last executing test programs: 10.113315751s ago: executing program 0 (id=176): timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0xd25f8e34d7c46251, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 9.999085874s ago: executing program 0 (id=177): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) 9.860028688s ago: executing program 0 (id=179): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x60000081}, 0x804) 9.710880051s ago: executing program 0 (id=182): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) syz_clone(0x2100, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) openat$incfs(0xffffffffffffff9c, 0x0, 0x842, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) 8.388070793s ago: executing program 0 (id=188): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") r0 = creat(&(0x7f0000000340)='./bus\x00', 0x182) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 7.31559156s ago: executing program 0 (id=209): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0xfffffffffffffffc) 7.180664783s ago: executing program 32 (id=209): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0xfffffffffffffffc) 3.760223937s ago: executing program 4 (id=259): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000700)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000440)={r2, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) 3.331652018s ago: executing program 4 (id=267): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="18000000021447c030bd7020fddbdf2508000100"], 0x18}, 0x1, 0x0, 0x0, 0x4004851}, 0xd0) 2.745242112s ago: executing program 4 (id=268): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x28, r0, 0x1, 0xffffffff, 0x1, {}, [@ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x28}}, 0x24048000) 2.726197143s ago: executing program 1 (id=269): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xed, 0x474, &(0x7f0000000b80)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 2.484127869s ago: executing program 4 (id=274): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@bsdgroups}, {@noblock_validity}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@delalloc}, {@init_itable_val={'init_itable', 0x3d, 0xfffffffffffffffa}}], [{@pcr={'pcr', 0x3d, 0x6}}, {@smackfstransmute={'smackfstransmute', 0x3d, '%+'}}, {@uid_lt}, {@appraise_type}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}, 0xfd, 0x57e, &(0x7f0000001240)="$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") syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), 0x0, 0x361, 0x0) lsetxattr$system_posix_acl(&(0x7f00000006c0)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {0x1, 0x2}, [], {0x4, 0x4}, [], {}, {0x20, 0x7}}, 0x24, 0x3) 2.308682203s ago: executing program 1 (id=278): syz_open_dev$loop(&(0x7f0000000440), 0x6, 0x41) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000008) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$loop(&(0x7f00000000c0), 0x10, 0x64000) getdents64(0xffffffffffffffff, 0x0, 0x0) socket(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/rcu_normal', 0x149a82, 0x0) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback={0x4000000}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e000100000000000000000200"], 0x50}}, 0x0) 2.128272867s ago: executing program 3 (id=279): futex(&(0x7f000000cffc), 0x80000000000d, 0x3, 0x0, 0x0, 0x0) 2.127918247s ago: executing program 4 (id=280): add_key(0x0, 0x0, &(0x7f0000000200)="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", 0x108, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000180005"], 0x2c}}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000001000)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0003006a0500003f000000000000000000000005010905a10105091901290a150025017501950a8102950175068103c0"], 0x135) write$UHID_INPUT2(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='\f'], 0x10) 2.01301391s ago: executing program 3 (id=282): bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./config/usb_gadget/g1/file0\x00', 0x0, 0x4008}, 0x18) 1.867929894s ago: executing program 3 (id=284): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000100)={[{@quota}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000a00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xa) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c400}, 0xe2e41c5752dc722) ioctl$FITRIM(r0, 0x40e8662e, &(0x7f0000000100)={0xc3e1, 0xd000003, 0x7}) 1.745098207s ago: executing program 2 (id=285): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="140100003000010000000000fcdbdf250301f2800c00180008ac0f00000000401400010000000000000000000000ff06000000000000006f67d29d6fabadb107d0def49c88ea04ab"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.61521515s ago: executing program 4 (id=286): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1.548246361s ago: executing program 2 (id=287): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) pwritev(r0, &(0x7f0000000300)=[{&(0x7f00000003c0)='\x00!E\x00', 0x4}], 0x1, 0x0, 0x0) 1.496123873s ago: executing program 2 (id=288): bpf$PROG_LOAD(0x5, 0x0, 0x0) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000500)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x3, 0x0, &(0x7f0000000080)) symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) chroot(0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='.\x02/file0\x00') 1.422591464s ago: executing program 3 (id=289): r0 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, &(0x7f0000000440)) 1.316266558s ago: executing program 2 (id=290): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280100001700000224bd7000fbdbdf25ff0100000000000000000000000000010000000000000000ac1414aa000000000000000000000000ac1414bb000000000000000000000000ac1414180000000000000000000000004e210000000000000200a06400000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000243560e53a000000000001fc0200000000000000000000000000004e210000000000000a00a0", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000001000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000100000004000000000000000000000000000000000000000000000000004000000000000000000000000000000000200000200000000f9ffffff3800000000040000fcffffff"], 0x128}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0xe8) 1.21924056s ago: executing program 2 (id=291): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)='\b', 0x1}], 0x1, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x7, 0x40000000}}], 0x18}, 0x804) unshare(0x22020600) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca5b500028003a00000000000001001002000012670000000000000000000000001122334411"], 0x0) 1.19544627s ago: executing program 3 (id=292): r0 = socket$nl_route(0x10, 0x3, 0x0) accept4$inet(r0, 0x0, 0x0, 0x0) 1.032208054s ago: executing program 3 (id=293): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x1c, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xc, &(0x7f0000000180)=0x100000001, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8000f28, 0x5) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) 1.031936545s ago: executing program 1 (id=294): r0 = socket$inet6(0xa, 0x3, 0x7) recvfrom$inet6(r0, 0x0, 0x0, 0x40012043, 0x0, 0x0) 211.531445ms ago: executing program 1 (id=295): mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ffc000/0x2000)=nil], 0x0, &(0x7f0000000080), 0x2) 128.879407ms ago: executing program 2 (id=296): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 64.241248ms ago: executing program 1 (id=297): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x0, 0x7, 0x301, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}}, 0x24004880) 0s ago: executing program 1 (id=298): syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000000, &(0x7f0000000740), 0xfe, 0x2a4, &(0x7f0000000a80)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40042, 0x1) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 34.620462][ T3852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.631518][ T3852] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.135' (ED25519) to the list of known hosts. syzkaller login: [ 58.126410][ T4174] cgroup: Unknown subsys name 'net' [ 58.272965][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.531290][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.890086][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 61.005699][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 61.029710][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 61.056932][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.064257][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.072328][ T4187] device bridge_slave_0 entered promiscuous mode [ 61.099212][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 61.111748][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.119100][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.126717][ T4187] device bridge_slave_1 entered promiscuous mode [ 61.178079][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.194822][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.233255][ T4200] chnl_net:caif_netlink_parms(): no params data found [ 61.256024][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.263381][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.271276][ T4192] device bridge_slave_0 entered promiscuous mode [ 61.283549][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.290810][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.298993][ T4192] device bridge_slave_1 entered promiscuous mode [ 61.315845][ T4187] team0: Port device team_slave_0 added [ 61.328914][ T4187] team0: Port device team_slave_1 added [ 61.375526][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.382747][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.391148][ T4188] device bridge_slave_0 entered promiscuous mode [ 61.398789][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.405842][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.414005][ T4193] device bridge_slave_0 entered promiscuous mode [ 61.432649][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.441958][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.449297][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.456887][ T4188] device bridge_slave_1 entered promiscuous mode [ 61.464523][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.471795][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.480067][ T4193] device bridge_slave_1 entered promiscuous mode [ 61.490202][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.497138][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.523299][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.536922][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.574987][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.582054][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.608218][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.626153][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.643385][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.671085][ T4192] team0: Port device team_slave_0 added [ 61.679270][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.702066][ T4192] team0: Port device team_slave_1 added [ 61.716694][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.726008][ T4200] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.733913][ T4200] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.741816][ T4200] device bridge_slave_0 entered promiscuous mode [ 61.751708][ T4188] team0: Port device team_slave_0 added [ 61.774059][ T4200] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.781352][ T4200] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.790126][ T4200] device bridge_slave_1 entered promiscuous mode [ 61.798470][ T4188] team0: Port device team_slave_1 added [ 61.813928][ T4187] device hsr_slave_0 entered promiscuous mode [ 61.821153][ T4187] device hsr_slave_1 entered promiscuous mode [ 61.859208][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.866170][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.892451][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.908486][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.915439][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.941480][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.960528][ T4193] team0: Port device team_slave_0 added [ 61.974123][ T4200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.988125][ T4200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.008605][ T4193] team0: Port device team_slave_1 added [ 62.014785][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.022009][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.048160][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.066601][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.073854][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.099835][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.134528][ T4200] team0: Port device team_slave_0 added [ 62.159860][ T4192] device hsr_slave_0 entered promiscuous mode [ 62.167280][ T4192] device hsr_slave_1 entered promiscuous mode [ 62.174327][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.182275][ T4192] Cannot create hsr debugfs directory [ 62.195674][ T4200] team0: Port device team_slave_1 added [ 62.216903][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.224393][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.250326][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.283184][ T4188] device hsr_slave_0 entered promiscuous mode [ 62.290117][ T4188] device hsr_slave_1 entered promiscuous mode [ 62.296591][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.304717][ T4188] Cannot create hsr debugfs directory [ 62.321508][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.328571][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.354595][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.397193][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.404293][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.430296][ T4200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.445204][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.452391][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.478440][ T4200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.571304][ T4193] device hsr_slave_0 entered promiscuous mode [ 62.578237][ T4193] device hsr_slave_1 entered promiscuous mode [ 62.584633][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.592249][ T4193] Cannot create hsr debugfs directory [ 62.614774][ T4200] device hsr_slave_0 entered promiscuous mode [ 62.622049][ T4200] device hsr_slave_1 entered promiscuous mode [ 62.629017][ T4200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.636570][ T4200] Cannot create hsr debugfs directory [ 62.698633][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 62.698872][ T1110] Bluetooth: hci3: command 0x0409 tx timeout [ 62.717788][ T1110] Bluetooth: hci2: command 0x0409 tx timeout [ 62.723891][ T1110] Bluetooth: hci1: command 0x0409 tx timeout [ 62.777845][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 62.802257][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.812161][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.822059][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.833794][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.924168][ T4192] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.934013][ T4192] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.946095][ T4192] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.967338][ T4192] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.005146][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.041679][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.051056][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.077777][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.121272][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.139259][ T4200] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.161095][ T4200] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.171054][ T4200] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.183672][ T4200] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.192799][ T1466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.202518][ T1466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.212887][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.234192][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.243160][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.252489][ T720] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.259765][ T720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.268938][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.278627][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.286915][ T720] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.293967][ T720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.304455][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.350424][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.359808][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.373096][ T4193] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.388525][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.407869][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.418438][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.427121][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.436363][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.448634][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.456876][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.472823][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.482200][ T4193] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.505092][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.512166][ T4193] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.522573][ T1466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.530828][ T1466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.540671][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.551621][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.571947][ T1466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.581628][ T1466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.590742][ T1466] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.597844][ T1466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.606615][ T4193] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.619005][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.631385][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.641316][ T1466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.653007][ T1466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.663402][ T1466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.672930][ T1466] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.680028][ T1466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.711486][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.727097][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.744157][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.754125][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.769962][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.782738][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.790871][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.799038][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.806692][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.815489][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.826867][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.836110][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.844512][ T720] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.851617][ T720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.860277][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.877083][ T1466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.885708][ T1466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.915150][ T4200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.936744][ T1466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.948281][ T1466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.956566][ T1466] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.963752][ T1466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.973559][ T1466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.982895][ T1466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.991715][ T1466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.001508][ T1466] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.010411][ T1466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.019697][ T1466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.028002][ T1466] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.041368][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.069485][ T1466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.081307][ T1466] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.090431][ T1466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.099701][ T1466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.119229][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.129093][ T4200] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.150511][ T1466] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.164111][ T1466] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.172520][ T1466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.186830][ T1466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.195577][ T1466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.204562][ T1466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.213272][ T1466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.223528][ T1466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.232037][ T1466] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.239112][ T1466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.246799][ T1466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.263843][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.286277][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.304397][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.330316][ T720] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.337407][ T720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.345483][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.356711][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.382390][ T1466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.394015][ T1466] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.410509][ T1466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.424846][ T1466] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.438379][ T1466] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.453134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.466593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.487221][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.511905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.526170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.561863][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.574935][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.584413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.592799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.601153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.608962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.620550][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.637070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.646170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.654865][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.661954][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.670613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.679625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.688083][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.695137][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.704492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.731808][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.756932][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.787842][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 64.793999][ T4232] Bluetooth: hci2: command 0x041b tx timeout [ 64.801040][ T4232] Bluetooth: hci3: command 0x041b tx timeout [ 64.803368][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.807214][ T4232] Bluetooth: hci0: command 0x041b tx timeout [ 64.828759][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.837399][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.845649][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.853608][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.862969][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.868385][ T4227] Bluetooth: hci4: command 0x041b tx timeout [ 64.873337][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.885659][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.895381][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.905113][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.913902][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.923166][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.947392][ T4192] device veth0_vlan entered promiscuous mode [ 64.956247][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.966340][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.976077][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.985367][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.994415][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.006596][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.016138][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.024562][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.032439][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.040463][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.053770][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.065781][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.076173][ T4187] device veth0_vlan entered promiscuous mode [ 65.091824][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.101496][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.114534][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.123555][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.137150][ T4192] device veth1_vlan entered promiscuous mode [ 65.156121][ T4200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.177419][ T4187] device veth1_vlan entered promiscuous mode [ 65.186481][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.197261][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.237849][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.246710][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.262781][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.275714][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.289610][ T4188] device veth0_vlan entered promiscuous mode [ 65.303275][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.312568][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.328926][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.338213][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.352118][ T4192] device veth0_macvtap entered promiscuous mode [ 65.367722][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.375766][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.384814][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.395426][ T4188] device veth1_vlan entered promiscuous mode [ 65.406880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.415289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.423920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.434727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.442974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.459949][ T4200] device veth0_vlan entered promiscuous mode [ 65.472107][ T4192] device veth1_macvtap entered promiscuous mode [ 65.480903][ T4187] device veth0_macvtap entered promiscuous mode [ 65.500812][ T4200] device veth1_vlan entered promiscuous mode [ 65.512602][ T4188] device veth0_macvtap entered promiscuous mode [ 65.524084][ T4187] device veth1_macvtap entered promiscuous mode [ 65.538704][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.546737][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.555155][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.563569][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.572085][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.581302][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.588924][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.596437][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.605260][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.618959][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.627043][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.637400][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.649652][ T4188] device veth1_macvtap entered promiscuous mode [ 65.673409][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.687333][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.695736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.704031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.714159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.723222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.732940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.747119][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.760483][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.772532][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.783824][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.794483][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.804808][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.815706][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.827392][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.842144][ T4192] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.851805][ T4192] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.860609][ T4192] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.869372][ T4192] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.882963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.893015][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.902026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.911180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.922167][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.932712][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.944277][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.955581][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.964631][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.973588][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.982476][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.004511][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.015273][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.026072][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.036807][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.049031][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.057348][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.066478][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.076049][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.084741][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.093524][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.102832][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.112985][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.121826][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.132181][ T4200] device veth0_macvtap entered promiscuous mode [ 66.166201][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.175183][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.185705][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.195415][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.204457][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.213359][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.229388][ T4200] device veth1_macvtap entered promiscuous mode [ 66.248141][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.255908][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.283272][ T4193] device veth0_vlan entered promiscuous mode [ 66.296794][ T4193] device veth1_vlan entered promiscuous mode [ 