last executing test programs: 9.925424385s ago: executing program 3 (id=444): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x143200, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230041) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c230050) close(r2) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000700)=ANY=[@ANYBLOB="fc000000190001002bbd70000000000000000000000000000000000000000001fe80000000000000000000000000000f", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000003c00000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080100000000000000010000000000000044000500000000"], 0xfc}}, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="200e4a0000005983ccb694f9b913f1ab251cdd0ce51faa847ef67f87695c00f2ff3e565c62dbf0ec0f937f4554031e52d7c1f9913a41064aa7ff8f531bd94c418adbab6f219b267d443d6140"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.247720373s ago: executing program 0 (id=454): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x201080a, &(0x7f00000005c0)={[{@minixdf}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000b00)="$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") symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84) ptrace$setregset(0x4205, 0x0, 0x202, &(0x7f00000000c0)={0x0}) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$dlm_control(0xffffffffffffff9c, 0x0, 0xad82, 0x0) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semget$private(0x0, 0x3, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x181081) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, 0x0) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r3, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_START(r3, 0x6f29) syz_open_procfs(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0) mount(0x0, 0x0, &(0x7f0000000080)='tmpfs\x00', 0x20849b, 0x0) 6.549427038s ago: executing program 4 (id=455): getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000300)=0x3ff, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x3, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x7, 0x10000000}}]}}]}, 0x58}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd25, 0x25dfdbfe, {0x60, 0x0, 0x0, r3, {}, {0x1, 0xa}, {0x7}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9271}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x441) 6.44211876s ago: executing program 1 (id=456): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/zram0/disksize\x00', 0x80001, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x90) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/zram0\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000080)="1954363cd5", 0x5, 0x3fa) close(r0) 6.376152424s ago: executing program 1 (id=457): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) close(0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) read$FUSE(r1, 0x0, 0x0) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185647, &(0x7f0000000080)={0xf0003e7, 0x1, 0x200006, 0xffffffffffffffff, 0xffe7, &(0x7f0000000000)={0x980912, 0xe43, '\x00', @value=0x5}}) close_range(r0, 0xffffffffffffffff, 0x0) 5.976828217s ago: executing program 4 (id=459): mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000008c0)='./img\x00', 0x42, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x2, 0x0) write(r0, &(0x7f0000000bc0)='1\n\x00', 0x2) 5.969667898s ago: executing program 2 (id=460): open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x104) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000080)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x400000000a0a01, 0x0) r5 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x39, 0x9}}, 0x20) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r5, 0x4112, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 5.852787532s ago: executing program 0 (id=461): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.202160668s ago: executing program 4 (id=462): r0 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000480)={'tunl0\x00', 0x0, 0x78c0, 0x80, 0x72d, 0x4, {{0xa, 0x4, 0x1, 0x8, 0x28, 0x65, 0x0, 0x4, 0x2f, 0x0, @loopback, @loopback, {[@timestamp_prespec={0x44, 0x4, 0xf7, 0x3, 0x5}, @ra={0x94, 0x4}, @generic={0x89, 0x3, "83"}, @timestamp_addr={0x44, 0x4, 0x96, 0x1, 0xf}, @timestamp_addr={0x44, 0x4, 0x5c, 0x1, 0x4}]}}}}}) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') semtimedop(0x0, &(0x7f0000000080)=[{0x1, 0x0, 0x1800}, {0x1, 0x9130, 0x1000}], 0x2, &(0x7f00000000c0)={0x0, 0x989680}) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x18) 4.729888706s ago: executing program 3 (id=463): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006740), 0x0, 0x40000102, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r1, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000140)=0x6, 0x4) r2 = add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200), 0x0, 0xfffffffffffffffd) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) request_key(0x0, &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000340)='-*.\x00', r2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[], 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3004c047}, 0x4000050) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_STD(r5, 0x40085618, &(0x7f0000000000)=0x1700) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmmsg$unix(r4, &(0x7f0000007b80), 0x0, 0x2000c080) syz_usb_connect(0x0, 0x24, 0x0, 0x0) recvmmsg(r1, &(0x7f0000006700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/31, 0x1f}, 0x11}], 0x621, 0x10162, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) 4.729171936s ago: executing program 1 (id=473): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) close(0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) read$FUSE(r1, 0x0, 0x0) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185647, &(0x7f0000000080)={0xf0003e7, 0x1, 0x200006, 0xffffffffffffffff, 0xffe7, &(0x7f0000000000)={0x980912, 0xe43, '\x00', @value=0x5}}) close_range(r0, 0xffffffffffffffff, 0x0) 3.914992216s ago: executing program 2 (id=464): r0 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000480)={'tunl0\x00', 0x0, 0x78c0, 0x80, 0x72d, 0x4, {{0xa, 0x4, 0x1, 0x8, 0x28, 0x65, 0x0, 0x4, 0x2f, 0x0, @loopback, @loopback, {[@timestamp_prespec={0x44, 0x4, 0xf7, 0x3, 0x5}, @ra={0x94, 0x4}, @generic={0x89, 0x3, "83"}, @timestamp_addr={0x44, 0x4, 0x96, 0x1, 0xf}, @timestamp_addr={0x44, 0x4, 0x5c, 0x1, 0x4}]}}}}}) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$nbd(r1, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') semtimedop(0x0, &(0x7f0000000080)=[{0x1, 0x0, 0x1800}, {0x1, 0x9130, 0x1000}], 0x2, &(0x7f00000000c0)={0x0, 0x989680}) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x18) 3.848321879s ago: executing program 4 (id=465): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$UHID_INPUT(r0, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r4) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x50, r5, 0x1, 0xffffffff, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x24, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x40}, @ETHTOOL_A_BITSET_MASK={0xc, 0x5, "0100000000000000"}, @ETHTOOL_A_BITSET_VALUE={0xc, 0x4, "0100000000000000"}]}]}, 0x50}}, 0x0) 3.838381391s ago: executing program 1 (id=466): socket$nl_route(0x10, 0x3, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000"], 0x0, 0x34}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8, 0x80}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0x0, 0x3, 0x8, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0) 3.639688453s ago: executing program 0 (id=467): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, 0x0, 0x0) shutdown(r5, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f00000000c0)="510003000000", 0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x570, 0x2c0, 0x0, 0xffffffff, 0x0, 0x360, 0x4d8, 0x4d8, 0xffffffff, 0x4d8, 0x4d8, 0x5, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x1d}, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x16}, 0x0, 0x288, 0x2c0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e494b2bfd892aa74009b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f5d010000fa5fad26a5925da2650a12bdf9d29248ae63e2349b63b5fb75ea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba00", 0x79, 0x2, {0x1}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_to_bridge\x00', {0x5, 0x1, 0x24, 0xffffffff, 0x4da01491, 0x5, 0x3bde, 0x1ff, 0x78, 0x40}, {0xb}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xd, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @gre_key=0x8}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x1, 0x3}, 0x1000, 0x100}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff, 0xffffff00, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @port=0x4e22, @port=0x4f23}}}}, {{@ip={@empty, @remote, 0xffffffff, 0xffffff00, 'vcan0\x00', 'pimreg1\x00', {}, {0xff}, 0x32, 0x2, 0x2d}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id=0x66}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5d0) 2.609227297s ago: executing program 2 (id=468): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/zram0/disksize\x00', 0x80001, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/zram0\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000080)="1954363cd5", 0x5, 0x3fa) close(r0) 2.551798829s ago: executing program 0 (id=469): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, 0x0, 0x0) r1 = gettid() rt_sigtimedwait(&(0x7f00000000c0)={[0x4000000a]}, 0x0, 0x0, 0x8) tkill(r1, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 2.320556167s ago: executing program 4 (id=470): getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000300)=0x3ff, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x3, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x7, 0x10000000}}]}}]}, 0x58}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd25, 0x25dfdbfe, {0x60, 0x0, 0x0, r3, {}, {0x1, 0xa}, {0x7}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9271}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x441) 2.231675926s ago: executing program 2 (id=471): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x201080a, &(0x7f00000005c0)={[{@minixdf}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000b00)="$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") symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84) ptrace$setregset(0x4205, 0x0, 0x202, &(0x7f00000000c0)={0x0}) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$dlm_control(0xffffffffffffff9c, 0x0, 0xad82, 0x0) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semget$private(0x0, 0x3, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x181081) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, 0x0) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r3, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_START(r3, 0x6f29) syz_open_procfs(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0) mount(0x0, 0x0, &(0x7f0000000080)='tmpfs\x00', 0x20849b, 0x0) 2.189968444s ago: executing program 1 (id=472): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3, 0x1, {}, 0x20000}) 2.173039678s ago: executing program 4 (id=474): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x143200, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230041) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c230050) close(r2) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000700)=ANY=[@ANYBLOB="fc000000190001002bbd70000000000000000000000000000000000000000001fe80000000000000000000000000000f", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000003c00000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080100000000000000010000000000000044000500000000"], 0xfc}}, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="200e4a0000005983ccb694f9b913f1ab251cdd0ce51faa847ef67f87695c00f2ff3e565c62dbf0ec0f937f4554031e52d7c1f9913a41064aa7ff8f531bd94c418adbab6f219b267d443d6140"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.013696161s ago: executing program 3 (id=475): open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x104) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000080)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x400000000a0a01, 0x0) r5 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x39, 0x9}}, 0x20) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r5, 0x4112, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.982166648s ago: executing program 0 (id=476): r0 