last executing test programs: 1m5.053454527s ago: executing program 4 (id=238): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x49811, 0x49841}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x40}}, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x0, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @local}, 0x14) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r6 = epoll_create1(0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x2, 0x3000000}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001200)={0x10, 0x1405, 0x1, 0x70bd27, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYRESDEC=r2], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r10, 0xfffff000, 0x8b, 0x0, &(0x7f0000000240)="66aee6712bc884fed57fa5cf0088b664b9b574485a595e9603ed8108bb051945d74293cfd0cf9ac14c42754acb04f8707fa05da698afaf9bd395686733734fd3104f673783ad170b9da717f2e6e412256ef3607a4c005473ffe7e75511868963209b0412d2c5cf98c60789e2965a283f26d705df4e042357df2b69dbdd8f2d8c0e15d7db95724a346a3191", 0x0, 0x7fff, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) r11 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r11, 0xc0045005, &(0x7f0000000140)=0xe) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m4.702803434s ago: executing program 4 (id=243): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0800}]}) r1 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) listen(r2, 0x5) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m4.509719373s ago: executing program 4 (id=245): pipe2(&(0x7f00000000c0), 0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/bus/input/handlers\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) pipe2(&(0x7f0000000080), 0x800) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0) userfaultfd(0x1) socket$packet(0x11, 0x2, 0x300) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 1m4.286900374s ago: executing program 4 (id=249): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x40000, 0x0) 1m4.075038464s ago: executing program 4 (id=250): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2c, r0, 0x1, 0x4, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa8}]}, 0x2c}}, 0x0) 1m1.730857614s ago: executing program 4 (id=261): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0x1, 0x0, 0x1, 0x3, 0x4}, [@TCA_NETEM_RATE={0x14, 0xe, {0x200000, 0x13}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m1.079284845s ago: executing program 32 (id=261): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0x1, 0x0, 0x1, 0x3, 0x4}, [@TCA_NETEM_RATE={0x14, 0xe, {0x200000, 0x13}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) 4.954889456s ago: executing program 2 (id=558): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, 0xffffffffffffffff, 0x2000000}, 0xc) 4.581627404s ago: executing program 2 (id=562): bpf$MAP_CREATE(0x0, 0x0, 0x50) vmsplice(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$inet6(r0, &(0x7f0000002bc0)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x30}, 0x1c, &(0x7f0000001700)=[{&(0x7f0000000140)="b5", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e20, 0xffffffff, @local, 0x4}, 0x1c, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x2, 0x20044040) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e20590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000180)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x8000, 0x3a, 'exp4\x00', 0x3a, 'syz3', 0x3a, './mnt/trace_marker'}, 0xffffff34) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) 4.483254659s ago: executing program 1 (id=563): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/229, 0x8ec1}], 0x1}, 0x2002) 4.353393965s ago: executing program 1 (id=564): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000e900000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b0000009500000000000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x88) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.212369961s ago: executing program 1 (id=566): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.007020321s ago: executing program 1 (id=568): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x4004, 0x1, 'queue0\x00', 0x4}) 3.531478384s ago: executing program 5 (id=570): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000080000000c"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9e}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) 3.353396972s ago: executing program 5 (id=572): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)="78c398fc0afe291364fe8bb7f5baa5fd38e8b469c0c3148a2bf0ef19f62b4a6ebf5e862a1eb2ad7a428bf5bc24e99ac621cc7d8f2b6040baab9b53a90e0f83a4508be66406edd2466f343d9cd256560c491b90b321537cfa23668e778d9e57242cfc448dea374824bbd7b17f8bd9ffa057187c3c3e1b4bfe8e22", 0x0, 0x1, 0xffffffffffffffff, 0x4}, 0x38) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81e69711"], 0xfdef) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xffbf) 3.284553576s ago: executing program 0 (id=573): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="76ea090000000000009ba56a8864", 0x0, 0xff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xe) 2.793051189s ago: executing program 3 (id=578): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81e6971100fe08000e40000200875a65969ff57b00ff0200"], 0xfdef) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xffbf) 2.687419024s ago: executing program 5 (id=579): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000080000850000002200000085000000a000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x700}, 0x2c) 2.579122839s ago: executing program 0 (id=580): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xb, 0x11, 0x200cc, 0xa, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)='P', &(0x7f0000000740), 0x4af, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000800)=""/231, &(0x7f00000006c0), &(0x7f0000000740), 0x2, r0}, 0x38) 2.487538173s ago: executing program 5 (id=581): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) sendto$inet6(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shutdown(0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}}, 0x2) 2.385180038s ago: executing program 0 (id=582): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1, 0x3, 0x8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r5, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) 2.215073566s ago: executing program 3 (id=583): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200200, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) 2.107310971s ago: executing program 0 (id=584): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x8, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0x8, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x1008}, @generic={0xbf, 0x4, 0xa}, @generic={0x7, 0x4, 0x0, 0x0, 0xfffffff8}, @generic={0xb7, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.950479728s ago: executing program 0 (id=585): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0x15, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000014000000000000000000030018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000008807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100e300850000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000850a00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) 1.193204974s ago: executing program 5 (id=586): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 1.112344488s ago: executing program 3 (id=587): bpf$MAP_CREATE(0x0, &(0x7f0000002700)=ANY=[@ANYBLOB="1300"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20) 1.111510248s ago: executing program 1 (id=588): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f0080047e0ffff00124000633a77fbac141416e000030b94029f03", 0x0, 0x6b, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xfffffffffffffdab, &(0x7f0000000100)="b9ff03316844268cb89e14f008004c6ce6b18987f7c57ee005000000000002", 0x0, 0xfffffffd, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.031128932s ago: executing program 0 (id=589): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="007a707573657420006370750806"], 0x12) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xe) 1.003034553s ago: executing program 5 (id=590): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x208200, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) close(0x3) 992.890354ms ago: executing program 3 (id=591): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 859.21185ms ago: executing program 2 (id=592): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0xe}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 779.101254ms ago: executing program 3 (id=593): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 734.659106ms ago: executing program 3 (id=594): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1, 0x3, 0x8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r5, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) 680.801959ms ago: executing program 2 (id=595): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0xcc, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x4, 0x0, 0x2, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0xfffffffe, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 90.970706ms ago: executing program 1 (id=596): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) sendto$inet6(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shutdown(0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}}, 0x2) 72.972247ms ago: executing program 2 (id=597): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x20) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000180)={0x2, 0x4e22, @empty}, 0x10) 0s ago: executing program 2 (id=598): socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x300884c, &(0x7f00000005c0), 0x1, 0x515, &(0x7f0000000b40)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket(0x1e, 0x805, 0x0) connect$tipc(r3, &(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x1, 0x3}, 0x3}}, 0x10) connect$tipc(r3, &(0x7f0000000600)=@name={0x1e, 0x2, 0x2, {{0x1, 0xa}, 0x4}}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x200000, &(0x7f0000000540)={[{@dioread_nolock}, {@resuid}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@noblock_validity}]}, 0x3, 0x480, &(0x7f0000000a40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000780)={r6, 0x0, 0x4, 0x0, 0x2, [], [0x0, 0x0, 0x400, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x7]}) kernel console output (not intermixed with test programs): 63][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.002339][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.013929][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.024717][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.034490][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.044975][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.054344][ T720] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.061748][ T720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.071440][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.095486][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.103000][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.112487][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.146720][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.155830][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.165068][ T4211] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.172376][ T4211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.182960][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.191243][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.209649][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.228934][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.236821][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.245939][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.278316][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.290686][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.301039][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.310661][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.320633][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.333400][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.342479][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.354216][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.365835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.375148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.396066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.412329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.424063][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.431698][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.475072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.484782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.495648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.504722][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.513493][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.524767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.534316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.544569][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.552403][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.562445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.574151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.584017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.593110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.602121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.611100][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.618227][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.626242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.646846][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.660574][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.670165][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.681887][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.693123][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.705351][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.715781][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.726135][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.735902][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.763995][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.781169][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.792688][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.800947][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.809826][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.818893][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.828559][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.843302][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.857247][ T4228] Bluetooth: hci1: command 0x041b tx timeout [ 72.863948][ T4228] Bluetooth: hci0: command 0x041b tx timeout [ 72.876269][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.888794][ T4228] Bluetooth: hci2: command 0x041b tx timeout [ 72.895842][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.904648][ T4228] Bluetooth: hci3: command 0x041b tx timeout [ 72.911257][ T4228] Bluetooth: hci4: command 0x041b tx timeout [ 72.924452][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.938736][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.956474][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.965589][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.981180][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.990739][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.004643][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.017424][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.044691][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.077619][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.108428][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.160358][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.181358][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.229355][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.254438][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.282202][ T1311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.293693][ T1311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.349766][ T1311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.360653][ T1311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.370935][ T1311] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.378296][ T1311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.389068][ T1311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.399389][ T1311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.408849][ T1311] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.416314][ T1311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.425194][ T1311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.434874][ T1311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.443958][ T1311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.454173][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.519770][ T1311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.529814][ T1311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.540743][ T1311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.550379][ T1311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.558609][ T1311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.570373][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.581128][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.598137][ T4197] device veth0_vlan entered promiscuous mode [ 73.610881][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.622099][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.630555][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.639420][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.654334][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.663760][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.681187][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.695480][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.705044][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.715450][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.733537][ T4197] device veth1_vlan entered promiscuous mode [ 73.755799][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.764795][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.776813][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.785602][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.794651][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.803818][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.819000][ T4186] device veth0_vlan entered promiscuous mode [ 73.854680][ T1311] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.864831][ T1311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.874486][ T1311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.884001][ T1311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.892891][ T1311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.903569][ T1311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.913089][ T1311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.922347][ T1311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.931032][ T1311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.963814][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.975968][ T4186] device veth1_vlan entered promiscuous mode [ 73.989687][ T1311] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.999545][ T1311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.010142][ T1311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.020369][ T1311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.028619][ T1311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.048732][ T4193] device veth0_vlan entered promiscuous mode [ 74.061779][ T4196] device veth0_vlan entered promiscuous mode [ 74.081781][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.097694][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.113838][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.123271][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.133066][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.143064][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.151694][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.173243][ T4193] device veth1_vlan entered promiscuous mode [ 74.184588][ T4197] device veth0_macvtap entered promiscuous mode [ 74.230349][ T1311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.245077][ T1311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.265617][ T4186] device veth0_macvtap entered promiscuous mode [ 74.275716][ T4197] device veth1_macvtap entered promiscuous mode [ 74.292842][ T4196] device veth1_vlan entered promiscuous mode [ 74.304659][ T4186] device veth1_macvtap entered promiscuous mode [ 74.351259][ T1311] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.361208][ T1311] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.371140][ T1311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.378977][ T1311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.390399][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.400674][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.413083][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.424451][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.436279][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.446947][ T1311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.457677][ T1311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.468328][ T1311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.477974][ T1311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.495018][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.502916][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.515684][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.528395][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.547645][ T1311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.557907][ T1311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.568363][ T1311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.578671][ T1311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.597330][ T4197] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.607073][ T4197] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.616151][ T4197] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.625749][ T4197] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.648669][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.661893][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.672126][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.682563][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.694498][ T1311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.707309][ T1311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.718547][ T4193] device veth0_macvtap entered promiscuous mode [ 74.767338][ T1311] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.775511][ T1311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.785122][ T1311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.794472][ T1311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.806616][ T1311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.843633][ T4196] device veth0_macvtap entered promiscuous mode [ 74.857237][ T4193] device veth1_macvtap entered promiscuous mode [ 74.891410][ T4196] device veth1_macvtap entered promiscuous mode [ 74.901474][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.911512][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.920262][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.929304][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.938435][ T1111] Bluetooth: hci4: command 0x040f tx timeout [ 74.940239][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.944749][ T1111] Bluetooth: hci3: command 0x040f tx timeout [ 74.959047][ T1111] Bluetooth: hci2: command 0x040f tx timeout [ 74.959380][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.966693][ T1111] Bluetooth: hci0: command 0x040f tx timeout [ 74.979783][ T1111] Bluetooth: hci1: command 0x040f tx timeout [ 74.979998][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.999691][ T4185] device veth0_vlan entered promiscuous mode [ 75.065683][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.078819][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.090375][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.103994][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.121484][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.132258][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.145212][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.155353][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.166778][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.177268][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.189149][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.201017][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.225841][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.240283][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.250232][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.261601][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.273328][ T4185] device veth1_vlan entered promiscuous mode [ 75.282375][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.294732][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.304862][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.316471][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.327879][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.350562][ T1311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.359981][ T1311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.361253][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.377675][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.387980][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.397733][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.406756][ T720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.414983][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.428304][ T720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.439177][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.451595][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.462346][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.473550][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.486488][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.514722][ T4193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.524439][ T4193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.534992][ T4193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.545818][ T4193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.568898][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.578600][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.588117][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.600439][ T4196] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.609711][ T4196] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.619204][ T4196] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.628354][ T4196] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.696962][ T1311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.705505][ T1311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.730126][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.738954][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.751938][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.781929][ T4185] device veth0_macvtap entered promiscuous mode [ 75.813171][ T4185] device veth1_macvtap entered promiscuous mode [ 75.857744][ T720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.865629][ T720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.903699][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.925219][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.935146][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.969564][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.993244][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.004964][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.015793][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.027670][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.038557][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.048720][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.060861][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.073146][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.094247][ T720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.107582][ T720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.119977][ T720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.131679][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.139120][ T720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.148452][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.160842][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.172966][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.184001][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.195582][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.206404][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.217484][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.232345][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.240393][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.249834][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.260107][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.269588][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.278032][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.288073][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.296998][ T4270] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 76.321540][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.341220][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.369337][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.380271][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.554264][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.568630][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.577821][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.831182][ T720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.956961][ T720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.017544][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 77.031232][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 77.100878][ T1311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.138276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.224149][ T1311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.232442][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 77.263104][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 77.272739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.323001][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.332196][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.341697][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 77.348201][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.357044][ T4270] usb 5-1: Using ep0 maxpacket: 8 [ 77.431484][ T4279] device syzkaller0 entered promiscuous mode [ 77.537017][ T4270] usb 5-1: unable to get BOS descriptor or descriptor too short [ 77.898854][ T4289] udc-core: couldn't find an available UDC or it's busy [ 78.826963][ T4270] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 78.849186][ T4270] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.880486][ T4301] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.898600][ T4270] usb 5-1: Product: syz [ 78.902807][ T4270] usb 5-1: Manufacturer: syz [ 78.929536][ T4270] usb 5-1: SerialNumber: syz [ 79.048004][ T4270] usb 5-1: can't set config #1, error -71 [ 79.666532][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #108!!! [ 