failed to acquire dquot type 0 [ 140.481739][ T5419] EXT4-fs error (device loop3): ext4_free_blocks:6218: comm syz.3.366: Freeing blocks not in datazone - block = 0, count = 4096 [ 140.497180][ T5433] loop0: detected capacity change from 0 to 512 [ 140.503831][ T5419] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.366: Invalid inode bitmap blk 0 in block_group 0 [ 140.553019][ T4346] Quota error (device loop3): remove_tree: Getting block too big (0 >= 8) [ 140.571994][ T4346] EXT4-fs error (device loop3): ext4_release_dquot:6245: comm kworker/u4:9: Failed to release dquot type 0 [ 140.572228][ T5419] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 140.654657][ T5419] EXT4-fs (loop3): 1 orphan inode deleted [ 140.681676][ T5419] EXT4-fs (loop3): mounted filesystem without journal. Opts: ; nodiscard,grpid,,errors=continue. Quota mode: writeback. [ 140.802588][ T5393] chnl_net:caif_netlink_parms(): no params data found [ 140.838401][ T5419] syz.3.366 (5419) used greatest stack depth: 20808 bytes left [ 140.974194][ T5438] loop0: detected capacity change from 0 to 128 [ 141.065296][ T5438] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 141.096007][ T5438] ext4 filesystem being mounted at /69/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 142.606822][ T5453] loop3: detected capacity change from 0 to 2048 [ 142.681671][ T4174] Bluetooth: hci4: command 0x041b tx timeout [ 142.768386][ T5453] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 142.816811][ T5393] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.862859][ T5393] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.870954][ T5393] device bridge_slave_0 entered promiscuous mode [ 142.890865][ T5453] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 142.948037][ T5393] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.968407][ T5393] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.999827][ T5393] device bridge_slave_1 entered promiscuous mode [ 143.079863][ T5393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.124092][ T5473] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 143.138958][ T5473] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 143.158105][ T5393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.230869][ T5478] loop3: detected capacity change from 0 to 512 [ 143.256561][ T5393] team0: Port device team_slave_0 added [ 143.265948][ T5393] team0: Port device team_slave_1 added [ 143.307838][ T5393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.309834][ T5478] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.380: invalid indirect mapped block 10 (level 1) [ 143.315378][ T5393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.315403][ T5393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.374222][ T5478] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.380: invalid indirect mapped block 8 (level 1) [ 143.393009][ T5393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.400004][ T5393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.401917][ T26] audit: type=1326 audit(1764022160.983:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5454 comm="syz.4.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd743675749 code=0x7fc00000 [ 143.470345][ T5478] EXT4-fs (loop3): 1 truncate cleaned up [ 143.478149][ T5478] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 143.504944][ T5393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.784151][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 144.988195][ T5393] device hsr_slave_0 entered promiscuous mode [ 145.025540][ T5393] device hsr_slave_1 entered promiscuous mode [ 145.080905][ T5494] loop3: detected capacity change from 0 to 128 [ 145.091801][ T5393] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.112957][ T5393] Cannot create hsr debugfs directory [ 145.143227][ T5494] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 145.175175][ T5494] ext4 filesystem being mounted at /85/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 145.530008][ T5503] xt_hashlimit: overflow, try lower: 3/0 [ 146.812919][ T4174] Bluetooth: hci4: command 0x0419 tx timeout [ 147.908693][ T5393] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 147.935226][ T5393] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 147.992282][ T5534] netlink: 'syz.1.397': attribute type 4 has an invalid length. [ 148.001046][ T5534] netlink: 17 bytes leftover after parsing attributes in process `syz.1.397'. [ 148.027537][ T5393] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 148.064477][ T5393] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 148.136725][ T145] device hsr_slave_0 left promiscuous mode [ 148.146095][ T5545] loop0: detected capacity change from 0 to 128 [ 148.162321][ T5546] loop1: detected capacity change from 0 to 512 [ 148.185276][ T5545] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 148.198692][ T145] device hsr_slave_1 left promiscuous mode [ 148.206603][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.216594][ T5545] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.232383][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.260747][ T5546] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 148.296672][ T5549] loop4: detected capacity change from 0 to 128 [ 148.301880][ T5546] EXT4-fs (loop1): orphan cleanup on readonly fs [ 148.319593][ T5546] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:510: comm syz.1.400: Block bitmap for bg 0 marked uninitialized [ 148.338669][ T5546] EXT4-fs (loop1): Remounting filesystem read-only [ 148.358860][ T5546] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 148.370816][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.402616][ T5546] EXT4-fs (loop1): Remounting filesystem read-only [ 148.408001][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.420212][ T145] device bridge_slave_1 left promiscuous mode [ 148.427403][ T5549] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 148.438218][ T5549] ext4 filesystem being mounted at /85/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 148.470932][ T5546] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:510: comm syz.1.400: Block bitmap for bg 0 marked uninitialized [ 148.484673][ T5546] EXT4-fs (loop1): Remounting filesystem read-only [ 148.491212][ T5546] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 148.500790][ T5546] EXT4-fs (loop1): Remounting filesystem read-only [ 148.507516][ T5546] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:510: comm syz.1.400: Block bitmap for bg 0 marked uninitialized [ 148.522998][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.547554][ T5546] EXT4-fs (loop1): Remounting filesystem read-only [ 148.567685][ T5546] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 148.638334][ T5546] EXT4-fs (loop1): Remounting filesystem read-only [ 148.645634][ T5546] EXT4-fs (loop1): 1 orphan inode deleted [ 148.651403][ T5546] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nolazytime,. Quota mode: none. [ 148.661903][ T145] device bridge_slave_0 left promiscuous mode [ 148.677059][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.229303][ T145] device veth1_macvtap left promiscuous mode [ 149.278535][ T145] device veth0_macvtap left promiscuous mode [ 149.345175][ T145] device veth1_vlan left promiscuous mode [ 149.374373][ T145] device veth0_vlan left promiscuous mode [ 149.448487][ T5566] loop1: detected capacity change from 0 to 512 [ 149.539057][ T5566] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000800,bsddf,,errors=continue. Quota mode: writeback. [ 149.607565][ T5566] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.841210][ T145] team0 (unregistering): Port device team_slave_1 removed [ 149.857912][ T145] team0 (unregistering): Port device team_slave_0 removed [ 149.870809][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.930751][ T145] bond0 (unregistering): Released all slaves [ 151.016573][ T5393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.027297][ T5594] loop0: detected capacity change from 0 to 164 [ 151.093940][ T5594] Unable to read rock-ridge attributes [ 151.128900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 151.145311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 151.174021][ T5393] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.257163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.288963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.318710][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.326153][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.387599][ T5602] loop3: detected capacity change from 0 to 128 [ 151.440433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.448657][ T5603] process 'syz.0.414' launched '/dev/loop0' with NULL argv: empty string added [ 151.473956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.474003][ T5602] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 151.512165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.520525][ T5602] ext4 filesystem being mounted at /93/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 151.582043][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.589301][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.669999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 151.721402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 151.874280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 151.918324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 151.927853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 151.937068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 151.955136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 151.963760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 151.972276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 152.004877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 152.319975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 152.377296][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 152.547077][ T5628] loop0: detected capacity change from 0 to 512 [ 152.690606][ T5628] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.421: inode #1: comm syz.0.421: iget: illegal inode # [ 152.762839][ T1346] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 152.819964][ T5628] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.421: error while reading EA inode 1 err=-117 [ 152.883813][ T5628] EXT4-fs (loop0): 1 orphan inode deleted [ 152.903870][ T5628] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,stripe=0x0000000000000003,norecovery,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x0000000000000010,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 152.932120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 152.967043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 153.002904][ T1346] usb 5-1: Using ep0 maxpacket: 32 [ 153.006696][ T5393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.123043][ T1346] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.153052][ T1346] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.205443][ T1346] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 153.252845][ T1346] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.292708][ T1346] usb 5-1: config 0 descriptor?? [ 153.364218][ T1346] hub 5-1:0.0: USB hub found [ 153.583117][ T1346] hub 5-1:0.0: 1 port detected [ 153.704637][ T5646] chnl_net:caif_netlink_parms(): no params data found [ 154.423257][ T1346] hub 5-1:0.0: activate --> -90 [ 154.607497][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 154.628272][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 154.865933][ T4233] usb 5-1: USB disconnect, device number 4 [ 155.251649][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 155.430915][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 155.618462][ T4174] Bluetooth: hci1: command 0x0409 tx timeout [ 155.629115][ T5393] device veth0_vlan entered promiscuous mode [ 155.743717][ T5646] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.750816][ T5646] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.777596][ T5685] loop4: detected capacity change from 0 to 128 [ 155.794417][ T5646] device bridge_slave_0 entered promiscuous mode [ 155.816327][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 155.834274][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 155.852575][ T5685] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 155.871963][ T5685] ext4 filesystem being mounted at /90/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 155.918229][ T5393] device veth1_vlan entered promiscuous mode [ 155.957182][ T26] audit: type=1326 audit(1764022173.543:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5688 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58bcc5d749 code=0x7ffc0000 [ 155.984110][ T5646] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.991384][ T5646] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.073607][ T5646] device bridge_slave_1 entered promiscuous mode [ 156.081550][ T26] audit: type=1326 audit(1764022173.573:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5688 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58bcc5d749 code=0x7ffc0000 [ 156.105541][ T26] audit: type=1326 audit(1764022173.573:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5688 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58bcc5d749 code=0x7ffc0000 [ 156.145740][ T26] audit: type=1326 audit(1764022173.593:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5688 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58bcc5d749 code=0x7ffc0000 [ 156.675093][ T26] audit: type=1326 audit(1764022173.593:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5688 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f58bcc5f667 code=0x7ffc0000 [ 156.800157][ T26] audit: type=1326 audit(1764022173.593:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5688 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f58bcc5f5dc code=0x7ffc0000 [ 156.905361][ T26] audit: type=1326 audit(1764022173.593:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5688 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f58bcc5f514 code=0x7ffc0000 [ 156.928643][ T26] audit: type=1326 audit(1764022173.593:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5688 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f58bcc5f514 code=0x7ffc0000 [ 156.950901][ T26] audit: type=1326 audit(1764022173.603:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5688 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f58bcc5c3aa code=0x7ffc0000 [ 156.973510][ T26] audit: type=1326 audit(1764022173.603:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5688 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58bcc5d749 code=0x7ffc0000 [ 156.999736][ T5646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.293859][ T5646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.313520][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 157.410642][ T5703] loop3: detected capacity change from 0 to 512 [ 157.474245][ T5703] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 157.594487][ T5703] EXT4-fs (loop3): 1 truncate cleaned up [ 157.600285][ T5703] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 157.830008][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 158.661448][ T5393] device veth0_macvtap entered promiscuous mode [ 158.683751][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 158.749603][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 159.692159][ T5646] team0: Port device team_slave_0 added [ 159.710091][ T5393] device veth1_macvtap entered promiscuous mode [ 159.894283][ T5646] team0: Port device team_slave_1 added [ 159.959917][ T5393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.031790][ T5393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.076651][ T5393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.087531][ T5393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.098333][ T5393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.108938][ T5393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.122799][ T5393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.142816][ T5393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.153585][ T5714] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 160.164439][ T5393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.178738][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 160.207213][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 160.277467][ T5646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.329955][ T5646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.454517][ T5646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.468086][ T5646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.475289][ T5646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.503287][ T5646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.732953][ T1109] Bluetooth: hci1: command 0x040f tx timeout [ 160.828162][ T5393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.021180][ T5393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.248110][ T5393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.296862][ T5393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.306861][ T5393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.317457][ T5393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.329509][ T5393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.346354][ T5732] loop3: detected capacity change from 0 to 2048 [ 161.501070][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 161.534230][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 161.591612][ T5393] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.608239][ T5732] EXT4-fs (loop3): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 161.688947][ T5740] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 161.751688][ T5732] EXT4-fs (loop3): Cannot use DAX on a filesystem that may contain inline data [ 161.764117][ T5393] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.952671][ T5393] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.428332][ T5393] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.444721][ T5732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.443'. [ 162.564392][ T5646] device hsr_slave_0 entered promiscuous mode [ 162.602504][ T5646] device hsr_slave_1 entered promiscuous mode [ 162.615956][ T5646] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.645129][ T5646] Cannot create hsr debugfs directory [ 162.822932][ T4174] Bluetooth: hci1: command 0x0419 tx timeout [ 163.847772][ T4318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.889402][ T4318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.974701][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 164.015817][ T4607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.051841][ T4607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.093712][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 164.115926][ T5646] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 164.181483][ T5646] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 164.235658][ T5782] loop3: detected capacity change from 0 to 1764 [ 164.248037][ T5646] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 164.279901][ T5646] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 164.630630][ T5788] device wlan0 entered promiscuous mode [ 164.656000][ T5788] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 165.371756][ T145] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.407633][ T5807] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 165.426675][ T5807] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 166.356048][ T145] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.434492][ T145] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.514104][ T5835] loop5: detected capacity change from 0 to 512 [ 166.535241][ T145] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.565633][ T5646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.574433][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.574977][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.661277][ T5646] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.679055][ T5835] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 166.681061][ T5839] netlink: 116 bytes leftover after parsing attributes in process `syz.0.467'. [ 166.723144][ T5835] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.828092][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 166.847659][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 166.857155][ T4578] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.864454][ T4578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.245094][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.342303][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.543535][ T4578] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.550971][ T4578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.610637][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 167.755428][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 167.770985][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 167.775887][ T5857] loop0: detected capacity change from 0 to 512 [ 167.817905][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.828496][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.863611][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.881718][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.917878][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 167.931414][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 167.972161][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 168.016231][ T5857] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2229: inode #17: comm syz.0.473: corrupted in-inode xattr [ 168.100031][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 168.100569][ T5857] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.473: couldn't read orphan inode 17 (err -117) [ 168.125449][ T5857] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 168.313129][ T4233] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 168.433206][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.953094][ T4233] usb 6-1: config 0 has no interfaces? [ 169.113084][ T4233] usb 6-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 169.149280][ T4233] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.187381][ T4233] usb 6-1: Product: syz [ 169.227960][ T4233] usb 6-1: Manufacturer: syz [ 169.265078][ T4233] usb 6-1: SerialNumber: syz [ 169.385818][ T4233] usb 6-1: config 0 descriptor?? [ 169.960941][ T5866] mmap: syz.5.477 (5866) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 170.078665][ T21] usb 6-1: USB disconnect, device number 2 [ 170.110508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 170.135088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 170.195490][ T5646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.227338][ T5910] loop0: detected capacity change from 0 to 2048 [ 170.360166][ T5912] kvm [5911]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 170.395237][ T5910] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 170.435738][ T5912] kvm [5911]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 170.493046][ T5912] kvm [5911]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 170.562490][ T5912] kvm [5911]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 171.159651][ T5932] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 171.249873][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 171.287499][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 171.406503][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 171.503078][ T23] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 171.503107][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 171.511136][ T5940] loop4: detected capacity change from 0 to 512 [ 171.525801][ T5942] trusted_key: encrypted_key: master key parameter '' is invalid [ 171.584177][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 171.614691][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 171.637543][ T5945] loop0: detected capacity change from 0 to 512 [ 171.641122][ T5940] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 171.696781][ T5646] device veth0_vlan entered promiscuous mode [ 171.724661][ T5940] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 171.737198][ T5940] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.493: invalid indirect mapped block 2683928664 (level 1) [ 171.829207][ T5646] device veth1_vlan entered promiscuous mode [ 171.846227][ T5945] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 171.914011][ T5940] EXT4-fs (loop4): Remounting filesystem read-only [ 171.931129][ T5945] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.943011][ T23] usb 6-1: unable to get BOS descriptor or descriptor too