last executing test programs: 13.179868218s ago: executing program 0 (id=591): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x48}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0xfe, 0x0, 0x7ffffffe}]}) open$dir(0x0, 0x105400, 0x4) open$dir(0x0, 0x1, 0x0) io_cancel(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) 11.879153118s ago: executing program 1 (id=594): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) 11.022716161s ago: executing program 0 (id=605): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0xe000) 10.327135672s ago: executing program 1 (id=596): syz_open_dev$mouse(&(0x7f0000000300), 0xfffffffffffffff9, 0x210100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0xffffffff, 0xc9a, 0x80080000, 0x6, 0xe, "dce4f0020100000000001b347d5c00010200"}) 10.232245243s ago: executing program 3 (id=599): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000140)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@dioread_nolock}, {@bsdgroups}]}, 0x6, 0x4cd, &(0x7f0000000c80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000001340)=ANY=[@ANYBLOB="0800000000000000fc"]) 9.353756087s ago: executing program 1 (id=601): ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000300)={'gre0\x00', 0x0, 0x700, 0x7, 0x7, 0x200000, {{0x5, 0x4, 0x1, 0xe, 0x14, 0x66, 0x0, 0x7, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40186f03, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)=@newtaction={0x90, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) 8.45875495s ago: executing program 1 (id=602): ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x7, {0x7, 0x35, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) r3 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, 0x0) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4) bind$inet6(r0, &(0x7f00000005c0)={0xa, 0x4e1e, 0xebc, @mcast2}, 0x1c) syz_usb_connect$uac1(0x2, 0xa5, 0x0, 0x0) 8.345054092s ago: executing program 3 (id=603): r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bridge0\x00', 0x10) sendmmsg$inet6(r0, 0x0, 0x0, 0x4051) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0x4e22}, 0x6e) 8.077498676s ago: executing program 3 (id=604): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x800000000003) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0) 8.066154097s ago: executing program 3 (id=606): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f0000000380)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@i_version}]}, 0x6, 0x5fc, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000040)={0x10004, 0xa, 0xc825, 0x10000000f, 0x2, 0xb, 0x28a7, 0x0, 0x6}) 7.722424771s ago: executing program 4 (id=607): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) 6.653773908s ago: executing program 2 (id=608): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x1800000, &(0x7f0000000780)=ANY=[@ANYBLOB='nls=ascii,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c706172743d3078303030303030303030303030303062622c6e6f626172726965722c6e6f626172726965722c63726561746f723d7fcfb5b72c706172743d3078303030303030303030303030303130312c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030302c6465636f6d706f73652c666f7263652c6e6f6465636f6d706f73652c626172726965722c6e6f6465636f6d706f73652c747970653db029e1c02c7569643d", @ANYRES16, @ANYBLOB="2c747970653dd2100d1b2c7529643dd4f81c66210bbcbf82440a104ab956f2ba5e36e41ccb1b040fa8b829b0b87078de654c66ac22aebaa2c653ef127e38e0aa2229f9cf6a8503", @ANYRESDEC=0x0, @ANYBLOB="060000bd00", @ANYRES32=0x0, @ANYRESOCT], 0x1, 0x6eb, &(0x7f0000000dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x101142, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x2008000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bc, &(0x7f0000000440)="$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") getpid() inotify_init() pwrite64(r0, &(0x7f00000002c0)='2', 0x1, 0x8080c61) 6.619821049s ago: executing program 4 (id=609): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) timer_create(0x2, 0x0, &(0x7f0000000240)=0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000004000006110640000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xb}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) timer_getoverrun(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_procfs(0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000440)="325030d9a89bf3401345e0b1136beda544c4eac659acd2e64c5eaeb230e5c857165278cdbbc2b3cbacee39b293b07dbbf9bf239801ba657eee4a6599c475d505ffbbc38eb7b46072458ac1ffe67eed3303f4", 0x52}, {&(0x7f0000000600)="0b877748127fc49cb1510cd496609809571b8b01ca7b0d9f88b7bddcfe0cd76dedacbf9c7d5413ae9ba99f23f462bf656e8751607312f2f141c362911c9d5f098456f5e004ec2282a8f1885ad2f0e2880b9d576dbb781f98efc74a3858b2cae3b295a9a761931eba9b3b907cfc4f7042abbea03b7607ec8457cbd6725079ffb152ab66135a4c474fb73fd723470959272cbe2f366f29e06ca565449b5b3416a4f981c4a9ab8cd477bb670704b693fd144c80602f15a5983a7e7a0780e7233a4de85e", 0xc2}], 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r5, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 6.479069631s ago: executing program 0 (id=610): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000040)=ANY=[], 0x1, 0x5e7, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) 5.558889485s ago: executing program 2 (id=611): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2890}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 5.1989316s ago: executing program 4 (id=612): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x7, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0xfffffffffffffffe}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fchdir(0xffffffffffffffff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) 4.348083613s ago: executing program 1 (id=613): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080), 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_enter(0xffffffffffffffff, 0x79fc, 0xe4bd, 0x69, 0x0, 0x0) io_uring_setup(0x5fc6, &(0x7f0000002380)={0x0, 0xffffffff, 0x1, 0x3, 0x40000000}) socketpair(0xb, 0x6, 0x7, &(0x7f0000000280)) 4.155058207s ago: executing program 3 (id=614): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f0000000080)=0x700) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$ITER_CREATE(0xb, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) 4.154745027s ago: executing program 2 (id=615): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000e00)=@newlink={0x28, 0x10, 0x1, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x20000, 0x100}, [@IFLA_MTU={0x8, 0x4, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x8d0}, 0x4008050) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000001c0)={@rand_addr=' \x01\x00', 0x23, r3}) 2.993584685s ago: executing program 0 (id=616): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x142) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004002, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@noinit_itable}, {@usrjquota}, {@grpjquota, 0x2e}], [{@seclabel}]}, 0x81, 0x46c, &(0x7f00000004c0)="$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") 2.980953255s ago: executing program 1 (id=617): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000000d00)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0xb73d) 2.921744175s ago: executing program 2 (id=618): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x1400) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x81082, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000300)={0x2}) setgroups(0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB], 0x24}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xc, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff0000000071105200000000009500000000100000"], &(0x7f0000000480)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r5, r5, &(0x7f0000000000)=0x7, 0x4) 1.99370265s ago: executing program 2 (id=619): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) 1.726977364s ago: executing program 4 (id=620): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r5 = syz_open_procfs(0x0, 0x0) getdents64(r5, &(0x7f00000000c0)=""/44, 0x2c) getdents64(r5, &(0x7f0000002f40)=""/4098, 0x1002) eventfd(0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000)="dd", 0x1, 0x4080, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x57, 0xc9110062, 0x0, 0x0) 1.541982737s ago: executing program 0 (id=621): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xce) 791.188788ms ago: executing program 4 (id=622): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, 0x0) r0 = gettid() r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 632.421701ms ago: executing program 3 (id=623): gettid() socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffa8a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000000)=0xfffffffb) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x48, 0x0, &(0x7f0000000280)=[@register_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x9, 0x0, &(0x7f0000000300)="158f8179ec0029de8b"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001a40)="ab"}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'xfrm0\x00', &(0x7f0000000000)=@ethtool_cmd={0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000340)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00'}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000040)=0x200, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0xcc080, 0x0) timerfd_settime(r5, 0x2, &(0x7f0000000140)={{0x77359400}, {0x77359400}}, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e24, 0x7fffffff, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, 0x0) 569.926462ms ago: executing program 4 (id=624): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@private1}, {@in=@dev={0xac, 0x14, 0x14, 0x1}, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x0, 0x0, 0x9}, {}, {}, 0xfffffffc, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x1, 0x0, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}}]}, 0x154}}, 0x0) 310.551505ms ago: executing program 0 (id=625): close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x1b\x00'}]}, 0x1c}}, 0x20000000) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x82020000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 44.966019ms ago: executing program 32 (id=625): close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x1b\x00'}]}, 0x1c}}, 0x20000000) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x82020000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 0s ago: executing program 2 (id=627): openat$kvm(0xffffffffffffff9c, 0x0, 0x181040, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x1008c54, &(0x7f0000000500)={[{@utf8}, {@utf8}, {@uni_xlate}, {@shortname_lower}, {@fat=@fmask={'fmask', 0x3d, 0x7ff}}, {@fat=@check_strict}, {@uni_xlateno}, {@fat=@dos1xfloppy}, {@shortname_winnt}, {@fat=@fmask={'fmask', 0x3d, 0x8}}, {@rodir}, {@utf8no}, {@uni_xlate}, {@shortname_winnt}, {@fat=@time_offset={'time_offset', 0x3d, 0x66}}, {@shortname_lower}]}, 0x5, 0x2ff, &(0x7f0000000200)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) dup(0xffffffffffffffff) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) syz_open_dev$sndctrl(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.4' (ED25519) to the list of known hosts. [ 50.607540][ T4157] cgroup: Unknown subsys name 'net' [ 50.779241][ T4157] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.977538][ T4157] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 53.435501][ T4175] chnl_net:caif_netlink_parms(): no params data found [ 53.607956][ T4177] chnl_net:caif_netlink_parms(): no params data found [ 53.617831][ T4169] chnl_net:caif_netlink_parms(): no params data found [ 53.641311][ T4168] chnl_net:caif_netlink_parms(): no params data found [ 53.657394][ T4175] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.666996][ T4175] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.675988][ T4175] device bridge_slave_0 entered promiscuous mode [ 53.690165][ T4175] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.698161][ T4175] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.707125][ T4175] device bridge_slave_1 entered promiscuous mode [ 53.741527][ T4175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.775382][ T4175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.792331][ T4178] chnl_net:caif_netlink_parms(): no params data found [ 53.860738][ T4177] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.868441][ T4177] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.876753][ T4177] device bridge_slave_0 entered promiscuous mode [ 53.893276][ T4175] team0: Port device team_slave_0 added [ 53.918552][ T4177] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.925794][ T4177] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.935410][ T4177] device bridge_slave_1 entered promiscuous mode [ 53.942798][ T4169] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.951010][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.959453][ T4169] device bridge_slave_0 entered promiscuous mode [ 53.968519][ T4175] team0: Port device team_slave_1 added [ 53.991026][ T4169] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.998577][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.006472][ T4169] device bridge_slave_1 entered promiscuous mode [ 54.020854][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.028409][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.037265][ T4168] device bridge_slave_0 entered promiscuous mode [ 54.057773][ T4177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.081402][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.088767][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.097122][ T4168] device bridge_slave_1 entered