79.686535][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 79.706554][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 79.716538][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 79.746548][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 79.756535][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 79.846348][ T4270] usb 5-1: USB disconnect, device number 2 [ 80.782835][ T4319] tmpfs: Unknown parameter 'usrquota' [ 81.469067][ T4327] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 81.497194][ T4327] CIFS: Attempting to mount \\127.0.0.1\share [ 81.505639][ T4327] CIFS: VFS: No username specified [ 82.256569][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 82.276569][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 82.286546][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 82.296544][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 82.765773][ T4329] trusted_key: encrypted_key: key user:syz not found [ 85.638056][ T4348] udc-core: couldn't find an available UDC or it's busy [ 85.746690][ T23] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 86.087218][ T23] usb 1-1: not running at top speed; connect to a high speed hub [ 86.197118][ T23] usb 1-1: config index 0 descriptor too short (expected 161, got 153) [ 86.557094][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.598338][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 86.639917][ T23] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 86.679077][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.775330][ T23] gspca_main: spca501-2.14.0 probing 0000:0000 [ 87.036005][ T21] cfg80211: failed to load regulatory.db [ 87.436853][ T23] gspca_spca501: reg write: error -71 [ 87.456677][ T23] spca501 1-1:1.0: Reg write failed for 0x02,0xa048,0x00 [ 87.496730][ T23] spca501: probe of 1-1:1.0 failed with error -22 [ 87.564786][ T23] usb 1-1: USB disconnect, device number 2 [ 90.440206][ T4380] Zero length message leads to an empty skb [ 90.599447][ T4382] hub 8-0:1.0: USB hub found [ 90.607168][ T4382] hub 8-0:1.0: 1 port detected [ 91.336507][ C0] sched: RT throttling activated [ 92.128203][ T4386] trusted_key: encrypted_key: key user:syz not found [ 95.849678][ T4400] FAULT_INJECTION: forcing a failure. [ 95.849678][ T4400] name failslab, interval 1, probability 0, space 0, times 1 [ 95.877969][ T4400] CPU: 1 PID: 4400 Comm: syz.2.32 Not tainted syzkaller #0 [ 95.885215][ T4400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.895381][ T4400] Call Trace: [ 95.898681][ T4400] [ 95.902156][ T4400] dump_stack_lvl+0x188/0x250 [ 95.906869][ T4400] ? show_regs_print_info+0x20/0x20 [ 95.912264][ T4400] ? load_image+0x410/0x410 [ 95.916885][ T4400] ? __might_sleep+0xf0/0xf0 [ 95.921587][ T4400] ? __lock_acquire+0x7b50/0x7b50 [ 95.926726][ T4400] should_fail+0x383/0x4b0 [ 95.931171][ T4400] should_failslab+0x5/0x20 [ 95.937737][ T4400] slab_pre_alloc_hook+0x51/0xc0 [ 95.942901][ T4400] kmem_cache_alloc_node_trace+0x4a/0x2f0 [ 95.949000][ T4400] ? init_rescuer+0x91/0x290 [ 95.953806][ T4400] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 95.959148][ T4400] init_rescuer+0x91/0x290 [ 95.963607][ T4400] alloc_workqueue+0xfb8/0x1450 [ 95.968665][ T4400] ? vsnprintf+0x1b22/0x1c20 [ 95.973505][ T4400] ? snprintf+0xe5/0x140 [ 95.977951][ T4400] ? lockdep_init_map_type+0x98/0x900 [ 95.983543][ T4400] ? apply_workqueue_attrs+0x170/0x170 [ 95.989050][ T4400] ? memset+0x1e/0x40 [ 95.993092][ T4400] ? lockdep_init_map_type+0x98/0x900 [ 95.998971][ T4400] nci_register_device+0x3fc/0x9f0 [ 96.004244][ T4400] ? nci_free_device+0x90/0x90 [ 96.009230][ T4400] ? nci_hci_allocate+0x1dd/0x2a0 [ 96.014391][ T4400] ? nci_allocate_device+0x241/0x350 [ 96.019921][ T4400] virtual_ncidev_open+0x55/0xc0 [ 96.025105][ T4400] ? virtual_ncidev_ioctl+0x90/0x90 [ 96.030418][ T4400] misc_open+0x31f/0x390 [ 96.034880][ T4400] chrdev_open+0x585/0x5f0 [ 96.039603][ T4400] ? cd_forget+0x160/0x160 [ 96.044134][ T4400] ? fsnotify_perm+0x3a7/0x560 [ 96.049060][ T4400] ? cd_forget+0x160/0x160 [ 96.053528][ T4400] do_dentry_open+0x7f7/0xf90 [ 96.058252][ T4400] ? vfs_open+0x2b/0x80 [ 96.062441][ T4400] path_openat+0x2718/0x2fb0 [ 96.069834][ T4400] ? __kasan_slab_alloc+0xa9/0xc0 [ 96.075005][ T4400] ? do_filp_open+0x400/0x400 [ 96.080023][ T4400] do_filp_open+0x1df/0x400 [ 96.084964][ T4400] ? vfs_tmpfile+0x300/0x300 [ 96.089751][ T4400] ? _raw_spin_unlock+0x24/0x40 [ 96.094903][ T4400] ? alloc_fd+0x59e/0x650 [ 96.099379][ T4400] do_sys_openat2+0x14b/0x500 [ 96.104394][ T4400] ? __lock_acquire+0x7b50/0x7b50 [ 96.109814][ T4400] ? do_sys_open+0xe0/0xe0 [ 96.114737][ T4400] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 96.121847][ T4400] ? lock_chain_count+0x20/0x20 [ 96.127612][ T4400] __x64_sys_openat+0x135/0x160 [ 96.132699][ T4400] do_syscall_64+0x4c/0xa0 [ 96.137681][ T4400] ? clear_bhb_loop+0x30/0x80 [ 96.142431][ T4400] ? clear_bhb_loop+0x30/0x80 [ 96.147518][ T4400] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.153646][ T4400] RIP: 0033:0x7f5e53e43159 [ 96.158244][ T4400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.178551][ T4400] RSP: 002b:00007f5e5209b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 96.187154][ T4400] RAX: ffffffffffffffda RBX: 00007f5e540cafa0 RCX: 00007f5e53e43159 [ 96.195224][ T4400] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 96.203378][ T4400] RBP: 00007f5e53eda03b R08: 0000000000000000 R09: 0000000000000000 [ 96.211966][ T4400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.220268][ T4400] R13: 00007f5e540cb038 R14: 00007f5e540cafa0 R15: 00007fffc4d55cf8 [ 96.228469][ T4400] [ 96.294891][ T4403] udc-core: couldn't find an available UDC or it's busy [ 96.453051][ T4411] netlink: 232 bytes leftover after parsing attributes in process `syz.2.39'. [ 100.312309][ T4454] ======================================================= [ 100.312309][ T4454] WARNING: The mand mount option has been deprecated and [ 100.312309][ T4454] and is ignored by this kernel. Remove the mand [ 100.312309][ T4454] option from the mount to silence this warning. [ 100.312309][ T4454] ======================================================= [ 100.377241][ T4454] fuse: Invalid rootmode [ 101.806681][ T21] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 102.637042][ T21] usb 2-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 102.799956][ T21] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 102.829978][ T21] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 102.866226][ T21] usb 2-1: Manufacturer: syz [ 102.871915][ T4194] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 102.881882][ T4194] CPU: 1 PID: 4194 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 102.889455][ T4194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.899541][ T4194] Workqueue: hci2 hci_rx_work [ 102.904353][ T4194] Call Trace: [ 102.907677][ T4194] [ 102.910726][ T4194] dump_stack_lvl+0x188/0x250 [ 102.915517][ T4194] ? show_regs_print_info+0x20/0x20 [ 102.920845][ T4194] ? load_image+0x410/0x410 [ 102.925402][ T4194] sysfs_create_dir_ns+0x26a/0x290 [ 102.930602][ T4194] ? sysfs_warn_dup+0xa0/0xa0 [ 102.935398][ T4194] ? kthread+0x42e/0x520 [ 102.939675][ T4194] ? do_raw_spin_unlock+0x11d/0x230 [ 102.945004][ T4194] kobject_add_internal+0x5ba/0xcd0 [ 102.950285][ T4194] kobject_add+0x160/0x230 [ 102.954787][ T4194] ? kobject_init+0x1c0/0x1c0 [ 102.959786][ T4194] ? __raw_spin_lock_init+0x41/0x100 [ 102.962184][ T4563] tipc: Started in network mode [ 102.965220][ T4194] ? klist_children_get+0x50/0x50 [ 102.970287][ T4563] tipc: Node identity 4, cluster identity 4711 [ 102.975473][ T4194] ? get_device_parent+0x121/0x3e0 [ 102.975505][ T4194] device_add+0x470/0x1050 [ 102.975521][ T4194] ? device_initialize+0x2a5/0x4d0 [ 102.975542][ T4194] hci_conn_add_sysfs+0xd1/0x1e0 [ 102.975566][ T4194] le_conn_complete_evt+0xc2e/0x14d0 [ 102.981949][ T4563] tipc: Node number set to 4 [ 102.987189][ T4194] ? cs_le_create_conn+0x5e0/0x5e0 [ 102.987224][ T4194] ? __mutex_trylock_common+0x15c/0x260 [ 102.987252][ T4194] hci_le_meta_evt+0xd36/0x3ca0 [ 102.987279][ T4194] ? hci_event_packet+0x363/0x1310 [ 102.987305][ T4194] ? __lock_acquire+0x7b50/0x7b50 [ 102.987334][ T4194] ? hci_remote_host_features_evt+0x240/0x240 [ 102.987355][ T4194] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 102.987376][ T4194] ? mark_lock+0x94/0x320 [ 102.987391][ T4194] ? mutex_unlock+0x10/0x10 [ 103.058572][ T4194] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 103.064594][ T4194] ? lock_chain_count+0x20/0x20 [ 103.069487][ T4194] ? __rwlock_init+0x140/0x140 [ 103.074535][ T4194] hci_event_packet+0xe0b/0x1310 [ 103.079573][ T4194] ? _raw_spin_unlock+0x40/0x40 [ 103.084517][ T4194] ? rcu_lock_release+0x20/0x20 [ 103.089383][ T4194] ? hci_send_to_monitor+0x9c/0x4a0 [ 103.094675][ T4194] hci_rx_work+0x255/0xa10 [ 103.099404][ T4194] process_one_work+0x867/0xff0 [ 103.104651][ T4194] ? worker_detach_from_pool+0x240/0x240 [ 103.110300][ T4194] ? lockdep_hardirqs_off+0x70/0x100 [ 103.115727][ T4194] ? _raw_spin_lock_irq+0xb7/0xf0 [ 103.120753][ T4194] ? _raw_spin_lock_irqsave+0x100/0x100 [ 103.126324][ T4194] ? wq_worker_running+0x97/0x170 [ 103.131458][ T4194] worker_thread+0xad7/0x12a0 [ 103.136205][ T4194] kthread+0x42e/0x520 [ 103.140310][ T4194] ? rcu_lock_release+0x20/0x20 [ 103.145639][ T4194] ? kthread_blkcg+0xd0/0xd0 [ 103.150446][ T4194] ret_from_fork+0x1f/0x30 [ 103.154922][ T4194] [ 103.164179][ T4194] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 103.178041][ T4194] Bluetooth: hci2: failed to register connection device [ 103.186917][ T21] usb 2-1: SerialNumber: syz [ 103.481384][ T21] usb 2-1: USB disconnect, device number 2 [ 105.722186][ T4580] input: syz0 as /devices/virtual/input/input5 [ 110.450975][ T4659] device syzkaller0 entered promiscuous mode [ 111.477864][ T26] audit: type=1800 audit(1789334426.180:2): pid=4674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.95" name=08 dev="sda1" ino=2048 res=0 errno=0 [ 111.839560][ T4684] tmpfs: Unknown parameter 'usrquota' [ 112.815190][ T4689] netlink: 28 bytes leftover after parsing attributes in process `syz.3.100'. [ 115.219335][ T4720] device syzkaller0 entered promiscuous mode [ 115.955696][ T4736] o2cb: This node has not been configured. [ 115.986710][ T4736] o2cb: Cluster check failed. Fix errors before retrying. [ 116.004919][ T4736] (syz.1.116,4736,0):user_dlm_register:675 ERROR: status = -22 [ 116.043953][ T4736] (syz.1.116,4736,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file1" [ 117.775224][ T4760] device syzkaller0 entered promiscuous mode [ 118.870858][ T26] audit: type=1326 audit(1789334433.670:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4772 comm="syz.1.131" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fcde1159 code=0x7ffc0000 [ 118.988171][ T26] audit: type=1326 audit(1789334433.750:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4772 comm="syz.1.131" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f47fcde0deb code=0x7ffc0000 [ 119.865122][ T26] audit: type=1326 audit(1789334433.750:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4772 comm="syz.1.131" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f47fcde0deb code=0x7ffc0000 [ 119.916985][ T26] audit: type=1326 audit(1789334433.750:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4772 comm="syz.1.131" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f47fcde0deb code=0x7ffc0000 [ 120.032249][ T26] audit: type=1326 audit(1789334433.750:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4772 comm="syz.1.131" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f47fcde0deb code=0x7ffc0000 [ 120.216548][ T26] audit: type=1326 audit(1789334433.760:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4772 comm="syz.1.131" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f47fcde0deb code=0x7ffc0000 [ 120.343611][ T26] audit: type=1326 audit(1789334433.760:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4772 comm="syz.1.131" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f47fcde0deb code=0x7ffc0000 [ 120.470721][ T4799] device syzkaller0 entered promiscuous mode [ 120.555211][ T26] audit: type=1326 audit(1789334433.760:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4772 comm="syz.1.131" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f47fcde0deb code=0x7ffc0000 [ 120.610791][ T4802] netlink: 36 bytes leftover after parsing attributes in process `syz.1.141'. [ 120.637470][ T26] audit: type=1326 audit(1789334433.760:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4772 comm="syz.1.131" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f47fcde0deb code=0x7ffc0000 [ 120.756734][ T26] audit: type=1326 audit(1789334433.760:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4772 comm="syz.1.131" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f47fcde0deb code=0x7ffc0000 [ 122.769308][ T4842] device syzkaller0 entered promiscuous mode [ 123.348216][ T4857] block device autoloading is deprecated and will be removed. [ 123.390239][ T4865] tmpfs: Unknown parameter 'or_blxieºt‡¬' [ 123.563791][ T4870] netlink: 24 bytes leftover after parsing attributes in process `syz.1.165'. [ 123.645369][ T4869] capability: warning: `syz.1.165' uses deprecated v2 capabilities in a way that may be insecure [ 124.690191][ T4885] device syzkaller0 entered promiscuous mode [ 126.378449][ T4938] process 'syz.4.189' launched './file0' with NULL argv: empty string added [ 128.440927][ T4966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.197'. [ 128.499252][ T4966] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.507953][ T4966] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.535015][ T4972] syz.1.201 uses obsolete (PF_INET,SOCK_PACKET) [ 128.908155][ T4276] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 129.160194][ T4989] device syzkaller0 entered promiscuous mode [ 129.578826][ T4276] usb 4-1: Using ep0 maxpacket: 32 [ 129.732658][ T4276] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 129.814345][ T5002] bridge0: port 3(veth0) entered blocking state [ 129.833441][ T5002] bridge0: port 3(veth0) entered disabled state [ 129.857757][ T5002] device veth0 entered promiscuous mode [ 129.871842][ T5002] bridge0: port 3(veth0) entered blocking state [ 129.878525][ T5002] bridge0: port 3(veth0) entered forwarding state [ 129.936912][ T4276] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 129.954676][ T4276] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 129.975727][ T4276] usb 4-1: Product: syz [ 129.986631][ T4276] usb 4-1: Manufacturer: syz [ 129.997107][ T4276] usb 4-1: SerialNumber: syz [ 130.018368][ T4276] usb 4-1: config 0 descriptor?? [ 130.058526][ T4970] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 130.311964][ T4970] FAULT_INJECTION: forcing a failure. [ 130.311964][ T4970] name failslab, interval 1, probability 0, space 0, times 0 [ 130.326855][ T4970] CPU: 1 PID: 4970 Comm: syz.3.200 Not tainted syzkaller #0 [ 130.334503][ T4970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 130.345048][ T4970] Call Trace: [ 130.348336][ T4970] [ 130.351288][ T4970] dump_stack_lvl+0x188/0x250 [ 130.356150][ T4970] ? show_regs_print_info+0x20/0x20 [ 130.361370][ T4970] ? load_image+0x410/0x410 [ 130.365896][ T4970] ? __might_sleep+0xf0/0xf0 [ 130.370611][ T4970] ? __lock_acquire+0x7b50/0x7b50 [ 130.375746][ T4970] should_fail+0x383/0x4b0 [ 130.380219][ T4970] should_failslab+0x5/0x20 [ 130.384728][ T4970] slab_pre_alloc_hook+0x51/0xc0 [ 130.389855][ T4970] kmem_cache_alloc_trace+0x47/0x290 [ 130.395578][ T4970] ? apply_wqattrs_prepare+0xeb/0xad0 [ 130.401160][ T4970] apply_wqattrs_prepare+0xeb/0xad0 [ 130.406375][ T4970] ? mutex_lock_io_nested+0x60/0x60 [ 130.411609][ T4970] apply_workqueue_attrs+0xd0/0x170 [ 130.417370][ T4970] alloc_workqueue+0xf1e/0x1450 [ 130.422260][ T4970] ? vsnprintf+0x1b22/0x1c20 [ 130.427154][ T4970] ? snprintf+0xe5/0x140 [ 130.431606][ T4970] ? lockdep_init_map_type+0x98/0x900 [ 130.437146][ T4970] ? apply_workqueue_attrs+0x170/0x170 [ 130.443247][ T4970] ? memset+0x1e/0x40 [ 130.447564][ T4970] ? lockdep_init_map_type+0x98/0x900 [ 130.453789][ T4970] nci_register_device+0x3fc/0x9f0 [ 130.458939][ T4970] ? nci_free_device+0x90/0x90 [ 130.463738][ T4970] ? nci_hci_allocate+0x1dd/0x2a0 [ 130.468798][ T4970] ? nci_allocate_device+0x241/0x350 [ 130.474201][ T4970] virtual_ncidev_open+0x55/0xc0 [ 130.479328][ T4970] ? virtual_ncidev_ioctl+0x90/0x90 [ 130.484881][ T4970] misc_open+0x31f/0x390 [ 130.489304][ T4970] chrdev_open+0x585/0x5f0 [ 130.493815][ T4970] ? cd_forget+0x160/0x160 [ 130.498239][ T4970] ? fsnotify_perm+0x3a7/0x560 [ 130.503006][ T4970] ? cd_forget+0x160/0x160 [ 130.507600][ T4970] do_dentry_open+0x7f7/0xf90 [ 130.512281][ T4970] ? vfs_open+0x2b/0x80 [ 130.516710][ T4970] path_openat+0x2718/0x2fb0 [ 130.521590][ T4970] ? __kasan_slab_alloc+0xa9/0xc0 [ 130.526718][ T4970] ? do_filp_open+0x400/0x400 [ 130.531416][ T4970] do_filp_open+0x1df/0x400 [ 130.535937][ T4970] ? vfs_tmpfile+0x300/0x300 [ 130.540652][ T4970] ? _raw_spin_unlock+0x24/0x40 [ 130.545886][ T4970] ? alloc_fd+0x59e/0x650 [ 130.550351][ T4970] do_sys_openat2+0x14b/0x500 [ 130.555094][ T4970] ? __lock_acquire+0x7b50/0x7b50 [ 130.560454][ T4970] ? do_sys_open+0xe0/0xe0 [ 130.565078][ T4970] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 130.571442][ T4970] ? lock_chain_count+0x20/0x20 [ 130.576602][ T4970] __x64_sys_openat+0x135/0x160 [ 130.581474][ T4970] do_syscall_64+0x4c/0xa0 [ 130.585909][ T4970] ? clear_bhb_loop+0x30/0x80 [ 130.591220][ T4970] ? clear_bhb_loop+0x30/0x80 [ 130.596084][ T4970] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 130.602466][ T4970] RIP: 0033:0x7fda71e01159 [ 130.607085][ T4970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.627725][ T4970] RSP: 002b:00007fda70059028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 130.636435][ T4970] RAX: ffffffffffffffda RBX: 00007fda72088fa0 RCX: 00007fda71e01159 [ 130.644769][ T4970] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 130.653534][ T4970] RBP: 00007fda71e9803b R08: 0000000000000000 R09: 0000000000000000 [ 130.662063][ T4970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.670496][ T4970] R13: 00007fda72089038 R14: 00007fda72088fa0 R15: 00007ffcc1b9b638 [ 130.678959][ T4970] [ 130.682075][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.703311][ T4269] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 131.176591][ T4269] usb 1-1: Using ep0 maxpacket: 16 [ 131.206099][ T4276] usb 4-1: USB disconnect, device number 2 [ 131.307022][ T4269] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 131.342945][ T4269] usb 1-1: config 0 interface 0 has no altsetting 0 [ 131.523049][ T4269] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 131.603212][ T5039] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 131.603212][ T5039] [ 131.617804][ T5039] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 131.632381][ T5039] CIFS: Attempting to mount \\127.0.0.1\share [ 132.402938][ T4269] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.411749][ T4269] usb 1-1: Product: syz [ 132.416179][ T4269] usb 1-1: Manufacturer: syz [ 132.420908][ T4269] usb 1-1: SerialNumber: syz [ 132.430368][ T5039] CIFS: VFS: cifs_mount failed w/return code = -112 [ 132.439199][ T4269] usb 1-1: config 0 descriptor?? [ 132.623141][ T5048] i2c-slave-eeprom 0-1022: i2c_slave_register: not supported by adapter [ 132.660864][ T5048] i2c-slave-eeprom: probe of 0-1022 failed with error -95 [ 132.680194][ T5048] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x22 [ 132.723746][ T4269] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6 [ 132.724423][ T5052] tcpci: probe of 0-0002 failed with error -5 [ 132.876452][ T5052] i2c i2c-0: new_device: Instantiated device tcpci at 0x02 [ 133.000524][ T5047] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 133.100280][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.100797][ T4269] rc_core: IR keymap rc-imon-pad not found [ 133.108279][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.147056][ T5057] netlink: 'syz.1.227': attribute type 4 has an invalid length. [ 133.154934][ T4269] Registered IR keymap rc-empty [ 133.165115][ T4269] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 133.196034][ T4269] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 133.288121][ T4269] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 133.312435][ T4269] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8 [ 133.366751][ T4269] imon 1-1:0.0: iMON device (15c2:0041, intf0) on usb<1:3> initialized [ 133.485302][ T5065] device syzkaller0 entered promiscuous mode [ 133.520178][ T4269] usb 1-1: USB disconnect, device number 3 [ 133.536574][ C1] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 133.645307][ T4266] udevd[4266]: setting owner of /dev/input/mouse1 to uid=0, gid=104 failed: No such file or directory [ 134.077066][ T5086] capability: warning: `syz.3.239' uses 32-bit capabilities (legacy support in use) [ 134.183982][ T5088] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 134.660633][ T5102] device syzkaller0 entered promiscuous mode [ 136.316624][ T26] kauditd_printk_skb: 30 callbacks suppressed [ 136.316645][ T26] audit: type=1326 audit(1789334451.100:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5129 comm="syz.2.256" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e53e43159 code=0x7ffc0000 [ 137.132186][ T26] audit: type=1326 audit(1789334451.100:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5129 comm="syz.2.256" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e53e43159 code=0x7ffc0000 [ 137.202273][ T26] audit: type=1326 audit(1789334451.280:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5129 comm="syz.2.256" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f5e53e43159 code=0x7ffc0000 [ 137.269430][ T4186] syz-executor (4186) used greatest stack depth: 20032 bytes left [ 137.484219][ T26] audit: type=1326 audit(1789334451.280:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5129 comm="syz.2.256" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e53e43159 code=0x7ffc0000 [ 137.502372][ T4507] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.614494][ T4507] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.670533][ T26] audit: type=1326 audit(1789334451.280:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5129 comm="syz.2.256" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e53e43159 code=0x7ffc0000 [ 137.757981][ T4507] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.789144][ T26] audit: type=1326 audit(1789334451.400:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5129 comm="syz.2.256" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5e53e0398e code=0x7ffc0000 [ 137.902337][ T4507] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.945514][ T26] audit: type=1326 audit(1789334451.400:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5129 comm="syz.2.256" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e53e43159 code=0x7ffc0000 [ 138.034642][ T26] audit: type=1326 audit(1789334451.400:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5129 comm="syz.2.256" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e53e43159 code=0x7ffc0000 [ 138.055460][ T5146] device syzkaller0 entered promiscuous mode [ 138.128333][ T26] audit: type=1326 audit(1789334451.550:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5129 comm="syz.2.256" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5e53e43159 code=0x7ffc0000 [ 138.168155][ T5148] WARNING! power/level is deprecated; use power/control instead [ 138.260894][ T26] audit: type=1326 audit(1789334451.550:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5129 comm="syz.2.256" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e53e43159 code=0x7ffc0000 [ 138.435813][ T4507] tipc: Left network mode [ 138.636991][ T4269] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 139.006803][ T4269] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.040256][ T4269] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 139.083597][ T4269] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 139.143670][ T4269] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 139.171161][ T4269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.725567][ T5157] chnl_net:caif_netlink_parms(): no params data found [ 139.748382][ T5191] device syzkaller0 entered promiscuous mode [ 139.801437][ T4269] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 139.810517][ T4269] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 139.830912][ T4269] cxacru: probe of 2-1:1.0 failed with error -71 [ 139.862494][ T4269] usb 2-1: USB disconnect, device number 3 [ 139.969686][ T5196] overlayfs: failed to decode file handle (len=8, type=248, flags=0, err=-22) [ 140.115488][ T4507] device hsr_slave_0 left promiscuous mode [ 140.162302][ T4507] device hsr_slave_1 left promiscuous mode [ 140.192046][ T4507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.200118][ T4507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.223627][ T4507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.235797][ T4507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.317620][ T4507] device bridge_slave_1 left promiscuous mode [ 140.380970][ T4507] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.775529][ T4269] Bluetooth: hci0: command 0x0409 tx timeout [ 140.791412][ T4507] device bridge_slave_0 left promiscuous mode [ 140.906316][ T4507] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.085538][ T4507] device veth1_macvtap left promiscuous mode [ 141.125922][ T4507] device veth0_macvtap left promiscuous mode [ 141.176561][ T4507] device veth1_vlan left promiscuous mode [ 141.182880][ T4507] device veth0_vlan left promiscuous mode [ 141.764401][ T4507] team0 (unregistering): Port device team_slave_1 removed [ 141.795829][ T4507] team0 (unregistering): Port device team_slave_0 removed [ 141.831656][ T4507] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.863706][ T4507] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.013919][ T4507] bond0 (unregistering): Released all slaves [ 142.121788][ T5157] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.139683][ T5157] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.159210][ T5157] device bridge_slave_0 entered promiscuous mode [ 142.184194][ T5209] FAULT_INJECTION: forcing a failure. [ 142.184194][ T5209] name failslab, interval 1, probability 0, space 0, times 0 [ 142.257540][ T5209] CPU: 1 PID: 5209 Comm: syz.0.278 Not tainted syzkaller #0 [ 142.264928][ T5209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.275353][ T5209] Call Trace: [ 142.278711][ T5209] [ 142.281757][ T5209] dump_stack_lvl+0x188/0x250 [ 142.286592][ T5209] ? show_regs_print_info+0x20/0x20 [ 142.292011][ T5209] ? load_image+0x410/0x410 [ 142.296861][ T5209] ? __might_sleep+0xf0/0xf0 [ 142.302252][ T5209] ? __lock_acquire+0x7b50/0x7b50 [ 142.307788][ T5209] should_fail+0x383/0x4b0 [ 142.312603][ T5209] should_failslab+0x5/0x20 [ 142.317342][ T5209] slab_pre_alloc_hook+0x51/0xc0 [ 142.323045][ T5209] kmem_cache_alloc_trace+0x47/0x290 [ 142.328659][ T5209] ? slhc_init+0x72/0x730 [ 142.333124][ T5209] slhc_init+0x72/0x730 [ 142.337412][ T5209] ? __might_fault+0xb3/0x110 [ 142.342198][ T5209] ppp_ioctl+0x14af/0x1a70 [ 142.346852][ T5209] ? ppp_poll+0x250/0x250 [ 142.351241][ T5209] ? bpf_lsm_file_ioctl+0x5/0x10 [ 142.356307][ T5209] ? security_file_ioctl+0x7c/0xa0 [ 142.361584][ T5209] ? ppp_poll+0x250/0x250 [ 142.362815][ T5157] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.366263][ T5209] __se_sys_ioctl+0xfa/0x170 [ 142.378700][ T5209] do_syscall_64+0x4c/0xa0 [ 142.383657][ T5209] ? clear_bhb_loop+0x30/0x80 [ 142.388385][ T5209] ? clear_bhb_loop+0x30/0x80 [ 142.393277][ T5209] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 142.396640][ T5157] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.399603][ T5209] RIP: 0033:0x7f05c8073159 [ 142.410374][ T5157] device bridge_slave_1 entered promiscuous mode [ 142.411781][ T5209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.438608][ T5209] RSP: 002b:00007f05c62aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.448368][ T5209] RAX: ffffffffffffffda RBX: 00007f05c82fb090 RCX: 00007f05c8073159 [ 142.457101][ T5209] RDX: 0000200000000040 RSI: 0000000040047451 RDI: 0000000000000003 [ 142.465443][ T5157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.465531][ T5209] RBP: 00007f05c810a03b R08: 0000000000000000 R09: 0000000000000000 [ 142.483345][ T5209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.491710][ T5209] R13: 00007f05c82fb128 R14: 00007f05c82fb090 R15: 00007ffd8dcb5098 [ 142.500356][ T5209] [ 142.542153][ T5157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.591067][ T5236] FAULT_INJECTION: forcing a failure. [ 142.591067][ T5236] name failslab, interval 1, probability 0, space 0, times 0 [ 142.626338][ T5236] CPU: 1 PID: 5236 Comm: syz.2.286 Not tainted syzkaller #0 [ 142.633875][ T5236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.644520][ T5236] Call Trace: [ 142.647931][ T5236] [ 142.651056][ T5236] dump_stack_lvl+0x188/0x250 [ 142.655884][ T5236] ? show_regs_print_info+0x20/0x20 [ 142.661542][ T5236] ? load_image+0x410/0x410 [ 142.666123][ T5236] ? __might_sleep+0xf0/0xf0 [ 142.670761][ T5236] ? __lock_acquire+0x7b50/0x7b50 [ 142.676098][ T5236] should_fail+0x383/0x4b0 [ 142.680582][ T5236] should_failslab+0x5/0x20 [ 142.685218][ T5236] slab_pre_alloc_hook+0x51/0xc0 [ 142.690275][ T5236] ? __kernfs_new_node+0xe3/0x6b0 [ 142.696014][ T5236] kmem_cache_alloc+0x3d/0x280 [ 142.700929][ T5236] __kernfs_new_node+0xe3/0x6b0 [ 142.706154][ T5236] ? kernfs_new_node+0x250/0x250 [ 142.711436][ T5236] ? kernfs_create_dir_ns+0x10e/0x120 [ 142.717081][ T5236] ? sysfs_create_dir_ns+0x12c/0x290 [ 142.722737][ T5236] kernfs_new_node+0x148/0x250 [ 142.727711][ T5236] __kernfs_create_file+0x47/0x2e0 [ 142.733378][ T5236] sysfs_add_file_mode_ns+0x2d2/0x390 [ 142.739275][ T5236] sysfs_create_file_ns+0x12a/0x1b0 [ 142.744610][ T5236] ? sysfs_add_file_mode_ns+0x390/0x390 [ 142.750212][ T5236] ? __dev_fwnode+0x4c/0x80 [ 142.754868][ T5236] device_add+0x554/0x1050 [ 142.759778][ T5236] netdev_register_kobject+0x184/0x320 [ 142.765886][ T5236] register_netdevice+0x10e8/0x1720 [ 142.771099][ T5236] ? netif_stacked_transfer_operstate+0x200/0x200 [ 142.777793][ T5236] ? memset+0x1e/0x40 [ 142.781874][ T5236] ? ip6gre_tunnel_locate+0x1db/0x600 [ 142.787321][ T5236] ip6gre_tunnel_locate+0x273/0x600 [ 142.792550][ T5236] ? ip6gre_tnl_change+0x910/0x910 [ 142.797702][ T5236] ? ip6gre_tunnel_siocdevprivate+0xaa4/0xd90 [ 142.803949][ T5236] ip6gre_tunnel_siocdevprivate+0xaca/0xd90 [ 142.809943][ T5236] ? __mutex_lock_common+0x1471/0x2400 [ 142.815631][ T5236] ? ip6gre_tunnel_init+0x160/0x160 [ 142.820873][ T5236] ? do_raw_spin_lock+0x128/0x2f0 [ 142.826005][ T5236] ? full_name_hash+0x8e/0xe0 [ 142.830808][ T5236] dev_ifsioc+0xa30/0xd50 [ 142.835490][ T5236] ? dev_ioctl+0xe30/0xe30 [ 142.840607][ T5236] ? full_name_hash+0x8e/0xe0 [ 142.845437][ T5236] dev_ioctl+0x5df/0xe30 [ 142.850153][ T5236] ? get_user_ifreq+0xc7/0x170 [ 142.856366][ T5236] sock_ioctl+0x679/0x700 [ 142.861067][ T5236] ? sock_poll+0x420/0x420 [ 142.865647][ T5236] ? bpf_lsm_file_ioctl+0x5/0x10 [ 142.870646][ T5236] ? security_file_ioctl+0x7c/0xa0 [ 142.876067][ T5236] ? sock_poll+0x420/0x420 [ 142.880925][ T5236] __se_sys_ioctl+0xfa/0x170 [ 142.885664][ T5236] do_syscall_64+0x4c/0xa0 [ 142.890127][ T5236] ? clear_bhb_loop+0x30/0x80 [ 142.895026][ T5236] ? clear_bhb_loop+0x30/0x80 [ 142.899749][ T5236] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 142.905967][ T5236] RIP: 0033:0x7f5e53e43159 [ 142.910704][ T5236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.930601][ T5236] RSP: 002b:00007f5e5209b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.939062][ T5236] RAX: ffffffffffffffda RBX: 00007f5e540cafa0 RCX: 00007f5e53e43159 [ 142.947068][ T5236] RDX: 0000200000000140 RSI: 00000000000089f1 RDI: 0000000000000004 [ 142.955115][ T5236] RBP: 00007f5e53eda03b R08: 0000000000000000 R09: 0000000000000000 [ 142.963542][ T5236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.971608][ T5236] R13: 00007f5e540cb038 R14: 00007f5e540cafa0 R15: 00007fffc4d55cf8 [ 142.980291][ T5236] [ 143.016649][ T1111] Bluetooth: hci0: command 0x041b tx timeout [ 143.019177][ T5242] device syzkaller0 entered promiscuous mode [ 143.130486][ T5157] team0: Port device team_slave_0 added [ 143.836568][ T5157] team0: Port device team_slave_1 added [ 143.996538][ T5157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.003822][ T5157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.068722][ T5157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.156168][ T5157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.214715][ T5157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.266686][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 144.286737][ T5157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.439285][ T5157] device hsr_slave_0 entered promiscuous mode [ 144.453678][ T5157] device hsr_slave_1 entered promiscuous mode [ 144.478301][ T5157] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.538606][ T5157] Cannot create hsr debugfs directory [ 144.636987][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.695979][ T23] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 144.823319][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.177861][ T1111] Bluetooth: hci0: command 0x040f tx timeout [ 145.246361][ T23] usb 2-1: config 0 descriptor?? [ 145.591776][ T5296] device syzkaller0 entered promiscuous mode [ 145.626869][ T23] usbhid 2-1:0.0: can't add hid device: -71 [ 145.633333][ T23] usbhid: probe of 2-1:0.0 failed with error -71 [ 145.696043][ T23] usb 2-1: USB disconnect, device number 4 [ 145.697501][ T5157] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 145.784362][ T5157] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 145.820335][ T5157] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 145.845223][ T5157] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 146.106692][ T23] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 146.127928][ T5310] FAULT_INJECTION: forcing a failure. [ 146.127928][ T5310] name failslab, interval 1, probability 0, space 0, times 0 [ 146.178456][ T5157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.196125][ T5310] CPU: 1 PID: 5310 Comm: syz.0.306 Not tainted syzkaller #0 [ 146.204092][ T5310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 146.214238][ T5310] Call Trace: [ 146.217654][ T5310] [ 146.220624][ T5310] dump_stack_lvl+0x188/0x250 [ 146.225517][ T5310] ? show_regs_print_info+0x20/0x20 [ 146.230857][ T5310] ? load_image+0x410/0x410 [ 146.235506][ T5310] ? __might_sleep+0xf0/0xf0 [ 146.240368][ T5310] ? __lock_acquire+0x7b50/0x7b50 [ 146.245627][ T5310] should_fail+0x383/0x4b0 [ 146.250253][ T5310] should_failslab+0x5/0x20 [ 146.254874][ T5310] slab_pre_alloc_hook+0x51/0xc0 [ 146.259974][ T5310] ? do_check+0x2dec/0xf150 [ 146.264803][ T5310] __kmalloc_track_caller+0x69/0x330 [ 146.270195][ T5310] ? do_check+0x2dec/0xf150 [ 146.274906][ T5310] krealloc+0x5a/0xf0 [ 146.279019][ T5310] do_check+0x2dec/0xf150 [ 146.283397][ T5310] ? __sys_bpf+0x532/0x6f0 [ 146.288054][ T5310] ? do_syscall_64+0x4c/0xa0 [ 146.292702][ T5310] ? mark_reg_unknown+0x590/0x590 [ 146.297941][ T5310] ? btf_check_subprog_arg_match+0x13e/0x290 [ 146.304138][ T5310] do_check_common+0xe7f/0x16e0 [ 146.309395][ T5310] bpf_check+0x88c1/0xf6b0 [ 146.313874][ T5310] ? mark_lock+0x94/0x320 [ 146.318339][ T5310] ? bpf_get_btf_vmlinux+0x10/0x10 [ 146.323494][ T5310] ? __lock_acquire+0x13dc/0x7b50 [ 146.328836][ T5310] ? verify_lock_unused+0x140/0x140 [ 146.334254][ T5310] ? verify_lock_unused+0x140/0x140 [ 146.339481][ T5310] ? rcu_lock_release+0x5/0x20 [ 146.344480][ T5310] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 146.351255][ T5310] ? lock_chain_count+0x20/0x20 [ 146.356338][ T5310] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 146.362617][ T5310] ? lockdep_hardirqs_on+0x94/0x140 [ 146.368027][ T5310] ? ktime_get_with_offset+0xff/0x320 [ 146.373681][ T5310] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 146.380032][ T5310] ? ktime_get_real_ts64+0x440/0x440 [ 146.385739][ T5310] ? pcpu_alloc+0x11e6/0x16d0 [ 146.390632][ T5310] ? __might_fault+0xb3/0x110 [ 146.395635][ T5310] ? memset+0x1e/0x40 [ 146.399933][ T5310] ? bpf_obj_name_cpy+0x190/0x1d0 [ 146.405652][ T5310] bpf_prog_load+0xfdf/0x14e0 [ 146.410815][ T5310] ? map_freeze+0x360/0x360 [ 146.415397][ T5310] ? __might_fault+0xb7/0x110 [ 146.420292][ T5310] ? __might_fault+0xb3/0x110 [ 146.425083][ T5310] ? bpf_lsm_bpf+0x5/0x10 [ 146.429436][ T5310] ? security_bpf+0x7a/0xa0 [ 146.434151][ T5310] __sys_bpf+0x532/0x6f0 [ 146.438428][ T5310] ? bpf_link_show_fdinfo+0x380/0x380 [ 146.443952][ T5310] __x64_sys_bpf+0x78/0x90 [ 146.448609][ T5310] do_syscall_64+0x4c/0xa0 [ 146.453048][ T5310] ? clear_bhb_loop+0x30/0x80 [ 146.457752][ T5310] ? clear_bhb_loop+0x30/0x80 [ 146.462626][ T5310] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 146.468641][ T5310] RIP: 0033:0x7f05c8073159 [ 146.473162][ T5310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.493318][ T5310] RSP: 002b:00007f05c62cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 146.501853][ T5310] RAX: ffffffffffffffda RBX: 00007f05c82fafa0 RCX: 00007f05c8073159 [ 146.509867][ T5310] RDX: 0000000000000070 RSI: 0000200000000440 RDI: 0000000000000005 [ 146.517867][ T5310] RBP: 00007f05c810a03b R08: 0000000000000000 R09: 0000000000000000 [ 146.525873][ T5310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.534095][ T5310] R13: 00007f05c82fb038 R14: 00007f05c82fafa0 R15: 00007ffd8dcb5098 [ 146.542206][ T5310] [ 146.603725][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 146.617364][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 146.660912][ T5157] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.677091][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 146.721014][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 146.752432][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 146.796852][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.826409][ T4534] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.833643][ T4534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.853122][ T23] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 146.903694][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.971313][ T23] usb 2-1: config 0 descriptor?? [ 147.041520][ T23] usb 2-1: can't set config #0, error -71 [ 147.087139][ T23] usb 2-1: USB disconnect, device number 5 [ 147.235973][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 147.256723][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 147.374917][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.410071][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.419599][ T4534] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.426737][ T4534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.445314][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 147.456384][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 147.465552][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 147.772702][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 148.141071][ T5157] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 148.265876][ T5157] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.309669][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 148.338047][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 148.380765][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 148.456726][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 148.488942][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 148.508319][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 148.550127][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 148.608314][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 148.682723][ T5362] netlink: 'syz.1.317': attribute type 4 has an invalid length. [ 148.707609][ T5354] device syzkaller0 entered promiscuous mode [ 149.817554][ T5379] jffs2: notice: (5379) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 149.967129][ T146] Bluetooth: Wrong link type (-22) [ 151.150523][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 151.168574][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 151.216743][ T5157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.267424][ T4269] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 151.447892][ T5414] netlink: 24 bytes leftover after parsing attributes in process `syz.2.333'. [ 151.606772][ T4293] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 151.726813][ T4269] usb 1-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 151.736254][ T4269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.866569][ T4293] usb 4-1: Using ep0 maxpacket: 8 [ 151.992638][ T4293] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 152.014471][ T4293] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 152.030256][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 152.036330][ T4293] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 152.050148][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 152.072541][ T4293] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 152.104507][ T4293] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 152.130394][ T4269] net1080 1-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.0-1, NetChip TurboCONNECT, 7e:19:a2:52:5d:26 [ 152.135387][ T4293] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.163223][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 152.175269][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 152.198563][ T5157] device veth0_vlan entered promiscuous mode [ 152.206633][ T4293] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 152.217383][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 152.237079][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 152.244841][ T4293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.536873][ T4293] usb 4-1: GET_CAPABILITIES returned 0 [ 152.542795][ T4293] usbtmc 4-1:16.0: can't read capabilities [ 152.750502][ T4293] usb 4-1: USB disconnect, device number 3 [ 152.999545][ T4293] usb 1-1: USB disconnect, device number 4 [ 153.017405][ T4293] net1080 1-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.0-1, NetChip TurboCONNECT [ 153.090414][ T5157] device veth1_vlan entered promiscuous mode [ 153.202975][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 153.220203][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 153.253838][ T5157] device veth0_macvtap entered promiscuous mode [ 153.312198][ T5157] device veth1_macvtap entered promiscuous mode [ 153.354586][ T5157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.374734][ T5157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.385446][ T5157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.397336][ T5157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.407734][ T5157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.419698][ T5157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.430640][ T5157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.449136][ T5157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.485042][ T5157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.530097][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 153.555989][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 153.564712][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 153.573906][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 153.611947][ T5157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.786796][ T5157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.037258][ T5157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.228098][ T5157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.249941][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 154.249956][ T26] audit: type=1326 audit(1789334469.050:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5469 comm="syz.0.343" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f05c8073159 code=0x0 [ 154.304885][ T5157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.339388][ T5157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.387194][ T5157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.398577][ T5157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.421495][ T5157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.491973][ T5157] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.524500][ T5157] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.549512][ T5157] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.559396][ T5157] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.653346][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 154.674585][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 154.703362][ T5486] device syzkaller0 entered promiscuous mode [ 154.854570][ T5489] netlink: 16 bytes leftover after parsing attributes in process `syz.3.347'. [ 154.868074][ T4526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.876111][ T4526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.885010][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 155.003797][ T4526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.053499][ T4526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.107019][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 155.294362][ T5504] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 155.596336][ T1111] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 156.397623][ T1111] usb 3-1: Using ep0 maxpacket: 8 [ 156.557473][ T5530] device syzkaller0 entered promiscuous mode [ 156.573004][ T1111] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 156.647951][ T1111] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 156.688770][ T1111] usb 3-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 156.709094][ T1111] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.762335][ T4227] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 156.768095][ T1111] kobil_sct 3-1:1.0: KOBIL USB smart card terminal converter detected [ 156.821998][ T1111] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 157.156888][ T4227] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 157.165388][ T4227] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.306797][ T4227] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 157.316344][ T4227] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 157.355605][ T4227] usb 4-1: Manufacturer: syz [ 157.369705][ T4227] usb 4-1: config 0 descriptor?? [ 157.412259][ T5556] TC_ACT_REPEAT abuse ? [ 157.419032][ T4227] igorplugusb 4-1:0.0: incorrect number of endpoints [ 157.622196][ T4227] usb 4-1: USB disconnect, device number 4 [ 157.850424][ T4269] usb 3-1: USB disconnect, device number 2 [ 157.913084][ T4269] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 157.963948][ T4269] kobil_sct 3-1:1.0: device disconnected [ 158.999712][ T5586] device syzkaller0 entered promiscuous mode [ 160.006563][ T4227] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 160.363775][ T4276] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 161.252598][ T5626] tipc: Started in network mode [ 161.306920][ T4227] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 161.310134][ T5626] tipc: Node identity 2edfed156e4e, cluster identity 4711 [ 161.320715][ T4227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.331688][ T5628] mmap: syz.0.384 (5628) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 161.342240][ T4227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.359978][ T5626] tipc: Enabled bearer , priority 0 [ 161.369744][ T5629] device syzkaller0 entered