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000480)={'tunl0\x00', 0x0, 0x78c0, 0x80, 0x72d, 0x4, {{0xa, 0x4, 0x1, 0x8, 0x28, 0x65, 0x0, 0x4, 0x2f, 0x0, @loopback, @loopback, {[@timestamp_prespec={0x44, 0x4, 0xf7, 0x3, 0x5}, @ra={0x94, 0x4}, @generic={0x89, 0x3, "83"}, @timestamp_addr={0x44, 0x4, 0x96, 0x1, 0xf}, @timestamp_addr={0x44, 0x4, 0x5c, 0x1, 0x4}]}}}}}) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') semtimedop(0x0, &(0x7f0000000080)=[{0x1, 0x0, 0x1800}, {0x1, 0x9130, 0x1000}], 0x2, &(0x7f00000000c0)={0x0, 0x989680}) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x18) 1.97086526s ago: executing program 1 (id=477): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2080, 0xc) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="669e0c0000005915481ef78e6e94bbce643c", @ANYRESHEX=r0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000001180)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8, 0x3a, '/dev/vbi#\x00', 0x3a, '\x00\xf7\x9a\xb8\x85\xeb\x9a\x1b\xc9\xb5>\xafUIm\xde\x93\xc1&g\xb9\x84\x10]{/Z', 0x3a, './file0'}, 0x4c) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000000100), 0xcd79, 0x141000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000040)={0x2, 0x0, 0x1, 0x7, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f00000001c0)={0x2, 0x1, 0x3, 0xc, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000000)={0xd71, 0x0, 0x1, 0x10, 0x4}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x109081, 0x18b) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0x801) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1804420, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x10e) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 1.24875954s ago: executing program 2 (id=478): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) close(0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) read$FUSE(r1, 0x0, 0x0) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185647, &(0x7f0000000080)={0xf0003e7, 0x1, 0x200006, 0xffffffffffffffff, 0xffe7, &(0x7f0000000000)={0x980912, 0xe43, '\x00', @value=0x5}}) close_range(r0, 0xffffffffffffffff, 0x0) 1.24823452s ago: executing program 3 (id=479): r0 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000480)={'tunl0\x00', 0x0, 0x78c0, 0x80, 0x72d, 0x4, {{0x9, 0x4, 0x1, 0x8, 0x24, 0x65, 0x0, 0x4, 0x2f, 0x0, @loopback, @loopback, {[@timestamp_prespec={0x44, 0x4, 0xf7, 0x3, 0x5}, @generic={0x89, 0x4, "8349"}, @timestamp_addr={0x44, 0x4, 0x96, 0x1, 0xf}, @timestamp_addr={0x44, 0x4, 0x5c, 0x1, 0x4}]}}}}}) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$nbd(r1, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') semtimedop(0x0, &(0x7f0000000080)=[{0x1, 0x0, 0x1800}, {0x1, 0x9130, 0x1000}], 0x2, &(0x7f00000000c0)={0x0, 0x989680}) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x18) 589.847387ms ago: executing program 0 (id=480): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x2014, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb27}, 0xffffffffffffff55) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000d40), 0x4bb, 0x800) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000003440)=""/4096) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close(r3) syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB, @ANYRES32=r6, @ANYBLOB], 0x60}}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4433000041000701fefffffffeffffff017c0000040042800c000180060006416558000020330280", @ANYRES8=r7, @ANYRES64=r7], 0x3344}, 0x1, 0x0, 0x0, 0x4040044}, 0xc000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000425bd7000fcdbdf040200010008003f0036000000080061"], 0x24}, 0x1, 0x0, 0x0, 0x59e4cac40840a955}, 0x20000000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="9656fbe39c3c4ce592e82be46ba9290900427a88bed5951e492f21c4892a567291da3df7acde70c041da0569e7e9ddf84609ce461c9ca63029"], 0x28}}, 0x0) 391.714799ms ago: executing program 3 (id=481): mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000840)='./config\x00', &(0x7f0000000880)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./img\x00', 0x42, 0x1ff) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x2, 0x0) write(r1, &(0x7f0000000980), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x2, 0x0) write(r2, &(0x7f0000000a40)='./img\n\x00', 0x6) close(r2) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r3, &(0x7f0000000ac0)='1\n\x00', 0x2) write(0xffffffffffffffff, &(0x7f0000000b40)='1\n\x00', 0x2) close(0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x2, 0x0) write(r4, &(0x7f0000000bc0)='1\n\x00', 0x2) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r5, &(0x7f0000000c80), 0x0) close(r5) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000d40), 0x2, 0x0) write(r6, 0x0, 0x0) nanosleep(&(0x7f0000000dc0)={0x0, 0xee6b280}, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000e00)='/proc/diskstats\x00', 0x0, 0x0) read(r7, &(0x7f0000000e40)=""/2000, 0x7d0) close(r7) 375.468622ms ago: executing program 2 (id=482): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$UHID_INPUT(r0, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r4) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x50, r5, 0x1, 0xffffffff, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x24, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x40}, @ETHTOOL_A_BITSET_MASK={0xc, 0x5, "0100000000000000"}, @ETHTOOL_A_BITSET_VALUE={0xc, 0x4, "0100000000000000"}]}]}, 0x50}}, 0x0) 0s ago: executing program 3 (id=483): socket$nl_route(0x10, 0x3, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000"], 0x0, 0x34}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8, 0x80}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0x0, 0x3, 0x8, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.107' (ED25519) to the list of known hosts. [ 44.462313][ T4172] cgroup: Unknown subsys name 'net' [ 44.606934][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 45.805195][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 47.548615][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 47.589104][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 47.647374][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 47.693196][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.700615][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.709069][ T4186] device bridge_slave_0 entered promiscuous mode [ 47.739635][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 47.751779][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.758845][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.768289][ T4186] device bridge_slave_1 entered promiscuous mode [ 47.802207][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.809318][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.817819][ T4185] device bridge_slave_0 entered promiscuous mode [ 47.831155][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.838248][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.846099][ T4185] device bridge_slave_1 entered promiscuous mode [ 47.870231][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.881414][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.899445][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 47.922806][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.929872][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.937663][ T4187] device bridge_slave_0 entered promiscuous mode [ 47.949934][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.957094][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.965158][ T4187] device bridge_slave_1 entered promiscuous mode [ 47.987444][ T4186] team0: Port device team_slave_0 added [ 48.004755][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.019784][ T4186] team0: Port device team_slave_1 added [ 48.036950][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.048243][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.074291][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.129978][ T4185] team0: Port device team_slave_0 added [ 48.135920][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.143331][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.150925][ T4188] device bridge_slave_0 entered promiscuous mode [ 48.165130][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.172204][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.198370][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.212441][ T4187] team0: Port device team_slave_0 added [ 48.218675][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.225693][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.251799][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.263875][ T4185] team0: Port device team_slave_1 added [ 48.275679][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.282800][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.290836][ T4188] device bridge_slave_1 entered promiscuous mode [ 48.298343][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.305561][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.313813][ T4189] device bridge_slave_0 entered promiscuous mode [ 48.322380][ T4187] team0: Port device team_slave_1 added [ 48.349612][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.356709][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.382684][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.394705][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.401827][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.409480][ T4189] device bridge_slave_1 entered promiscuous mode [ 48.439898][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.447071][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.473128][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.486035][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.500135][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.507664][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.533691][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.546472][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.560331][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.570791][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.600299][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.607392][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.633515][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.673385][ T4186] device hsr_slave_0 entered promiscuous mode [ 48.680199][ T4186] device hsr_slave_1 entered promiscuous mode [ 48.691370][ T4189] team0: Port device team_slave_0 added [ 48.720623][ T4189] team0: Port device team_slave_1 added [ 48.728444][ T4188] team0: Port device team_slave_0 added [ 48.738162][ T4185] device hsr_slave_0 entered promiscuous mode [ 48.745285][ T4185] device hsr_slave_1 entered promiscuous mode [ 48.752559][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.760279][ T4185] Cannot create hsr debugfs directory [ 48.778631][ T4187] device hsr_slave_0 entered promiscuous mode [ 48.785325][ T4187] device hsr_slave_1 entered promiscuous mode [ 48.792126][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.799682][ T4187] Cannot create hsr debugfs directory [ 48.812873][ T4188] team0: Port device team_slave_1 added [ 48.861296][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.868413][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.894341][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.908918][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.916006][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.942109][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.962939][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.969931][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.996548][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.028380][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.036087][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.062137][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.132822][ T4189] device hsr_slave_0 entered promiscuous mode [ 49.139539][ T4189] device hsr_slave_1 entered promiscuous mode [ 49.146274][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.153895][ T4189] Cannot create hsr debugfs directory [ 49.213831][ T4188] device hsr_slave_0 entered promiscuous mode [ 49.220504][ T4188] device hsr_slave_1 entered promiscuous mode [ 49.228121][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.236091][ T4188] Cannot create hsr debugfs directory [ 