promiscuous mode [ 54.105439][ T4177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.126523][ T4175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.133831][ T4175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.160393][ T4175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.194649][ T4169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.217380][ T4175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.224509][ T4175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.250881][ T4175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.270323][ T4169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.279574][ T4178] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.287204][ T4178] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.295387][ T4178] device bridge_slave_0 entered promiscuous mode [ 54.305280][ T4168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.319975][ T4177] team0: Port device team_slave_0 added [ 54.332985][ T4178] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.341343][ T4178] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.349295][ T4178] device bridge_slave_1 entered promiscuous mode [ 54.357893][ T4168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.378561][ T4177] team0: Port device team_slave_1 added [ 54.420365][ T4169] team0: Port device team_slave_0 added [ 54.428280][ T4178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.445318][ T4168] team0: Port device team_slave_0 added [ 54.465918][ T4169] team0: Port device team_slave_1 added [ 54.473670][ T4178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.496949][ T4168] team0: Port device team_slave_1 added [ 54.505979][ T4175] device hsr_slave_0 entered promiscuous mode [ 54.512951][ T4175] device hsr_slave_1 entered promiscuous mode [ 54.521501][ T4177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.528980][ T4177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.555928][ T4177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.590304][ T4177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.598512][ T4177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.625893][ T4177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.651985][ T4178] team0: Port device team_slave_0 added [ 54.658777][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.666577][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.693279][ T4168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.715291][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.722340][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.749035][ T4169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.761831][ T4178] team0: Port device team_slave_1 added [ 54.768361][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.775407][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.801598][ T4168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.820688][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.828019][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.854311][ T4169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.911538][ T4177] device hsr_slave_0 entered promiscuous mode [ 54.918773][ T4177] device hsr_slave_1 entered promiscuous mode [ 54.925555][ T4177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.933305][ T4177] Cannot create hsr debugfs directory [ 54.957436][ T4178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.964553][ T4178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.991414][ T4178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.003491][ T4178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.010499][ T4178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.036580][ T4178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.050354][ T4168] device hsr_slave_0 entered promiscuous mode [ 55.057706][ T4168] device hsr_slave_1 entered promiscuous mode [ 55.064644][ T4168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.072728][ T4168] Cannot create hsr debugfs directory [ 55.097915][ T4169] device hsr_slave_0 entered promiscuous mode [ 55.104821][ T4169] device hsr_slave_1 entered promiscuous mode [ 55.111246][ T4169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.119393][ T4169] Cannot create hsr debugfs directory [ 55.145197][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 55.208921][ T4178] device hsr_slave_0 entered promiscuous mode [ 55.215985][ T4178] device hsr_slave_1 entered promiscuous mode [ 55.222722][ T4178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.230399][ T4182] Bluetooth: hci4: command 0x0409 tx timeout [ 55.236357][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 55.236598][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 55.236703][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 55.242659][ T4178] Cannot create hsr debugfs directory [ 55.490904][ T4175] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.501820][ T4175] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.516164][ T4175] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.525756][ T4175] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.555762][ T4177] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.565584][ T4177] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.577505][ T4177] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.590627][ T4177] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.657765][ T4168] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.666514][ T4168] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.677131][ T4168] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.686617][ T4168] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.748242][ T4178] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.766018][ T4178] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.776590][ T4178] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.801656][ T4178] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.826002][ T4175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.875211][ T4169] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.887222][ T4175] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.898509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.908341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.919440][ T4177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.928301][ T4169] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.938596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.949116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.958485][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.966381][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.983407][ T4169] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.993219][ T4169] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.007100][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.015457][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.024066][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.034914][ T1245] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.042094][ T1245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.073640][ T4177] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.086584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.096077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.104054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.126232][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.136503][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.146212][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.155330][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.192494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.202915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.212053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.221290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.231128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.240365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.250438][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.257675][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.266613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.276040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.284704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.305105][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.319597][ T4178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.331635][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.339885][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.350809][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.360589][ T1245] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.367689][ T1245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.376961][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.411248][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.420586][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.429476][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.443472][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.458358][ T4178] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.468928][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.482569][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.504850][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.525280][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.536420][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.545412][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.553964][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.562756][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.569849][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.580622][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.590626][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.599947][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.608559][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.617134][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.626162][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.635206][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.642362][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.650350][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.658598][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.678643][ T4177] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.690212][ T4177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.703811][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.717919][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.727312][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.740100][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.751096][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.760994][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.770558][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.777741][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.785700][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.796223][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.805234][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.813682][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.822535][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.831583][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.841771][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.848917][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.877586][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.888084][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.901212][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.912974][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.927269][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.936227][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.943371][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.951332][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.960418][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.969420][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.976513][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.986828][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.995168][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.035823][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.044937][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.052645][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.061779][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.072345][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.082102][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.091610][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.102852][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.112348][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.121052][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.130320][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.139262][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.151335][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.159826][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.170959][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.179970][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.198498][ T4168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.209828][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.227153][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.234671][ T1108] Bluetooth: hci0: command 0x041b tx timeout [ 57.237430][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.250381][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.259117][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.268695][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.277145][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.285678][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.302982][ T4169] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.314321][ T4213] Bluetooth: hci1: command 0x041b tx timeout [ 57.316571][ T4169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.324451][ T4213] Bluetooth: hci4: command 0x041b tx timeout [ 57.337829][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.350913][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.359134][ T4213] Bluetooth: hci2: command 0x041b tx timeout [ 57.371238][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.379102][ T4213] Bluetooth: hci3: command 0x041b tx timeout [ 57.389807][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.398154][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.406642][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.415126][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.423481][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.432199][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.447110][ T4177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.456832][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.469738][ T4175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.506511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.525425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.605398][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.613895][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.627182][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.636474][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.646758][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.659991][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.674621][ T4177] device veth0_vlan entered promiscuous mode [ 57.701628][ T4175] device veth0_vlan entered promiscuous mode [ 57.722777][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.731218][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.739978][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.749587][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.760023][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.768022][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.776532][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.785955][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.797765][ T4177] device veth1_vlan entered promiscuous mode [ 57.817069][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.829201][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.841279][ T4175] device veth1_vlan entered promiscuous mode [ 57.852914][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.861905][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.873701][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.882616][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.892822][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.928920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.937724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.949393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.979864][ T4178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.998485][ T4175] device veth0_macvtap entered promiscuous mode [ 58.006461][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.016578][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.027341][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.036386][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.049423][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.058148][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.068122][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.076384][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.084338][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.109830][ T4177] device veth0_macvtap entered promiscuous mode [ 58.118328][ T4169] device veth0_vlan entered promiscuous mode [ 58.143329][ T4175] device veth1_macvtap entered promiscuous mode [ 58.151683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.166287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.178831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.188342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.206728][ T4177] device veth1_macvtap entered promiscuous mode [ 58.232325][ T4169] device veth1_vlan entered promiscuous mode [ 58.262138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.270881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.279607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.290298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.299180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.308065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.317090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.326225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.334044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.344710][ T4178] device veth0_vlan entered promiscuous mode [ 58.357863][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.370458][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.379723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.388615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.397485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.407505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.422099][ T4178] device veth1_vlan entered promiscuous mode [ 58.442330][ T4177] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.452067][ T4177] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.462096][ T4177] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.471178][ T4177] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.493987][ T4169] device veth0_macvtap entered promiscuous mode [ 58.503543][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.515694][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.530281][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.539650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.548557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.557987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.566450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.575789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.589150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.608183][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.619756][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.631112][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.640526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.650371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.658831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.668695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.678407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.686618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.704672][ T4169] device veth1_macvtap entered promiscuous mode [ 58.712299][ T4168] device veth0_vlan entered promiscuous mode [ 58.721768][ T4175] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.731185][ T4175] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.740600][ T4175] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.752105][ T4175] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.779888][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.792167][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.803465][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.815947][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.828597][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.841982][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.852633][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.876087][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.887778][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.898787][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.909655][ T4168] device veth1_vlan entered promiscuous mode [ 58.916960][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.926652][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.935557][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.944305][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.952853][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.007726][ T4169] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.019783][ T4169] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.029212][ T4169] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.038199][ T4169] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.079645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.090525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.100125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.124464][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.133932][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.158729][ T4178] device veth0_macvtap entered promiscuous mode [ 59.170964][ T4168] device veth0_macvtap entered promiscuous mode [ 59.201140][ T4178] device veth1_macvtap entered promiscuous mode [ 59.203966][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.217621][ T4168] device veth1_macvtap entered promiscuous mode [ 59.217640][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.238742][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.247916][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.258999][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.267419][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.275791][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.298906][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.310990][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.311399][ T4215] Bluetooth: hci0: command 0x040f tx timeout [ 59.325470][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.337501][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.347753][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.358473][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.369973][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.387958][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.388261][ T4215] Bluetooth: hci2: command 0x040f tx timeout [ 59.398642][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.414772][ T4215] Bluetooth: hci4: command 0x040f tx timeout [ 59.420420][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.420847][ T4215] Bluetooth: hci1: command 0x040f tx timeout [ 59.432600][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.448715][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.459467][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.470492][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.474772][ T4215] Bluetooth: hci3: command 0x040f tx timeout [ 59.481329][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.498672][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.516877][ T4229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.528024][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.536804][ T4229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.549062][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.558241][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.567851][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.579012][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.593917][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.605850][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.615987][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.627684][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.637771][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.649037][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.660475][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.680255][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.692562][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.702631][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.713665][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.723717][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.735154][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.745311][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.756463][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.768474][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.780431][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.792554][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.801982][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.811537][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.829506][ T1245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.831506][ T4178] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.847954][ T4178] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.849294][ T1245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.857004][ T4178] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.874754][ T4178] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.892174][ T4168] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.901982][ T4168] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.911532][ T4168] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.920757][ T4168] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.937202][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.962962][ T1245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.971940][ T1245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.994370][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.002878][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.010950][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.025041][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.079847][ T4229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.090532][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.117406][ T4229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.140973][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.162135][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.186282][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.228115][ T4229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.270469][ T4229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.283363][ T4250] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 60.330947][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.343134][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.347027][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.382576][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.816763][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 60.919178][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 61.124397][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #42!!! [ 61.276010][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 61.385186][ T1108] Bluetooth: hci0: command 0x0419 tx timeout [ 61.403792][ T4266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.415996][ T4266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.429765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.480597][ T1108] Bluetooth: hci1: command 0x0419 tx timeout [ 61.519073][ T1108] Bluetooth: hci4: command 0x0419 tx timeout [ 61.529440][ T1108] Bluetooth: hci2: command 0x0419 tx timeout [ 61.544811][ T4215] Bluetooth: hci3: command 0x0419 tx timeout [ 61.570697][ T4271] loop0: detected capacity change from 0 to 2048 [ 61.813763][ T4277] netlink: zone id is out of range [ 61.819406][ T4277] netlink: set zone limit has 4 unknown bytes [ 61.885511][ T4278] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 62.068946][ T4271] syz.0.7 (4271) used greatest stack depth: 20048 bytes left [ 62.292014][ T4275] loop4: detected capacity change from 0 to 32768 [ 62.338114][ T4275] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.5 (4275) [ 62.478991][ T4275] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 62.537272][ T4275] BTRFS info (device loop4): using free space tree [ 62.554327][ T4275] BTRFS info (device loop4): has skinny extents [ 62.601190][ T4270] loop1: detected capacity change from 0 to 40427 [ 62.681296][ T4281] loop0: detected capacity change from 0 to 4096 [ 62.704643][ T4270] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1ffff [ 62.729006][ T4270] F2FS-fs (loop1): invalid crc value [ 62.752987][ T4270] F2FS-fs (loop1): Found nat_bits in checkpoint [ 62.851721][ T4281] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 62.890104][ T4281] process 'syz.0.9' launched './file1' with NULL argv: empty string added [ 62.899992][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 62.911507][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #292!!! [ 62.923574][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 62.933698][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 62.951051][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 62.960400][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #210!!! [ 63.052591][ T4275] BTRFS info (device loop4): enabling ssd optimizations [ 63.072322][ T4270] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 63.393460][ T4169] attempt to access beyond end of device [ 63.393460][ T4169] loop1: rw=2049, want=45104, limit=40427 [ 63.563106][ T4279] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 65.101545][ T4313] loop3: detected capacity change from 0 to 32768 [ 65.195723][ T4313] XFS: ikeep mount option is deprecated. [ 65.283536][ T4329] loop1: detected capacity change from 0 to 32768 [ 65.605581][ T4329] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.17 (4329) [ 65.947807][ T4313] XFS (loop3): Mounting V5 Filesystem [ 66.176806][ T4329] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 66.192275][ T4329] BTRFS info (device loop1): using free space tree [ 66.201203][ T4329] BTRFS info (device loop1): has skinny extents [ 66.263368][ T4313] XFS (loop3): Ending clean mount [ 66.502939][ T4329] BTRFS info (device loop1): enabling ssd optimizations [ 66.539740][ T4313] XFS (loop3): Quotacheck needed: Please wait. [ 66.655742][ T4313] XFS (loop3): Quotacheck: Done. [ 66.684268][ T4339] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 66.822945][ T4177] XFS (loop3): Unmounting Filesystem [ 66.954272][ T4339] usb 5-1: Using ep0 maxpacket: 32 [ 67.084441][ T4339] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 67.103053][ T4339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.182069][ T4339] usb 5-1: config 0 descriptor?? [ 67.206582][ T4387] loop2: detected capacity change from 0 to 2048 [ 67.424562][ T4390] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 67.455324][ T4339] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 67.480543][ T4339] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 67.514958][ T4339] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 67.529187][ T4339] usb 5-1: media controller created [ 67.564993][ T4394] netlink: zone id is out of range [ 67.570126][ T4394] netlink: set zone limit has 4 unknown bytes [ 67.589034][ T4339] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 67.615734][ T4392] loop3: detected capacity change from 0 to 1024 [ 67.683677][ T4392] ======================================================= [ 67.683677][ T4392] WARNING: The mand mount option has been deprecated and [ 67.683677][ T4392] and is ignored by this kernel. Remove the mand [ 67.683677][ T4392] option from the mount to silence this warning. [ 67.683677][ T4392] ======================================================= [ 67.684390][ T4339] az6027: usb out operation failed. (-71) [ 67.736297][ T4392] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 67.748524][ T4339] az6027: usb out operation failed. (-71) [ 67.754447][ T4339] stb0899_attach: Driver disabled by Kconfig [ 67.761222][ T4339] az6027: no front-end attached [ 67.761222][ T4339] [ 67.778521][ T4387] capability: warning: `syz.2.25' uses deprecated v2 capabilities in a way that may be insecure [ 67.796620][ T4339] az6027: usb out operation failed. (-71) [ 67.811515][ T4339] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 67.817620][ T4392] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,min_batch_time=0x0000000000000005,dioread_nolock,. Quota mode: none. [ 67.861337][ T4392] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.866001][ T4339] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 67.961469][ T4339] dvb-usb: schedule remote query interval to 400 msecs. [ 68.063771][ T4339] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 68.084827][ T4339] usb 5-1: USB disconnect, device number 2 [ 68.179629][ T4402] syz.3.24 uses obsolete (PF_INET,SOCK_PACKET) [ 68.669142][ T4339] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 69.098200][ T4410] overlayfs: failed to clone upperpath [ 69.255433][ T4415] loop3: detected capacity change from 0 to 4096 [ 69.298496][ T4279] Bluetooth: hci5: Frame reassembly failed (-84) [ 69.371283][ T4420] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 69.506872][ T4415] overlayfs: upper fs does not support tmpfile. [ 69.559448][ T4415] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 69.574933][ T4415] overlayfs: failed to set xattr on upper [ 69.580966][ T4415] overlayfs: ...falling back to index=off,metacopy=off. [ 69.591389][ T4415] overlayfs: conflicting lowerdir path [ 69.994095][ T4437] loop0: detected capacity change from 0 to 128 [ 70.032240][ T4434] 9pnet: Insufficient options for proto=fd [ 70.339630][ T4437] EXT4-fs (loop0): Ignoring removed nobh option [ 70.535563][ T4437] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,noauto_da_alloc,,errors=continue. Quota mode: none. [ 70.639798][ T4437] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 70.813838][ T4450] loop3: detected capacity change from 0 to 512 [ 70.914871][ T4454] loop0: detected capacity change from 0 to 1024 [ 71.010639][ T4450] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 71.039263][ T4450] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 71.047992][ T4450] System zones: 0-1, 15-15, 18-18, 34-34 [ 71.062401][ T4450] EXT4-fs (loop3): orphan cleanup on readonly fs [ 71.069569][ T4450] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 71.080635][ T4450] EXT4-fs warning (device loop3): ext4_enable_quotas:6456: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 71.102735][ T4450] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 71.217561][ T4450] EXT4-fs (loop3): 1 truncate cleaned up [ 71.223406][ T4450] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 71.293507][ T4468] 9pnet: Insufficient options for proto=fd [ 71.314348][ T4182] Bluetooth: hci5: command 0x1003 tx timeout [ 71.318064][ T4279] hfsplus: b-tree write err: -5, ino 4 [ 71.320776][ T4173] Bluetooth: hci5: sending frame failed (-49) [ 71.362934][ T4470] netlink: zone id is out of range [ 71.368549][ T4470] netlink: set zone limit has 4 unknown bytes [ 71.390120][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.399652][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.780350][ T4478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.52'. [ 73.273987][ T4475] loop3: detected capacity change from 0 to 32768 [ 73.384226][ T4182] Bluetooth: hci5: command 0x1001 tx timeout [ 73.390883][ T4173] Bluetooth: hci5: sending frame failed (-49) [ 74.076591][ T4500] Cannot find set identified by id 2 to match [ 74.510862][ T4507] futex_wake_op: syz.3.62 tries to shift op by -1; fix this program [ 74.566193][ T4507] loop3: detected capacity change from 0 to 256 [ 75.509618][ T4172] Bluetooth: hci5: command 0x1009 tx timeout [ 76.514568][ T1111] cfg80211: failed to load regulatory.db [ 76.654146][ C0] sched: RT throttling activated [ 77.363954][ T4525] loop3: detected capacity change from 0 to 40427 [ 77.392114][ T4525] F2FS-fs (loop3): Unrecognized mount option "age_extent_cache" or missing value [ 77.597479][ T4521] loop0: detected capacity change from 0 to 262144 [ 77.687551][ T4521] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop0 scanned by syz.0.67 (4521) [ 77.715139][ T4521] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 77.724497][ T4521] BTRFS info (device loop0): using free space tree [ 77.731061][ T4521] BTRFS info (device loop0): has skinny extents [ 77.738086][ T4521] BTRFS info (device loop0): flagging fs with big metadata feature [ 77.979276][ T4521] BTRFS info (device loop0): enabling ssd optimizations [ 78.094098][ T26] audit: type=1800 audit(1750697276.985:2): pid=4521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.67" name="file2" dev="overlay" ino=261 res=0 errno=0 [ 78.242803][ T4550] loop1: detected capacity change from 0 to 1764 [ 78.251313][ T4527] loop3: detected capacity change from 0 to 32768 [ 78.776571][ T4416] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 11 /dev/loop0 scanned by udevd (4416) [ 78.784633][ T4559] netlink: 'syz.2.76': attribute type 5 has an invalid length. [ 79.316560][ T4576] netlink: zone id is out of range [ 79.322578][ T4576] netlink: set zone limit has 4 unknown bytes [ 80.296539][ T4585] loop3: detected capacity change from 0 to 256 [ 80.308467][ T4585] exfat: Unknown parameter 'zero_size_dir' [ 80.451898][ T4590] loop3: detected capacity change from 0 to 64 [ 80.655984][ T4590] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop3 [ 80.941794][ T4603] 9pnet: Insufficient options for proto=fd [ 80.973894][ T4603] snd_dummy snd_dummy.0: control 0:0:4194304:syz0:5 is already present [ 81.611832][ T4591] loop4: detected capacity change from 0 to 32768 [ 82.182739][ T4591] XFS: ikeep mount option is deprecated. [ 82.398987][ T4625] loop3: detected capacity change from 0 to 1024 [ 82.419709][ T4591] XFS (loop4): Mounting V5 Filesystem [ 82.565385][ T4625] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 82.613879][ T4625] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.626017][ T4591] XFS (loop4): Ending clean mount [ 82.638448][ T4591] XFS (loop4): Quotacheck needed: Please wait. [ 82.839973][ T4625] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: none. [ 83.619931][ T4591] XFS (loop4): Quotacheck: Done. [ 83.676489][ T4168] XFS (loop4): Unmounting Filesystem [ 83.718229][ T4648] 9pnet: Insufficient options for proto=fd [ 83.732716][ T4648] snd_dummy snd_dummy.0: control 0:0:4194304:syz0:5 is already present [ 84.561199][ T4658] loop0: detected capacity change from 0 to 32768 [ 85.281469][ T4662] loop1: detected capacity change from 0 to 32768 [ 85.362847][ T4672] loop3: detected capacity change from 0 to 4096 [ 85.459869][ T4672] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 86.228156][ T4662] JBD2: Ignoring recovery information on journal [ 86.366368][ T4681] loop4: detected capacity change from 0 to 4096 [ 86.403335][ T4662] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 87.520450][ T4707] loop3: detected capacity change from 0 to 256 [ 87.569226][ T4709] loop4: detected capacity change from 0 to 1024 [ 87.723551][ T4169] ocfs2: Unmounting device (7,1) on (node local) [ 88.541218][ T4722] loop4: detected capacity change from 0 to 256 [ 88.705453][ T4722] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 88.713217][ T4701] loop0: detected capacity change from 0 to 40427 [ 88.902880][ T4701] F2FS-fs (loop0): build fault injection attr: rate: 16, type: 0x1ffff [ 89.312037][ T4718] loop3: detected capacity change from 0 to 32768 [ 89.381123][ T4736] netlink: zone id is out of range [ 89.386890][ T4736] netlink: set zone limit has 4 unknown bytes [ 89.437860][ T4718] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 89.566492][ T4744] netlink: 64 bytes leftover after parsing attributes in process `syz.4.129'. [ 89.862449][ T4177] ocfs2: Unmounting device (7,3) on (node local) [ 92.042476][ T4784] loop4: detected capacity change from 0 to 256 [ 92.096420][ T4784] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 93.579968][ T4810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.153'. [ 93.600536][ T4811] tipc: Started in network mode [ 93.610757][ T4811] tipc: Node identity 7f000001, cluster identity 4711 [ 93.627684][ T4811] tipc: Enabled bearer , priority 10 [ 93.629134][ T4793] loop1: detected capacity change from 0 to 32768 [ 93.692097][ T4818] loop0: detected capacity change from 0 to 16 [ 93.703710][ T4793] XFS (loop1): Mounting V5 Filesystem [ 93.774250][ T4805] loop4: detected capacity change from 0 to 32768 [ 93.804552][ T4818] erofs: (device loop0): erofs_superblock_csum_verify: invalid checksum 0x80a9593b, 0x7bbbea8c expected [ 93.823763][ T4245] udevd[4245]: incorrect erofs checksum on /dev/loop0 [ 93.901979][ T4805] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.151 (4805) [ 93.932347][ T4793] XFS (loop1): Ending clean mount [ 93.973287][ T4805] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 93.986978][ T4805] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 93.993553][ T4245] udevd[4245]: incorrect erofs checksum on /dev/loop0 [ 93.997753][ T4805] BTRFS info (device loop4): use zstd compression, level 3 [ 94.011360][ T4811] tipc: Enabled bearer , priority 10 [ 94.015713][ T4805] BTRFS info (device loop4): using free space tree [ 94.066093][ T4805] BTRFS info (device loop4): has skinny extents [ 94.216355][ T4839] loop0: detected capacity change from 0 to 8 [ 94.342482][ T4825] loop3: detected capacity change from 0 to 32768 [ 94.472597][ T4169] XFS (loop1): Unmounting Filesystem [ 94.484473][ T4805] BTRFS info (device loop4): enabling ssd optimizations [ 94.513105][ T4825] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 94.586246][ T4825] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 94.668926][ T4861] loop0: detected capacity change from 0 to 256 [ 95.507078][ T4861] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 95.598864][ T21] tipc: Node number set to 2130706433 [ 95.934051][ T4416] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop4 scanned by udevd (4416) [ 97.568063][ T4889] loop1: detected capacity change from 0 to 4096 [ 97.723160][ T4889] ntfs3: loop1: ino=1e, "file1" The size of extended attributes must not exceed 64KiB [ 98.615494][ T4177] ocfs2: Unmounting device (7,3) on (node local) [ 99.041925][ T4908] nfs: Unknown parameter 'ntext' [ 99.700948][ T4893] loop4: detected capacity change from 0 to 32768 [ 100.068982][ T4919] loop3: detected capacity change from 0 to 4096 [ 100.223784][ T4919] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 100.259508][ T4921] loop4: detected capacity change from 0 to 2048 [ 100.332602][ T4907] loop1: detected capacity change from 0 to 40427 [ 100.349833][ T4907] F2FS-fs (loop1): Invalid segment count (1) [ 100.356517][ T4921] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 100.367007][ T4907] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 100.398797][ T4921] attempt to access beyond end of device [ 100.398797][ T4921] loop4: rw=524288, want=33554432, limit=2048 [ 100.411088][ T4907] F2FS-fs (loop1): invalid crc value [ 100.416588][ T4929] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.436043][ T4907] F2FS-fs (loop1): Found nat_bits in checkpoint [ 100.490520][ T4921] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 100.527382][ T4919] EXT4-fs error (device loop3): ext4_do_update_inode:5203: inode #15: comm syz.3.180: corrupted inode contents [ 100.549389][ T4921] Remounting filesystem read-only [ 100.565288][ T4921] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 100.576601][ T4907] F2FS-fs (loop1): recover fsync data on readonly fs [ 100.582170][ T4919] EXT4-fs error (device loop3): ext4_dirty_inode:6039: inode #15: comm syz.3.180: mark_inode_dirty error [ 100.594522][ T4907] F2FS-fs (loop1): Try to recover 1th superblock, ret: -30 [ 100.617029][ T4921] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 100.629884][ T4919] EXT4-fs error (device loop3): ext4_do_update_inode:5203: inode #15: comm syz.3.180: corrupted inode contents [ 100.648342][ T4907] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 100.666375][ T26] audit: type=1800 audit(1750697299.565:3): pid=4921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.179" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 100.687576][ T4931] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 100.689837][ T4919] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #15: comm syz.3.180: mark_inode_dirty error [ 100.744695][ T4919] EXT4-fs error (device loop3): ext4_do_update_inode:5203: inode #15: comm syz.3.180: corrupted inode contents [ 100.746259][ T4921] syz.4.179 (4921) used greatest stack depth: 18368 bytes left [ 100.780916][ T26] audit: type=1800 audit(1750697299.645:4): pid=4931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.179" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 100.854369][ T4919] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #15: comm syz.3.180: mark_inode_dirty error [ 100.932090][ T4935] loop4: detected capacity change from 0 to 1024 [ 101.008229][ T4935] hfsplus: unable to parse mount options [ 101.016014][ T4919] EXT4-fs error (device loop3): ext4_do_update_inode:5203: inode #15: comm syz.3.180: corrupted inode contents [ 101.082534][ T4919] EXT4-fs error (device loop3): ext4_truncate:4273: inode #15: comm syz.3.180: mark_inode_dirty error [ 101.185104][ T4938] loop0: detected capacity change from 0 to 1024 [ 101.386945][ T4919] EXT4-fs error (device loop3) in ext4_setattr:5607: Corrupt filesystem [ 101.734509][ T4940] loop1: detected capacity change from 0 to 128 [ 101.945494][ T4940] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.987580][ T4940] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 102.016818][ T4940] fscrypt (loop1, inode 12): Unsupported encryption flags (0x08) [ 104.160459][ T4951] loop3: detected capacity change from 0 to 32768 [ 104.872628][ T4977] loop4: detected capacity change from 0 to 40427 [ 104.973404][ T4977] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x1f10) [ 105.016021][ T4977] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 105.121316][ T4977] F2FS-fs (loop4): invalid crc value [ 105.316346][ T4977] F2FS-fs (loop4): Found nat_bits in checkpoint [ 105.591375][ T4997] loop1: detected capacity change from 0 to 512 [ 105.602507][ T4977] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 105.611669][ T4977] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 106.069737][ T4997] EXT4-fs (loop1): mounted filesystem without journal. Opts: noquota,barrier=0x0000000000001003,errors=remount-ro,noauto_da_alloc,dioread_lock,. Quota mode: writeback. [ 106.233159][ T4997] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.287175][ T5030] 9pnet: Insufficient options for proto=fd [ 108.314519][ T5030] snd_dummy snd_dummy.0: control 0:0:4194304:syz0:5 is already present [ 108.603612][ T5012] loop1: detected capacity change from 0 to 40427 [ 108.643124][ T5012] F2FS-fs (loop1): build fault injection attr: rate: 19, type: 0x1ffff [ 108.799231][ T5024] loop3: detected capacity change from 0 to 40427 [ 109.111441][ T5024] F2FS-fs (loop3): Unrecognized mount option "age_extent_cache" or missing value [ 109.989607][ T5052] netlink: zone id is out of range [ 109.994986][ T5052] netlink: set zone limit has 4 unknown bytes [ 111.322172][ T5069] 9pnet: Insufficient options for proto=fd [ 111.336976][ T5069] snd_dummy snd_dummy.0: control 0:0:4194304:syz0:5 is already present [ 111.433102][ T5075] loop1: detected capacity change from 0 to 256 [ 111.570365][ T5075] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 114.201725][ T5090] loop1: detected capacity change from 0 to 4096 [ 114.385714][ T5080] loop0: detected capacity change from 0 to 40427 [ 114.460624][ T5080] F2FS-fs (loop0): Unrecognized mount option "errors=continue" or missing value [ 114.479532][ T5103] netlink: zone id is out of range [ 114.485003][ T5103] netlink: set zone limit has 4 unknown bytes [ 114.574327][ T4169] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 114.605701][ T4169] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 114.723369][ T5109] 9pnet: Insufficient options for proto=fd [ 114.755568][ T5109] snd_dummy snd_dummy.0: control 0:0:4194304:syz0:5 is already present [ 116.032561][ T5122] loop0: detected capacity change from 0 to 256 [ 116.183008][ T5122] FAT-fs (loop0): Directory bread(block 64) failed [ 116.225611][ T5122] FAT-fs (loop0): Directory bread(block 65) failed [ 116.293395][ T5122] FAT-fs (loop0): Directory bread(block 66) failed [ 116.353182][ T5122] FAT-fs (loop0): Directory bread(block 67) failed [ 116.401040][ T5122] FAT-fs (loop0): Directory bread(block 68) failed [ 116.515915][ T5122] FAT-fs (loop0): Directory bread(block 69) failed [ 116.577961][ T5122] FAT-fs (loop0): Directory bread(block 70) failed [ 116.640069][ T5122] FAT-fs (loop0): Directory bread(block 71) failed [ 116.701708][ T5122] FAT-fs (loop0): Directory bread(block 72) failed [ 116.763212][ T5122] FAT-fs (loop0): Directory bread(block 73) failed [ 118.581914][ T5148] 9pnet: Insufficient options for proto=fd [ 118.629765][ T5143] snd_dummy snd_dummy.0: control 0:0:4194304:syz0:5 is already present [ 118.721295][ T5132] loop0: detected capacity change from 0 to 32768 [ 120.430670][ T5132] loop0: detected capacity change from 0 to 1024 [ 120.444364][ T5132] EXT4-fs (loop0): Ignoring removed oldalloc option [ 120.484753][ T5132] EXT4-fs (loop0): Ignoring removed bh option [ 120.668052][ T5132] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,quota,debug_want_extra_isize=0x0000000000000080,oldalloc,nodioread_nolock,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback. [ 121.304020][ T5164] loop3: detected capacity change from 0 to 32768 [ 122.117932][ T5164] loop3: detected capacity change from 0 to 32768 [ 122.158188][ T5164] (syz.3.255,5164,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x16b4199d. Applying ECC. [ 122.185874][ T5164] (syz.3.255,5164,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x656d756e, computed 0x2caa02c5 [ 122.204357][ T5164] (syz.3.255,5164,1):ocfs2_validate_dir_block:452 ERROR: Checksum failed for dinode 288 [ 122.235955][ T5164] (syz.3.255,5164,1):ocfs2_read_virt_blocks:1013 ERROR: status = -5 [ 122.335567][ T5164] (syz.3.255,5164,0):ocfs2_read_dir_block:511 ERROR: status = -5 [ 122.343795][ T5164] (syz.3.255,5164,0):ocfs2_find_entry_el:728 ERROR: reading directory 18, offset 0 [ 122.384557][ T5164] (syz.3.255,5164,0):ocfs2_init_global_system_inodes:462 ERROR: status = -22 [ 122.393368][ T5164] (syz.3.255,5164,0):ocfs2_init_global_system_inodes:464 ERROR: Unable to load system inode 1, possibly corrupt fs? [ 122.393403][ T5164] (syz.3.255,5164,0):ocfs2_init_global_system_inodes:473 ERROR: status = -22 [ 122.492244][ T5164] (syz.3.255,5164,0):ocfs2_initialize_super:2281 ERROR: status = -22 [ 122.520536][ T5164] (syz.3.255,5164,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 123.854445][ T5217] loop0: detected capacity change from 0 to 512 [ 123.941321][ T5217] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.272: casefold flag without casefold feature [ 123.999213][ T5217] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.272: couldn't read orphan inode 15 (err -117) [ 124.063278][ T5217] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 124.830474][ T5226] loop4: detected capacity change from 0 to 4096 [ 126.549677][ T5222] loop1: detected capacity change from 0 to 32768 [ 126.579842][ T5222] XFS: ikeep mount option is deprecated. [ 127.132556][ T5222] XFS (loop1): Mounting V5 Filesystem [ 127.455901][ T5257] snd_dummy snd_dummy.0: control 0:0:4194304:syz0:5 is already present [ 127.498407][ T5222] XFS (loop1): log mount failed [ 129.055559][ T5276] netlink: zone id is out of range [ 129.060757][ T5276] netlink: set zone limit has 4 unknown bytes [ 129.704482][ T5280] sctp: [Deprecated]: syz.2.288 (pid 5280) Use of struct sctp_assoc_value in delayed_ack socket option. [ 129.704482][ T5280] Use struct sctp_sack_info instead [ 130.495986][ T5285] binder: BINDER_SET_CONTEXT_MGR already set [ 130.502540][ T5285] binder: 5281:5285 ioctl 4018620d 200000000040 returned -16 [ 132.108956][ T5297] snd_dummy snd_dummy.0: control 0:0:4194304:syz0:5 is already present [ 132.874621][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.880954][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.090556][ T5301] loop3: detected capacity change from 0 to 4096 [ 133.224860][ T5301] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 133.943169][ T5309] loop4: detected capacity change from 0 to 256 [ 134.085668][ T5309] FAT-fs (loop4): Directory bread(block 64) failed [ 134.108981][ T5309] FAT-fs (loop4): Directory bread(block 65) failed [ 134.170737][ T5309] FAT-fs (loop4): Directory bread(block 66) failed [ 134.187777][ T5309] FAT-fs (loop4): Directory bread(block 67) failed [ 134.212250][ T5309] FAT-fs (loop4): Directory bread(block 68) failed [ 134.215474][ T9] ntfs3: loop3: ino=1b, Internal error [ 134.238470][ T9] ntfs3: loop3: ntfs3_write_inode r=1b failed, -22. [ 134.254772][ T5309] FAT-fs (loop4): Directory bread(block 69) failed [ 134.269745][ T5309] FAT-fs (loop4): Directory bread(block 70) failed [ 134.365192][ T5309] FAT-fs (loop4): Directory bread(block 71) failed [ 134.508065][ T5309] FAT-fs (loop4): Directory bread(block 72) failed [ 134.613325][ T5309] FAT-fs (loop4): Directory bread(block 73) failed [ 136.172308][ T5341] snd_dummy snd_dummy.0: control 0:0:4194304:syz0:5 is already present [ 137.143800][ T5354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.314'. [ 137.205568][ T5354] device netdevsim0 entered promiscuous mode [ 137.230390][ T5356] netlink: zone id is out of range [ 137.235673][ T5356] netlink: set zone limit has 4 unknown bytes [ 138.872013][ T5359] loop3: detected capacity change from 0 to 32768 [ 139.474930][ T146] Bluetooth: Fragment is too long (len 14, expected 2) [ 140.466830][ T5391] binder: 5389:5391 ioctl 4018620d 0 returned -22 [ 142.534759][ T5400] loop0: detected capacity change from 0 to 32768 [ 143.332809][ T5400] XFS (loop0): Mounting V5 Filesystem [ 143.440011][ T5411] loop1: detected capacity change from 0 to 4096 [ 143.474606][ T5400] XFS (loop0): Ending clean mount [ 143.490734][ T5427] loop4: detected capacity change from 0 to 64 [ 143.515427][ T5400] XFS (loop0): Quotacheck needed: Please wait. [ 143.552109][ T5431] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 143.580672][ T5427] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 143.631535][ T5411] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 143.657318][ T5400] XFS (loop0): Quotacheck: Done. [ 144.811680][ T146] Bluetooth: Wrong link type (-22) [ 144.818113][ T146] Bluetooth: hci1: link tx timeout [ 144.825591][ T146] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 144.934215][ T5430] loop3: detected capacity change from 0 to 32768 [ 144.964984][ T4175] XFS (loop0): Unmounting Filesystem [ 145.070484][ T5443] netlink: zone id is out of range [ 145.075847][ T5443] netlink: set zone limit has 4 unknown bytes [ 145.849921][ T5452] binder: 5447:5452 ioctl 4018620d 0 returned -22 [ 146.753823][ T5449] loop3: detected capacity change from 0 to 4096 [ 146.864703][ T5449] ntfs3: Unknown parameter 'windows_names' [ 146.920515][ T4385] Bluetooth: hci1: command 0x0406 tx timeout [ 148.367874][ T5469] snd_dummy snd_dummy.0: control 0:0:4194304:syz0:5 is already present [ 148.517755][ T5479] IPv6: ADDRCONF(NETDEV_CHANGE): rose3: link becomes ready [ 148.571103][ T5479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.584009][ T5479] bond0: (slave rose0): Enslaving as an active interface with an up link [ 148.692537][ T5482] loop0: detected capacity change from 0 to 2048 [ 148.703714][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 148.884760][ T5482] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 148.933280][ T5496] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 149.551885][ T5509] loop0: detected capacity change from 0 to 1024 [ 149.596951][ T5510] binder: 5505:5510 ioctl 4018620d 0 returned -22 [ 149.840148][ T5509] EXT4-fs (loop0): Ignoring removed orlov option [ 150.090337][ T5509] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 150.967797][ T5534] snd_dummy snd_dummy.0: control 0:0:4194304:syz0:5 is already present [ 151.492710][ T5540] loop0: detected capacity change from 0 to 1024 [ 151.785458][ T5540] EXT4-fs (loop0): Ignoring removed orlov option [ 152.071250][ T5540] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,resgid=0x0000000000000000,nodioread_nolock,norecovery,nodioread_nolock,resgid=0x0000000000000000,data_err=ignore,grpid,orlov,,errors=continue. Quota mode: none. [ 152.323988][ T5562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.367'. [ 152.388662][ T5563] netlink: zone id is out of range [ 152.393827][ T5563] netlink: set zone limit has 4 unknown bytes [ 153.481154][ T5576] binder: BINDER_SET_CONTEXT_MGR already set [ 153.487321][ T5576] binder: 5571:5576 ioctl 4018620d 200000000040 returned -16 [ 153.725444][ T5580] loop3: detected capacity change from 0 to 8 [ 153.807896][ T5580] SQUASHFS error: lzo decompression failed, data probably corrupt [ 153.886820][ T5580] SQUASHFS error: Failed to read block 0x91: -5 [ 153.914257][ T5580] SQUASHFS error: Unable to read metadata cache entry [8f] [ 153.921516][ T5580] SQUASHFS error: Unable to read inode 0x11f [ 153.981941][ T5580] xt_hashlimit: size too large, truncated to 1048576 [ 154.843054][ T5600] snd_dummy snd_dummy.0: control 0:0:4194304:syz0:5 is already present [ 155.351725][ T5572] loop4: detected capacity change from 0 to 40427 [ 155.510313][ T5572] F2FS-fs (loop4): Unrecognized mount option "age_extent_cache" or missing value [ 156.151951][ T5609] loop0: detected capacity change from 0 to 40427 [ 156.220762][ T5609] F2FS-fs (loop0): build fault injection attr: rate: 16, type: 0x1ffff [ 156.249343][ T5609] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0xae [ 156.297360][ T5609] F2FS-fs (loop0): invalid crc value [ 156.431795][ T5609] F2FS-fs (loop0) : inject kvmalloc in f2fs_kvmalloc of f2fs_build_segment_manager+0x5245/0x67b0 [ 156.504301][ T5609] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-12) [ 157.163200][ T5636] binder: BINDER_SET_CONTEXT_MGR already set [ 157.169297][ T5636] binder: 5631:5636 ioctl 4018620d 200000000040 returned -16 [ 157.901492][ T5620] loop4: detected capacity change from 0 to 32768 [ 157.960149][ T5620] (syz.4.381,5620,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 157.974669][ T5620] (syz.4.381,5620,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 158.125849][ T5620] JBD2: Ignoring recovery information on journal [ 158.340737][ T5620] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 158.929763][ T4168] ocfs2: Unmounting device (7,4) on (node local) [ 159.492088][ T5655] 9pnet: Insufficient options for proto=fd [ 160.349020][ T5662] loop4: detected capacity change from 0 to 256 [ 160.417172][ T5662] exfat: Deprecated parameter 'utf8' [ 160.431005][ T5662] exfat: Unknown parameter 'keep_last_dots' [ 160.622669][ T5670] binder: BINDER_SET_CONTEXT_MGR already set [ 160.628904][ T5670] binder: 5668:5670 ioctl 4018620d 200000000040 returned -16 [ 161.612300][ T5673] netlink: zone id is out of range [ 161.632024][ T5673] netlink: set zone limit has 4 unknown bytes [ 161.913334][ T5676] loop0: detected capacity change from 0 to 4096 [ 161.981207][ T5676] ntfs3: Unknown parameter 'hide_dot_files' [ 162.083647][ T5667] loop1: detected capacity change from 0 to 32768 [ 162.163429][ T5680] loop0: detected capacity change from 0 to 256 [ 162.163888][ T5667] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.393 (5667) [ 162.248016][ T5667] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 162.274567][ T5667] BTRFS info (device loop1): enabling auto defrag [ 162.281108][ T5667] BTRFS info (device loop1): doing ref verification [ 162.301206][ T5680] FAT-fs (loop0): Directory bread(block 64) failed [ 162.312158][ T5680] FAT-fs (loop0): Directory bread(block 65) failed [ 162.327416][ T5680] FAT-fs (loop0): Directory bread(block 66) failed [ 162.334349][ T5680] FAT-fs (loop0): Directory bread(block 67) failed [ 162.341087][ T5680] FAT-fs (loop0): Directory bread(block 68) failed [ 162.348215][ T5680] FAT-fs (loop0): Directory bread(block 69) failed [ 162.355379][ T5680] FAT-fs (loop0): Directory bread(block 70) failed [ 162.357479][ T5667] BTRFS info (device loop1): max_inline at 0 [ 162.362482][ T5680] FAT-fs (loop0): Directory bread(block 71) failed [ 162.374830][ T5680] FAT-fs (loop0): Directory bread(block 72) failed [ 162.395600][ T5680] FAT-fs (loop0): Directory bread(block 73) failed [ 162.412821][ T5667] BTRFS info (device loop1): force clearing of disk cache [ 162.440187][ T5667] BTRFS info (device loop1): turning on sync discard [ 162.449836][ T5667] BTRFS info (device loop1): disabling free space tree [ 162.476632][ T5667] BTRFS info (device loop1): has skinny extents [ 163.355054][ T5692] 9pnet: Insufficient options for proto=fd [ 163.362462][ T5692] snd_dummy snd_dummy.0: control 0:0:4194304:syz0:5 is already present [ 163.745476][ T5667] BTRFS error (device loop1): open_ctree failed: -12 [ 164.307431][ T5718] loop4: detected capacity change from 0 to 4096 [ 164.456006][ T5718] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 164.570479][ T5724] binder: BINDER_SET_CONTEXT_MGR already set [ 164.576929][ T5724] binder: 5719:5724 ioctl 4018620d 200000000040 returned -16 [ 165.387831][ T5730] loop0: detected capacity change from 0 to 1024 [ 166.573928][ T5748] 9pnet: Insufficient options for proto=fd [ 166.623054][ T5742] snd_dummy snd_dummy.0: control 0:0:4194304:syz0:5 is already present [ 166.780167][ T5751] loop4: detected capacity change from 0 to 256 [ 167.161723][ T5751] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 167.475160][ T5751] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 167.500458][ T5751] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 167.724302][ T5762] binder: BINDER_SET_CONTEXT_MGR already set [ 167.730396][ T5762] binder: 5758:5762 ioctl 4018620d 200000000040 returned -16 [ 168.835620][ T5776] loop4: detected capacity change from 0 to 2048 [ 168.952829][ T5781] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 169.027264][ T5740] loop0: detected capacity change from 0 to 40427 [ 169.099332][ T5740] F2FS-fs (loop0): build fault injection attr: rate: 19, type: 0x1ffff [ 169.613973][ T5801] 9pnet: Insufficient options for proto=fd [ 169.932835][ T5808] netlink: zone id is out of range [ 170.166480][ T5808] netlink: set zone limit has 4 unknown bytes [ 170.758627][ T5813] loop0: detected capacity change from 0 to 4096 [ 170.821667][ T5813] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 171.918913][ T5820] loop0: detected capacity change from 0 to 4096 [ 171.977147][ T5820] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 172.078353][ T5820] ntfs3: loop0: failed to convert "076c" to iso8859-1 [ 172.873209][ T5831] binder: BINDER_SET_CONTEXT_MGR already set [ 172.879477][ T5831] binder: 5828:5831 ioctl 4018620d 200000000040 returned -16 [ 173.813870][ T5826] loop1: detected capacity change from 0 to 2048 [ 173.913223][ T5841] 9pnet: Insufficient options for proto=fd [ 173.943389][ T5844] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 173.954521][ T5841] snd_dummy snd_dummy.0: control 0:0:4194304:syz0:5 is already present [ 174.183738][ T5851] loop4: detected capacity change from 0 to 512 [ 174.661355][ T5851] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 174.799212][ T5851] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 176.369331][ T4334] Bluetooth: hci0: command 0x0406 tx timeout [ 176.378318][ T4334] Bluetooth: hci3: command 0x0406 tx timeout [ 176.398333][ T4334] Bluetooth: hci2: command 0x0406 tx timeout [ 176.414218][ T4334] Bluetooth: hci4: command 0x0406 tx timeout [ 177.666606][ T5880] loop1: detected capacity change from 0 to 128 [ 177.910252][ T5870] loop4: detected capacity change from 0 to 32768 [ 177.973346][ T5884] netlink: zone id is out of range [ 177.978759][ T5884] netlink: set zone limit has 4 unknown bytes [ 178.096782][ T5886] overlayfs: failed to clone upperpath [ 178.277795][ T5892] 9pnet: Insufficient options for proto=fd [ 178.298247][ T5892] snd_dummy snd_dummy.0: control 0:0:4194304:syz0:5 is already present [ 182.394346][ T5933] loop1: detected capacity change from 0 to 128 [ 182.446026][ T5926] block nbd4: shutting down sockets [ 182.544752][ T5933] hpfs: Bad magic ... probably not HPFS [ 182.639639][ T5940] 9pnet: Insufficient options for proto=fd [ 182.722069][ T5939] netlink: 'syz.4.470': attribute type 10 has an invalid length. [ 183.204941][ T5939] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 183.564222][ T4385] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 184.435015][ T5954] loop4: detected capacity change from 0 to 262144 [ 184.864276][ T4385] usb 2-1: device descriptor read/64, error -71 [ 184.868265][ T5970] loop3: detected capacity change from 0 to 256 [ 184.910393][ T5962] loop4: detected capacity change from 0 to 4096 [ 185.026854][ T5962] ntfs3: Unknown parameter 'nocase' [ 185.211960][ T5974] netlink: zone id is out of range [ 185.217630][ T5974] netlink: set zone limit has 4 unknown bytes [ 185.254257][ T4385] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 185.309191][ T4173] Bluetooth: hci1: link tx timeout [ 185.316830][ T4173] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 185.321272][ T5976] loop4: detected capacity change from 0 to 512 [ 185.419661][ T5976] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 185.466076][ T5976] EXT4-fs (loop4): orphan cleanup on readonly fs [ 185.490165][ T5976] EXT4-fs warning (device loop4): ext4_enable_quotas:6456: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 185.494166][ T4385] usb 2-1: device descriptor read/64, error -71 [ 185.543396][ T5976] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 185.574568][ T5976] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #16: comm syz.4.485: iget: immutable or append flags not allowed on symlinks [ 185.653640][ T5976] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.485: couldn't read orphan inode 16 (err -117) [ 185.665997][ T4385] usb usb2-port1: attempt power cycle [ 185.694991][ T5976] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 186.264217][ T21] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 186.598082][ T21] usb 5-1: Using ep0 maxpacket: 8 [ 186.724546][ T21] usb 5-1: config 0 has an invalid interface number: 200 but max is 0 [ 186.791397][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.136323][ T21] usb 5-1: config 0 has no interface number 0 [ 187.149920][ T21] usb 5-1: config 0 interface 200 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 