short [ 171.993943][ T5940] EXT4-fs (loop4): 1 truncate cleaned up [ 172.023008][ T23] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 172.031912][ T23] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 172.042545][ T5940] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.". Quota mode: writeback. [ 172.066600][ T23] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 172.067055][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 172.097360][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 172.126376][ T5940] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #2: block 13: comm syz.4.493: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 172.153720][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 172.164003][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 172.173093][ T5957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.497'. [ 172.185616][ T5940] EXT4-fs (loop4): Remounting filesystem read-only [ 172.255435][ T23] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 172.271970][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.291536][ T23] usb 6-1: Product: syz [ 172.316440][ T23] usb 6-1: Manufacturer: syz [ 172.332285][ T23] usb 6-1: SerialNumber: syz [ 172.428982][ T5646] device veth0_macvtap entered promiscuous mode [ 172.464181][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 172.473080][ T5963] netlink: 144 bytes leftover after parsing attributes in process `syz.0.500'. [ 172.516715][ T5646] device veth1_macvtap entered promiscuous mode [ 172.602483][ T5646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.628335][ T5971] xt_hashlimit: max too large, truncated to 1048576 [ 172.663097][ T5646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.699199][ T5646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.716270][ T23] usb 6-1: 0:2 : does not exist [ 172.747987][ T5646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.756732][ T23] usb 6-1: USB disconnect, device number 3 [ 172.795933][ T5646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.832189][ T4616] udevd[4616]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 172.840775][ T5646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.936942][ T5646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.997449][ T5987] loop4: detected capacity change from 0 to 512 [ 173.031608][ T5987] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 173.069093][ T5987] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 173.131936][ T5646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.142107][ T5646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.173549][ T5987] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e028, mo2=0002] [ 173.192934][ T5646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.645218][ T5646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.679731][ T5987] EXT4-fs (loop4): orphan cleanup on readonly fs [ 173.770489][ T5646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.784822][ T5646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.807335][ T5646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.845335][ T5987] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.504: bg 0: block 361: padding at end of block bitmap is not set [ 173.916988][ T5646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.338256][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 174.338274][ T26] audit: type=1326 audit(1764022191.923:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.0.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a05b1749 code=0x7ffc0000 [ 174.392830][ T5646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.467355][ T5987] EXT4-fs (loop4): Remounting filesystem read-only [ 174.473210][ T26] audit: type=1326 audit(1764022191.963:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.0.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a05b1749 code=0x7ffc0000 [ 174.514603][ T5646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.536207][ T5987] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 174.612982][ T5646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.625105][ T5987] EXT4-fs (loop4): Remounting filesystem read-only [ 174.631643][ T5987] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.504: attempt to clear invalid blocks 33619980 len 1 [ 174.653485][ T6002] loop3: detected capacity change from 0 to 512 [ 174.731461][ T5646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.795238][ T5987] EXT4-fs (loop4): Remounting filesystem read-only [ 174.823652][ T5646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.903181][ T5987] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.504: invalid indirect mapped block 1811939328 (level 0) [ 174.919901][ T6002] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,nogrpid,nolazytime,,errors=continue. Quota mode: writeback. [ 174.996063][ T5987] EXT4-fs (loop4): Remounting filesystem read-only [ 175.004312][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 175.013852][ T5987] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.504: invalid indirect mapped block 2185560079 (level 1) [ 175.028246][ T6002] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.056773][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 175.098263][ T5987] EXT4-fs (loop4): Remounting filesystem read-only [ 175.134764][ T5987] EXT4-fs (loop4): 1 truncate cleaned up [ 175.142476][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 175.171630][ T5987] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,noblock_validity,discard,errors=remount-ro,mblk_io_submit. Quota mode: none. [ 175.193692][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 175.209212][ T5646] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.273075][ T5646] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.353370][ T5646] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.565805][ T5646] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.514474][ T145] device hsr_slave_0 left promiscuous mode [ 178.943554][ T145] device hsr_slave_1 left promiscuous mode [ 178.951334][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.960855][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.106027][ T145] device bridge_slave_1 left promiscuous mode [ 179.305885][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.353228][ T145] device bridge_slave_0 left promiscuous mode [ 179.379989][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.431510][ T145] device veth1_macvtap left promiscuous mode [ 179.437794][ T145] device veth0_macvtap left promiscuous mode [ 179.452884][ T145] device veth1_vlan left promiscuous mode [ 179.459053][ T145] device veth0_vlan left promiscuous mode [ 179.982562][ T145] team0 (unregistering): Port device team_slave_1 removed [ 180.231141][ T145] team0 (unregistering): Port device team_slave_0 removed [ 180.522222][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.542511][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.631366][ T145] bond0 (unregistering): Released all slaves [ 180.686744][ T26] audit: type=1326 audit(1764022198.273:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6039 comm="syz.4.