49.302670][ T4195] Bluetooth: hci3: command 0x0409 tx timeout [ 49.309214][ T4195] Bluetooth: hci0: command 0x0409 tx timeout [ 49.315653][ T1109] Bluetooth: hci2: command 0x0409 tx timeout [ 49.327385][ T1109] Bluetooth: hci4: command 0x0409 tx timeout [ 49.381957][ T4195] Bluetooth: hci1: command 0x0409 tx timeout [ 49.398090][ T4185] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.410974][ T4185] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.426058][ T4185] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.435465][ T4185] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.484500][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.495084][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.506770][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.515956][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.560853][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.570665][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.581356][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.600017][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.657804][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.679051][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.690323][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.699626][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.710657][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.733107][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.744100][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.758041][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.774709][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.793714][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.807708][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.816981][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.824229][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.853865][ T4188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 49.863870][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.872348][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.880889][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.889693][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.896794][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.905067][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.914659][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.923242][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.931170][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.944556][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.964692][ T4188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 49.975783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.985719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.994373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.007109][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.016925][ T4188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 50.027548][ T4188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 50.038369][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.047693][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.056297][ T442] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.063408][ T442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.078804][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.086972][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.097116][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.105682][ T442] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.112791][ T442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.120881][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.129491][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.139207][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.148774][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.180478][ T4185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 50.192438][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.207450][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.215281][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.223298][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.234240][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.243458][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.251634][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.260863][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.271261][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.279628][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.287852][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.296363][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.305131][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.316927][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.325067][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.334412][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.364428][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.377757][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.403858][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.423756][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.437849][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.446397][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.453473][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.462143][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.470648][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.479295][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.486375][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.494559][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.506284][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.529506][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.565275][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.584693][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.599268][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.627156][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.645966][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.655409][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.665438][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.674149][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.682870][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.691214][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.704305][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.712769][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.721842][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.748233][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.766981][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.779269][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.796520][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.813708][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.821536][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.830778][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.855141][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.875634][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.890754][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.899705][ T427] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.906847][ T427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.934644][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.942897][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.951470][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.960324][ T427] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.967561][ T427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.975480][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.985456][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.994458][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.003409][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.012360][ T427] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.019390][ T427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.027151][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.035804][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.077159][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.086260][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.094329][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.103806][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.112474][ T442] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.119535][ T442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.127492][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.137017][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.146086][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.155187][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.164370][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.173117][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.181584][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.190636][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.198174][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.208562][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.218389][ T4185] device veth0_vlan entered promiscuous mode [ 51.230205][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.238363][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.246729][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.254720][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.264295][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.273387][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.282261][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.290627][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.308089][ T4185] device veth1_vlan entered promiscuous mode [ 51.320102][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 51.330879][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.347869][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.361234][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.369926][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.378410][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.386786][ T4230] Bluetooth: hci4: command 0x041b tx timeout [ 51.392671][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.393335][ T4230] Bluetooth: hci2: command 0x041b tx timeout [ 51.401182][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.407006][ T4230] Bluetooth: hci0: command 0x041b tx timeout [ 51.419992][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.420841][ T4230] Bluetooth: hci3: command 0x041b tx timeout [ 51.429441][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.460583][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 51.473869][ T4230] Bluetooth: hci1: command 0x041b tx timeout [ 51.480175][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.502185][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 51.510821][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.519012][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.529611][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.538640][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.548621][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.557328][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.566125][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.575720][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.604910][ T4185] device veth0_macvtap entered promiscuous mode [ 51.620061][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.629828][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.644765][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.657018][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.681992][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.695634][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.707137][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.718982][ T4185] device veth1_macvtap entered promiscuous mode [ 51.733357][ T4187] device veth0_vlan entered promiscuous mode [ 51.758880][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.767763][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.775676][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.788960][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.798831][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.807132][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.818609][ T4189] device veth0_vlan entered promiscuous mode [ 51.830676][ T4187] device veth1_vlan entered promiscuous mode [ 51.839094][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.847548][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.868032][ T4189] device veth1_vlan entered promiscuous mode [ 51.880980][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.896967][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.909824][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.925516][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.934027][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 51.942950][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.952245][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.960794][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.970053][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.978935][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.986854][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.008821][ T4185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.018026][ T4185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.027740][ T4185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.039646][ T4185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.054801][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.077383][ T4189] device veth0_macvtap entered promiscuous mode [ 52.091644][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.107214][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.117033][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.127186][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.136313][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.157072][ T4187] device veth0_macvtap entered promiscuous mode [ 52.166010][ T4189] device veth1_macvtap entered promiscuous mode [ 52.177922][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.186480][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.195331][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.221703][ T4187] device veth1_macvtap entered promiscuous mode [ 52.236797][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.245753][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.266818][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.277718][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.290227][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.305838][ T4186] device veth0_vlan entered promiscuous mode [ 52.322624][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.340131][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.349685][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.359939][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.374211][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.385200][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.396465][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.416200][ T4186] device veth1_vlan entered promiscuous mode [ 52.430472][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.438716][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.446495][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 52.455084][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.464111][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.474286][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.485306][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.497598][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.508300][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.520149][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.533512][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.542436][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.551113][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.560166][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.591815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 52.601164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.610157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.619063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.627545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.638494][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.649391][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.659538][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.671120][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.683557][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.694526][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.703486][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.712418][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.721107][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.748114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.757718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.766545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.775256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.793488][ T4186] device veth0_macvtap entered promiscuous mode [ 52.813707][ T427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.826570][ T427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.855524][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.868647][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.877471][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.890929][ T4188] device veth0_vlan entered promiscuous mode [ 52.899145][ T4186] device veth1_macvtap entered promiscuous mode [ 52.932710][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.940494][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.977839][ T4188] device veth1_vlan entered promiscuous mode [ 52.996944][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.004617][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.011752][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.021335][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.033607][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.044146][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.053989][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.065474][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.076799][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.107155][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.115486][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.124492][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.133197][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.141896][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.150427][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.159264][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.172168][ T4241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.180008][ T4241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.193430][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.205972][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.216228][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.227535][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.238309][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.248790][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.260588][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.269044][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.281655][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.297944][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.320315][ T4188] device veth0_macvtap entered promiscuous mode [ 53.333538][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.343701][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.353316][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.362474][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.381567][ T4188] device veth1_macvtap entered promiscuous mode [ 53.401117][ T442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.412246][ T442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.414646][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.455843][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.474575][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.477759][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.489633][ T4233] Bluetooth: hci3: command 0x040f tx timeout [ 53.497176][ T4233] Bluetooth: hci0: command 0x040f tx timeout [ 53.498087][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.503410][ T4233] Bluetooth: hci2: command 0x040f tx timeout [ 53.517651][ T4233] Bluetooth: hci4: command 0x040f tx timeout [ 53.532684][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.548294][ T4233] Bluetooth: hci1: command 0x040f tx timeout [ 53.619544][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.637502][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.648828][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.664862][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.675549][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.686473][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.697109][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.709254][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.728281][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.739848][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.754158][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.772797][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.810106][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.353812][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.381450][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.482069][ T442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.489969][ T442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.536443][ T4289] FAULT_INJECTION: forcing a failure. [ 54.536443][ T4289] name fail_futex, interval 1, probability 0, space 0, times 1 [ 54.589243][ T4289] CPU: 1 PID: 4289 Comm: syz.3.10 Not tainted syzkaller #0 [ 54.596483][ T4289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 54.606564][ T4289] Call Trace: [ 54.609850][ T4289] [ 54.612783][ T4289] dump_stack_lvl+0x188/0x250 [ 54.617482][ T4289] ? show_regs_print_info+0x20/0x20 [ 54.622688][ T4289] ? load_image+0x410/0x410 [ 54.627210][ T4289] should_fail+0x383/0x4b0 [ 54.631638][ T4289] get_futex_key+0x1a1/0x12d0 [ 54.636332][ T4289] ? futex_wait_restart+0x250/0x250 [ 54.641541][ T4289] ? __lock_acquire+0x13dc/0x7b50 [ 54.646582][ T4289] futex_wake+0x101/0x540 [ 54.650929][ T4289] ? futex_wait+0x680/0x680 [ 54.655434][ T4289] ? verify_lock_unused+0x140/0x140 [ 54.660646][ T4289] ? verify_lock_unused+0x140/0x140 [ 54.665865][ T4289] do_futex+0xd83/0x12b0 [ 54.670121][ T4289] ? lockdep_hardirqs_on+0x94/0x140 [ 54.675328][ T4289] ? __local_bh_enable_ip+0x136/0x1c0 [ 54.680716][ T4289] ? futex_exit_release+0x1c0/0x1c0 [ 54.685925][ T4289] ? __context_tracking_exit+0x4c/0x80 [ 54.691395][ T4289] __se_sys_futex+0x389/0x420 [ 54.696081][ T4289] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 54.702078][ T4289] ? __x64_sys_futex+0xf0/0xf0 [ 54.706859][ T4289] ? __x64_sys_futex+0x1d/0xf0 [ 54.711629][ T4289] do_syscall_64+0x4c/0xa0 [ 54.716048][ T4289] ? clear_bhb_loop+0x30/0x80 [ 54.720731][ T4289] ? clear_bhb_loop+0x30/0x80 [ 54.725412][ T4289] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 54.731310][ T4289] RIP: 0033:0x7feece32d159 [ 54.735730][ T4289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.755342][ T4289] RSP: 002b:00007feecc5850e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 54.763763][ T4289] RAX: ffffffffffffffda RBX: 00007feece5b4fa8 RCX: 00007feece32d159 [ 54.771740][ T4289] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007feece5b4fac [ 54.779718][ T4289] RBP: 00007feece5b4fa0 R08: 001d91971c0a8c4c R09: 0000000000000000 [ 54.787697][ T4289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.795674][ T4289] R13: 00007feece5b5038 R14: 00007ffd497d6dd0 R15: 00007ffd497d6eb8 [ 54.803665][ T4289] [ 54.829322][ T4291] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 54.871395][ T4292] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.038149][ T4295] x_tables: unsorted entry at hook 3 [ 