66.335850][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.351946][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.361955][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.372575][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.382917][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.394734][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.406050][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.448416][ T1466] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.456618][ T1466] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.468570][ T1466] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.477044][ T1466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.486135][ T1466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.495287][ T1466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.505702][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.516452][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.527155][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.541221][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.551266][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.561747][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.572963][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.583372][ T4193] device veth0_macvtap entered promiscuous mode [ 66.603725][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.612114][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.624238][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.636694][ T4200] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.645687][ T4200] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.654600][ T4200] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.664106][ T4200] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.688275][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.696273][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.701030][ T720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.714719][ T4193] device veth1_macvtap entered promiscuous mode [ 66.730902][ T720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.750216][ T720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.761408][ T720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.771766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.783413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.791597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.801043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.824246][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.840438][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.850817][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.861568][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.871859][ T4227] Bluetooth: hci0: command 0x040f tx timeout [ 66.872392][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.878309][ T4227] Bluetooth: hci3: command 0x040f tx timeout [ 66.894039][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.894951][ T4227] Bluetooth: hci2: command 0x040f tx timeout [ 66.904620][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.910958][ T4227] Bluetooth: hci1: command 0x040f tx timeout [ 66.926374][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.938419][ T4227] Bluetooth: hci4: command 0x040f tx timeout [ 66.944178][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.966641][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.975994][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.989046][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.000187][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.010628][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.021426][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.033424][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.044271][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.054489][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.065259][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.077196][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.096929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.112861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.122423][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.130579][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.132866][ T4193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.147010][ T4193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.155998][ T4193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.165083][ T4193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.201664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.239981][ T4264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.248363][ T4264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.252306][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.278618][ T3071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.281925][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.286510][ T3071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.303841][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.335777][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.353256][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.410921][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.427994][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.444803][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.469425][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.500952][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.511398][ T4269] loop0: detected capacity change from 0 to 512 [ 67.525302][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.534754][ T4272] loop4: detected capacity change from 0 to 256 [ 67.560648][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.569545][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.577482][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.589022][ T4272] exfat: Deprecated parameter 'namecase' [ 67.594718][ T4272] exfat: Deprecated parameter 'namecase' [ 67.634322][ T4272] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 67.693136][ T4274] loop3: detected capacity change from 0 to 512 [ 67.771472][ T4269] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 67.781081][ T4269] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.1: corrupted in-inode xattr [ 67.801240][ T4269] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.1: couldn't read orphan inode 15 (err -117) [ 67.827978][ T4274] EXT4-fs (loop3): Ignoring removed oldalloc option [ 67.835442][ T4269] EXT4-fs (loop0): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,jqfmt=vfsv0,max_dir_size_kb=0x0000000000000005,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue. Quota mode: writeback. [ 67.861477][ T4279] loop2: detected capacity change from 0 to 2048 [ 67.900075][ T4279] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 67.930349][ T4279] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 67.952805][ T4274] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,dioread_lock,oldalloc,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 67.973379][ T4279] UDF-fs: error (device loop2): udf_read_inode: (ino 1376) failed !bh [ 67.983289][ T4279] UDF-fs: error (device loop2): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 68.133871][ T26] audit: type=1800 audit(1791119665.717:2): pid=4284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 68.172012][ T4286] loop2: detected capacity change from 0 to 24 [ 68.193011][ T4271] loop1: detected capacity change from 0 to 32768 [ 68.228215][ T4286] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 68.253447][ T4286] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 68.262798][ T4271] ======================================================= [ 68.262798][ T4271] WARNING: The mand mount option has been deprecated and [ 68.262798][ T4271] and is ignored by this kernel. Remove the mand [ 68.262798][ T4271] option from the mount to silence this warning. [ 68.262798][ T4271] ======================================================= [ 68.329933][ T4286] romfs: read error for inode 0x70040 [ 68.337206][ T4286] romfs: read error for inode 0x70040 [ 68.354161][ T4286] binfmt_misc: register: failed to install interpreter file ./file0 [ 68.482616][ T4271] XFS (loop1): Mounting V5 Filesystem [ 68.550580][ T4281] loop4: detected capacity change from 0 to 32768 [ 68.550985][ T4271] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 68.700869][ T4271] XFS (loop1): Tail block (0x29) overwrite detected. Updated to 0x30 [ 68.793078][ T4271] XFS (loop1): Ending clean mount [ 68.924102][ T4188] XFS (loop1): Unmounting Filesystem [ 68.948355][ T4227] Bluetooth: hci1: command 0x0419 tx timeout [ 68.954595][ T4227] Bluetooth: hci2: command 0x0419 tx timeout [ 68.997684][ T4227] Bluetooth: hci3: command 0x0419 tx timeout [ 69.007832][ T4227] Bluetooth: hci0: command 0x0419 tx timeout [ 69.079203][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 69.320536][ T4286] romfs: read error for inode 0x70040 [ 69.650974][ T4299] loop3: detected capacity change from 0 to 32768 [ 69.682066][ T4301] loop4: detected capacity change from 0 to 32768 [ 69.719848][ T4299] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.9 (4299) [ 69.820563][ T4299] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 69.847728][ T4299] BTRFS info (device loop3): setting nodatasum [ 69.853936][ T4299] BTRFS info (device loop3): enabling auto defrag [ 69.908340][ T4299] BTRFS info (device loop3): disabling tree log [ 69.915749][ T4299] BTRFS info (device loop3): using free space tree [ 69.922564][ T4299] BTRFS info (device loop3): has skinny extents [ 69.923464][ T4301] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 69.957141][ T4305] loop2: detected capacity change from 0 to 32768 [ 70.104144][ T4299] BTRFS info (device loop3): enabling ssd optimizations [ 70.126898][ T4305] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 70.164984][ T4305] JBD2: Ignoring recovery information on journal [ 70.265390][ T4305] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 70.308989][ T4301] syz.4.11 (4301) used greatest stack depth: 18240 bytes left [ 70.397542][ T4309] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.14 (4309) [ 70.418435][ T4187] ocfs2: Unmounting device (7,4) on (node local) [ 70.441807][ T4303] XFS (loop0): Mounting V5 Filesystem [ 70.584823][ T4303] XFS (loop0): Ending clean mount [ 70.603361][ T4309] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 70.628202][ T4309] BTRFS info (device loop1): using free space tree [ 70.634827][ T4309] BTRFS info (device loop1): has skinny extents [ 70.762275][ T4193] ocfs2: Unmounting device (7,2) on (node local) [ 70.796604][ T4192] XFS (loop0): Unmounting Filesystem [ 71.146032][ T4309] BTRFS info (device loop1): enabling ssd optimizations [ 71.263736][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.270328][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.598000][ T4378] EXT4-fs (loop3): Ignoring removed bh option [ 71.690278][ T4378] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.19: corrupted in-inode xattr [ 71.764523][ T4378] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.19: couldn't read orphan inode 15 (err -117) [ 71.794514][ T4378] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000005,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 71.842702][ T4383] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 71.879052][ T4375] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.17 (4375) [ 71.977349][ T4375] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 72.012817][ T4383] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 72.017923][ T4375] BTRFS info (device loop2): setting nodatasum [ 72.025263][ T4375] BTRFS info (device loop2): force zlib compression, level 3 [ 72.040303][ T4378] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.19: Unrecognised inode hash code 4 [ 72.080539][ T4375] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 72.103337][ T4375] BTRFS info (device loop2): use lzo compression, level 0 [ 72.138555][ T4375] BTRFS info (device loop2): turning on flush-on-commit [ 72.152005][ T4378] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.19: Corrupt directory, running e2fsck is recommended [ 72.185878][ T4375] BTRFS info (device loop2): enabling auto defrag [ 72.205073][ T4394] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,delalloc,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 72.205787][ T4375] BTRFS info (device loop2): max_inline at 4096 [ 72.227984][ T4375] BTRFS info (device loop2): using free space tree [ 72.234512][ T4375] BTRFS info (device loop2): has skinny extents [ 72.257280][ T4394] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 72.290424][ T4264] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 72.315295][ T4192] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 72.352994][ T4192] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 72.372153][ T4192] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 72.420207][ T4264] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 72.465030][ T4192] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22. [ 72.515968][ T4375] BTRFS info (device loop2): enabling ssd optimizations [ 72.560946][ T4419] set_capacity_and_notify: 12 callbacks suppressed [ 72.560961][ T4419] loop0: detected capacity change from 0 to 256 [ 72.596887][ T4421] loop1: detected capacity change from 0 to 8 [ 72.606208][ T26] audit: type=1800 audit(1791119670.197:3): pid=4409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.26" name="file1" dev="loop4" ino=1048592 res=0 errno=0 [ 72.648524][ T4421] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 72.688656][ T4407] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 72.937130][ T4179] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop2 scanned by udevd (4179) [ 73.100731][ T4430] loop1: detected capacity change from 0 to 4096 [ 73.141732][ T4433] loop3: detected capacity change from 0 to 256 [ 73.250860][ T4435] loop4: detected capacity change from 0 to 64 [ 73.446335][ T4437] loop3: detected capacity change from 0 to 256 [ 73.738529][ T4441] loop4: detected capacity change from 0 to 2048 [ 73.766719][ T4443] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 73.879452][ T4443] overlayfs: failed to set xattr on upper [ 73.885310][ T4443] overlayfs: ...falling back to index=off,metacopy=off. [ 73.973192][ T4428] loop0: detected capacity change from 0 to 32768 [ 73.998817][ T4445] loop4: detected capacity change from 0 to 64 [ 74.023842][ T4427] loop2: detected capacity change from 0 to 32768 [ 74.202487][ T4427] XFS (loop2): Mounting V5 Filesystem [ 74.276990][ T4447] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 74.341559][ T4427] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 74.377881][ T4427] XFS (loop2): Tail block (0x29) overwrite detected. Updated to 0x30 [ 74.478875][ T4447] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 74.524256][ T4427] XFS (loop2): Ending clean mount [ 74.593315][ T4427] XFS (loop2): Metadata corruption detected at xfs_dinode_verify+0x2bf/0xd50, inode 0x1803 dinode [ 74.647802][ T9] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 74.654437][ T4200] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 74.668337][ T4200] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 74.675483][ T4200] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 74.687720][ T4427] XFS (loop2): Unmount and run xfs_repair [ 74.693596][ T4427] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 74.707932][ T154] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 74.714971][ T4200] ntfs3: loop3: ntfs_evict_inode r=3 failed, -22. [ 74.741887][ T4427] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00 INA............. [ 74.760909][ T4427] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 74.802693][ T4427] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d 4.Xh....4.Xh...= [ 74.826495][ T4427] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20 4.Xh...=....... [ 74.853302][ T4427] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 74.887001][ T4427] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1 ..............=. [ 74.924688][ T4427] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04 ....n..-........ [ 74.947103][ T4427] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06 ................ [ 74.972364][ T4466] FAULT_INJECTION: forcing a failure. [ 74.972364][ T4466] name failslab, interval 1, probability 0, space 0, times 1 [ 74.988501][ T4466] CPU: 0 PID: 4466 Comm: syz.3.43 Not tainted syzkaller #0 [ 74.988686][ T4460] XFS (loop2): Metadata corruption detected at xfs_dinode_verify+0x2bf/0xd50, inode 0x1803 dinode [ 74.995728][ T4466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 74.995787][ T4466] Call Trace: [ 75.019864][ T4466] [ 75.022802][ T4466] dump_stack_lvl+0x188/0x250 [ 75.027504][ T4466] ? show_regs_print_info+0x20/0x20 [ 75.032709][ T4466] ? load_image+0x410/0x410 [ 75.037247][ T4466] ? __lock_acquire+0x7d40/0x7d40 [ 75.042388][ T4466] ? rcu_lock_release+0x5/0x20 [ 75.047163][ T4466] should_fail+0x383/0x4b0 [ 75.051595][ T4466] should_failslab+0x5/0x20 [ 75.056103][ T4466] slab_pre_alloc_hook+0x51/0xc0 [ 75.061048][ T4466] kmem_cache_alloc_trace+0x47/0x290 [ 75.066342][ T4466] ? skbmod_init_net+0x61/0x190 [ 75.071210][ T4466] skbmod_init_net+0x61/0x190 [ 75.075915][ T4466] ops_init+0x360/0x5f0 [ 75.080093][ T4466] setup_net+0x39e/0xa10 [ 75.084461][ T4466] ? copy_net_ns+0x5b0/0x5b0 [ 75.086774][ T4460] XFS (loop2): Unmount and run xfs_repair [ 75.089063][ T4466] ? copy_net_ns+0x324/0x5b0 [ 75.089085][ T4466] ? down_read_killable+0x1ce/0x340 [ 75.089107][ T4466] copy_net_ns+0x33e/0x5b0 [ 75.089128][ T4466] create_new_namespaces+0x3ce/0x700 [ 75.089157][ T4466] unshare_nsproxy_namespaces+0x116/0x160 [ 75.089178][ T4466] ksys_unshare+0x4f6/0x8e0 [ 75.089194][ T4466] ? __lock_acquire+0x7d40/0x7d40 [ 75.089220][ T4466] ? sighand_ctor+0x40/0x40 [ 75.089238][ T4466] ? lock_chain_count+0x20/0x20 [ 75.108997][ T4460] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 75.109095][ T4466] ? syscall_enter_from_user_mode+0x21/0x70 [ 75.114363][ T4460] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00 INA............. [ 75.120065][ T4466] __x64_sys_unshare+0x34/0x40 [ 75.120091][ T4466] do_syscall_64+0x4c/0xa0 [ 75.120107][ T4466] ? clear_bhb_loop+0x30/0x80 [ 75.120124][ T4466] ? clear_bhb_loop+0x30/0x80 [ 75.120142][ T4466] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.120177][ T4466] RIP: 0033:0x7fa138c55159 [ 75.125500][ T4460] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 75.129649][ T4466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.129664][ T4466] RSP: 002b:00007fa136ead028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 75.129682][ T4466] RAX: ffffffffffffffda RBX: 00007fa138edcfa0 RCX: 00007fa138c55159 [ 75.129694][ T4466] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 75.129704][ T4466] RBP: 00007fa138cec06b R08: 0000000000000000 R09: 0000000000000000 [ 75.129713][ T4466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.129723][ T4466] R13: 00007fa138edd038 R14: 00007fa138edcfa0 R15: 00007ffc1b1ac378 [ 75.129749][ T4466] [ 75.136387][ T4460] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d 4.Xh....4.Xh...= [ 75.282702][ T4460] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20 4.Xh...=....... [ 75.291638][ T4460] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 75.300558][ T4460] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1 ..............=. [ 75.309462][ T4460] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04 ....n..-........ [ 75.318372][ T4460] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06 ................ [ 75.341003][ T4193] XFS (loop2): Unmounting Filesystem [ 75.402658][ T4454] [ 75.402658][ T4454] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 75.402658][ T4454] [ 75.422837][ T4459] hfs: unable to open catalog tree [ 75.435698][ T4459] hfs: can't find a HFS filesystem on dev loop4 [ 75.448931][ T4439] XFS (loop1): Mounting V5 Filesystem [ 75.540919][ T4454] ERROR: (device loop0): dbDiscardAG: -EIO [ 75.540919][ T4454] [ 75.551284][ T4454] ERROR: (device loop0): remounting filesystem as read-only [ 75.714297][ T4439] XFS (loop1): Ending clean mount [ 75.878487][ T4480] EXT4-fs (loop3): Ignoring removed nobh option [ 75.886272][ T4483] sg_write: data in/out 335872/136 bytes for SCSI command 0x0-- guessing data in; [ 75.886272][ T4483] program syz.4.48 not setting count and/or reply_len properly [ 75.924277][ T4480] EXT4-fs (loop3): mounted filesystem without journal. Opts: abort,nobh,quota,,errors=continue. Quota mode: writeback. [ 75.993020][ T26] audit: type=1326 audit(1791119673.567:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4485 comm="syz.2.44" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b2931159 code=0x7ffc0000 [ 76.018028][ T4480] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.022679][ T26] audit: type=1326 audit(1791119673.577:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4485 comm="syz.2.44" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b2931159 code=0x7ffc0000 [ 76.053029][ T26] audit: type=1326 audit(1791119673.577:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4485 comm="syz.2.44" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b2931159 code=0x7ffc0000 [ 76.085753][ T26] audit: type=1326 audit(1791119673.577:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4485 comm="syz.2.44" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b2931159 code=0x7ffc0000 [ 76.122511][ T4480] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.47: corrupted inode contents [ 76.182931][ T4487] EXT4-fs (loop2): Ignoring removed nobh option [ 76.185826][ T26] audit: type=1326 audit(1791119673.577:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4485 comm="syz.2.44" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe6b2931159 code=0x7ffc0000 [ 76.236067][ T4480] EXT4-fs error (device loop3): ext4_dirty_inode:6087: inode #2: comm syz.3.47: mark_inode_dirty error [ 76.243798][ T26] audit: type=1326 audit(1791119673.577:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4485 comm="syz.2.44" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b2931159 code=0x7ffc0000 [ 76.291731][ T26] audit: type=1326 audit(1791119673.577:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4485 comm="syz.2.44" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b2931159 code=0x7ffc0000 [ 76.294948][ T4480] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.47: corrupted inode contents [ 76.328949][ T4487] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 76.363494][ T26] audit: type=1326 audit(1791119673.577:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4485 comm="syz.2.44" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b2931159 code=0x7ffc0000 [ 76.367768][ T4480] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz.3.47: mark_inode_dirty error [ 76.402814][ T4487] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.44: attempt to clear invalid blocks 1 len 1 [ 76.438826][ T26] audit: type=1326 audit(1791119673.577:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4485 comm="syz.2.44" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b2931159 code=0x7ffc0000 [ 76.484605][ T26] audit: type=1326 audit(1791119673.577:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4485 comm="syz.2.44" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fe6b2931159 code=0x7ffc0000 [ 76.514841][ T4487] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 76.593421][ T4487] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.44: invalid indirect mapped block 1819239214 (level 0) [ 76.593944][ T4487] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.44: invalid indirect mapped block 1819239214 (level 1) [ 76.603745][ T4487] EXT4-fs (loop2): 1 truncate cleaned up [ 76.603785][ T4487] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 76.836214][ T4508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.57'. [ 76.859377][ T4510] syz.2.55 uses obsolete (PF_INET,SOCK_PACKET) [ 76.867558][ T4510] device syzkaller1 entered promiscuous mode [ 77.011628][ T4188] XFS (loop1): Unmounting Filesystem [ 77.581818][ T4544] set_capacity_and_notify: 8 callbacks suppressed [ 77.581833][ T4544] loop2: detected capacity change from 0 to 164 [ 78.073470][ T4559] netlink: 'syz.2.68': attribute type 16 has an invalid length. [ 78.081310][ T4559] netlink: 'syz.2.68': attribute type 17 has an invalid length. [ 78.134583][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 78.142832][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 78.151165][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 78.184307][ T4559] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 78.559737][ T4566] loop1: detected capacity change from 0 to 512 [ 78.697244][ T4566] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,grpquota,nodelalloc,init_itable,nobarrier,,errors=continue. Quota mode: writeback. [ 78.808026][ T4566] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.702539][ T4595] loop2: detected capacity change from 0 to 1024 [ 79.774652][ T4508] Zero length message leads to an empty skb [ 79.814690][ T4595] EXT4-fs (loop2): Ignoring removed orlov option [ 79.899441][ T4595] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,init_itable=0x000000000000726e,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,resuid=0x0000000000000000,. Quota mode: none. [ 79.901472][ T4602] FAULT_INJECTION: forcing a failure. [ 79.901472][ T4602] name failslab, interval 1, probability 0, space 0, times 0 [ 79.936597][ T4602] CPU: 0 PID: 4602 Comm: syz.0.81 Not tainted syzkaller #0 [ 79.943826][ T4602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 79.953888][ T4602] Call Trace: [ 79.957180][ T4602] [ 79.960123][ T4602] dump_stack_lvl+0x188/0x250 [ 79.964819][ T4602] ? show_regs_print_info+0x20/0x20 [ 79.970027][ T4602] ? load_image+0x410/0x410 [ 79.974538][ T4602] ? __might_sleep+0xf0/0xf0 [ 79.979133][ T4602] ? __lock_acquire+0x7d40/0x7d40 [ 79.984181][ T4602] should_fail+0x383/0x4b0 [ 79.988620][ T4602] should_failslab+0x5/0x20 [ 79.993160][ T4602] slab_pre_alloc_hook+0x51/0xc0 [ 79.998095][ T4602] __kmalloc+0x6b/0x340 [ 80.002246][ T4602] ? mpi_alloc+0x73/0x130 [ 80.006581][ T4602] mpi_alloc+0x73/0x130 [ 80.010720][ T4602] mpi_read_raw_from_sgl+0x2c9/0x640 [ 80.015999][ T4602] ? mpi_write_to_sgl+0x790/0x790 [ 80.021016][ T4602] ? memset+0x1e/0x40 [ 80.024986][ T4602] rsa_enc+0x14d/0x3c0 [ 80.029040][ T4602] ? rsa_exit+0x20/0x20 [ 80.033186][ T4602] pkcs1pad_verify+0x465/0x670 [ 80.037939][ T4602] public_key_verify_signature+0x87f/0xd40 [ 80.043740][ T4602] ? public_key_free+0x80/0x80 [ 80.048516][ T4602] ? asymmetric_key_id_same+0x63/0xe0 [ 80.053880][ T4602] x509_check_for_self_signed+0x317/0x420 [ 80.059602][ T4602] x509_cert_parse+0x59c/0x7a0 [ 80.064355][ T4602] x509_key_preparse+0x60/0x5d0 [ 80.069195][ T4602] ? down_read+0x1aa/0x2e0 [ 80.073599][ T4602] asymmetric_key_preparse+0xa5/0x140 [ 80.079395][ T4602] key_create_or_update+0x432/0xa40 [ 80.084576][ T4602] ? security_key_permission+0x7c/0xa0 [ 80.090025][ T4602] ? key_type_put+0x20/0x20 [ 80.094516][ T4602] ? lookup_user_key_possessed+0x40/0x40 [ 80.100141][ T4602] ? __might_fault+0xb3/0x110 [ 80.104811][ T4602] __se_sys_add_key+0x34b/0x410 [ 80.109646][ T4602] ? __x64_sys_add_key+0xc0/0xc0 [ 80.114580][ T4602] ? lockdep_hardirqs_on+0x94/0x140 [ 80.119767][ T4602] ? __x64_sys_add_key+0x1c/0xc0 [ 80.124693][ T4602] do_syscall_64+0x4c/0xa0 [ 80.129098][ T4602] ? clear_bhb_loop+0x30/0x80 [ 80.133765][ T4602] ? clear_bhb_loop+0x30/0x80 [ 80.138428][ T4602] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.144305][ T4602] RIP: 0033:0x7fde2bdf8159 [ 80.148707][ T4602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.168298][ T4602] RSP: 002b:00007fde2a050028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 80.176697][ T4602] RAX: ffffffffffffffda RBX: 00007fde2c07ffa0 RCX: 00007fde2bdf8159 [ 80.184826][ T4602] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 80.192798][ T4602] RBP: 00007fde2be8f06b R08: 000000002a805e26 R09: 0000000000000000 [ 80.200776][ T4602] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 80.208740][ T4602] R13: 00007fde2c080038 R14: 00007fde2c07ffa0 R15: 00007ffd117b0698 [ 80.216719][ T4602] [ 80.587108][ T4619] loop3: detected capacity change from 0 to 4096 [ 80.735476][ T4619] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,,errors=continue. Quota mode: writeback. [ 80.828701][ T4619] process 'syz.3.88' launched './file2' with NULL argv: empty string added [ 80.978320][ T4633] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 81.308314][ T4642] loop0: detected capacity change from 0 to 164 [ 81.503572][ T1107] cfg80211: failed to load regulatory.db [ 81.565870][ T4652] loop4: detected capacity change from 0 to 164 [ 81.683030][ T26] kauditd_printk_skb: 43 callbacks suppressed [ 81.683045][ T26] audit: type=1326 audit(1791119679.267:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4657 comm="syz.0.100" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2bdf8159 code=0x7ffc0000 [ 81.730939][ T26] audit: type=1326 audit(1791119679.307:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4657 comm="syz.0.100" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2bdf8159 code=0x7ffc0000 [ 81.757202][ T26] audit: type=1326 audit(1791119679.307:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4657 comm="syz.0.100" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2bdf8159 code=0x7ffc0000 [ 81.786942][ T26] audit: type=1326 audit(1791119679.307:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4657 comm="syz.0.100" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fde2bdf8159 code=0x7ffc0000 [ 81.872180][ T26] audit: type=1326 audit(1791119679.307:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4657 comm="syz.0.100" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2bdf8159 code=0x7ffc0000 [ 81.975231][ T26] audit: type=1326 audit(1791119679.317:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4657 comm="syz.0.100" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2bdf8159 code=0x7ffc0000 [ 82.056219][ T4670] netlink: 64 bytes leftover after parsing attributes in process `syz.1.107'. [ 82.128040][ T4668] netlink: 16 bytes leftover after parsing attributes in process `syz.1.107'. [ 82.147095][ T26] audit: type=1326 audit(1791119679.317:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4657 comm="syz.0.100" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2bdf8159 code=0x7ffc0000 [ 82.152179][ T4666] loop0: detected capacity change from 0 to 1024 [ 82.183425][ T4673] netlink: 'syz.2.109': attribute type 12 has an invalid length. [ 82.197998][ T4673] netlink: 'syz.2.109': attribute type 29 has an invalid length. [ 82.237843][ T4673] netlink: 'syz.2.109': attribute type 7 has an invalid length. [ 82.254899][ T4673] netlink: 104 bytes leftover after parsing attributes in process `syz.2.109'. [ 82.265925][ T26] audit: type=1326 audit(1791119679.317:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4657 comm="syz.0.100" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2bdf8159 code=0x7ffc0000 [ 82.298686][ T26] audit: type=1326 audit(1791119679.347:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4657 comm="syz.0.100" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fde2bdf8159 code=0x7ffc0000 [ 82.324229][ T4680] netlink: 'syz.3.110': attribute type 4 has an invalid length. [ 82.332527][ T26] audit: type=1326 audit(1791119679.347:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4657 comm="syz.0.100" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2bdf8159 code=0x7ffc0000 [ 82.472425][ T4666] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 82.534886][ T4686] netlink: 'syz.4.114': attribute type 1 has an invalid length. [ 82.581045][ T4666] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000010,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 82.603074][ T4689] loop2: detected capacity change from 0 to 8192 [ 82.673700][ T4689] loop2: p1 < > p4 [ 82.734460][ T4689] loop2: p4 size 851969 extends beyond EOD, truncated [ 82.765810][ T4699] netlink: 216 bytes leftover after parsing attributes in process `syz.4.120'. [ 82.933854][ T4702] loop3: detected capacity change from 0 to 2048 [ 83.041245][ T4179] loop3: p1 < > p4 [ 83.055748][ T4179] loop3: p4 size 8388608 extends beyond EOD, truncated [ 83.079244][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 