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd743675749 code=0x50000 [ 180.712306][ T26] audit: type=1326 audit(1764022198.273:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6039 comm="syz.4.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd743675749 code=0x50000 [ 180.735141][ T26] audit: type=1326 audit(1764022198.273:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6039 comm="syz.4.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd743675749 code=0x50000 [ 180.757245][ T26] audit: type=1326 audit(1764022198.273:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6039 comm="syz.4.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd743675749 code=0x50000 [ 180.779472][ T26] audit: type=1326 audit(1764022198.273:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6039 comm="syz.4.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd743675749 code=0x50000 [ 180.809064][ T6023] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 180.836703][ T26] audit: type=1326 audit(1764022198.273:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6039 comm="syz.4.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd743675749 code=0x50000 [ 180.861168][ T26] audit: type=1326 audit(1764022198.273:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6039 comm="syz.4.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd743675749 code=0x50000 [ 180.908318][ T26] audit: type=1326 audit(1764022198.273:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6039 comm="syz.4.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd743675749 code=0x50000 [ 180.973861][ T4236] Bluetooth: hci2: command 0x0406 tx timeout [ 180.979950][ T4236] Bluetooth: hci0: command 0x0406 tx timeout [ 181.015734][ T4236] Bluetooth: hci3: command 0x0406 tx timeout [ 181.112991][ T4280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.135306][ T26] audit: type=1326 audit(1764022198.273:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6039 comm="syz.4.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd743675749 code=0x50000 [ 181.157935][ T4280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.196625][ T4280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.218171][ T26] audit: type=1326 audit(1764022198.273:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6039 comm="syz.4.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd743675749 code=0x50000 [ 181.251864][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 181.270311][ T4280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.397758][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 182.218148][ T6063] loop0: detected capacity change from 0 to 1024 [ 184.082098][ T6086] loop4: detected capacity change from 0 to 512 [ 184.303031][ T6086] EXT4-fs (loop4): inline encryption not supported [ 184.319154][ T6086] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 184.999638][ T6086] EXT4-fs (loop4): Test dummy encryption mode enabled [ 185.034452][ T6086] EXT4-fs (loop4): orphan cleanup on readonly fs [ 185.038809][ T6120] loop0: detected capacity change from 0 to 1024 [ 185.102419][ T6086] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.530: inode #13: comm syz.4.530: iget: illegal inode # [ 185.183205][ T6086] EXT4-fs (loop4): Remounting filesystem read-only [ 185.232955][ T6086] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.530: couldn't read orphan inode 13 (err -117) [ 185.254109][ T3032] hfsplus: b-tree write err: -5, ino 4 [ 185.337414][ T6086] EXT4-fs (loop4): Remounting filesystem read-only [ 185.391958][ T6086] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,inlinecrypt,noblock_validity,abort,mblk_io_submit,data_err=ignore,bsdgroups,errors=remount-ro,test_dummy_encryption,bsdgroups,. Quota mode: none. [ 187.103157][ T6136] input: syz0 as /devices/virtual/input/input8 [ 187.543997][ T6169] loop4: detected capacity change from 0 to 512 [ 187.658432][ T6169] EXT4-fs (loop4): Ignoring removed oldalloc option [ 187.667258][ T6169] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 187.680566][ T6178] loop3: detected capacity change from 0 to 736 [ 187.782380][ T6169] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 187.827849][ T6169] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.546: bg 0: block 248: padding at end of block bitmap is not set [ 187.963514][ T6169] __quota_error: 914 callbacks suppressed [ 187.963531][ T6169] Quota error (device loop4): write_blk: dquota write failed [ 188.083230][ T6169] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 188.163122][ T6169] EXT4-fs error (device loop4): ext4_acquire_dquot:6209: comm syz.4.546: Failed to acquire dquot type 1 [ 188.319193][ T6169] EXT4-fs (loop4): 1 truncate cleaned up [ 188.372558][ T6169] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,oldalloc,,errors=continue. Quota mode: writeback. [ 188.630869][ T6212] 9pnet: Insufficient options for proto=fd [ 189.576881][ T4606] Quota error (device loop4): remove_tree: Getting block too big (0 >= 6) [ 189.589610][ T6217] netlink: 80 bytes leftover after parsing attributes in process `syz.3.563'. [ 189.602900][ T4606] EXT4-fs error (device loop4): ext4_release_dquot:6245: comm kworker/u4:11: Failed to release dquot type 1 [ 189.669260][ T6169] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 189.779678][ T6169] syz.4.546 (6169) used greatest stack depth: 20776 bytes left [ 190.996888][ T6245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.570'. [ 191.062256][ T6248] loop4: detected capacity change from 0 to 16 [ 191.073409][ T6245] device bridge_slave_1 left promiscuous mode [ 191.093886][ T6245] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.137040][ T6248] erofs: (device loop4): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 26222) [ 191.176330][ T6245] device bridge_slave_0 left promiscuous mode [ 191.208375][ T6245] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.405395][ T6254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.574'. [ 191.904328][ T6266] 9pnet: Insufficient options for proto=fd [ 192.609792][ T6265] loop3: detected capacity change from 0 to 1024 [ 192.755115][ T6263] hfsplus: xattr searching failed [ 192.784297][ T6269] loop4: detected capacity change from 0 to 512 [ 193.320739][ T6269] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,nogrpid,nolazytime,,errors=continue. Quota mode: writeback. [ 193.420937][ T6269] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.511742][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.519132][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.572225][ T6296] loop0: detected capacity change from 0 to 256 [ 194.762009][ T6303] netlink: 'syz.6.587': attribute type 30 has an invalid length. [ 195.182966][ T6320] 9pnet: Insufficient options for proto=fd [ 302.412711][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 302.419720][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P1231/1:b..l P3561/1:b..l [ 302.429264][ C1] (detected by 1, t=10502 jiffies, g=16861, q=244) [ 302.435986][ C1] task:udevd state:R running task stack:23264 pid: 3561 ppid: 1 flags:0x00004002 [ 302.447970][ C1] Call Trace: [ 302.451274][ C1] [ 302.454243][ C1] __schedule+0x11bb/0x4390 [ 302.458895][ C1] ? release_firmware_map_entry+0x190/0x190 [ 302.464803][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 302.470801][ C1] ? preempt_schedule_irq+0xa6/0x150 [ 302.476106][ C1] preempt_schedule_irq+0xb1/0x150 [ 302.481333][ C1] ? __cond_resched+0xb0/0xb0 [ 302.486057][ C1] ? seqcount_lockdep_reader_access+0x11f/0x1c0 [ 302.492332][ C1] ? rcu_is_watching+0x11/0xa0 [ 302.497120][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 302.503026][ C1] irqentry_exit+0x63/0x70 [ 302.507464][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 302.513459][ C1] RIP: 0010:memcpy_erms+0x8/0x10 [ 302.518423][ C1] Code: ff 00 eb 1e 0f 1f 00 48 89 f8 48 89 d1 48 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 c3 90 90 90 90 90 90 48 89 f8 48 89 d1 f3 a4 90 90 90 90 90 90 90 48 89 f8 48 83 fa 20 72 7e 40 38 fe 7c 35 [ 302.538479][ C1] RSP: 0018:ffffc90002e2f8b8 EFLAGS: 00000202 [ 302.544568][ C1] RAX: ffffc90002e2fc40 RBX: ffffc90002e2fc40 RCX: 0000000000000000 [ 302.552559][ C1] RDX: 0000000000000010 RSI: ffffc90002e2fc70 RDI: ffffc90002e2fc50 [ 302.560821][ C1] RBP: 0000000000000040 R08: dffffc0000000000 R09: fffff520005c5f8a [ 302.568818][ C1] R10: fffff520005c5f8a R11: 1ffff920005c5f88 R12: dffffc0000000000 [ 302.577070][ C1] R13: 1ffff920005c5f8f R14: ffffc90002e2fc78 R15: ffffc90002e2fc60 [ 302.585100][ C1] nd_jump_root+0x1c0/0x410 [ 302.589739][ C1] path_init+0x382/0x1160 [ 302.594088][ C1] ? percpu_counter_add_batch+0x13b/0x160 [ 302.599940][ C1] path_openat+0x18a/0x2f30 [ 302.604750][ C1] ? verify_lock_unused+0x140/0x140 [ 302.610023][ C1] ? __kasan_slab_alloc+0xb3/0xd0 [ 302.615117][ C1] ? __kasan_slab_alloc+0x9c/0xd0 [ 302.620160][ C1] ? slab_post_alloc_hook+0x4c/0x380 [ 302.625465][ C1] ? verify_lock_unused+0x140/0x140 [ 302.630683][ C1] ? __x64_sys_openat+0x135/0x160 [ 302.635732][ C1] ? do_syscall_64+0x4c/0xa0 [ 302.640354][ C1] ? do_filp_open+0x3e0/0x3e0 [ 302.645067][ C1] do_filp_open+0x1b3/0x3e0 [ 302.649595][ C1] ? vfs_tmpfile+0x300/0x300 [ 302.654303][ C1] ? _raw_spin_unlock+0x24/0x40 [ 302.659233][ C1] ? alloc_fd+0x598/0x630 [ 302.663590][ C1] do_sys_openat2+0x142/0x4a0 [ 302.668290][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 302.673335][ C1] ? do_sys_open+0xe0/0xe0 [ 302.677769][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 302.683854][ C1] ? lock_chain_count+0x20/0x20 [ 302.688715][ C1] ? vtime_user_exit+0x2dc/0x400 [ 302.693676][ C1] __x64_sys_openat+0x135/0x160 [ 302.698678][ C1] do_syscall_64+0x4c/0xa0 [ 302.703104][ C1] ? clear_bhb_loop+0x30/0x80 [ 302.707793][ C1] ? clear_bhb_loop+0x30/0x80 [ 302.712486][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 302.718389][ C1] RIP: 0033:0x7f580e866c3a [ 302.722821][ C1] RSP: 002b:00007ffc4ac753f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 302.731251][ C1] RAX: ffffffffffffffda RBX: 0000556fcb2b0af0 RCX: 00007f580e866c3a [ 302.739248][ C1] RDX: 0000000000090800 RSI: 0000556fcb280be0 RDI: 00000000ffffff9c [ 302.747233][ C1] RBP: 0000556fcb280be0 R08: 0000000000000000 R09: 0000000000000000 [ 302.755309][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000556fcb2777b0 [ 302.763315][ C1] R13: 00000000000000fd R14: 0000556f9f39dbe0 R15: 00007ffc4ac75710 [ 302.771319][ C1] [ 302.774367][ C1] task:kworker/u4:3 state:R running task stack:22856 pid: 1231 ppid: 2 flags:0x00004000 [ 302.785242][ C1] Workqueue: bat_events batadv_nc_worker [ 302.790894][ C1] Call Trace: [ 302.794181][ C1] [ 302.797125][ C1] __schedule+0x11bb/0x4390 [ 302.801648][ C1] ? mark_lock+0x94/0x320 [ 302.806094][ C1] ? mark_lock+0x94/0x320 [ 302.810447][ C1] ? mark_lock+0x94/0x320 [ 302.814801][ C1] ? release_firmware_map_entry+0x190/0x190 [ 302.820713][ C1] ? mark_lock+0x94/0x320 [ 302.825064][ C1] ? preempt_schedule_irq+0xa6/0x150 [ 302.830365][ C1] preempt_schedule_irq+0xb1/0x150 [ 302.835497][ C1] ? __cond_resched+0xb0/0xb0 [ 302.840188][ C1] ? rcu_is_watching+0x11/0xa0 [ 302.844970][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 302.850798][ C1] irqentry_exit+0x63/0x70 [ 302.855227][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 302.861217][ C1] RIP: 0010:lock_acquire+0x1f2/0x3f0 [ 302.866515][ C1] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f6 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b [ 302.886216][ C1] RSP: 0018:ffffc900048a7aa0 EFLAGS: 00000206 [ 