187.163656][ T21] usb 5-1: config 0 interface 200 has no altsetting 0 [ 187.222185][ T5998] loop1: detected capacity change from 0 to 256 [ 187.303724][ T5998] FAT-fs (loop1): Unrecognized mount option "smackfsdef=vfat" or missing value [ 187.994333][ T21] usb 5-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 188.024212][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.032566][ T21] usb 5-1: Product: syz [ 188.036877][ T21] usb 5-1: Manufacturer: syz [ 188.041928][ T21] usb 5-1: SerialNumber: syz [ 188.058109][ T21] usb 5-1: config 0 descriptor?? [ 188.130141][ T6009] loop1: detected capacity change from 0 to 256 [ 188.234908][ T6009] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 188.254343][ T6009] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 188.283513][ T6009] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 188.475437][ T21] usbhid 5-1:0.200: couldn't find an input interrupt endpoint [ 188.486715][ T21] usb 5-1: USB disconnect, device number 3 [ 188.534687][ T6009] exFAT-fs (loop1): hint_cluster is invalid (17) [ 188.548082][ T6019] loop4: detected capacity change from 0 to 512 [ 188.645287][ T6020] netlink: zone id is out of range [ 188.650448][ T6020] netlink: set zone limit has 4 unknown bytes [ 188.701274][ T6007] loop0: detected capacity change from 0 to 32768 [ 188.753341][ T6019] Quota error (device loop4): v2_read_file_info: Can't read info structure [ 188.826716][ T6019] EXT4-fs warning (device loop4): ext4_enable_quotas:6456: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 188.874842][ T6019] EXT4-fs (loop4): mount failed [ 188.940673][ T6007] XFS (loop0): Mounting V5 Filesystem [ 189.099298][ T6007] XFS (loop0): Ending clean mount [ 189.111443][ T6007] XFS (loop0): Quotacheck needed: Please wait. [ 189.189844][ T6007] XFS (loop0): Quotacheck: Done. [ 189.418527][ T6007] XFS (loop0): User initiated shutdown received. [ 189.432009][ T6007] XFS (loop0): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x101/0x150 (fs/xfs/xfs_fsops.c:481). Shutting down filesystem. [ 189.442587][ T6029] loop1: detected capacity change from 0 to 32768 [ 189.460945][ T6042] 9pnet: Insufficient options for proto=fd [ 189.464154][ T6007] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 189.543267][ T4175] XFS (loop0): Unmounting Filesystem [ 189.663202][ T6029] [ 189.663202][ T6029] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.663202][ T6029] [ 189.778270][ T6029] ERROR: (device loop1): diWrite: ixpxd invalid [ 189.778270][ T6029] [ 189.862951][ T6029] ERROR: (device loop1): txCommit: [ 189.862951][ T6029] [ 189.990079][ T4169] [ 189.990079][ T4169] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.990079][ T4169] [ 190.018705][ T4169] [ 190.018705][ T4169] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 190.018705][ T4169] [ 190.169342][ T6038] loop4: detected capacity change from 0 to 32768 [ 190.234737][ T6038] XFS (loop4): logbuf size must be greater than or equal to log stripe size [ 190.292350][ C1] Unknown status report in ack skb [ 190.350279][ T6060] loop1: detected capacity change from 0 to 64 [ 190.982380][ T4169] Trying to free block not in datazone [ 191.087903][ T6073] TCP: TCP_TX_DELAY enabled [ 191.768336][ T6076] 9pnet: Insufficient options for proto=fd [ 192.055293][ T6086] futex_wake_op: syz.4.515 tries to shift op by -1; fix this program [ 192.852421][ T6095] device syzkaller1 entered promiscuous mode [ 193.105883][ T6100] loop0: detected capacity change from 0 to 64 [ 193.369695][ T6089] loop1: detected capacity change from 0 to 32768 [ 193.441605][ T6107] loop0: detected capacity change from 0 to 256 [ 193.442829][ T6092] loop4: detected capacity change from 0 to 32768 [ 193.586740][ T6092] XFS: attr2 mount option is deprecated. [ 194.292620][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.375707][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.450362][ T6119] loop3: detected capacity change from 0 to 16 [ 194.458742][ T6092] XFS (loop4): Mounting V5 Filesystem [ 194.537719][ T6128] futex_wake_op: syz.0.528 tries to shift op by -1; fix this program [ 194.648264][ T6119] erofs: (device loop3): erofs_superblock_csum_verify: invalid checksum 0x80a9593b, 0x7bbbea8c expected [ 194.663447][ T4263] udevd[4263]: incorrect erofs checksum on /dev/loop3 [ 194.711893][ T6092] XFS (loop4): Ending clean mount [ 194.732225][ T6119] tipc: Started in network mode [ 194.751557][ T6092] XFS (loop4): Quotacheck needed: Please wait. [ 194.783757][ T6119] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 194.833940][ T6119] tipc: Enabled bearer , priority 10 [ 194.889908][ T6092] XFS (loop4): Quotacheck: Done. [ 195.006432][ T4168] XFS (loop4): Unmounting Filesystem [ 195.096838][ T6139] loop3: detected capacity change from 0 to 8192 [ 195.268144][ T6139] loop3: p2 p3 p4 [ 195.290831][ T6139] loop3: p2 size 327551 extends beyond EOD, truncated [ 195.526422][ T6139] loop3: p3 size 16776960 extends beyond EOD, truncated [ 195.593918][ T6139] loop3: p4 size 3599499392 extends beyond EOD, truncated [ 195.766236][ T6152] loop1: detected capacity change from 0 to 2048 [ 196.049649][ T6152] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 196.569292][ T4385] tipc: Node number set to 1 [ 197.593926][ T6167] futex_wake_op: syz.3.541 tries to shift op by -1; fix this program [ 197.756488][ T6174] loop3: detected capacity change from 0 to 512 [ 197.884593][ T4245] udevd[4245]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 197.907941][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 198.017849][ T4260] udevd[4260]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 198.048079][ T6174] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 198.235097][ T6174] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.772660][ T6211] futex_wake_op: syz.4.555 tries to shift op by -1; fix this program [ 200.789490][ T6210] loop1: detected capacity change from 0 to 64 [ 201.238982][ T6188] loop0: detected capacity change from 0 to 40427 [ 201.270772][ T6188] F2FS-fs (loop0): build fault injection attr: rate: 19, type: 0x1ffff [ 201.430155][ T6227] binder: BINDER_SET_CONTEXT_MGR already set [ 201.436518][ T6227] binder: 6223:6227 ioctl 4018620d 200000000040 returned -16 [ 202.226247][ T6232] binder: BINDER_SET_CONTEXT_MGR already set [ 202.364987][ T6232] binder: 6230:6232 ioctl 4018620d 2000000002c0 returned -16 [ 203.436208][ T6249] futex_wake_op: syz.2.568 tries to shift op by -1; fix this program [ 204.477310][ T6248] loop0: detected capacity change from 0 to 32768 [ 204.635508][ T6245] loop1: detected capacity change from 0 to 40427 [ 204.718825][ T6245] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 204.768130][ T6245] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 204.784475][ T6245] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1ffff [ 204.836411][ T6245] F2FS-fs (loop1): invalid crc value [ 204.855921][ T6245] F2FS-fs (loop1): Found nat_bits in checkpoint [ 204.990192][ T6245] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 205.004134][ T6245] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 205.132318][ T4169] attempt to access beyond end of device [ 205.132318][ T4169] loop1: rw=2049, want=45104, limit=40427 [ 205.434138][ T6257] loop0: detected capacity change from 0 to 32768 [ 206.878097][ T6285] futex_wake_op: syz.3.581 tries to shift op by -1; fix this program [ 206.934451][ T6277] loop0: detected capacity change from 0 to 512 [ 207.651874][ T6277] EXT4-fs (loop0): Ignoring removed nobh option [ 207.806737][ T6277] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 207.881611][ T6277] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.582: invalid indirect mapped block 256 (level 1) [ 208.101231][ T6277] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.582: invalid indirect mapped block 2683928664 (level 1) [ 208.135234][ T6277] EXT4-fs (loop0): 1 truncate cleaned up [ 208.141185][ T6277] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,dioread_lock,nobh,nojournal_checksum,acl,usrjquota=.grpquota,nodiscard,jqfmt=vfsv0,noload,,,errors=continue. Quota mode: writeback. [ 208.377549][ T26] audit: type=1800 audit(1750697407.245:5): pid=6277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.582" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 209.816606][ T6312] binder: BINDER_SET_CONTEXT_MGR already set [ 209.822674][ T6312] binder: 6306:6312 ioctl 4018620d 200000000040 returned -16 [ 210.146748][ T6311] loop4: detected capacity change from 0 to 8192 [ 210.304337][ T6316] netlink: 'syz.0.591': attribute type 3 has an invalid length. [ 210.316651][ T6316] netlink: 'syz.0.591': attribute type 3 has an invalid length. [ 210.954245][ T26] audit: type=1800 audit(1750697409.825:6): pid=6320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.592" name="bus" dev="loop4" ino=1048642 res=0 errno=0 [ 211.095011][ T6323] futex_wake_op: syz.1.594 tries to shift op by -1; fix this program [ 212.636912][ T6339] loop3: detected capacity change from 0 to 512 [ 212.654425][ T4882] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 212.818700][ T6339] EXT4-fs (loop3): Ignoring removed nobh option [ 212.834248][ T6339] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 212.936894][ T6339] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.599: invalid indirect mapped block 256 (level 2) [ 213.315314][ T4882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 213.382447][ T6339] EXT4-fs (loop3): 2 truncates cleaned up [ 213.426564][ T6339] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,nojournal_checksum,dioread_nolock,bsdgroups,,errors=continue. Quota mode: writeback. [ 213.503697][ T4882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.623411][ T4882] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 213.634145][ T4882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.653874][ T4882] usb 1-1: config 0 descriptor?? [ 213.717848][ T26] audit: type=1800 audit(1750697412.615:7): pid=6339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.599" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 213.742796][ T6326] loop4: detected capacity change from 0 to 40427 [ 213.773838][ T6326] F2FS-fs (loop4): build fault injection attr: rate: 16, type: 0x1ffff [ 213.785158][ T6326] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0xae [ 213.818191][ T6326] F2FS-fs (loop4): invalid crc value [ 213.855509][ T6326] F2FS-fs (loop4) : inject kvmalloc in f2fs_kvmalloc of f2fs_build_segment_manager+0x5245/0x67b0 [ 213.871275][ T6326] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-12) [ 213.910077][ T6353] raw_sendmsg: syz.3.603 forgot to set AF_INET. Fix it! [ 213.944318][ T4333] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 214.163484][ T6360] loop3: detected capacity change from 0 to 1024 [ 214.195559][ T4882] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 214.211533][ T6360] EXT4-fs (loop3): inline encryption not supported [ 214.261326][ T6360] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 2: comm syz.3.606: lblock 2 mapped to illegal pblock 2 (length 1) [ 214.303167][ T6360] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 214.314606][ T4333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 214.324201][ T6360] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 48: comm syz.3.606: lblock 0 mapped to illegal pblock 48 (length 1) [ 214.338071][ T4333] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 214.362947][ T6360] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 214.386713][ T6360] EXT4-fs error (device loop3): ext4_acquire_dquot:6204: comm syz.3.606: Failed to acquire dquot type 0 [ 214.402659][ T6360] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5835: Corrupt filesystem [ 214.418545][ T4333] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.418564][ T6360] EXT4-fs error (device loop3): ext4_evict_inode:282: inode #11: comm syz.3.606: mark_inode_dirty error [ 214.439226][ T6360] EXT4-fs warning (device loop3): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 214.451948][ T6360] EXT4-fs (loop3): 1 orphan inode deleted [ 214.464481][ T4882] usb 1-1: USB disconnect, device number 2 [ 214.470629][ T6360] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,inlinecrypt,i_version,,errors=continue. Quota mode: none. [ 214.516495][ T4279] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 214.561232][ T4279] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 214.577627][ T4279] EXT4-fs error (device loop3): ext4_release_dquot:6240: comm kworker/u4:7: Failed to release dquot type 0 [ 214.586514][ T4333] usb 2-1: config 0 descriptor?? [ 214.620117][ T6348] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 214.702854][ T6366] futex_wake_op: syz.4.607 tries to shift op by -1; fix this program [ 216.965199][ T4333] elan 0003:04F3:0755.0002: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 216.995512][ T6379] loop0: detected capacity change from 0 to 1024 [ 217.922267][ T4333] usb 2-1: USB disconnect, device number 5 [ 219.137649][ T144] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 2: comm kworker/u4:1: lblock 2 mapped to illegal pblock 2 (length 1) [ 219.190190][ T144] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 219.288601][ T6385] fido_id[6385]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 219.739757][ T144] EXT4-fs error (device loop3): ext4_write_dquot:6184: comm kworker/u4:1: Failed to commit dquot type 0 [ 220.018842][ T6398] loop0: detected capacity change from 0 to 512 [ 220.111027][ T144] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 220.204814][ T6398] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 