promiscuous mode [ 161.377454][ T4227] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 161.393933][ T5633] netlink: 'syz.0.384': attribute type 3 has an invalid length. [ 161.435200][ T5626] tipc: Resetting bearer [ 161.444490][ T5625] tipc: Resetting bearer [ 161.469915][ T5625] tipc: Disabling bearer [ 161.489766][ T4227] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 161.500591][ T4227] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 161.509168][ T4276] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.519798][ T4227] usb 4-1: Manufacturer: syz [ 161.525084][ T4276] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 161.538496][ T4227] usb 4-1: config 0 descriptor?? [ 161.544498][ T4276] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 161.561521][ T4276] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 161.571397][ T4276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.652503][ T5640] device syzkaller0 entered promiscuous mode [ 162.009778][ T4227] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 162.019797][ T4227] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 162.043954][ T4227] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 162.076644][ T4276] cxacru 3-1:1.0: send of cm 0x91 failed (-71) [ 162.087059][ T4276] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 162.097505][ T4276] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 162.114956][ T4276] cxacru: probe of 3-1:1.0 failed with error -71 [ 162.137965][ T4276] usb 3-1: USB disconnect, device number 3 [ 162.156701][ T7] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 162.346692][ T5597] netlink: 'syz.3.375': attribute type 1 has an invalid length. [ 162.359032][ T23] usb 4-1: USB disconnect, device number 5 [ 162.733357][ T7] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.744744][ T7] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 162.753998][ T7] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 162.763866][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.775815][ T7] usb 6-1: config 0 descriptor?? [ 162.945908][ T7] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 163.195983][ T7] dvb-usb: bulk message failed: -22 (3/0) [ 163.507087][ T7] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 163.587188][ T7] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 163.596389][ T7] usb 6-1: media controller created [ 163.634853][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 163.657354][ T7] dvb-usb: bulk message failed: -22 (6/0) [ 163.664129][ T7] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 163.708530][ T7] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input9 [ 163.714945][ T5680] device syzkaller0 entered promiscuous mode [ 163.722455][ T7] dvb-usb: schedule remote query interval to 150 msecs. [ 163.739517][ T7] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 163.757936][ T7] usb 6-1: USB disconnect, device number 2 [ 163.838886][ T7] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 163.906832][ T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 164.130813][ T5690] xt_hashlimit: size too large, truncated to 1048576 [ 164.139317][ T5690] xt_hashlimit: max too large, truncated to 1048576 [ 164.206649][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 164.327125][ T23] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 164.357641][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 164.414927][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 164.489252][ T23] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.546076][ T23] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 164.578346][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.887009][ T23] usb 4-1: GET_CAPABILITIES returned 0 [ 164.892595][ T23] usbtmc 4-1:16.0: can't read capabilities [ 165.116640][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 165.127361][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 165.136745][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 165.146999][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 165.156789][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 165.166458][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 165.176014][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 165.185509][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 165.195092][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 165.205096][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 165.214862][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 165.224229][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 165.233641][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 165.243497][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 165.253206][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 165.263320][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 165.281007][ T21] usb 4-1: USB disconnect, device number 6 [ 165.666604][ T4227] Bluetooth: hci1: command 0x0409 tx timeout [ 166.703267][ T5726] device syzkaller0 entered promiscuous mode [ 167.107537][ T5743] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 167.324869][ T5749] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 168.280476][ T5768] device syzkaller0 entered promiscuous mode [ 168.838212][ T5776] input: syz0 as /devices/virtual/input/input10 [ 169.024248][ T5786] VFS: Mount too revealing [ 172.377518][ T5834] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 172.485678][ T5838] device vlan0 entered promiscuous mode [ 172.544895][ T5838] device eth0 entered promiscuous mode [ 172.683790][ T5845] FAULT_INJECTION: forcing a failure. [ 172.683790][ T5845] name failslab, interval 1, probability 0, space 0, times 0 [ 172.920844][ T150] blk_update_request: I/O error, dev sda, sector 819510 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 172.932588][ T150] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2039 starting block 102439) [ 172.945241][ T150] Buffer I/O error on device sda1, logical block 102400 [ 172.959538][ T150] blk_update_request: I/O error, dev sda, sector 827686 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 172.972314][ T150] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2039 starting block 103462) [ 172.986085][ T150] Buffer I/O error on device sda1, logical block 103422 [ 172.987536][ T5845] CPU: 0 PID: 5845 Comm: syz.5.448 Not tainted syzkaller #0 [ 172.993864][ T150] Buffer I/O error on device sda1, logical block 103423 [ 173.000812][ T5845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 173.009584][ T150] blk_update_request: I/O error, dev sda, sector 721206 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 173.018115][ T5845] Call Trace: [ 173.018132][ T5845] [ 173.018143][ T5845] dump_stack_lvl+0x188/0x250 [ 173.018177][ T5845] ? show_regs_print_info+0x20/0x20 [ 173.018199][ T5845] ? load_image+0x410/0x410 [ 173.018225][ T5845] ? __lock_acquire+0x7b50/0x7b50 [ 173.029825][ T150] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2028 starting block 90151) [ 173.033251][ T5845] should_fail+0x383/0x4b0 [ 173.036278][ T150] Buffer I/O error on device sda1, logical block 90112 [ 173.041256][ T5845] should_failslab+0x5/0x20 [ 173.047706][ T150] blk_update_request: I/O error, dev sda, sector 729382 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 173.051314][ T5845] slab_pre_alloc_hook+0x51/0xc0 [ 173.051343][ T5845] kmem_cache_alloc_trace+0x47/0x290 [ 173.051360][ T5845] ? resv_map_alloc+0x4d/0x2a0 [ 173.051384][ T5845] ? __lock_acquire+0x7b50/0x7b50 [ 173.051411][ T5845] resv_map_alloc+0x4d/0x2a0 [ 173.051451][ T5845] hugetlbfs_get_inode+0x64/0x510 [ 173.051479][ T5845] hugetlb_file_setup+0x249/0x6f0 [ 173.051506][ T5845] __se_sys_memfd_create+0x2e0/0x450 [ 173.051531][ T5845] ? __x64_sys_memfd_create+0x60/0x60 [ 173.051558][ T5845] ? lockdep_hardirqs_on+0x94/0x140 [ 173.051583][ T5845] do_syscall_64+0x4c/0xa0 [ 173.051601][ T5845] ? clear_bhb_loop+0x30/0x80 [ 173.051621][ T5845] ? clear_bhb_loop+0x30/0x80 [ 173.051642][ T5845] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 173.051662][ T5845] RIP: 0033:0x7f58b7509159 [ 173.051682][ T5845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.051698][ T5845] RSP: 002b:00007f58b5761028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 173.051722][ T5845] RAX: ffffffffffffffda RBX: 00007f58b7790fa0 RCX: 00007f58b7509159 [ 173.051737][ T5845] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000000000 [ 173.051750][ T5845] RBP: 00007f58b75a003b R08: 0000000000000000 R09: 0000000000000000 [ 173.051763][ T5845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.051775][ T5845] R13: 00007f58b7791038 R14: 00007f58b7790fa0 R15: 00007ffd8b4aa118 [ 173.051805][ T5845] [ 173.251945][ T150] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2028 starting block 91174) [ 173.264475][ T150] Buffer I/O error on device sda1, logical block 91134 [ 173.272256][ T150] Buffer I/O error on device sda1, logical block 91135 [ 173.279817][ T150] blk_update_request: I/O error, dev sda, sector 753974 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 173.296616][ T150] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2030 starting block 94247) [ 173.309885][ T150] Buffer I/O error on device sda1, logical block 94208 [ 173.317478][ T150] blk_update_request: I/O error, dev sda, sector 762150 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 173.329152][ T150] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2030 starting block 95270) [ 173.341678][ T150] Buffer I/O error on device sda1, logical block 95230 [ 173.348668][ T150] Buffer I/O error on device sda1, logical block 95231 [ 173.356417][ T150] blk_update_request: I/O error, dev sda, sector 803126 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 173.368672][ T150] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2035 starting block 100391) [ 173.380934][ T150] Buffer I/O error on device sda1, logical block 100352 [ 173.388182][ T150] blk_update_request: I/O error, dev sda, sector 700726 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 173.399894][ T150] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2027 starting block 87591) [ 173.430762][ T154] blk_update_request: I/O error, dev sda, sector 811302 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 173.442890][ T154] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2035 starting block 101414) [ 173.456015][ T154] blk_update_request: I/O error, dev sda, sector 770358 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 173.469206][ T154] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2032 starting block 96295) [ 173.570925][ T5847] Buffer I/O error on dev sda1, logical block 1, lost async page write [ 173.580626][ T5847] Buffer I/O error on dev sda1, logical block 129, lost async page write [ 173.589802][ T5847] Buffer I/O error on dev sda1, logical block 131, lost async page write [ 173.599115][ T5847] Buffer I/O error on dev sda1, logical block 132, lost async page write [ 173.610000][ T5847] Buffer I/O error on dev sda1, logical block 137, lost async page write [ 173.618863][ T5847] Buffer I/O error on dev sda1, logical block 221, lost async page write [ 173.628169][ T5847] Buffer I/O error on dev sda1, logical block 273, lost async page write [ 173.637072][ T5847] Buffer I/O error on dev sda1, logical block 8210, lost async page write [ 173.646580][ T5847] Buffer I/O error on dev sda1, logical block 8211, lost async page write [ 173.658959][ T3520] Aborting journal on device sda1-8. [ 173.667183][ T150] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 173.718209][ T3520] JBD2: Error -5 detected when updating journal superblock for sda1-8. [ 173.862383][ T4173] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 173.863487][ T5843] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.448: Detected aborted journal [ 173.956604][ T5843] EXT4-fs (sda1): I/O error while writing superblock [ 173.974149][ T4173] EXT4-fs (sda1): previous I/O error to superblock detected [ 174.001032][ T5843] EXT4-fs (sda1): Remounting filesystem read-only [ 174.026900][ T5843] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.448: Detected aborted journal [ 174.045811][ T4173] EXT4-fs (sda1): I/O error while writing superblock [ 174.075843][ T4173] EXT4-fs (sda1): Remounting filesystem read-only [ 174.113612][ T4173] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 174.118324][ T5830] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #116: comm dhcpcd-run-hook: reading directory lblock 0 [ 174.126056][ T5843] EXT4-fs (sda1): I/O error while writing superblock [ 174.157049][ T7] EXT4-fs (sda1): previous I/O error to superblock detected [ 174.171613][ T5843] EXT4-fs (sda1): Remounting filesystem read-only [ 174.197152][ T4173] EXT4-fs (sda1): I/O error while writing superblock [ 174.204285][ T4173] EXT4-fs (sda1): Remounting filesystem read-only [ 174.208347][ T5830] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #116: comm dhcpcd-run-hook: reading directory lblock 0 [ 174.274568][ T5830] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #116: comm dhcpcd-run-hook: reading directory lblock 0 [ 174.275071][ T4173] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 174.359889][ T5847] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 174.375521][ T5858] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.450: Detected aborted journal [ 174.394386][ T4173] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 175.605933][ T5871] netlink: 'syz.1.453': attribute type 13 has an invalid length. [ 175.910285][ T5871] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 175.994949][ T5871] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 176.049297][ T5871] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 176.425622][ T5897] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 176.572077][ T5848] pci 0000:00:03.0: [1af4:1004] type 00 class 0x000000 [ 176.765030][ T5848] pci 0000:00:03.0: reg 0x10: [io 0xc000-0xc03f] [ 177.026730][ T5848] pci 0000:00:03.0: reg 0x14: [mem 0xfe800000-0xfe80007f] [ 177.680034][ T5848] virtio-pci 0000:00:03.0: can't enable device: BAR 0 [io 0xc000-0xc03f] not claimed [ 177.712228][ T5848] virtio-pci: probe of 0000:00:03.0 failed with error -22 [ 178.054912][ T5925] 9pnet_virtio: no channels available for device syz [ 178.723056][ T5929] 9pnet: Could not find request transport: uj [ 178.884457][ T4173] EXT4-fs error: 86 callbacks suppressed [ 178.884475][ T4173] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 178.916946][ T4173] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 178.974758][ T5935] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.470: Detected aborted journal [ 178.977956][ T5934] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.469: Detected aborted journal [ 178.987669][ T5935] EXT4-fs: 52 callbacks suppressed [ 178.987684][ T5935] EXT4-fs (sda1): Remounting filesystem read-only [ 179.014693][ T5935] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.470: Detected aborted journal [ 179.029013][ T5935] EXT4-fs (sda1): Remounting filesystem read-only [ 179.106579][ T5934] EXT4-fs (sda1): Remounting filesystem read-only [ 179.116237][ T5937] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.471: Detected aborted journal [ 179.150119][ T5939] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.472: Detected aborted journal [ 179.161305][ T5934] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.469: Detected aborted journal [ 179.161345][ T5934] EXT4-fs (sda1): Remounting filesystem read-only [ 179.163945][ T5937] EXT4-fs (sda1): Remounting filesystem read-only [ 179.212887][ T5937] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.471: Detected aborted journal [ 179.224529][ T5939] EXT4-fs (sda1): Remounting filesystem read-only [ 179.246407][ T5937] EXT4-fs (sda1): Remounting filesystem read-only [ 179.254501][ T5939] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.472: Detected aborted journal [ 179.256259][ T5941] netlink: 'syz.2.469': attribute type 1 has an invalid length. [ 179.306235][ T5941] netlink: 'syz.2.469': attribute type 2 has an invalid length. [ 179.316619][ T5939] EXT4-fs (sda1): Remounting filesystem read-only [ 179.347540][ T5941] netlink: 'syz.2.469': attribute type 3 has an invalid length. [ 179.358815][ T5944] EXT4-fs (sda1): Remounting filesystem read-only [ 179.390409][ T4526] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 179.408602][ T5944] EXT4-fs (sda1): Remounting filesystem read-only [ 179.428335][ T5941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.469'. [ 179.443697][ T4526] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 179.447895][ T5946] Write-error on swap-device (8:0:272672) Sep 13 21:21:34 syzkaller kern.alert kernel: [ 179.447895][ T5946] Write-error on swap-device (8:0:272672) [ 179.487084][ T5946] Write-error on swap-device (8:0:272680) Sep 13 21:21:34 syzkaller kern.alert kernel: [ 179.487084][ T5946] Write-error [ 179.503983][ T5946] Write-error on swap-device (8:0:272688) on swap-device (8:0:272680) Sep 13 21:21:34 syzkaller kern.alert kernel: [ 179.503983][ T5946] Write-error on swap-device (8:0:272688) [ 179.524185][ T5946] Write-error on swap-device (8:0:272696) Sep 13 21:21:34 syzkaller kern.alert kernel: [ 179.524185][ T5946] Write-error on swap-device (8:0:272696) [ 179.545012][ T5946] Write-error on swap-device (8:0:272704) Sep 13 21:21:34 syzkaller kern.alert kernel: [ 179.545012][ T5946] Write-error on swap-device (8:0:272704) [ 179.567272][ T5946] Write-error on swap-device (8:0:272712) Sep 13 21:21:34 syzkaller kern.alert kernel: [ 179.567272][ T5946] Write-error [ 179.583777][ T5946] Write-error on swap-device (8:0:272720) on swap-device (8:0:272712) Sep 13 21:21:34 syzkaller kern.alert kernel: [ 179.583777][ T5946] Write-error on swap-device (8:0:272720) [ 179.605580][ T5946] Write-error on swap-device (8:0:272728) Sep 13 21:21:34 syzkaller kern.alert kernel: [ 179.605580][ T5946] Write-error on swap-device (8:0:272728) [ 179.634746][ T5946] Write-error on swap-device (8:0:272736) Sep 13 21:21:34 [ 179.642641][ T5946] Write-error on swap-device (8:0:272744) syzkaller kern.alert kernel: [ 179.634746][ T5946] Write-error on swap-device (8:0:272736) Sep 13 21:21:34 syzkaller kern.alert kernel: [ 179.642641][ T5946] Write-error on swap-device (8:0:272744) [ 180.363256][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.371104][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.536850][ T4230] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 180.786696][ T4230] usb 1-1: Using ep0 maxpacket: 32 [ 180.922607][ T4230] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.953827][ T4230] usb 1-1: config 0 has no interfaces? [ 181.122936][ T4230] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 181.156616][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 181.175182][ T4230] usb 1-1: Product: syz [ 181.185298][ T4230] usb 1-1: Manufacturer: syz [ 181.205557][ T4230] usb 1-1: SerialNumber: syz [ 181.225971][ T4230] usb 1-1: config 0 descriptor?? [ 181.325272][ T5950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.429661][ T5950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.500881][ T23] usb 1-1: USB disconnect, device number 5 [ 182.883517][ T5938] syz.2.469 (5938): drop_caches: 3 [ 182.999153][ T5975] 9pnet_virtio: no channels available for device syz [ 183.059026][ T5950] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.083748][ T5950] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.142673][ T5950] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.154739][ T5950] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.651886][ T5987] team0: Device wg0 is of different type [ 183.922938][ T5991] EXT4-fs error: 53 callbacks suppressed [ 183.922956][ T5991] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.489: Detected aborted journal [ 183.950901][ T5992] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.488: Detected aborted journal [ 183.978280][ T5992] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.488: Detected aborted journal [ 183.999778][ T5991] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.489: Detected aborted journal [ 184.014418][ T5992] EXT4-fs: 35 callbacks suppressed [ 184.014433][ T5992] EXT4-fs (sda1): Remounting filesystem read-only [ 184.046676][ T5991] EXT4-fs (sda1): Remounting filesystem read-only [ 184.063944][ T5995] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.491: Detected aborted journal [ 184.078664][ T5997] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.490: Detected aborted journal [ 184.117136][ T5995] EXT4-fs (sda1): Remounting filesystem read-only [ 184.124960][ T5997] EXT4-fs (sda1): Remounting filesystem read-only [ 184.148763][ T5995] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.491: Detected aborted journal [ 184.160479][ T5997] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.490: Detected aborted journal [ 184.176598][ T5995] EXT4-fs (sda1): Remounting filesystem read-only [ 184.187607][ T5997] EXT4-fs (sda1): Remounting filesystem read-only [ 184.199145][ T5993] tipc: Enabled bearer , priority 0 [ 184.230010][ T4173] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 184.254660][ T4173] EXT4-fs (sda1): Remounting filesystem read-only [ 184.500267][ T5995] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.491: Detected aborted journal [ 184.511329][ T5995] EXT4-fs (sda1): Remounting filesystem read-only [ 184.629124][ T5991] EXT4-fs (sda1): Remounting filesystem read-only [ 185.105879][ T6007] EXT4-fs (sda1): Remounting filesystem read-only [ 185.192106][ T6009] netlink: 64 bytes leftover after parsing attributes in process `syz.3.493'. [ 185.208891][ T6009] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 185.319018][ T5953] tipc: Node number set to 1083305237 [ 185.519491][ T6020] end_swap_bio_write: 278 callbacks suppressed [ 185.519509][ T6020] Write-error on swap-device (8:0:272136) Sep 13 21:21:40 syzkaller kern.alert kernel: [ 185.519509][ T6020] Write-error on swap-device (8:0:272136) [ 185.568939][ T6020] Write-error on swap-device (8:0:272144) Sep 13 21:21:40 syzkaller kern.alert kernel: [ 185.568939][ T6020] Write-error on swap-device (8:0:272144) [ 185.587562][ T6020] Write-error on swap-device (8:0:272152) Sep 13 21:21:40 syzkaller kern.alert kernel: [ 185.587562][ T6020] Write-error [ 185.604011][ T6020] Write-error on swap-device (8:0:272160) on swap-device (8:0:272152) Sep 13 21:21:40 syzkaller kern.alert kernel: [ 185.604011][ T6020] Write-error on swap-device (8:0:272160) [ 185.624306][ T6020] Write-error on swap-device (8:0:272168) Sep 13 21:21:40 syzkaller kern.alert kernel: [ 185.624306][ T6020] Write-error on swap-device (8:0:272168) [ 185.641851][ T6020] Write-error on swap-device (8:0:272176) Sep 13 21:21:40 syzkaller kern.alert kernel: [ 185.641851][ T6020] Write-error on swap-device (8:0:272176) [ 185.666920][ T6020] Write-error on swap-device (8:0:272184) Sep 13 21:21:40 syzkaller kern.alert kernel: [ 185.666920][ T6020] Write-error on swap-device (8:0:272184) [ 185.716697][ T6020] Write-error on swap-device (8:0:272192) Sep 13 21:21:40 syzkaller kern.alert kernel: [ 185.716697][ T6020] Write-error on swap-device (8:0:272192) [ 185.755101][ T6020] Write-error on swap-device (8:0:272200) Sep 13 21:21:40 syzkaller kern.alert kernel: [ 185.755101][ T6020] Write-error on swap-device (8:0:272200) [ 185.785449][ T6020] Write-error on swap-device (8:0:272208) Sep 13 21:21:40 syzkaller kern.alert kernel: [ 185.785449][ T6020] Write-error on swap-device (8:0:272208) [ 186.106543][ T5953] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 186.366686][ T5953] usb 4-1: Using ep0 maxpacket: 8 [ 186.496836][ T5953] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 186.527100][ T5953] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 186.550803][ T5953] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 186.571740][ T5953] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 186.585909][ T5953] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 186.620625][ T5953] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 186.661357][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.733754][ T6040] FAULT_INJECTION: forcing a failure. [ 186.733754][ T6040] name failslab, interval 1, probability 0, space 0, times 0 [ 186.847789][ T6040] CPU: 0 PID: 6040 Comm: syz.0.505 Not tainted syzkaller #0 [ 186.855577][ T6040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 186.865953][ T6040] Call Trace: [ 186.869476][ T6040] [ 186.872468][ T6040] dump_stack_lvl+0x188/0x250 [ 186.877380][ T6040] ? show_regs_print_info+0x20/0x20 [ 186.882610][ T6040] ? load_image+0x410/0x410 [ 186.887434][ T6040] ? __might_sleep+0xf0/0xf0 [ 186.892145][ T6040] ? __lock_acquire+0x7b50/0x7b50 [ 186.897401][ T6040] should_fail+0x383/0x4b0 [ 186.901851][ T6040] should_failslab+0x5/0x20 [ 186.906815][ T6040] slab_pre_alloc_hook+0x51/0xc0 [ 186.912221][ T6040] __kmalloc+0x6b/0x340 [ 186.916391][ T6040] ? tomoyo_encode+0x28a/0x550 [ 186.921285][ T6040] tomoyo_encode+0x28a/0x550 [ 186.926174][ T6040] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 186.932280][ T6040] tomoyo_check_open_permission+0x1eb/0x410 [ 186.938474][ T6040] ? tomoyo_check_path_number_acl+0x280/0x280 [ 186.945322][ T6040] ? __lock_acquire+0x7b50/0x7b50 [ 186.950658][ T6040] ? __rwlock_init+0x140/0x140 [ 186.955474][ T6040] ? hook_file_open+0xf1/0x230 [ 186.960258][ T6040] ? tomoyo_file_open+0xe9/0x170 [ 186.965316][ T6040] security_file_open+0x5e/0xa0 [ 186.970638][ T6040] do_dentry_open+0x321/0xf90 [ 186.975650][ T6040] ? vfs_open+0x2b/0x80 [ 186.980481][ T6040] path_openat+0x2718/0x2fb0 [ 186.985249][ T6040] ? __kasan_slab_alloc+0xa9/0xc0 [ 186.990892][ T6040] ? do_filp_open+0x400/0x400 [ 186.996878][ T6040] do_filp_open+0x1df/0x400 [ 187.001424][ T6040] ? vfs_tmpfile+0x300/0x300 [ 187.006570][ T6040] ? _raw_spin_unlock+0x24/0x40 [ 187.011821][ T6040] ? alloc_fd+0x59e/0x650 [ 187.016288][ T6040] do_sys_openat2+0x14b/0x500 [ 187.021172][ T6040] ? __lock_acquire+0x7b50/0x7b50 [ 187.026570][ T6040] ? do_sys_open+0xe0/0xe0 [ 187.031205][ T6040] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 187.037240][ T6040] ? lock_chain_count+0x20/0x20 [ 187.042319][ T6040] __x64_sys_openat+0x135/0x160 [ 187.048324][ T6040] do_syscall_64+0x4c/0xa0 [ 187.052787][ T6040] ? clear_bhb_loop+0x30/0x80 [ 187.057495][ T6040] ? clear_bhb_loop+0x30/0x80 [ 187.062556][ T6040] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 187.068504][ T6040] RIP: 0033:0x7f05c8073159 [ 187.073039][ T6040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.093507][ T6040] RSP: 002b:00007f05c62cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 187.101959][ T6040] RAX: ffffffffffffffda RBX: 00007f05c82fafa0 RCX: 00007f05c8073159 [ 187.110583][ T6040] RDX: 0000000000000002 RSI: 00002000000007c0 RDI: ffffffffffffff9c [ 187.120280][ T6040] RBP: 00007f05c810a03b R08: 0000000000000000 R09: 0000000000000000 [ 187.128726][ T6040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.136902][ T6040] R13: 00007f05c82fb038 R14: 00007f05c82fafa0 R15: 00007ffd8dcb5098 [ 187.145626][ T6040] [ 187.148740][ C0] vkms_vblank_simulate: vblank timer overrun [ 187.173457][ T5953] usb 4-1: usb_control_msg returned -32 [ 187.196641][ T5953] usbtmc 4-1:16.0: can't read capabilities [ 187.197409][ T6040] ERROR: Out of memory at tomoyo_realpath_from_path. [ 187.547687][ T6051] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 187.561121][ T4270] usb 4-1: USB disconnect, device number 7 [ 187.606633][ T5953] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 188.137034][ T5953] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.156540][ T5953] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 188.191527][ T6066] 9pnet_virtio: no channels available for device syz [ 188.357004][ T5953] usb 6-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 188.368755][ T5953] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.421286][ T5953] usb 6-1: Product: syz [ 188.449503][ T5953] usb 6-1: Manufacturer: syz [ 188.454168][ T5953] usb 6-1: SerialNumber: syz [ 188.766633][ T5953] usb 6-1: usb_control_msg returned -71 [ 188.773568][ T5953] usbtmc 6-1:1.0: can't read capabilities [ 188.814291][ T5953] usb 6-1: USB disconnect, device number 3 [ 189.048448][ T6080] EXT4-fs error: 87 callbacks suppressed [ 189.048467][ T6080] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.520: Detected aborted journal [ 189.156566][ T6080] EXT4-fs: 53 callbacks suppressed [ 189.156585][ T6080] EXT4-fs (sda1): Remounting filesystem read-only [ 189.200524][ T6080] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.520: Detected aborted journal [ 189.280511][ T6082] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.521: Detected aborted journal [ 189.292390][ T6080] EXT4-fs (sda1): Remounting filesystem read-only [ 189.322352][ T6082] EXT4-fs (sda1): Remounting filesystem read-only [ 189.343607][ T6082] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.521: Detected aborted journal [ 189.376317][ T6082] EXT4-fs (sda1): Remounting filesystem read-only [ 189.499820][ T5953] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 189.623279][ T6080] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.520: Detected aborted journal [ 189.634430][ T6080] EXT4-fs (sda1): Remounting filesystem read-only [ 189.879593][ T6086] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.522: Detected aborted journal [ 190.050616][ T6086] EXT4-fs (sda1): Remounting filesystem read-only [ 190.080075][ T6086] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.522: Detected aborted journal [ 190.136989][ T6086] EXT4-fs (sda1): Remounting filesystem read-only [ 190.184905][ T6087] jffs2: notice: (6087) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 190.298386][ T6089] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.523: Detected aborted journal [ 190.326524][ T6089] EXT4-fs (sda1): Remounting filesystem read-only [ 190.343526][ T6089] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.523: Detected aborted journal [ 190.366194][ T4173] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 190.396561][ T4173] EXT4-fs (sda1): Remounting filesystem read-only [ 190.416741][ T4173] EXT4-fs (sda1): Remounting filesystem read-only [ 191.166122][ T6101] fuse: Bad value for 'fd' [ 191.186576][ T4230] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 191.262945][ T6101] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 191.396146][ T6128] 9pnet_virtio: no channels available for device syz [ 191.506890][ T21] Bluetooth: hci1: command 0x0406 tx timeout [ 191.519540][ T21] Bluetooth: hci2: command 0x0406 tx timeout [ 191.542448][ T21] Bluetooth: hci4: command 0x0406 tx timeout [ 191.558960][ T21] Bluetooth: hci3: command 0x0406 tx timeout [ 191.746614][ T4230] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.793041][ T4230] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 191.836771][ T4230] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 191.845147][ T6141] FAULT_INJECTION: forcing a failure. [ 191.845147][ T6141] name failslab, interval 1, probability 0, space 0, times 0 [ 191.845861][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.877206][ T4230] usb 1-1: config 0 descriptor?? [ 191.879554][ T6141] CPU: 1 PID: 6141 Comm: syz.5.540 Not tainted syzkaller #0 [ 191.889556][ T6141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 191.899644][ T6141] Call Trace: [ 191.902953][ T6141] [ 191.905907][ T6141] dump_stack_lvl+0x188/0x250 [ 191.910619][ T6141] ? show_regs_print_info+0x20/0x20 [ 191.915932][ T6141] ? load_image+0x410/0x410 [ 191.918403][ T4230] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 191.920466][ T6141] ? __might_sleep+0xf0/0xf0 [ 191.931756][ T6141] ? __lock_acquire+0x7b50/0x7b50 [ 191.934251][ T4230] dvb-usb: bulk message failed: -22 (3/0) [ 191.937010][ T6141] should_fail+0x383/0x4b0 [ 191.937046][ T6141] should_failslab+0x5/0x20 [ 191.937066][ T6141] slab_pre_alloc_hook+0x51/0xc0 [ 191.937087][ T6141] kmem_cache_alloc_trace+0x47/0x290 [ 191.937105][ T6141] ? assoc_array_insert+0x3da/0x2e70 [ 191.937134][ T6141] assoc_array_insert+0x3da/0x2e70 [ 191.937170][ T6141] ? rwsem_write_trylock+0x135/0x1c0 [ 191.978257][ T6141] ? clear_nonspinnable+0x60/0x60 [ 191.983342][ T6141] ? key_set_index_key+0x2df/0x430 [ 191.988502][ T6141] __key_link_begin+0xd2/0x1e0 [ 191.993570][ T6141] key_create_or_update+0x4d8/0xa40 [ 191.998889][ T6141] ? security_key_permission+0x7c/0xa0 [ 192.004389][ T6141] ? key_type_put+0x20/0x20 [ 192.008924][ T6141] ? lookup_user_key_possessed+0x40/0x40 [ 192.014597][ T6141] ? __might_fault+0xb3/0x110 [ 192.019304][ T6141] __se_sys_add_key+0x34b/0x410 [ 192.024282][ T6141] ? __x64_sys_add_key+0xc0/0xc0 [ 192.029256][ T6141] ? syscall_user_dispatch+0x45/0x90 [ 192.034735][ T6141] ? __x64_sys_add_key+0x1c/0xc0 [ 192.039802][ T6141] do_syscall_64+0x4c/0xa0 [ 192.044327][ T6141] ? clear_bhb_loop+0x30/0x80 [ 192.049030][ T6141] ? clear_bhb_loop+0x30/0x80 [ 192.053733][ T6141] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 192.060003][ T6141] RIP: 0033:0x7f58b7509159 [ 192.064825][ T6141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.085271][ T6141] RSP: 002b:00007f58b5761028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 192.093867][ T6141] RAX: ffffffffffffffda RBX: 00007f58b7790fa0 RCX: 00007f58b7509159 [ 192.100621][ T4230] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 192.101879][ T6141] RDX: 0000200000000100 RSI: 0000200000000040 RDI: 0000200000000180 [ 192.118454][ T6141] RBP: 00007f58b75a003b R08: ffffffffffffffff R09: 0000000000000000 [ 192.126745][ T6141] R10: 0000000000000048 R11: 0000000000000246 R12: 0000000000000000 [ 192.135417][ T6141] R13: 00007f58b7791038 R14: 00007f58b7790fa0 R15: 00007ffd8b4aa118 [ 192.144107][ T6141] [ 192.146802][ T4230] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 192.204329][ T4230] usb 1-1: media controller created [ 192.237953][ T4230] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 192.293275][ T4230] dvb-usb: bulk message failed: -22 (6/0) [ 192.312909][ T4230] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 192.377946][ T4230] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11 [ 192.410079][ T4230] dvb-usb: schedule remote query interval to 150 msecs. [ 192.430153][ T4230] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 192.451066][ T4230] usb 1-1: USB disconnect, device number 6 [ 192.535186][ T4230] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 193.284498][ T26] audit: type=1326 audit(1789334508.080:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6145 comm="syz.5.543" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f58b7509159 code=0x0 [ 193.658314][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.683719][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.693114][ T6170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.551'. [ 193.714223][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 194.095482][ T6182] EXT4-fs error: 71 callbacks suppressed [ 194.095499][ T6182] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.557: Detected aborted journal [ 194.108069][ T4231] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 194.149356][ T6182] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.557: Detected aborted journal [ 194.161009][ T3558] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 194.175734][ T6185] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.558: Detected aborted journal [ 194.183932][ T6186] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.559: Detected aborted journal [ 194.194601][ T3558] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 194.198900][ T6182] EXT4-fs: 60 callbacks suppressed [ 194.198914][ T6182] EXT4-fs (sda1): Remounting filesystem read-only [ 194.216612][ T3558] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 194.236556][ T6186] EXT4-fs (sda1): Remounting filesystem read-only [ 194.252227][ T6185] EXT4-fs (sda1): Remounting filesystem read-only [ 194.263382][ T6186] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.559: Detected aborted journal [ 194.279574][ T6185] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.558: Detected aborted journal [ 194.280857][ T3558] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 194.301115][ T6185] EXT4-fs (sda1): Remounting filesystem read-only [ 194.326195][ T6186] EXT4-fs (sda1): Remounting filesystem read-only [ 194.455508][ T6189] EXT4-fs (sda1): Remounting filesystem read-only [ 194.468076][ T6190] EXT4-fs (sda1): Remounting filesystem read-only [ 194.482739][ T6191] EXT4-fs (sda1): Remounting filesystem read-only [ 194.503773][ T6189] EXT4-fs (sda1): Remounting filesystem read-only [ 194.513707][ T6190] EXT4-fs (sda1): Remounting filesystem read-only [ 194.540014][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.546931][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.576676][ T4231] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.617161][ T4231] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 194.647974][ T4231] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 194.692807][ T4231] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 194.726595][ T4231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.536638][ T4231] cxacru 4-1:1.0: send of cm 0x91 failed (-71) [ 195.542911][ T4231] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 195.566730][ T4231] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 195.575343][ T4231] cxacru: probe of 4-1:1.0 failed with error -71 [ 195.618003][ T4231] usb 4-1: USB disconnect, device number 8 [ 198.424956][ T6275] input: syz0 as /devices/virtual/input/input13 [ 199.107041][ T6287] EXT4-fs error: 101 callbacks suppressed [ 199.107061][ T6287] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.598: Detected aborted journal [ 199.198811][ T4230] [ 199.201211][ T4230] ====================================================== [ 199.208435][ T4230] WARNING: possible circular locking dependency detected [ 199.215938][ T4230] syzkaller #0 Not tainted [ 199.220382][ T4230] ------------------------------------------------------ [ 199.227616][ T4230] kworker/0:6/4230 is trying to acquire lock: [ 199.233705][ T4230] ffff8880725b9028 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 199.244791][ T4230] [ 199.244791][ T4230] but task is already holding lock: [ 199.252176][ T4230] ffffffff8d6d6128 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 199.252880][ T6287] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.598: Detected aborted journal [ 199.261253][ T4230] [ 199.261253][ T4230] which lock already depends on the new lock. [ 199.261253][ T4230] [ 199.261261][ T4230] [ 199.261261][ T4230] the existing dependency chain (in reverse order) is: [ 199.261266][ T4230] [ 199.261266][ T4230] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 199.261293][ T4230] __mutex_lock_common+0x1e5/0x2400 [ 199.261315][ T4230] mutex_lock_nested+0x17/0x20 [ 199.261331][ T4230] rfkill_register+0x2f/0x970 [ 199.261347][ T4230] hci_register_dev+0x459/0x980 [ 199.261364][ T4230] vhci_create_device+0x32e/0x5c0 [ 199.261381][ T4230] vhci_write+0x389/0x440 [ 199.261396][ T4230] vfs_write+0x748/0xd70 [ 199.261412][ T4230] ksys_write+0x153/0x260 [ 199.261425][ T4230] do_syscall_64+0x4c/0xa0 [ 199.261440][ T4230] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 199.261457][ T4230] [ 199.261457][ T4230] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 199.261484][ T4230] __mutex_lock_common+0x1e5/0x2400 [ 199.261501][ T4230] mutex_lock_nested+0x17/0x20 [ 199.261518][ T4230] vhci_send_frame+0x88/0x100 [ 199.261532][ T4230] hci_send_frame+0x1a9/0x2e0 [ 199.261547][ T4230] hci_tx_work+0x9b5/0x16d0 [ 199.261570][ T4230] process_one_work+0x867/0xff0 [ 199.261586][ T4230] worker_thread+0xad7/0x12a0 [ 199.261600][ T4230] kthread+0x42e/0x520 [ 199.261613][ T4230] ret_from_fork+0x1f/0x30 [ 199.261629][ T4230] [ 199.261629][ T4230] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 199.261656][ T4230] __flush_work+0x116/0x210 [ 199.261670][ T4230] hci_dev_do_close+0x201/0x1020 [ 199.261684][ T4230] hci_unregister_dev+0x2eb/0x590 [ 199.261699][ T4230] vhci_release+0x73/0xc0 [ 199.261713][ T4230] __fput+0x212/0x8c0 [ 199.261728][ T4230] task_work_run+0x125/0x1a0 [ 199.261743][ T4230] do_exit+0x635/0x2110 [ 199.261756][ T4230] do_group_exit+0x12c/0x2f0 [ 199.459979][ T4230] __x64_sys_exit_group+0x3b/0x40 [ 199.465820][ T4230] do_syscall_64+0x4c/0xa0 [ 199.470764][ T4230] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 199.478054][ T4230] [ 199.478054][ T4230] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 199.485730][ T4230] __mutex_lock_common+0x1e5/0x2400 [ 199.491480][ T4230] mutex_lock_nested+0x17/0x20 [ 199.496781][ T4230] bg_scan_update+0x44/0x3b0 [ 199.501893][ T4230] process_one_work+0x867/0xff0 [ 199.507262][ T4230] worker_thread+0xad7/0x12a0 [ 199.512463][ T4230] kthread+0x42e/0x520 [ 199.517070][ T4230] ret_from_fork+0x1f/0x30 [ 199.522304][ T4230] [ 199.522304][ T4230] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 199.532607][ T4230] __lock_acquire+0x2c66/0x7b50 [ 199.538079][ T4230] lock_acquire+0x19e/0x400 [ 199.543220][ T4230] __flush_work+0x116/0x210 [ 199.548364][ T4230] __cancel_work_timer+0x3f4/0x560 [ 199.554343][ T4230] hci_request_cancel_all+0xcc/0x300 [ 199.560655][ T4230] hci_dev_do_close+0x4e/0x1020 [ 199.566748][ T4230] hci_rfkill_set_block+0x101/0x180 [ 199.572650][ T4230] rfkill_set_block+0x1c1/0x3c0 [ 199.578029][ T4230] rfkill_epo+0x75/0x170 [ 199.582793][ T4230] rfkill_op_handler+0x76/0x220 [ 199.588347][ T4230] process_one_work+0x867/0xff0 [ 199.593807][ T4230] worker_thread+0xad7/0x12a0 [ 199.599448][ T4230] kthread+0x42e/0x520 [ 199.604207][ T4230] ret_from_fork+0x1f/0x30 [ 199.609148][ T4230] [ 199.609148][ T4230] other info that might help us debug this: [ 199.609148][ T4230] [ 199.619705][ T4230] Chain exists of: [ 199.619705][ T4230] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 199.619705][ T4230] [ 199.636510][ T4230] Possible unsafe locking scenario: [ 199.636510][ T4230] [ 199.643957][ T4230] CPU0 CPU1 [ 199.649317][ T4230] ---- ---- [ 199.654946][ T4230] lock(rfkill_global_mutex); [ 199.659722][ T4230] lock(&data->open_mutex); [ 199.667175][ T4230] lock(rfkill_global_mutex); [ 199.674629][ T4230] lock((work_completion)(&hdev->bg_scan_update)); [ 199.681301][ T4230] [ 199.681301][ T4230] *** DEADLOCK *** [ 199.681301][ T4230] [ 199.689710][ T4230] 3 locks held by kworker/0:6/4230: [ 199.695102][ T4230] #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 199.705722][ T4230] #1: ffffc900035cfd00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 199.716163][ T4230] #2: ffffffff8d6d6128 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 199.725657][ T4230] [ 199.725657][ T4230] stack backtrace: [ 199.731556][ T4230] CPU: 0 PID: 4230 Comm: kworker/0:6 Not tainted syzkaller #0 [ 199.739008][ T4230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 199.749596][ T4230] Workqueue: events rfkill_op_handler [ 199.754984][ T4230] Call Trace: [ 199.758278][ T4230] [ 199.761207][ T4230] dump_stack_lvl+0x188/0x250 [ 199.766059][ T4230] ? load_image+0x410/0x410 [ 199.770597][ T4230] ? show_regs_print_info+0x20/0x20 [ 199.775894][ T4230] ? print_circular_bug+0x12b/0x1a0 [ 199.781093][ T4230] check_noncircular+0x296/0x330 [ 199.786132][ T4230] ? look_up_lock_class+0x71/0x110 [ 199.791360][ T4230] ? add_chain_block+0x9b0/0x9b0 [ 199.796319][ T4230] ? lockdep_lock+0xf1/0x1f0 [ 199.801013][ T4230] ? __lock_acquire+0x1305/0x7b50 [ 199.806042][ T4230] ? mark_lock+0x94/0x320 [ 199.810680][ T4230] ? _find_first_zero_bit+0xd1/0xf0 [ 199.815966][ T4230] __lock_acquire+0x2c66/0x7b50 [ 199.821444][ T4230] ? verify_lock_unused+0x140/0x140 [ 199.826650][ T4230] ? verify_lock_unused+0x140/0x140 [ 199.831978][ T4230] lock_acquire+0x19e/0x400 [ 199.836920][ T4230] ? __flush_work+0xfa/0x210 [ 199.841595][ T4230] ? __lock_acquire+0x7b50/0x7b50 [ 199.846797][ T4230] ? read_lock_is_recursive+0x10/0x10 [ 199.852344][ T4230] ? start_flush_work+0x784/0x830 [ 199.857466][ T4230] __flush_work+0x116/0x210 [ 199.861976][ T4230] ? __flush_work+0xfa/0x210 [ 199.866561][ T4230] ? flush_work+0x20/0x20 [ 199.870895][ T4230] ? try_to_grab_pending+0xfb/0x820 [ 199.876088][ T4230] ? mark_lock+0x94/0x320 [ 199.880411][ T4230] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 199.886590][ T4230] ? lock_chain_count+0x20/0x20 [ 199.891443][ T4230] ? mark_lock+0x94/0x320 [ 199.895900][ T4230] ? __cancel_work_timer+0x36a/0x560 [ 199.901640][ T4230] __cancel_work_timer+0x3f4/0x560 [ 199.906751][ T4230] ? cancel_work_sync+0x20/0x20 [ 199.911624][ T4230] ? __cancel_work+0x1f9/0x2e0 [ 199.916385][ T4230] ? lockdep_hardirqs_on+0x94/0x140 [ 199.921583][ T4230] ? __cancel_work+0x27b/0x2e0 [ 199.926445][ T4230] ? cancel_work+0x20/0x20 [ 199.930885][ T4230] ? __rwlock_init+0x140/0x140 [ 199.935670][ T4230] hci_request_cancel_all+0xcc/0x300 [ 199.941192][ T4230] hci_dev_do_close+0x4e/0x1020 [ 199.946143][ T4230] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 199.952040][ T4230] ? _raw_spin_unlock+0x40/0x40 [ 199.957007][ T4230] hci_rfkill_set_block+0x101/0x180 [ 199.962296][ T4230] ? rcu_lock_release+0x20/0x20 [ 199.967157][ T4230] rfkill_set_block+0x1c1/0x3c0 [ 199.972016][ T4230] rfkill_epo+0x75/0x170 [ 199.976451][ T4230] rfkill_op_handler+0x76/0x220 [ 199.981316][ T4230] process_one_work+0x867/0xff0 [ 199.986521][ T4230] ? worker_detach_from_pool+0x240/0x240 [ 199.992338][ T4230] ? lockdep_hardirqs_off+0x70/0x100 [ 199.998241][ T4230] ? _raw_spin_lock_irq+0xb7/0xf0 [ 200.003489][ T4230] ? _raw_spin_lock_irqsave+0x100/0x100 [ 200.009034][ T4230] ? wq_worker_running+0x97/0x170 [ 200.014159][ T4230] worker_thread+0xad7/0x12a0 [ 200.018869][ T4230] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 200.024850][ T4230] kthread+0x42e/0x520 [ 200.029015][ T4230] ? rcu_lock_release+0x20/0x20 [ 200.033859][ T4230] ? kthread_blkcg+0xd0/0xd0 [ 200.038537][ T4230] ret_from_fork+0x1f/0x30 [ 200.042968][ T4230] [ 200.076554][ T6287] EXT4-fs: 78 callbacks suppressed [ 200.076570][ T6287] EXT4-fs (sda1): Remounting filesystem read-only [ 200.077300][ T6283] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.596: Detected aborted journal [ 200.086141][ T6290] loop2: detected capacity change from 0 to 512 [ 200.105058][ T6283] EXT4-fs (sda1): Remounting filesystem read-only [ 200.243033][ T6290] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 200.402001][ T5953] Bluetooth: hci1: command 0x0406 tx timeout [ 200.872943][ T3558] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 200.891217][ T3558] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 200.906643][ T3558] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 200.920537][ T3558] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 200.932422][ T3558] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1642: comm udevd: reading directory lblock 0 [ 200.949219][ T3558] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1480: comm udevd: reading directory lblock 0 [ 204.557856][ T3558] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 204.577092][ T3558] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 204.590281][ T3558] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 204.601980][ T3558] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 204.614646][ T3558] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1642: comm udevd: reading directory lblock 0 [ 204.628074][ T3558] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1480: comm udevd: reading directory lblock 0 [ 205.612258][ T3925] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #121: comm crond: reading directory lblock 0 [ 205.625314][ T3925] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #116: comm crond: reading directory lblock 0