83.088811][ T4181] udevd[4181]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 83.156181][ T4702] loop3: p1 < > p4 [ 83.199515][ T4702] loop3: p4 size 8388608 extends beyond EOD, truncated [ 83.289532][ T4714] loop0: detected capacity change from 0 to 1024 [ 83.355004][ T4714] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 83.367009][ T4718] netlink: 20 bytes leftover after parsing attributes in process `syz.2.129'. [ 83.385253][ T4181] udevd[4181]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 83.385359][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 83.497698][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 83.515932][ T4181] udevd[4181]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 83.534848][ T4727] loop4: detected capacity change from 0 to 512 [ 83.564926][ T4714] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,block_validity,dioread_nolock,resgid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,lazytime,barrier,stripe=0x000000000000000e,journal_ioprio=0x0000000000000003,init_itable,,errors=continue. Quota mode: none. [ 83.630804][ T4734] loop1: detected capacity change from 0 to 512 [ 83.657850][ T4714] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.125: bg 0: block 345: padding at end of block bitmap is not set [ 83.720503][ T4727] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 83.765823][ T4727] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.784464][ T4734] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 83.799021][ T4734] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.832077][ T4746] loop3: detected capacity change from 0 to 128 [ 83.952174][ T4734] EXT4-fs error (device loop1): ext4_validate_inode_bitmap:106: comm syz.1.133: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 84.761115][ T4765] xt_hashlimit: size too large, truncated to 1048576 [ 85.175116][ T4785] netlink: 16 bytes leftover after parsing attributes in process `syz.2.146'. [ 85.374768][ T4797] loop2: detected capacity change from 0 to 512 [ 85.408351][ T4799] loop3: detected capacity change from 0 to 512 [ 86.312020][ T4838] loop0: detected capacity change from 0 to 512 [ 86.555282][ T4797] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 86.619754][ T4838] EXT4-fs (loop0): Ignoring removed nobh option [ 86.715920][ T4838] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 86.727014][ T4797] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.150: corrupted in-inode xattr [ 86.744760][ T4838] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.152: attempt to clear invalid blocks 1 len 1 [ 86.763383][ T4838] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 86.781243][ T4838] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.152: invalid indirect mapped block 1819239214 (level 0) [ 86.785398][ T4799] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 86.827801][ T4797] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.150: couldn't read orphan inode 15 (err -117) [ 86.839815][ T4799] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.880699][ T4797] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,nodioread_nolock,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 86.906043][ T4838] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.152: invalid indirect mapped block 1819239214 (level 1) [ 86.963338][ T4838] EXT4-fs (loop0): 1 truncate cleaned up [ 86.977719][ T4838] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 87.098414][ T4838] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.0.152: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 87.443928][ T4890] loop3: detected capacity change from 0 to 1024 [ 87.511336][ T4890] EXT4-fs (loop3): Ignoring removed orlov option [ 87.588004][ T4890] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,init_itable=0x000000000000726e,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,resuid=0x0000000000000000,. Quota mode: none. [ 87.667905][ T4897] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 88.246988][ T4910] autofs4:pid:4910:autofs_fill_super: called with bogus options [ 88.833021][ T4923] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 88.845688][ T4925] set_capacity_and_notify: 1 callbacks suppressed [ 88.845702][ T4925] loop0: detected capacity change from 0 to 512 [ 88.900041][ T4923] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.940959][ T4923] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.656403][ T4946] loop0: detected capacity change from 0 to 1024 [ 89.710997][ T4946] EXT4-fs (loop0): Ignoring removed orlov option [ 89.721032][ T4949] netlink: 104 bytes leftover after parsing attributes in process `syz.2.183'. [ 89.793353][ T4946] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 89.849986][ T4959] loop2: detected capacity change from 0 to 164 [ 90.839148][ T4957] sched: RT throttling activated [ 90.892839][ T4964] rock: directory entry would overflow storage [ 90.899338][ T4964] rock: sig=0x4f50, size=4, remaining=3 [ 90.905593][ T4964] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 90.922979][ T4963] netlink: 'syz.2.186': attribute type 16 has an invalid length. [ 90.930773][ T4963] netlink: 'syz.2.186': attribute type 17 has an invalid length. [ 90.941960][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 90.999421][ T4963] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 91.212095][ T4968] loop3: detected capacity change from 0 to 512 [ 91.390464][ T4968] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 91.437939][ T4968] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.487780][ T4978] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 91.899904][ T4999] loop2: detected capacity change from 0 to 128 [ 91.947218][ T26] kauditd_printk_skb: 138 callbacks suppressed [ 91.947232][ T26] audit: type=1800 audit(1791119689.527:205): pid=4999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.203" name="vfat" dev="sda1" ino=2047 res=0 errno=0 [ 92.001417][ T4592] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.145266][ T4592] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.163640][ T5012] device batadv_slave_0 entered promiscuous mode [ 92.228955][ T4592] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.333454][ T4592] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.363076][ T5024] loop3: detected capacity change from 0 to 1024 [ 92.384712][ T5027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.216'. [ 92.398518][ T5027] netlink: 28 bytes leftover after parsing attributes in process `syz.1.216'. [ 92.430988][ T5024] EXT4-fs (loop3): Ignoring removed bh option [ 92.493629][ T5024] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #2: comm syz.3.215: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 5(4), depth 0(0) [ 92.582400][ T5032] loop1: detected capacity change from 0 to 512 [ 92.613473][ T5024] EXT4-fs (loop3): Remounting filesystem read-only [ 92.637783][ T5024] EXT4-fs (loop3): get root inode failed [ 92.667618][ T5024] EXT4-fs (loop3): mount failed [ 92.756791][ T5032] loop1: detected capacity change from 0 to 1024 [ 92.801822][ T5032] EXT4-fs (loop1): inline encryption not supported [ 92.814585][ T5032] EXT4-fs (loop1): inline encryption not supported [ 92.875296][ T5032] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 92.912098][ T5032] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 92.924727][ T5009] device batadv_slave_0 left promiscuous mode [ 92.937261][ T5040] loop3: detected capacity change from 0 to 512 [ 93.022839][ T5032] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,auto_da_alloc,noblock_validity,inlinecrypt,inlinecrypt,delalloc,nomblk_io_submit,errors=remount-ro,dioread_nolock,. Quota mode: none. [ 93.060428][ T5040] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 93.099904][ T5040] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.110629][ T5032] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.301580][ T26] audit: type=1800 audit(1791119690.887:206): pid=5040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.218" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 93.547219][ T5070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.224'. [ 93.656782][ T5078] loop2: detected capacity change from 0 to 256 [ 93.767081][ T5025] chnl_net:caif_netlink_parms(): no params data found [ 94.104357][ T5101] netlink: 'syz.2.234': attribute type 1 has an invalid length. [ 94.160708][ T5025] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.168352][ T5025] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.176319][ T5025] device bridge_slave_0 entered promiscuous mode [ 94.212001][ T4592] device hsr_slave_0 left promiscuous mode [ 94.226980][ T4592] device hsr_slave_1 left promiscuous mode [ 94.252621][ T4592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.265074][ T4592] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.277480][ T4592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.289241][ T4592] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.312967][ T4592] device bridge_slave_1 left promiscuous mode [ 94.324268][ T4592] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.353971][ T4592] device bridge_slave_0 left promiscuous mode [ 94.364894][ T4592] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.415961][ T4592] device veth1_macvtap left promiscuous mode [ 94.444535][ T4592] device veth0_macvtap left promiscuous mode [ 94.452963][ T4592] device veth1_vlan left promiscuous mode [ 94.467604][ T4592] device veth0_vlan left promiscuous mode [ 94.964141][ T4592] team0 (unregistering): Port device team_slave_1 removed [ 94.995230][ T4592] team0 (unregistering): Port device team_slave_0 removed [ 95.017342][ T4592] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.044083][ T4592] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.179963][ T4592] bond0 (unregistering): Released all slaves [ 95.214817][ T5025] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.224542][ T5025] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.233406][ T5025] device bridge_slave_1 entered promiscuous mode [ 95.246476][ T5101] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 95.256810][ T5101] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 95.261377][ T4230] Bluetooth: hci2: command 0x0409 tx timeout [ 95.265955][ T5101] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 95.280658][ T5101] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 95.297338][ T5101] bond1: (slave geneve2): making interface the new active one [ 95.313123][ T5101] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 95.422442][ T5025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.488547][ T5025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.594644][ T5025] team0: Port device team_slave_0 added [ 95.596615][ T5025] team0: Port device team_slave_1 added [ 