302.892311][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 172c14ce6df12200 [ 302.900293][ C1] RDX: 0000000000000000 RSI: ffffffff8a0b2f00 RDI: ffffffff8a59e580 [ 302.908277][ C1] RBP: ffffc900048a7bc0 R08: dffffc0000000000 R09: fffffbfff1ff7c19 [ 302.916263][ C1] R10: fffffbfff1ff7c19 R11: 1ffffffff1ff7c18 R12: ffffffff8c11c760 [ 302.924245][ C1] R13: 1ffff92000914f60 R14: 0000000000000246 R15: dffffc0000000000 [ 302.932258][ C1] ? rcu_lock_release+0x5/0x20 [ 302.937036][ C1] ? read_lock_is_recursive+0x10/0x10 [ 302.942528][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 302.947568][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 302.953569][ C1] rcu_lock_acquire+0x2a/0x30 [ 302.958259][ C1] ? rcu_lock_acquire+0x5/0x30 [ 302.963035][ C1] batadv_nc_worker+0xc9/0x5c0 [ 302.967823][ C1] process_one_work+0x863/0x1000 [ 302.972791][ C1] ? worker_detach_from_pool+0x240/0x240 [ 302.978435][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 302.983739][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 302.988780][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 302.994268][ C1] ? wq_worker_running+0x97/0x170 [ 302.999310][ C1] worker_thread+0xaa8/0x12a0 [ 303.004134][ C1] kthread+0x436/0x520 [ 303.008219][ C1] ? rcu_lock_release+0x20/0x20 [ 303.013078][ C1] ? kthread_blkcg+0xd0/0xd0 [ 303.017685][ C1] ret_from_fork+0x1f/0x30 [ 303.022130][ C1] [ 303.025158][ C1] rcu: rcu_preempt kthread starved for 10487 jiffies! g16861 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 303.036363][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 303.046342][ C1] rcu: RCU grace-period kthread stack dump: [ 303.052238][ C1] task:rcu_preempt state:R running task stack:28064 pid: 15 ppid: 2 flags:0x00004000 [ 303.063037][ C1] Call Trace: [ 303.066327][ C1] [ 303.069277][ C1] __schedule+0x11bb/0x4390 [ 303.073799][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 303.079470][ C1] ? release_firmware_map_entry+0x190/0x190 [ 303.085397][ C1] schedule+0x11b/0x1e0 [ 303.089566][ C1] schedule_timeout+0x15c/0x280 [ 303.094434][ C1] ? console_conditional_schedule+0x40/0x40 [ 303.100430][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 303.106350][ C1] ? update_process_times+0x200/0x200 [ 303.111748][ C1] ? prepare_to_swait_event+0x331/0x350 [ 303.117314][ C1] rcu_gp_fqs_loop+0x29e/0x11b0 [ 303.122271][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 303.127485][ C1] ? dyntick_save_progress_counter+0x230/0x230 [ 303.133658][ C1] ? rcu_gp_init+0x10e0/0x10e0 [ 303.138471][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 303.143683][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 303.148993][ C1] rcu_gp_kthread+0x98/0x350 [ 303.153596][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 303.158720][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 303.164624][ C1] ? __kthread_parkme+0x157/0x1b0 [ 303.169667][ C1] kthread+0x436/0x520 [ 303.173746][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 303.178867][ C1] ? kthread_blkcg+0xd0/0xd0 [ 303.183469][ C1] ret_from_fork+0x1f/0x30 [ 303.187913][ C1] [ 303.190937][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 303.197264][ C1] NMI backtrace for cpu 1 [ 303.201595][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 303.208630][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 303.218715][ C1] Call Trace: [ 303.222010][ C1] [ 303.224950][ C1] dump_stack_lvl+0x168/0x230 [ 303.229658][ C1] ? show_regs_print_info+0x20/0x20 [ 303.234876][ C1] ? load_image+0x3b0/0x3b0 [ 303.239402][ C1] ? irq_work_queue+0xbf/0x140 [ 303.244188][ C1] nmi_cpu_backtrace+0x397/0x3d0 [ 303.249290][ C1] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 303.255600][ C1] ? _printk+0xcc/0x110 [ 303.259808][ C1] ? cpu_online+0x1d/0x30 [ 303.264154][ C1] ? load_image+0x3b0/0x3b0 [ 303.268791][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 303.274870][ C1] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 303.280842][ C1] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 303.287086][ C1] print_other_cpu_stall+0x10c8/0x1220 [ 303.292636][ C1] ? print_cpu_stall+0x5f0/0x5f0 [ 303.297583][ C1] ? timekeeping_advance+0x7f6/0xac0 [ 303.302873][ C1] rcu_sched_clock_irq+0x831/0x1110 [ 303.308063][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 303.312909][ C1] ? account_process_tick+0x227/0x3a0 [ 303.318372][ C1] update_process_times+0x193/0x200 [ 303.323581][ C1] tick_sched_timer+0x37d/0x560 [ 303.328456][ C1] __hrtimer_run_queues+0x4fe/0xc40 [ 303.333645][ C1] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 303.339192][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 303.344291][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 303.350350][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 303.355292][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 303.361264][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 303.366982][ C1] [ 303.369904][ C1] [ 303.372823][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 303.378791][ C1] RIP: 0010:default_idle+0xb/0x10 [ 303.383802][ C1] Code: bf 48 89 df e8 66 76 09 f8 eb b5 e8 9f af f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d 37 06 53 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 303.403493][ C1] RSP: 0018:ffffc90000d67d48 EFLAGS: 000002c2 [ 303.409730][ C1] RAX: 844d818918a9e800 RBX: ffff88813fe28000 RCX: 844d818918a9e800 [ 303.417690][ C1] RDX: 0000000000000001 RSI: ffffffff8a0b1c60 RDI: ffffffff8a59e580 [ 303.425647][ C1] RBP: ffffc90000d67e80 R08: dffffc0000000000 R09: ffffed1017227662 [ 303.433607][ C1] R10: ffffed1017227662 R11: 1ffff11017227661 R12: ffffffff8d699d28 [ 303.441571][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11027fc5000 [ 303.449539][ C1] default_idle_call+0x81/0xc0 [ 303.454327][ C1] do_idle+0x21b/0x5b0 [ 303.458585][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 303.463795][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 303.469264][ C1] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 303.474911][ C1] cpu_startup_entry+0x14/0x20 [ 303.479742][ C1] start_secondary+0x31f/0x430 [ 303.484503][ C1] ? arch_scale_freq_tick+0x120/0x120 [ 303.489870][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 303.495759][ C1]