220.206398][ T4177] EXT4-fs error (device loop3): __ext4_get_inode_loc:4321: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 220.237980][ T4177] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5835: Corrupt filesystem [ 220.246081][ T6398] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 220.252552][ T4177] EXT4-fs error (device loop3): ext4_quota_off:6510: inode #3: comm syz-executor: mark_inode_dirty error [ 220.294517][ T6398] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 220.327482][ T6398] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 220.343726][ T6398] EXT4-fs (loop0): 1 truncate cleaned up [ 220.352597][ T6398] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,noload,noinit_itable,usrjquota=,grpjquota=.seclabel,,errors=continue. Quota mode: writeback. [ 220.490024][ T6407] loop3: detected capacity change from 0 to 2048 [ 220.855267][ T6407] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 221.505185][ T6417] loop1: detected capacity change from 0 to 2048 [ 221.579371][ T6402] futex_wake_op: syz.2.619 tries to shift op by -1; fix this program [ 221.756801][ T6417] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 222.184163][ C1] ------------[ cut here ]------------ [ 222.190434][ C1] refcount_t: addition on 0; use-after-free. [ 222.197150][ C1] WARNING: CPU: 1 PID: 6427 at lib/refcount.c:25 refcount_warn_saturate+0xff/0x1a0 [ 222.198741][ T4229] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.206642][ C1] Modules linked in: [ 222.206694][ C1] CPU: 1 PID: 6427 Comm: syz-executor Not tainted 5.15.185-syzkaller #0 [ 222.206715][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 222.206733][ C1] RIP: 0010:refcount_warn_saturate+0xff/0x1a0 [ 222.206757][ C1] Code: 09 01 48 c7 c7 40 6b 59 8a e8 dd 27 bb 05 0f 0b eb e0 e8 04 42 9c fd c6 05 ae 8f 79 09 01 48 c7 c7 80 6a 59 8a e8 c1 27 bb 05 <0f> 0b eb c4 e8 e8 41 9c fd c6 05 93 8f 79 09 01 48 c7 c7 e0 6a 59 [ 222.206773][ C1] RSP: 0000:ffffc90000dd0848 EFLAGS: 00010246 [ 222.206789][ C1] RAX: 4b7725a7a31d4100 RBX: 0000000000000002 RCX: ffff888026768000 [ 222.206803][ C1] RDX: 0000000000000100 RSI: 0000000000000101 RDI: 0000000000000000 [ 222.206815][ C1] RBP: ffffc90000dd09b0 R08: dffffc0000000000 R09: fffff520001ba06d [ 222.206830][ C1] R10: fffff520001ba06d R11: 1ffff920001ba06c R12: ffff88801a793500 [ 222.206844][ C1] R13: dffffc0000000000 R14: 0000000000000002 R15: 0000000000000000 [ 222.206857][ C1] FS: 000055557a2b7500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 222.206874][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 222.206889][ C1] CR2: 000020000001e000 CR3: 00000000798bb000 CR4: 00000000003506e0 [ 222.206906][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 222.206918][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 222.206931][ C1] Call Trace: [ 222.206939][ C1] [ 222.206950][ C1] tipc_crypto_xmit+0x1949/0x2560 [ 222.206985][ C1] ? tipc_crypto_do_cmd+0xd60/0xd60 [ 222.207008][ C1] tipc_bearer_xmit_skb+0x228/0x3c0 [ 222.373718][ C1] ? tipc_bearer_min_mtu+0x190/0x190 [ 222.379218][ C1] tipc_disc_timeout+0x568/0x6b0 [ 222.384194][ C1] ? tipc_disc_create+0x920/0x920 [ 222.389221][ C1] ? tipc_disc_create+0x920/0x920 [ 222.394379][ C1] call_timer_fn+0x16c/0x530 [ 222.398988][ C1] ? tipc_disc_create+0x920/0x920 [ 222.404018][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 222.410048][ C1] ? __run_timers+0x7c0/0x7c0 [ 222.414943][ C1] ? rcu_is_watching+0x11/0xa0 [ 222.419707][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 222.424996][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 222.430172][ C1] ? tipc_disc_create+0x920/0x920 [ 222.435290][ C1] __run_timers+0x525/0x7c0 [ 222.439780][ C1] ? detach_timer+0x2b0/0x2b0 [ 222.444455][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 222.450770][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 222.455908][ C1] ? ktime_get_real_ts64+0x420/0x420 [ 222.461541][ C1] run_timer_softirq+0x63/0xf0 [ 222.466528][ C1] handle_softirqs+0x328/0x820 [ 222.471555][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 222.476578][ C1] ? do_softirq+0x200/0x200 [ 222.481086][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 222.486336][ C1] __irq_exit_rcu+0x12f/0x220 [ 222.491089][ C1] ? irq_exit_rcu+0x20/0x20 [ 222.495694][ C1] irq_exit_rcu+0x5/0x20 [ 222.499916][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 222.505558][ C1] [ 222.508473][ C1] [ 222.511390][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 222.517587][ C1] RIP: 0010:pvclock_clocksource_read+0x1eb/0x760 [ 222.523923][ C1] Code: b6 04 20 84 c0 48 8b 54 24 38 4c 8b 74 24 28 0f 85 bf 02 00 00 49 8b 2a 48 8b 44 24 58 42 0f b6 04 20 84 c0 0f 85 06 03 00 00 <44> 0f b6 7f 1d 42 0f b6 04 22 84 c0 0f 85 4f 03 00 00 43 0f b6 04 [ 222.544090][ C1] RSP: 0000:ffffc9000333f5d8 EFLAGS: 00000246 [ 222.550283][ C1] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000000001 [ 222.558264][ C1] RDX: 1ffffffff1dd6008 RSI: ffffffff8eeb005c RDI: ffffffff8eeb0040 [ 222.566521][ C1] RBP: 00000000196d9dbd R08: ffffffff8eeb0048 R09: ffffffff8eeb0058 [ 222.574518][ C1] R10: ffffffff8eeb0050 R11: ffffffff8eeb0043 R12: dffffc0000000000 [ 222.582879][ C1] R13: 00000034a9b9287f R14: 1ffffffff1dd6008 R15: 0000000000000000 [ 222.591145][ C1] ? __reset_page_owner+0x180/0x180 [ 222.599031][ C1] ? seqcount_lockdep_reader_access+0x126/0x170 [ 222.605319][ C1] kvm_sched_clock_read+0x14/0x40 [ 222.610342][ C1] sched_clock_cpu+0x15/0x3c0 [ 222.615031][ C1] ? preempt_count_add+0x8d/0x190 [ 222.620051][ C1] __set_page_owner+0x174/0x2d0 [ 222.624911][ C1] get_page_from_freelist+0x1b77/0x1c60 [ 222.630443][ C1] ? __might_sleep+0xf0/0xf0 [ 222.635051][ C1] ? __alloc_pages+0x470/0x470 [ 222.639792][ C1] ? prepare_alloc_pages+0x368/0x5f0 [ 222.645082][ C1] __alloc_pages+0x1e1/0x470 [ 222.649652][ C1] ? zone_statistics+0x170/0x170 [ 222.654621][ C1] ? alloc_pages+0x438/0x550 [ 222.659236][ C1] __vmalloc_node_range+0x4b2/0x8b0 [ 222.664456][ C1] vmalloc_user+0x70/0x80 [ 222.668772][ C1] ? kcov_mmap+0x27/0x120 [ 222.673081][ C1] kcov_mmap+0x27/0x120 [ 222.677239][ C1] mmap_file+0x5d/0xb0 [ 222.681286][ C1] mmap_region+0xd0d/0x15e0 [ 222.685791][ C1] ? security_mmap_addr+0x6e/0x90 [ 222.690798][ C1] do_mmap+0x77a/0xdf0 [ 222.694870][ C1] vm_mmap_pgoff+0x1b2/0x2b0 [ 222.699445][ C1] ? account_locked_vm+0xe0/0xe0 [ 222.704379][ C1] ? __fget_files+0x40f/0x480 [ 222.709040][ C1] ksys_mmap_pgoff+0x542/0x780 [ 222.713796][ C1] ? mmap_region+0x15e0/0x15e0 [ 222.718598][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 222.723972][ C1] do_syscall_64+0x4c/0xa0 [ 222.728493][ C1] ? clear_bhb_loop+0x30/0x80 [ 222.733288][ C1] ? clear_bhb_loop+0x30/0x80 [ 222.737974][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 222.743867][ C1] RIP: 0033:0x7f633944a963 [ 222.748296][ C1] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 222.767910][ C1] RSP: 002b:00007ffd8b62e828 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 222.776327][ C1] RAX: ffffffffffffffda RBX: 00007f6339672118 RCX: 00007f633944a963 [ 222.784301][ C1] RDX: 0000000000000003 RSI: 0000000000400000 RDI: 00007f63386b9000 [ 222.792512][ C1] RBP: 00007f6339672118 R08: 00000000000000d9 R09: 0000000000000000 [ 222.800723][ C1] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000008 [ 222.808708][ C1] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 222.816692][ C1] [ 222.819707][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 222.827077][ C1] CPU: 1 PID: 6427 Comm: syz-executor Not tainted 5.15.185-syzkaller #0 [ 222.835400][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 222.845611][ C1] Call Trace: [ 222.848888][ C1] [ 222.851718][ C1] dump_stack_lvl+0x168/0x230 [ 222.856381][ C1] ? show_regs_print_info+0x20/0x20 [ 222.861910][ C1] ? load_image+0x3b0/0x3b0 [ 222.866405][ C1] panic+0x2c9/0x7f0 [ 222.870286][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 222.874863][ C1] ? refcount_warn_saturate+0xff/0x1a0 [ 222.880427][ C1] __warn+0x248/0x2b0 [ 222.884431][ C1] ? refcount_warn_saturate+0xff/0x1a0 [ 222.889872][ C1] report_bug+0x1b7/0x2e0 [ 222.894185][ C1] handle_bug+0x3a/0x70 [ 222.898340][ C1] exc_invalid_op+0x16/0x40 [ 222.902854][ C1] asm_exc_invalid_op+0x16/0x20 [ 222.907681][ C1] RIP: 0010:refcount_warn_saturate+0xff/0x1a0 [ 222.913727][ C1] Code: 09 01 48 c7 c7 40 6b 59 8a e8 dd 27 bb 05 0f 0b eb e0 e8 04 42 9c fd c6 05 ae 8f 79 09 01 48 c7 c7 80 6a 59 8a e8 c1 27 bb 05 <0f> 0b eb c4 e8 e8 41 9c fd c6 05 93 8f 79 09 01 48 c7 c7 e0 6a 59 [ 222.933411][ C1] RSP: 0000:ffffc90000dd0848 EFLAGS: 00010246 [ 222.939475][ C1] RAX: 4b7725a7a31d4100 RBX: 0000000000000002 RCX: ffff888026768000 [ 222.947465][ C1] RDX: 0000000000000100 RSI: 0000000000000101 RDI: 0000000000000000 [ 222.955509][ C1] RBP: ffffc90000dd09b0 R08: dffffc0000000000 R09: fffff520001ba06d [ 222.963815][ C1] R10: fffff520001ba06d R11: 1ffff920001ba06c R12: ffff88801a793500 [ 222.971853][ C1] R13: dffffc0000000000 R14: 0000000000000002 R15: 0000000000000000 [ 222.979815][ C1] ? refcount_warn_saturate+0xff/0x1a0 [ 222.985259][ C1] tipc_crypto_xmit+0x1949/0x2560 [ 222.990270][ C1] ? tipc_crypto_do_cmd+0xd60/0xd60 [ 222.995448][ C1] tipc_bearer_xmit_skb+0x228/0x3c0 [ 223.000641][ C1] ? tipc_bearer_min_mtu+0x190/0x190 [ 223.005909][ C1] tipc_disc_timeout+0x568/0x6b0 [ 223.010843][ C1] ? tipc_disc_create+0x920/0x920 [ 223.015850][ C1] ? tipc_disc_create+0x920/0x920 [ 223.020883][ C1] call_timer_fn+0x16c/0x530 [ 223.026302][ C1] ? tipc_disc_create+0x920/0x920 [ 223.031597][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 223.037752][ C1] ? __run_timers+0x7c0/0x7c0 [ 223.042715][ C1] ? rcu_is_watching+0x11/0xa0 [ 223.047514][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 223.052906][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 223.058150][ C1] ? tipc_disc_create+0x920/0x920 [ 223.063159][ C1] __run_timers+0x525/0x7c0 [ 223.067649][ C1] ? detach_timer+0x2b0/0x2b0 [ 223.072306][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 223.078274][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 223.083139][ C1] ? ktime_get_real_ts64+0x420/0x420 [ 223.088461][ C1] run_timer_softirq+0x63/0xf0 [ 223.093281][ C1] handle_softirqs+0x328/0x820 [ 223.098027][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 223.102859][ C1] ? do_softirq+0x200/0x200 [ 223.107342][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 223.112538][ C1] __irq_exit_rcu+0x12f/0x220 [ 223.117213][ C1] ? irq_exit_rcu+0x20/0x20 [ 223.121699][ C1] irq_exit_rcu+0x5/0x20 [ 223.125924][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 223.131538][ C1] [ 223.134447][ C1] [ 223.137358][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 223.143411][ C1] RIP: 0010:pvclock_clocksource_read+0x1eb/0x760 [ 223.149736][ C1] Code: b6 04 20 84 c0 48 8b 54 24 38 4c 8b 74 24 28 0f 85 bf 02 00 00 49 8b 2a 48 8b 44 24 58 42 0f b6 04 20 84 c0 0f 85 06 03 00 00 <44> 0f b6 7f 1d 42 0f b6 04 22 84 c0 0f 85 4f 03 00 00 43 0f b6 04 [ 223.169440][ C1] RSP: 0000:ffffc9000333f5d8 EFLAGS: 00000246 [ 223.175498][ C1] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000000001 [ 223.183456][ C1] RDX: 1ffffffff1dd6008 RSI: ffffffff8eeb005c RDI: ffffffff8eeb0040 [ 223.191495][ C1] RBP: 00000000196d9dbd R08: ffffffff8eeb0048 R09: ffffffff8eeb0058 [ 223.199537][ C1] R10: ffffffff8eeb0050 R11: ffffffff8eeb0043 R12: dffffc0000000000 [ 223.207499][ C1] R13: 00000034a9b9287f R14: 1ffffffff1dd6008 R15: 0000000000000000 [ 223.215475][ C1] ? __reset_page_owner+0x180/0x180 [ 223.220681][ C1] ? seqcount_lockdep_reader_access+0x126/0x170 [ 223.227016][ C1] kvm_sched_clock_read+0x14/0x40 [ 223.232209][ C1] sched_clock_cpu+0x15/0x3c0 [ 223.237053][ C1] ? preempt_count_add+0x8d/0x190 [ 223.242087][ C1] __set_page_owner+0x174/0x2d0 [ 223.246930][ C1] get_page_from_freelist+0x1b77/0x1c60 [ 223.252459][ C1] ? __might_sleep+0xf0/0xf0 [ 223.257032][ C1] ? __alloc_pages+0x470/0x470 [ 223.261774][ C1] ? prepare_alloc_pages+0x368/0x5f0 [ 223.267040][ C1] __alloc_pages+0x1e1/0x470 [ 223.271609][ C1] ? zone_statistics+0x170/0x170 [ 223.276550][ C1] ? alloc_pages+0x438/0x550 [ 223.281129][ C1] __vmalloc_node_range+0x4b2/0x8b0 [ 223.286311][ C1] vmalloc_user+0x70/0x80 [ 223.290616][ C1] ? kcov_mmap+0x27/0x120 [ 223.294940][ C1] kcov_mmap+0x27/0x120 [ 223.299108][ C1] mmap_file+0x5d/0xb0 [ 223.303164][ C1] mmap_region+0xd0d/0x15e0 [ 223.307648][ C1] ? security_mmap_addr+0x6e/0x90 [ 223.312658][ C1] do_mmap+0x77a/0xdf0 [ 223.316719][ C1] vm_mmap_pgoff+0x1b2/0x2b0 [ 223.321292][ C1] ? account_locked_vm+0xe0/0xe0 [ 223.326211][ C1] ? __fget_files+0x40f/0x480 [ 223.330889][ C1] ksys_mmap_pgoff+0x542/0x780 [ 223.335644][ C1] ? mmap_region+0x15e0/0x15e0 [ 223.340385][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 223.345564][ C1] do_syscall_64+0x4c/0xa0 [ 223.349984][ C1] ? clear_bhb_loop+0x30/0x80 [ 223.354637][ C1] ? clear_bhb_loop+0x30/0x80 [ 223.359294][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 223.365180][ C1] RIP: 0033:0x7f633944a963 [ 223.369579][ C1] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 223.389479][ C1] RSP: 002b:00007ffd8b62e828 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 223.397884][ C1] RAX: ffffffffffffffda RBX: 00007f6339672118 RCX: 00007f633944a963 [ 223.405847][ C1] RDX: 0000000000000003 RSI: 0000000000400000 RDI: 00007f63386b9000 [ 223.413812][ C1] RBP: 00007f6339672118 R08: 00000000000000d9 R09: 0000000000000000 [ 223.421857][ C1] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000008 [ 223.429812][ C1] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 223.437805][ C1] [ 223.441080][ C1] Kernel Offset: disabled [ 223.445660][ C1] Rebooting in 86400 seconds..