95.668676][ T5025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.675656][ T5025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.720978][ T5025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.761043][ T5025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.808105][ T5025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.854832][ T5025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.032302][ T5182] autofs4:pid:5182:autofs_fill_super: called with bogus options [ 96.692521][ T5025] device hsr_slave_0 entered promiscuous mode [ 96.695367][ T5197] loop1: detected capacity change from 0 to 512 [ 96.714423][ T5025] device hsr_slave_1 entered promiscuous mode [ 96.735515][ T5025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.753876][ T5025] Cannot create hsr debugfs directory [ 96.788910][ T5197] EXT4-fs (loop1): invalid journal inode [ 96.808346][ T5197] EXT4-fs (loop1): can't get journal size [ 96.844456][ T5197] EXT4-fs (loop1): 1 truncate cleaned up [ 96.899791][ T5211] loop4: detected capacity change from 0 to 1024 [ 96.960577][ T5197] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 97.027558][ T5211] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 97.119254][ T5211] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,inode_readahead_blks=0x0000000000000001,bsdgroups,noblock_validity,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,delalloc,init_itable=0xffffff. Quota mode: none. [ 97.337912][ T1107] Bluetooth: hci2: command 0x041b tx timeout [ 97.531812][ T4381] wacom 0003:056A:003F.0001: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 97.546758][ T5025] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 97.555028][ T5244] loop3: detected capacity change from 0 to 512 [ 97.607881][ T5025] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 97.634825][ T5244] EXT4-fs (loop3): 1 truncate cleaned up [ 97.707622][ T5244] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,data_err=ignore,nouid32,errors=remount-ro,jqfmt=vfsv1,noauto_da_alloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 97.749598][ T5025] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 97.797447][ T5025] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 97.864126][ T5245] fido_id[5245]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 98.184167][ T5025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.257080][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.276375][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.298561][ T5025] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.358224][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.387322][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.425936][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.433075][ T4264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.982937][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.114635][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.149820][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.220959][ T4760] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.228138][ T4760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.286849][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.315565][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.332056][ T5274] ------------[ cut here ]------------ [ 99.339610][ T5274] failed to allocate ring buffer on CPU 1 [ 99.363616][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.375186][ T5274] WARNING: CPU: 1 PID: 5274 at kernel/trace/ring_buffer.c:5818 trace_rb_cpu_prepare+0x2a6/0x2f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 99.407177][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.418192][ T1107] Bluetooth: hci2: command 0x040f tx timeout [ 99.426542][ T5274] Modules linked in: [ 99.433504][ T5290] loop1: detected capacity change from 0 to 128 [ 99.475999][ T5274] CPU: 1 PID: 5274 Comm: syz.3.293 Not tainted syzkaller #0 [ 99.485462][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.517685][ T5274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 99.619082][ T5290] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 99.638791][ T5274] RIP: 0010:trace_rb_cpu_prepare+0x2a6/0x2f0 [ 99.644836][ T5274] Code: 48 0f ab 08 31 c0 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 1a 1e fd ff 48 c7 c7 00 30 2f 8a 8b 74 24 04 e8 7a 24 3b 08 <0f> 0b b8 f4 ff ff ff eb d3 e8 fc 1d fd ff 0f 0b e9 83 fd ff ff e8 [ 99.696302][ T5290] EXT4-fs: failed to create workqueue [ 99.704361][ T5290] EXT4-fs (loop1): mount failed [ 99.730856][ T5274] RSP: 0018:ffffc9000317fac0 EFLAGS: 00010246 [ 99.736973][ T5274] RAX: 47741888d55af200 RBX: ffff88805e79f810 RCX: 0000000000080000 [ 99.812141][ T5274] RDX: ffffc9000d2a1000 RSI: 000000000001e3cc RDI: 000000000001e3cd [ 99.868538][ T5274] RBP: ffff88805ed26878 R08: ffff8880b9133d7f R09: 1ffff110172267af [ 99.876561][ T5274] R10: dffffc0000000000 R11: ffffed10172267b0 R12: 0000000000000000 [ 99.947646][ T5274] R13: ffff888148737d88 R14: ffff888148737d88 R15: ffff88805e79f8b0 [ 99.956924][ T5274] FS: 00007fa136ead6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 99.992164][ T5274] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.044299][ T5274] CR2: 0000563381cb7660 CR3: 00000000256e1000 CR4: 00000000003506e0 [ 100.094368][ T5274] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 100.102653][ T5274] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 100.138423][ T5274] Call Trace: [ 100.141753][ T5274] [ 100.144700][ T5274] ? rb_get_reader_page+0xcd0/0xcd0 [ 100.155750][ T5274] cpuhp_invoke_callback+0x481/0x7e0 [ 100.161228][ T5274] ? mutex_lock_io_nested+0x60/0x60 [ 100.166677][ T5274] ? rb_get_reader_page+0xcd0/0xcd0 [ 100.207754][ T5274] cpuhp_issue_call+0x3d3/0x760 [ 100.227124][ T5274] __cpuhp_state_add_instance_cpuslocked+0x24b/0x6c0 [ 100.269646][ T5274] ? cpus_read_lock+0xcb/0x150 [ 100.283009][ T5274] __cpuhp_state_add_instance+0x21/0x30 [ 100.295687][ T5274] __ring_buffer_alloc+0x2d2/0x540 [ 100.317171][ T5274] allocate_trace_buffers+0x70/0x2c0 [ 100.324514][ T5274] ? __raw_spin_lock_init+0x41/0x100 [ 100.335430][ T5274] trace_array_create+0x2ac/0xc00 [ 100.342431][ T5274] instance_mkdir+0xc8/0x120 [ 100.347065][ T5274] tracefs_syscall_mkdir+0xb7/0x110 [ 100.360047][ T5274] vfs_mkdir+0x386/0x570 [ 100.364353][ T5274] do_mkdirat+0x1dd/0x5c0 [ 100.380496][ T5274] ? vfs_mkdir+0x570/0x570 [ 100.384976][ T5274] __x64_sys_mkdirat+0x85/0x90 [ 100.392037][ T5274] do_syscall_64+0x4c/0xa0 [ 100.396556][ T5274] ? clear_bhb_loop+0x30/0x80 [ 100.422685][ T5274] ? clear_bhb_loop+0x30/0x80 [ 100.429152][ T5274] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 100.435129][ T5274] RIP: 0033:0x7fa138c55159 [ 100.454712][ T5274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.509605][ T5274] RSP: 002b:00007fa136ead028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 100.534021][ T5274] RAX: ffffffffffffffda RBX: 00007fa138edcfa0 RCX: 00007fa138c55159 [ 100.542547][ T5274] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c [ 100.559692][ T5274] RBP: 00007fa138cec06b R08: 0000000000000000 R09: 0000000000000000 [ 100.573015][ T5274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.582470][ T5274] R13: 00007fa138edd038 R14: 00007fa138edcfa0 R15: 00007ffc1b1ac378 [ 100.599029][ T5274] [ 100.602130][ T5274] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 100.609765][ T5274] CPU: 1 PID: 5274 Comm: syz.3.293 Not tainted syzkaller #0 [ 100.617063][ T5274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 100.627129][ T5274] Call Trace: [ 100.630409][ T5274] [ 100.633346][ T5274] dump_stack_lvl+0x188/0x250 [ 100.638034][ T5274] ? show_regs_print_info+0x20/0x20 [ 100.643245][ T5274] ? load_image+0x410/0x410 [ 100.647775][ T5274] panic+0x2f8/0x850 [ 100.651688][ T5274] ? bpf_jit_dump+0xd0/0xd0 [ 100.656213][ T5274] ? trace_rb_cpu_prepare+0x2a6/0x2f0 [ 100.661610][ T5274] __warn+0x248/0x2b0 [ 100.665605][ T5274] ? trace_rb_cpu_prepare+0x2a6/0x2f0 [ 100.670974][ T5274] report_bug+0x1b9/0x2e0 [ 100.675310][ T5274] handle_bug+0x3a/0x70 [ 100.679455][ T5274] exc_invalid_op+0x16/0x40 [ 100.683942][ T5274] asm_exc_invalid_op+0x16/0x20 [ 100.688779][ T5274] RIP: 0010:trace_rb_cpu_prepare+0x2a6/0x2f0 [ 100.694747][ T5274] Code: 48 0f ab 08 31 c0 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 1a 1e fd ff 48 c7 c7 00 30 2f 8a 8b 74 24 04 e8 7a 24 3b 08 <0f> 0b b8 f4 ff ff ff eb d3 e8 fc 1d fd ff 0f 0b e9 83 fd ff ff e8 [ 100.714338][ T5274] RSP: 0018:ffffc9000317fac0 EFLAGS: 00010246 [ 100.720395][ T5274] RAX: 47741888d55af200 RBX: ffff88805e79f810 RCX: 0000000000080000 [ 100.728356][ T5274] RDX: ffffc9000d2a1000 RSI: 000000000001e3cc RDI: 000000000001e3cd [ 100.736314][ T5274] RBP: ffff88805ed26878 R08: ffff8880b9133d7f R09: 1ffff110172267af [ 100.744274][ T5274] R10: dffffc0000000000 R11: ffffed10172267b0 R12: 0000000000000000 [ 100.752240][ T5274] R13: ffff888148737d88 R14: ffff888148737d88 R15: ffff88805e79f8b0 [ 100.760225][ T5274] ? rb_get_reader_page+0xcd0/0xcd0 [ 100.765426][ T5274] cpuhp_invoke_callback+0x481/0x7e0 [ 100.770708][ T5274] ? mutex_lock_io_nested+0x60/0x60 [ 100.775906][ T5274] ? rb_get_reader_page+0xcd0/0xcd0 [ 100.781108][ T5274] cpuhp_issue_call+0x3d3/0x760 [ 100.786111][ T5274] __cpuhp_state_add_instance_cpuslocked+0x24b/0x6c0 [ 100.792775][ T5274] ? cpus_read_lock+0xcb/0x150 [ 100.797527][ T5274] __cpuhp_state_add_instance+0x21/0x30 [ 100.803063][ T5274] __ring_buffer_alloc+0x2d2/0x540 [ 100.808163][ T5274] allocate_trace_buffers+0x70/0x2c0 [ 100.813467][ T5274] ? __raw_spin_lock_init+0x41/0x100 [ 100.818742][ T5274] trace_array_create+0x2ac/0xc00 [ 100.823771][ T5274] instance_mkdir+0xc8/0x120 [ 100.828347][ T5274] tracefs_syscall_mkdir+0xb7/0x110 [ 100.833545][ T5274] vfs_mkdir+0x386/0x570 [ 100.837782][ T5274] do_mkdirat+0x1dd/0x5c0 [ 100.842122][ T5274] ? vfs_mkdir+0x570/0x570 [ 100.846529][ T5274] __x64_sys_mkdirat+0x85/0x90 [ 100.851287][ T5274] do_syscall_64+0x4c/0xa0 [ 100.855691][ T5274] ? clear_bhb_loop+0x30/0x80 [ 100.860354][ T5274] ? clear_bhb_loop+0x30/0x80 [ 100.865112][ T5274] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 100.870991][ T5274] RIP: 0033:0x7fa138c55159 [ 100.875402][ T5274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.894994][ T5274] RSP: 002b:00007fa136ead028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 100.903399][ T5274] RAX: ffffffffffffffda RBX: 00007fa138edcfa0 RCX: 00007fa138c55159 [ 100.911364][ T5274] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c [ 100.919342][ T5274] RBP: 00007fa138cec06b R08: 0000000000000000 R09: 0000000000000000 [ 100.927324][ T5274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.935284][ T5274] R13: 00007fa138edd038 R14: 00007fa138edcfa0 R15: 00007ffc1b1ac378 [ 100.943258][ T5274] [ 100.946361][ T5274] Kernel Offset: disabled [ 100.950858][ T5274] Rebooting in 86400 seconds..