55.261140][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.287994][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.305168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.322170][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.340368][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.350681][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.370079][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.380279][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.401172][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.411359][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.427238][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.437426][ T4234] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 55.469796][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.498583][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.532891][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.572288][ T1109] Bluetooth: hci2: command 0x0419 tx timeout [ 55.574625][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.578351][ T1109] Bluetooth: hci0: command 0x0419 tx timeout [ 55.587599][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.603424][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.611983][ T1109] Bluetooth: hci3: command 0x0419 tx timeout [ 55.612180][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.639914][ T4270] Bluetooth: hci1: command 0x0419 tx timeout [ 55.655259][ T4270] Bluetooth: hci4: command 0x0419 tx timeout [ 55.842483][ T4234] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 55.920321][ T4234] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 56.090076][ T4234] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 56.441722][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 56.461712][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 56.471704][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 56.481709][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 56.491706][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 56.581551][ T4304] No source specified [ 56.587069][ T4234] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 56.597904][ T4234] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 56.612670][ T4234] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 56.622011][ T4234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.656596][ T4297] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 57.281684][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 57.411683][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 57.561702][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 57.611708][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 57.621703][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 57.952595][ T4283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.980831][ T4283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.022294][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.053523][ T4305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.107148][ T4305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.121814][ T4234] usb 4-1: string descriptor 0 read error: -71 [ 58.316641][ T4234] usb 4-1: USB disconnect, device number 2 [ 58.316804][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.351359][ T4321] bridge0: port 3(syz_tun) entered blocking state [ 58.358104][ T4321] bridge0: port 3(syz_tun) entered disabled state [ 58.363021][ T4322] xt_hashlimit: size too large, truncated to 1048576 [ 58.365897][ T4321] device syz_tun entered promiscuous mode [ 58.371416][ T4322] xt_hashlimit: max too large, truncated to 1048576 [ 58.377728][ T4321] bridge0: port 3(syz_tun) entered blocking state [ 58.390373][ T4321] bridge0: port 3(syz_tun) entered forwarding state [ 58.398330][ T1109] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 58.406112][ T4321] bridge0: port 4(ip6gretap0) entered blocking state [ 58.412936][ T4321] bridge0: port 4(ip6gretap0) entered disabled state [ 58.421062][ T4321] device ip6gretap0 entered promiscuous mode [ 58.428645][ T4321] bridge0: port 4(ip6gretap0) entered blocking state [ 58.435378][ T4321] bridge0: port 4(ip6gretap0) entered forwarding state [ 58.892229][ T4195] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 59.460988][ T4336] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 59.476796][ T4338] FAULT_INJECTION: forcing a failure. [ 59.476796][ T4338] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 59.490861][ T4338] CPU: 1 PID: 4338 Comm: syz.3.21 Not tainted syzkaller #0 [ 59.498074][ T4338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 59.508171][ T4338] Call Trace: [ 59.511455][ T4338] [ 59.514393][ T4338] dump_stack_lvl+0x188/0x250 [ 59.519087][ T4338] ? show_regs_print_info+0x20/0x20 [ 59.524299][ T4338] ? load_image+0x410/0x410 [ 59.528813][ T4338] ? uncharge_page+0x490/0x490 [ 59.533584][ T4338] should_fail+0x383/0x4b0 [ 59.538012][ T4338] prepare_alloc_pages+0x1e3/0x5b0 [ 59.543133][ T4338] __alloc_pages+0x11b/0x480 [ 59.547725][ T4338] ? zone_statistics+0x170/0x170 [ 59.552666][ T4338] ? rcu_lock_acquire+0x30/0x30 [ 59.557519][ T4338] ? alloc_pages+0x452/0x560 [ 59.562115][ T4338] __get_free_pages+0x8/0x30 [ 59.566706][ T4338] __tlb_remove_page_size+0x1f2/0x3f0 [ 59.572107][ T4338] unmap_page_range+0xfcf/0x2410 [ 59.577069][ T4338] unmap_vmas+0x131/0x250 [ 59.581410][ T4338] ? unmap_page_range+0x2410/0x2410 [ 59.586615][ T4338] ? __mutex_lock_common+0x435/0x2400 [ 59.592000][ T4338] ? exit_mm_release+0x16/0x30 [ 59.596777][ T4338] exit_mmap+0x3b9/0x640 [ 59.601024][ T4338] ? vm_brk+0x20/0x20 [ 59.605023][ T4338] ? uprobe_clear_state+0x2f6/0x460 [ 59.610229][ T4338] __mmput+0x115/0x390 [ 59.614299][ T4338] exit_mm+0x632/0x7b0 [ 59.618362][ T4338] ? perf_pmu_migrate_context+0xb70/0xb70 [ 59.624083][ T4338] ? do_exit+0x2110/0x2110 [ 59.628498][ T4338] ? __ia32_sys_timer_delete+0x40/0x40 [ 59.633998][ T4338] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 59.639462][ T4338] ? tty_audit_exit+0x149/0x1f0 [ 59.644314][ T4338] do_exit+0x5b8/0x2110 [ 59.648476][ T4338] ? put_task_struct+0x80/0x80 [ 59.653238][ T4338] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 59.659221][ T4338] ? _raw_spin_lock_irq+0xb7/0xf0 [ 59.664247][ T4338] do_group_exit+0x12c/0x2f0 [ 59.668834][ T4338] ? lockdep_hardirqs_on+0x94/0x140 [ 59.674031][ T4338] get_signal+0x7eb/0x12e0 [ 59.678458][ T4338] arch_do_signal_or_restart+0xe6/0x12a0 [ 59.684094][ T4338] ? release_firmware_map_entry+0x190/0x190 [ 59.689989][ T4338] ? preempt_schedule_irq+0xe6/0x160 [ 59.695272][ T4338] ? lockdep_hardirqs_off+0x70/0x100 [ 59.700558][ T4338] ? futex_exit_release+0x1c0/0x1c0 [ 59.705886][ T4338] ? get_sigframe_size+0x10/0x10 [ 59.710824][ T4338] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 59.716810][ T4338] ? __cond_resched+0xd0/0xd0 [ 59.721506][ T4338] ? exit_to_user_mode_loop+0x3b/0x130 [ 59.726963][ T4338] exit_to_user_mode_loop+0x9e/0x130 [ 59.732251][ T4338] exit_to_user_mode_prepare+0xee/0x180 [ 59.737797][ T4338] syscall_exit_to_user_mode+0x16/0x40 [ 59.743262][ T4338] do_syscall_64+0x58/0xa0 [ 59.747680][ T4338] ? clear_bhb_loop+0x30/0x80 [ 59.752443][ T4338] ? clear_bhb_loop+0x30/0x80 [ 59.757121][ T4338] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 59.763024][ T4338] RIP: 0033:0x7feece32d159 [ 59.767439][ T4338] Code: Unable to access opcode bytes at RIP 0x7feece32d12f. [ 59.774799][ T4338] RSP: 002b:00007feecc5640e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 59.783214][ T4338] RAX: 0000000000000001 RBX: 00007feece5b5098 RCX: 00007feece32d159 [ 59.791184][ T4338] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007feece5b509c [ 59.799152][ T4338] RBP: 00007feece5b5090 R08: 0018cce30b2723dc R09: 0000000000000000 [ 59.807125][ T4338] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 59.815092][ T4338] R13: 00007feece5b5128 R14: 00007ffd497d6dd0 R15: 00007ffd497d6eb8 [ 59.823078][ T4338] [ 59.834192][ T4339] xt_hashlimit: size too large, truncated to 1048576 [ 59.840893][ T4339] xt_hashlimit: max too large, truncated to 1048576 [ 59.936149][ T4336] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.993672][ T4195] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 60.015671][ T1109] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.020282][ T4195] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 60.035433][ T1109] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.046931][ T1109] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 60.057353][ T1109] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 60.063810][ T4195] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.225371][ T4195] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 61.244673][ T4195] usb 5-1: config 1 has no interface number 0 [ 61.259117][ T4195] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 61.278374][ T4195] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.327763][ T1109] usb 1-1: string descriptor 0 read error: -71 [ 61.340019][ T1109] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 61.350780][ T4360] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 61.363140][ T4195] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 62.370636][ T1109] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.401937][ T1109] usb 1-1: can't set config #1, error -71 [ 62.426262][ T1109] usb 1-1: USB disconnect, device number 2 [ 62.472898][ T4195] snd_usb_pod 5-1:1.1: set_interface failed [ 62.479285][ T4195] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 62.528269][ T4195] snd_usb_pod: probe of 5-1:1.1 failed with error -71 [ 62.700036][ T4195] usb 5-1: USB disconnect, device number 2 [ 63.173628][ T4378] xt_hashlimit: size too large, truncated to 1048576 [ 63.180423][ T4378] xt_hashlimit: max too large, truncated to 1048576 [ 64.443731][ T4396] No source specified [ 64.642619][ T4400] netlink: 128 bytes leftover after parsing attributes in process `syz.4.36'. [ 64.651874][ T4400] netlink: 20 bytes leftover after parsing attributes in process `syz.4.36'. [ 64.660740][ T4400] netlink: 20 bytes leftover after parsing attributes in process `syz.4.36'. [ 64.679547][ T4399] xt_hashlimit: size too large, truncated to 1048576 [ 64.686329][ T4399] xt_hashlimit: max too large, truncated to 1048576 [ 65.357532][ T4405] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 65.400191][ T4404] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 65.586200][ T4404] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 65.804975][ T4416] jffs2: notice: (4416) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 66.706511][ T4427] xt_hashlimit: size too large, truncated to 1048576 [ 66.713367][ T4427] xt_hashlimit: max too large, truncated to 1048576 [ 66.827515][ T4433] autofs4:pid:4433:autofs_fill_super: called with bogus options [ 68.785004][ T4449] sched: RT throttling activated [ 69.395402][ T4459] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 70.803243][ T4459] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.243684][ T4485] netlink: 32 bytes leftover after parsing attributes in process `syz.4.61'. [ 72.121062][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.151323][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 75.145784][ T4512] No source specified [ 75.291819][ T4232] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 75.652155][ T4232] usb 4-1: config 0 has no interfaces? [ 75.658029][ T4232] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 75.744189][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.923700][ T4232] usb 4-1: config 0 descriptor?? [ 76.344334][ T7] cfg80211: failed to load regulatory.db [ 79.451188][ T7] usb 4-1: USB disconnect, device number 3 [ 80.592103][ T4540] device syzkaller0 entered promiscuous mode [ 81.518861][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.589083][ T4553] FAULT_INJECTION: forcing a failure. [ 81.589083][ T4553] name failslab, interval 1, probability 0, space 0, times 1 [ 81.610543][ T4553] CPU: 0 PID: 4553 Comm: syz.0.83 Not tainted syzkaller #0 [ 81.617762][ T4553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.627817][ T4553] Call Trace: [ 81.631091][ T4553] [ 81.634019][ T4553] dump_stack_lvl+0x188/0x250 [ 81.638700][ T4553] ? show_regs_print_info+0x20/0x20 [ 81.643899][ T4553] ? load_image+0x410/0x410 [ 81.648402][ T4553] ? __might_sleep+0xf0/0xf0 [ 81.652988][ T4553] ? __lock_acquire+0x7b50/0x7b50 [ 81.658018][ T4553] should_fail+0x383/0x4b0 [ 81.662443][ T4553] should_failslab+0x5/0x20 [ 81.666943][ T4553] slab_pre_alloc_hook+0x51/0xc0 [ 81.671892][ T4553] kmem_cache_alloc_trace+0x47/0x290 [ 81.677177][ T4553] ? __list_lru_init+0x535/0xac0 [ 81.682121][ T4553] __list_lru_init+0x535/0xac0 [ 81.686904][ T4553] alloc_super+0x787/0x970 [ 81.691340][ T4553] ? kill_litter_super+0xa0/0xa0 [ 81.696281][ T4553] sget_fc+0x2d4/0x6f0 [ 81.700349][ T4553] ? kill_litter_super+0xa0/0xa0 [ 81.705282][ T4553] ? shmem_reconfigure+0x790/0x790 [ 81.710398][ T4553] get_tree_nodev+0x26/0x160 [ 81.714992][ T4553] vfs_get_tree+0x88/0x270 [ 81.719413][ T4553] do_new_mount+0x247/0xa40 [ 81.723925][ T4553] __se_sys_mount+0x2e3/0x3d0 [ 81.728603][ T4553] ? __x64_sys_mount+0xc0/0xc0 [ 81.733366][ T4553] ? lockdep_hardirqs_on+0x94/0x140 [ 81.738568][ T4553] ? __x64_sys_mount+0x1c/0xc0 [ 81.743331][ T4553] do_syscall_64+0x4c/0xa0 [ 81.747745][ T4553] ? clear_bhb_loop+0x30/0x80 [ 81.752418][ T4553] ? clear_bhb_loop+0x30/0x80 [ 81.757096][ T4553] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.762986][ T4553] RIP: 0033:0x7f2c3075f159 [ 81.767401][ T4553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.787110][ T4553] RSP: 002b:00007f2c2e9b7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 81.795534][ T4553] RAX: ffffffffffffffda RBX: 00007f2c309e6fa0 RCX: 00007f2c3075f159 [ 81.803507][ T4553] RDX: 0000200000000540 RSI: 0000200000003c40 RDI: 0000000000000000 [ 81.811478][ T4553] RBP: 00007f2c307f606b R08: 0000200000000700 R09: 0000000000000000 [ 81.819446][ T4553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.827418][ T4553] R13: 00007f2c309e7038 R14: 00007f2c309e6fa0 R15: 00007ffc4e670c38 [ 81.835405][ T4553] [ 81.971872][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 82.091893][ T7] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 82.261883][ T7] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 82.276595][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.286609][ T7] usb 2-1: Product: syz [ 82.290776][ T7] usb 2-1: Manufacturer: syz [ 82.301177][ T7] usb 2-1: SerialNumber: syz [ 82.320038][ T7] usb 2-1: config 0 descriptor?? [ 82.366262][ T7] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 82.379603][ T7] usb 2-1: setting power ON [ 82.386708][ T7] dvb-usb: bulk message failed: -22 (2/0) [ 82.418307][ T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 82.492051][ T7] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 82.540095][ T7] usb 2-1: media controller created [ 82.567534][ T4549] dvb-usb: bulk message failed: -22 (3/0) [ 82.597094][ T4549] dvb-usb: bulk message failed: -22 (3/0) [ 82.614692][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 82.648233][ T7] usb 2-1: selecting invalid altsetting 6 [ 82.654612][ T7] usb 2-1: digital interface selection failed (-22) [ 82.662562][ T7] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 82.716438][ T7] usb 2-1: setting power OFF [ 82.722878][ T7] dvb-usb: bulk message failed: -22 (2/0) [ 82.729565][ T7] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 82.739308][ T7] (NULL device *): no alternate interface [ 82.762350][ T7] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 82.791611][ T7] usb 2-1: USB disconnect, device number 2 [ 82.888789][ T4555] zram0: detected capacity change from 0 to 8 [ 83.091970][ T4564] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 88.502744][ T4598] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 88.527801][ T4602] comedi comedi1: Minor 0 could not be opened [ 89.119988][ T25] audit: type=1800 audit(1790329338.639:2): pid=4609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.99" name="attr_allow_any_host" dev="configfs" ino=34054 res=0 errno=0 [ 89.636358][ T4619] loop4: detected capacity change from 0 to 512 [ 89.968107][ T4619] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 89.992639][ T4195] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 90.113166][ T4619] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 90.268164][ T4619] EXT4-fs (loop4): 1 truncate cleaned up [ 90.274603][ T4195] usb 1-1: Using ep0 maxpacket: 32 [ 90.311023][ T4619] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none. [ 92.999677][ T4636] ODEBUG: Out of memory. ODEBUG disabled [ 93.139571][ T4636] syz.2.103 (4636) used greatest stack depth: 19440 bytes left [ 94.252044][ T4195] usb 1-1: unable to read config index 0 descriptor/all [ 94.261987][ T4195] usb 1-1: can't read configurations, error -71 [ 95.473208][ T4650] No source specified [ 96.481542][ T25] audit: type=1326 audit(1790329345.999:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4657 comm="syz.0.113" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3075f159 code=0x7ffc0000 [ 96.492744][ T4656] Trying to write to read-only block-device nullb0 [ 96.591793][ T25] audit: type=1326 audit(1790329346.019:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4657 comm="syz.0.113" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3075f159 code=0x7ffc0000 [ 96.838215][ T25] audit: type=1326 audit(1790329346.049:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4657 comm="syz.0.113" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2c3075f159 code=0x7ffc0000 [ 96.910897][ T25] audit: type=1326 audit(1790329346.049:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4657 comm="syz.0.113" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3075f159 code=0x7ffc0000 [ 96.942493][ T25] audit: type=1326 audit(1790329346.049:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4657 comm="syz.0.113" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3075f159 code=0x7ffc0000 [ 96.971126][ T4666] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 97.004154][ T25] audit: type=1326 audit(1790329346.059:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4657 comm="syz.0.113" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f2c3075f159 code=0x7ffc0000 [ 97.031040][ T4662] Trying to write to read-only block-device nullb0 [ 97.038337][ T25] audit: type=1326 audit(1790329346.059:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4657 comm="syz.0.113" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3075f159 code=0x7ffc0000 [ 97.066846][ T25] audit: type=1326 audit(1790329346.059:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4657 comm="syz.0.113" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3075f159 code=0x7ffc0000 [ 97.066968][ T4662] Trying to write to read-only block-device nullb0 [ 97.298855][ T4662] Trying to write to read-only block-device nullb0 [ 97.314237][ T4662] Trying to write to read-only block-device nullb0 [ 97.323494][ T4662] Trying to write to read-only block-device nullb0 [ 97.330482][ T4662] Trying to write to read-only block-device nullb0 [ 97.338723][ T4662] Trying to write to read-only block-device nullb0 [ 97.346086][ T4662] Trying to write to read-only block-device nullb0 [ 97.353127][ T4662] Trying to write to read-only block-device nullb0 [ 97.602676][ T4671] netlink: 256 bytes leftover after parsing attributes in process `syz.1.115'. [ 98.305351][ T4674] loop0: detected capacity change from 0 to 4096 [ 98.332410][ T4675] Zero length message leads to an empty skb [ 98.358399][ T4677] loop2: detected capacity change from 0 to 512 [ 98.398011][ T4674] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 98.471844][ T4674] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 98.561943][ T4674] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 98.569140][ T4674] loop0: [ 98.766980][ T4677] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 99.722756][ T4677] EXT4-fs (loop2): 1 truncate cleaned up [ 99.732640][ T4692] overlayfs: failed to resolve './file0': -2 [ 99.792545][ T4677] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none. [ 100.244213][ T4689] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.448258][ T4713] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 101.497934][ T4713] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 101.782481][ T4232] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 101.855722][ T4725] netlink: 256 bytes leftover after parsing attributes in process `syz.2.127'. [ 102.876340][ T25] audit: type=1800 audit(1790329352.399:11): pid=4730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.132" name="attr_allow_any_host" dev="configfs" ino=34291 res=0 errno=0 [ 103.147443][ T4732] nvmet: adding nsid 1 to subsystem testsubsys [ 103.153026][ T4731] ip_tables: iptables: counters copy to user failed while replacing table [ 103.165484][ T25] audit: type=1800 audit(1790329352.689:12): pid=4730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.132" name="device_path" dev="configfs" ino=34294 res=0 errno=0 [ 103.175256][ T4730] nvmet: failed to open file ./img: (-22) [ 103.301906][ T25] audit: type=1800 audit(1790329352.689:13): pid=4730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.132" name="enable" dev="configfs" ino=34295 res=0 errno=0 [ 103.411900][ T4232] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 103.432409][ T25] audit: type=1800 audit(1790329352.959:14): pid=4730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.132" name="addr_trtype" dev="configfs" ino=34299 res=0 errno=0 [ 103.458361][ T4232] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 103.484694][ T4737] overlayfs: failed to resolve './file1': -2 [ 103.491302][ T4232] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 103.529402][ T4232] usb 5-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 103.540708][ T4730] nvmet: transport type 0 not supported [ 103.558886][ T4232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.560176][ T4740] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.616431][ T4732] nvme_fabrics: missing parameter 'transport=%s' [ 103.624557][ T4732] nvme_fabrics: missing parameter 'nqn=%s' [ 103.632359][ T4714] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 103.785463][ T4745] loop3: detected capacity change from 0 to 512 [ 103.835544][ T4745] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 103.858056][ T4746] FAULT_INJECTION: forcing a failure. [ 103.858056][ T4746] name failslab, interval 1, probability 0, space 0, times 0 [ 103.918019][ T4746] CPU: 1 PID: 4746 Comm: syz.2.137 Not tainted syzkaller #0 [ 103.925346][ T4746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.935406][ T4746] Call Trace: [ 103.938688][ T4746] [ 103.941616][ T4746] dump_stack_lvl+0x188/0x250 [ 103.946311][ T4746] ? show_regs_print_info+0x20/0x20 [ 103.951515][ T4746] ? load_image+0x410/0x410 [ 103.956021][ T4746] ? __might_sleep+0xf0/0xf0 [ 103.960612][ T4746] ? __lock_acquire+0x7b50/0x7b50 [ 103.965639][ T4746] ? mark_lock+0x94/0x320 [ 103.969975][ T4746] should_fail+0x383/0x4b0 [ 103.974399][ T4746] should_failslab+0x5/0x20 [ 103.978901][ T4746] slab_pre_alloc_hook+0x51/0xc0 [ 103.983842][ T4746] ? __d_alloc+0x27/0x6d0 [ 103.988181][ T4746] kmem_cache_alloc+0x3d/0x280 [ 103.992955][ T4746] __d_alloc+0x27/0x6d0 [ 103.997120][ T4746] d_alloc_parallel+0x7b/0x1320 [ 104.001991][ T4746] ? __init_waitqueue_head+0xa4/0x140 [ 104.007378][ T4746] __lookup_slow+0x134/0x410 [ 104.011970][ T4746] ? lookup_one_len+0x2d0/0x2d0 [ 104.016840][ T4746] lookup_one_len+0x19d/0x2d0 [ 104.021519][ T4746] ? lookup_one_common+0x460/0x460 [ 104.026630][ T4746] ? do_raw_spin_unlock+0x11d/0x230 [ 104.031826][ T4746] ? mntput+0x64/0xc0 [ 104.035826][ T4746] start_creating+0x184/0x310 [ 104.040507][ T4746] __debugfs_create_file+0x6f/0x500 [ 104.045705][ T4746] ? debugfs_create_dir+0x423/0x4c0 [ 104.050907][ T4746] blk_mq_debugfs_register_sched+0x1aa/0x200 [ 104.056901][ T4746] blk_mq_init_sched+0x798/0x1080 [ 104.061945][ T4746] elevator_switch+0x2ff/0x930 [ 104.066713][ T4746] elv_iosched_store+0x34e/0x3f0 [ 104.071650][ T4746] ? elevator_switch+0x930/0x930 [ 104.076594][ T4746] queue_attr_store+0x8a/0xc0 [ 104.081278][ T4746] ? sysfs_kf_read+0x350/0x350 [ 104.086046][ T4746] kernfs_fop_write_iter+0x3a8/0x500 [ 104.091343][ T4746] vfs_write+0x748/0xd70 [ 104.095596][ T4746] ? file_end_write+0x250/0x250 [ 104.100469][ T4746] ? mutex_lock_nested+0x17/0x20 [ 104.105411][ T4746] ? __fdget_pos+0x2bf/0x370 [ 104.109997][ T4746] ? ksys_write+0x70/0x260 [ 104.114415][ T4746] ksys_write+0x153/0x260 [ 104.118756][ T4746] ? __ia32_sys_read+0x80/0x80 [ 104.123542][ T4746] ? lockdep_hardirqs_on+0x94/0x140 [ 104.128759][ T4746] do_syscall_64+0x4c/0xa0 [ 104.133181][ T4746] ? clear_bhb_loop+0x30/0x80 [ 104.137866][ T4746] ? clear_bhb_loop+0x30/0x80 [ 104.142549][ T4746] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.148446][ T4746] RIP: 0033:0x7f3826e56159 [ 104.152869][ T4746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.172475][ T4746] RSP: 002b:00007f38250ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 104.180894][ T4746] RAX: ffffffffffffffda RBX: 00007f38270ddfa0 RCX: 00007f3826e56159 [ 104.188861][ T4746] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000005 [ 104.198098][ T4746] RBP: 00007f3826eed06b R08: 0000000000000000 R09: 0000000000000000 [ 104.198153][ T4746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.198166][ T4746] R13: 00007f38270de038 R14: 00007f38270ddfa0 R15: 00007ffcaa4e97a8 [ 104.198196][ T4746] [ 104.326125][ T4745] EXT4-fs (loop3): 1 truncate cleaned up [ 104.341901][ T4745] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none. [ 104.587144][ T4761] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 104.608157][ T4755] kvm [4753]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 104.618539][ T4755] kvm [4753]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 104.628467][ T4755] kvm [4753]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 104.638411][ T4755] kvm [4753]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 104.650368][ T4755] kvm [4753]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 104.659632][ T4755] kvm [4753]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 104.668698][ T4755] kvm [4753]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 104.677694][ T4755] kvm [4753]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 104.686718][ T4755] kvm [4753]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 104.695831][ T4755] kvm [4753]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 104.790734][ T4232] usb 5-1: USB disconnect, device number 3 [ 104.861473][ T4764] xt_hashlimit: size too large, truncated to 1048576 [ 104.868332][ T4764] xt_hashlimit: max too large, truncated to 1048576 [ 105.744264][ T4203] Bluetooth: hci5: Reading Intel version command failed (-110) [ 105.890683][ T4770] x_tables: unsorted entry at hook 3 [ 106.795159][ T4772] syz.3.146 (4772): drop_caches: 2 [ 106.907272][ T25] audit: type=1800 audit(1790329356.429:15): pid=4783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.151" name="attr_allow_any_host" dev="configfs" ino=35080 res=0 errno=0 [ 106.935601][ T4783] nvmet: failed to open file ./img: (-22) [ 106.945067][ T4787] overlayfs: failed to resolve './file1': -2 [ 106.975662][ T25] audit: type=1800 audit(1790329356.459:16): pid=4783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.151" name="device_path" dev="configfs" ino=35082 res=0 errno=0 [ 106.976987][ T4789] nvmet: failed to open file ./img: (-22) [ 107.030226][ T25] audit: type=1800 audit(1790329356.459:17): pid=4783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.151" name="enable" dev="configfs" ino=35083 res=0 errno=0 [ 107.089057][ T4783] nvmet: transport type 0 not supported [ 107.098868][ T25] audit: type=1800 audit(1790329356.469:18): pid=4789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.150" name="device_path" dev="configfs" ino=34450 res=0 errno=0 [ 107.117058][ T4792] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.119512][ T25] audit: type=1800 audit(1790329356.499:19): pid=4783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.151" name="addr_trtype" dev="configfs" ino=35084 res=0 errno=0 [ 107.146551][ T25] audit: type=1800 audit(1790329356.499:20): pid=4789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.150" name="enable" dev="configfs" ino=34452 res=0 errno=0 [ 108.534108][ T4811] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 109.560194][ T4827] FAULT_INJECTION: forcing a failure. [ 109.560194][ T4827] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 109.609897][ T25] audit: type=1800 audit(1790329359.129:21): pid=4832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.163" name="attr_allow_any_host" dev="configfs" ino=35230 res=0 errno=0 [ 109.632373][ T4827] CPU: 1 PID: 4827 Comm: syz.1.161 Not tainted syzkaller #0 [ 109.639543][ T4832] nvmet: failed to open file ./img: (-22) [ 109.639675][ T4827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.645832][ T25] audit: type=1800 audit(1790329359.159:22): pid=4832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.163" name="device_path" dev="configfs" ino=35231 res=0 errno=0 [ 109.655428][ T4827] Call Trace: [ 109.655438][ T4827] [ 109.655445][ T4827] dump_stack_lvl+0x188/0x250 [ 109.655470][ T4827] ? show_regs_print_info+0x20/0x20 [ 109.655487][ T4827] ? load_image+0x410/0x410 [ 109.655506][ T4827] ? __lock_acquire+0x7b50/0x7b50 [ 109.655535][ T4827] should_fail+0x383/0x4b0 [ 109.655567][ T4827] prepare_alloc_pages+0x1e3/0x5b0 [ 109.655596][ T4827] __alloc_pages+0x11b/0x480 [ 109.655618][ T4827] ? zone_statistics+0x170/0x170 [ 109.655641][ T4827] ? __rwlock_init+0x140/0x140 [ 109.655660][ T4827] ? alloc_pages+0x452/0x560 [ 109.729884][ T4827] __get_free_pages+0x8/0x30 [ 109.734493][ T4827] kasan_populate_vmalloc_pte+0x21/0xc0 [ 109.740145][ T4827] __apply_to_page_range+0x987/0xd10 [ 109.745627][ T4827] ? kasan_populate_vmalloc+0x70/0x70 [ 109.746507][ T25] audit: type=1800 audit(1790329359.159:23): pid=4832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.163" name="enable" dev="configfs" ino=35232 res=0 errno=0 [ 109.751012][ T4827] alloc_vmap_area+0x19e8/0x1b30 [ 109.751054][ T4827] ? vm_map_ram+0xba0/0xba0 [ 109.780587][ T4827] __get_vm_area_node+0x14f/0x2d0 [ 109.785635][ T4827] __vmalloc_node_range+0xef/0x8b0 [ 109.790770][ T4827] ? vb2_vmalloc_alloc+0xec/0x330 [ 109.795822][ T4827] vmalloc_user+0x70/0x80 [ 109.800162][ T4827] ? vb2_vmalloc_alloc+0xec/0x330 [ 109.805360][ T4827] vb2_vmalloc_alloc+0xec/0x330 [ 109.810229][ T4827] ? vb2_common_vm_close+0x140/0x140 [ 109.815552][ T4827] __vb2_queue_alloc+0x737/0x1390 [ 109.820619][ T4827] vb2_core_reqbufs+0x8e4/0xf30 [ 109.825717][ T4827] ? vb2_verify_memory_type+0x570/0x570 [ 109.831289][ T4827] __vb2_init_fileio+0x2c2/0xc50 [ 109.836332][ T4827] ? verify_lock_unused+0x140/0x140 [ 109.841559][ T4827] __vb2_perform_fileio+0x346/0x1580 [ 109.846865][ T4827] vb2_fop_write+0x231/0x340 [ 109.851640][ T4827] v4l2_write+0x193/0x2b0 [ 109.855974][ T4827] ? v4l2_read+0x2b0/0x2b0 [ 109.860499][ T4827] vfs_write+0x304/0xd70 [ 109.864841][ T4827] ? file_end_write+0x250/0x250 [ 109.869703][ T4827] ? __fget_files+0x402/0x470 [ 109.874373][ T4827] ? __fdget_pos+0x1e2/0x370 [ 109.878949][ T4827] ? ksys_write+0x70/0x260 [ 109.883352][ T4827] ksys_write+0x153/0x260 [ 109.887670][ T4827] ? __ia32_sys_read+0x80/0x80 [ 109.893262][ T4827] ? lockdep_hardirqs_on+0x94/0x140 [ 109.898633][ T4827] do_syscall_64+0x4c/0xa0 [ 109.903065][ T4827] ? clear_bhb_loop+0x30/0x80 [ 109.907731][ T4827] ? clear_bhb_loop+0x30/0x80 [ 109.912596][ T4827] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.918918][ T4827] RIP: 0033:0x7f922cad5159 [ 109.923326][ T4827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.943864][ T4827] RSP: 002b:00007f922ad2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 109.952281][ T4827] RAX: ffffffffffffffda RBX: 00007f922cd5cfa0 RCX: 00007f922cad5159 [ 109.961296][ T4827] RDX: 00000000000ca800 RSI: 0000200000000100 RDI: 0000000000000004 [ 109.969570][ T4827] RBP: 00007f922cb6c06b R08: 0000000000000000 R09: 0000000000000000 [ 109.978463][ T4827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.986522][ T4827] R13: 00007f922cd5d038 R14: 00007f922cd5cfa0 R15: 00007ffc27dea768 [ 109.994509][ T4827] [ 110.174969][ T4837] binder: BINDER_SET_CONTEXT_MGR already set [ 110.234093][ T4837] binder: 4835:4837 ioctl 4018620d 200000000040 returned -16 [ 111.599718][ T4846] netlink: 256 bytes leftover after parsing attributes in process `syz.0.167'. [ 111.841847][ T4827] syz.1.161: vmalloc error: size 831488, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 112.114445][ T4827] CPU: 0 PID: 4827 Comm: syz.1.161 Not tainted syzkaller #0 [ 112.122100][ T4827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.132181][ T4827] Call Trace: [ 112.135551][ T4827] [ 112.138481][ T4827] dump_stack_lvl+0x188/0x250 [ 112.143176][ T4827] ? rcu_lock_release+0x5/0x20 [ 112.147967][ T4827] ? show_regs_print_info+0x20/0x20 [ 112.153186][ T4827] ? load_image+0x410/0x410 [ 112.157722][ T4827] warn_alloc+0x245/0x320 [ 112.162058][ T4827] ? slab_free_freelist_hook+0xec/0x170 [ 112.167636][ T4827] ? zone_watermark_ok_safe+0x250/0x250 [ 112.173203][ T4827] ? kfree+0xef/0x2a0 [ 112.177193][ T4827] ? __get_vm_area_node+0x164/0x2d0 [ 112.182523][ T4827] __vmalloc_node_range+0x2b1/0x8b0 [ 112.187856][ T4827] vmalloc_user+0x70/0x80 [ 112.192194][ T4827] ? vb2_vmalloc_alloc+0xec/0x330 [ 112.197245][ T4827] vb2_vmalloc_alloc+0xec/0x330 [ 112.202099][ T4827] ? vb2_common_vm_close+0x140/0x140 [ 112.207479][ T4827] __vb2_queue_alloc+0x737/0x1390 [ 112.212549][ T4827] vb2_core_reqbufs+0x8e4/0xf30 [ 112.217409][ T4827] ? vb2_verify_memory_type+0x570/0x570 [ 112.223023][ T4827] __vb2_init_fileio+0x2c2/0xc50 [ 112.227985][ T4827] ? verify_lock_unused+0x140/0x140 [ 112.233208][ T4827] __vb2_perform_fileio+0x346/0x1580 [ 112.238514][ T4827] vb2_fop_write+0x231/0x340 [ 112.243115][ T4827] v4l2_write+0x193/0x2b0 [ 112.247454][ T4827] ? v4l2_read+0x2b0/0x2b0 [ 112.251874][ T4827] vfs_write+0x304/0xd70 [ 112.256130][ T4827] ? file_end_write+0x250/0x250 [ 112.260985][ T4827] ? __fget_files+0x402/0x470 [ 112.265765][ T4827] ? __fdget_pos+0x1e2/0x370 [ 112.270354][ T4827] ? ksys_write+0x70/0x260 [ 112.274773][ T4827] ksys_write+0x153/0x260 [ 112.279109][ T4827] ? __ia32_sys_read+0x80/0x80 [ 112.283881][ T4827] ? lockdep_hardirqs_on+0x94/0x140 [ 112.289091][ T4827] do_syscall_64+0x4c/0xa0 [ 112.293619][ T4827] ? clear_bhb_loop+0x30/0x80 [ 112.298979][ T4827] ? clear_bhb_loop+0x30/0x80 [ 112.304985][ T4827] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 112.311069][ T4827] RIP: 0033:0x7f922cad5159 [ 112.315506][ T4827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.333883][ T4850] x_tables: unsorted entry at hook 3 [ 112.335475][ T4827] RSP: 002b:00007f922ad2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 112.349278][ T4827] RAX: ffffffffffffffda RBX: 00007f922cd5cfa0 RCX: 00007f922cad5159 [ 112.357919][ T4827] RDX: 00000000000ca800 RSI: 0000200000000100 RDI: 0000000000000004 [ 112.365928][ T4827] RBP: 00007f922cb6c06b R08: 0000000000000000 R09: 0000000000000000 [ 112.378781][ T4827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.386946][ T4827] R13: 00007f922cd5d038 R14: 00007f922cd5cfa0 R15: 00007ffc27dea768 [ 112.394950][ T4827] [ 112.411113][ T4847] xt_hashlimit: size too large, truncated to 1048576 [ 112.418884][ T4847] xt_hashlimit: max too large, truncated to 1048576 [ 112.429327][ T4827] Mem-Info: [ 112.432932][ T4827] active_anon:274 inactive_anon:19337 isolated_anon:0 [ 112.432932][ T4827] active_file:22867 inactive_file:36846 isolated_file:0 [ 112.432932][ T4827] unevictable:768 dirty:222 writeback:0 [ 112.432932][ T4827] slab_reclaimable:20924 slab_unreclaimable:94490 [ 112.432932][ T4827] mapped:29890 shmem:14166 pagetables:617 bounce:0 [ 112.432932][ T4827] kernel_misc_reclaimable:0 [ 112.432932][ T4827] free:1348855 free_pcp:13771 free_cma:0 [ 112.475600][ T4827] Node 0 active_anon:1064kB inactive_anon:72036kB active_file:91264kB inactive_file:147384kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120260kB dirty:888kB writeback:0kB shmem:49984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10824kB pagetables:2468kB all_unreclaimable? no [ 112.515963][ T4827] Node 1 active_anon:32kB inactive_anon:512kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 112.571199][ T4827] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 112.621591][ T4827] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 112.635508][ T4827] Node 0 DMA32 free:1500580kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1064kB inactive_anon:52136kB active_file:91264kB inactive_file:147384kB unevictable:1536kB writepending:888kB present:3129332kB managed:2606508kB mlocked:0kB bounce:0kB free_pcp:34692kB local_pcp:18256kB free_cma:0kB [ 112.748467][ T4827] lowmem_reserve[]: 0 0 0 0 0 [ 112.753600][ T4827] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 113.519559][ T4827] lowmem_reserve[]: 0 0 0 0 0 [ 113.902115][ T4827] Node 1 Normal free:3910876kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:12656kB local_pcp:7844kB free_cma:0kB [ 113.979472][ T4827] lowmem_reserve[]: 0 0 0 0 0 [ 113.984567][ T4827] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 113.998161][ T4827] Node 0 DMA32: 171*4kB (UME) 89*8kB (UME) 81*16kB (UME) 166*32kB (UE) 36*64kB (UE) 10*128kB (U) 4*256kB (UM) 5*512kB (UME) 4*1024kB (UME) 11*2048kB (UME) 341*4096kB (M) = 1438532kB [ 114.018882][ T4827] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 114.034471][ T4827] Node 1 Normal: 88*4kB (UME) 26*8kB (UME) 24*16kB (UME) 70*32kB (UME) 36*64kB (UME) 15*128kB (UME) 2*256kB (U) 3*512kB (UE) 0*1024kB 1*2048kB (M) 952*4096kB (UM) = 3910896kB [ 114.111273][ T4827] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 114.121338][ T4827] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 114.132180][ T4827] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 114.142572][ T4827] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 114.155031][ T4827] 85243 total pagecache pages [ 114.159788][ T4827] 0 pages in swap cache [ 114.164374][ T4827] Swap cache stats: add 2275, delete 2275, find 66/77 [ 114.171217][ T4827] Free swap = 124440kB [ 114.175770][ T4827] Total swap = 124996kB [ 114.179993][ T4827] 2097051 pages RAM [ 114.184816][ T4827] 0 pages HighMem/MovableOnly [ 114.189645][ T4827] 411501 pages reserved [ 114.194946][ T4827] 0 pages cma reserved [ 116.766978][ T4879] bridge0: port 3(syz_tun) entered blocking state [ 116.773899][ T4879] bridge0: port 3(syz_tun) entered disabled state [ 116.782425][ T4879] device syz_tun entered promiscuous mode [ 116.788522][ T4879] bridge0: port 3(syz_tun) entered blocking state [ 116.795029][ T4879] bridge0: port 3(syz_tun) entered forwarding state [ 116.806883][ T4879] bridge0: port 4(ip6gretap0) entered blocking state [ 116.813708][ T4879] bridge0: port 4(ip6gretap0) entered disabled state [ 116.821372][ T4879] device ip6gretap0 entered promiscuous mode [ 116.827944][ T4879] bridge0: port 4(ip6gretap0) entered blocking state [ 116.834953][ T4879] bridge0: port 4(ip6gretap0) entered forwarding state [ 116.941736][ T4235] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 117.224137][ T4885] xt_hashlimit: size too large, truncated to 1048576 [ 117.230924][ T4885] xt_hashlimit: max too large, truncated to 1048576 [ 117.622611][ T4235] usb 1-1: too many configurations: 213, using maximum allowed: 8 [ 117.872639][ T4235] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 117.886931][ T4235] usb 1-1: can't read configurations, error -61 [ 117.928969][ T4897] netlink: 256 bytes leftover after parsing attributes in process `syz.4.180'. [ 118.826677][ T4235] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 118.890629][ T4195] libceph: connect (1)[c::]:6789 error -101 [ 118.958267][ T4195] libceph: mon0 (1)[c::]:6789 connect error [ 119.034347][ T4902] ceph: No mds server is up or the cluster is laggy [ 119.053599][ T26] libceph: connect (1)[c::]:6789 error -101 [ 119.064805][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 119.122537][ T4235] usb 1-1: too many configurations: 213, using maximum allowed: 8 [ 119.291994][ T4235] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 119.316370][ T4235] usb 1-1: can't read configurations, error -61 [ 119.403733][ T4235] usb usb1-port1: attempt power cycle [ 119.463164][ T26] libceph: connect (1)[c::]:6789 error -101 [ 119.480786][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 122.565235][ T4935] xt_hashlimit: size too large, truncated to 1048576 [ 122.571984][ T4935] xt_hashlimit: max too large, truncated to 1048576 [ 123.277838][ T4946] netlink: 256 bytes leftover after parsing attributes in process `syz.1.198'. [ 125.206480][ T25] audit: type=1800 audit(1790329374.729:24): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.205" name="attr_allow_any_host" dev="configfs" ino=35437 res=0 errno=0 [ 125.251432][ T4966] nvmet: failed to open file ./img: (-22) [ 125.285000][ T25] audit: type=1800 audit(1790329374.769:25): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.205" name="device_path" dev="configfs" ino=35438 res=0 errno=0 [ 125.481776][ T25] audit: type=1800 audit(1790329374.769:26): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.205" name="enable" dev="configfs" ino=35439 res=0 errno=0 [ 125.621733][ T4966] nvmet: transport type 0 not supported [ 125.657250][ T4972] bridge0: port 3(syz_tun) entered blocking state [ 125.665282][ T4972] bridge0: port 3(syz_tun) entered disabled state [ 125.673425][ T4972] device syz_tun entered promiscuous mode [ 125.679570][ T4972] bridge0: port 3(syz_tun) entered blocking state [ 125.686074][ T4972] bridge0: port 3(syz_tun) entered forwarding state [ 125.710300][ T4972] bridge0: port 4(ip6gretap0) entered blocking state [ 125.717365][ T4972] bridge0: port 4(ip6gretap0) entered disabled state [ 125.725297][ T4972] device ip6gretap0 entered promiscuous mode [ 125.731683][ T4972] bridge0: port 4(ip6gretap0) entered blocking state [ 125.738385][ T4972] bridge0: port 4(ip6gretap0) entered forwarding state [ 125.756854][ T25] audit: type=1800 audit(1790329374.809:27): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.205" name="addr_trtype" dev="configfs" ino=35440 res=0 errno=0 [ 128.692215][ T5003] netlink: 256 bytes leftover after parsing attributes in process `syz.4.213'. [ 130.440958][ T5007] xt_hashlimit: size too large, truncated to 1048576 [ 130.484043][ T5007] xt_hashlimit: max too large, truncated to 1048576 [ 130.722237][ T4195] libceph: connect (1)[c::]:6789 error -101 [ 130.728277][ T4195] libceph: mon0 (1)[c::]:6789 connect error [ 130.777852][ T5015] ceph: No mds server is up or the cluster is laggy [ 131.104706][ T5029] netlink: 128 bytes leftover after parsing attributes in process `syz.1.220'. [ 131.291175][ T25] audit: type=1800 audit(1790329380.809:28): pid=5031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.222" name="attr_allow_any_host" dev="configfs" ino=35565 res=0 errno=0 [ 131.480492][ T25] audit: type=1800 audit(1790329380.849:29): pid=5031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.222" name="device_path" dev="configfs" ino=35566 res=0 errno=0 [ 132.743053][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.749640][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.911943][ T5045] overlayfs: failed to resolve './file1': -2 [ 133.072542][ T5045] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.222457][ T5083] netlink: 36 bytes leftover after parsing attributes in process `syz.1.234'. [ 136.817146][ T5085] bridge0: port 3(syz_tun) entered blocking state [ 136.818630][ T25] audit: type=1800 audit(1790329386.339:30): pid=5082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.233" name="attr_allow_any_host" dev="configfs" ino=35619 res=0 errno=0 [ 136.824809][ T5085] bridge0: port 3(syz_tun) entered disabled state [ 136.865108][ T5089] fuse: Bad value for 'fd' [ 136.872780][ T5085] device syz_tun entered promiscuous mode [ 136.879765][ T5085] bridge0: port 3(syz_tun) entered blocking state [ 136.886271][ T5085] bridge0: port 3(syz_tun) entered forwarding state [ 136.937930][ T5086] bridge0: port 4(ip6gretap0) entered blocking state [ 136.942038][ T25] audit: type=1800 audit(1790329386.379:31): pid=5082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.233" name="device_path" dev="configfs" ino=35620 res=0 errno=0 [ 136.944829][ T5086] bridge0: port 4(ip6gretap0) entered disabled state [ 136.973302][ T5086] device ip6gretap0 entered promiscuous mode [ 136.979642][ T5086] bridge0: port 4(ip6gretap0) entered blocking state [ 136.986453][ T5086] bridge0: port 4(ip6gretap0) entered forwarding state [ 137.011035][ T5094] nvmet: failed to open file ./img: (-22) [ 137.046581][ T25] audit: type=1800 audit(1790329386.529:32): pid=5094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.237" name="attr_allow_any_host" dev="configfs" ino=36042 res=0 errno=0 [ 137.180224][ T5089] netlink: 28 bytes leftover after parsing attributes in process `syz.2.235'. [ 137.224910][ T5094] nvmet: transport type 0 not supported [ 137.230802][ T25] audit: type=1800 audit(1790329386.529:33): pid=5094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.237" name="device_path" dev="configfs" ino=36043 res=0 errno=0 [ 137.251701][ T25] audit: type=1800 audit(1790329386.529:34): pid=5094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.237" name="enable" dev="configfs" ino=36044 res=0 errno=0 [ 137.341472][ T25] audit: type=1800 audit(1790329386.619:35): pid=5094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.237" name="addr_trtype" dev="configfs" ino=35641 res=0 errno=0 [ 138.288294][ T25] audit: type=1800 audit(1790329387.809:36): pid=5118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.241" name="attr_allow_any_host" dev="configfs" ino=35664 res=0 errno=0 [ 138.311550][ T5114] overlayfs: failed to resolve './file1': -2 [ 138.349070][ T5118] nvmet: failed to open file ./img: (-22) [ 138.386576][ T25] audit: type=1800 audit(1790329387.869:37): pid=5118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.241" name="device_path" dev="configfs" ino=36062 res=0 errno=0 [ 138.438753][ T5121] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.487006][ T25] audit: type=1800 audit(1790329387.869:38): pid=5118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.241" name="enable" dev="configfs" ino=36063 res=0 errno=0 [ 138.501985][ T5131] nvme_fabrics: missing parameter 'transport=%s' [ 138.531957][ T5131] nvme_fabrics: missing parameter 'nqn=%s' [ 138.564263][ T25] audit: type=1800 audit(1790329387.919:39): pid=5118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.241" name="addr_trtype" dev="configfs" ino=35672 res=0 errno=0 [ 138.595416][ T5118] nvmet: transport type 0 not supported [ 140.724169][ T5166] loop0: detected capacity change from 0 to 512 [ 141.252555][ T5166] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 141.423197][ T5166] EXT4-fs (loop0): 1 truncate cleaned up [ 141.428968][ T5166] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none. [ 142.326540][ T5179] x_tables: unsorted entry at hook 3 [ 143.234280][ T5192] netlink: 60 bytes leftover after parsing attributes in process `syz.1.254'. [ 143.932961][ T4195] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 144.244523][ T25] kauditd_printk_skb: 2 callbacks suppressed [ 144.244537][ T25] audit: type=1800 audit(1790329393.769:42): pid=5211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.257" name="attr_allow_any_host" dev="configfs" ino=35805 res=0 errno=0 [ 144.353415][ T5211] nvmet: failed to open file ./img: (-22) [ 144.392202][ T25] audit: type=1800 audit(1790329393.879:43): pid=5211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.257" name="device_path" dev="configfs" ino=36211 res=0 errno=0 [ 144.448907][ T25] audit: type=1800 audit(1790329393.879:44): pid=5211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.257" name="enable" dev="configfs" ino=36212 res=0 errno=0 [ 144.498683][ T25] audit: type=1800 audit(1790329393.879:45): pid=5211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.257" name="addr_trtype" dev="configfs" ino=36213 res=0 errno=0 [ 144.571990][ T5211] nvmet: transport type 0 not supported [ 144.604542][ T5218] nvme_fabrics: missing parameter 'transport=%s' [ 144.635455][ T5218] nvme_fabrics: missing parameter 'nqn=%s' [ 144.642077][ T4195] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 144.654081][ T4195] usb 3-1: config 1 has no interface number 0 [ 144.861867][ T4195] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 144.912905][ T4195] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.960007][ T4195] usb 3-1: Product: syz [ 144.974459][ T4195] usb 3-1: Manufacturer: syz [ 144.990705][ T4195] usb 3-1: SerialNumber: syz [ 145.981996][ T4195] usb 3-1: 3:1 : does not exist [ 145.988461][ T5240] loop3: detected capacity change from 0 to 512 [ 145.997252][ T4195] usb 3-1: 3:2 : does not exist [ 146.113939][ T5240] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 146.116731][ T4195] usb 3-1: USB disconnect, device number 2 [ 146.333755][ T5240] EXT4-fs (loop3): 1 truncate cleaned up [ 146.819354][ T5252] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.267'. [ 147.405029][ T5240] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none. [ 148.787525][ T25] audit: type=1800 audit(1790329398.309:46): pid=5264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.271" name="attr_allow_any_host" dev="configfs" ino=36324 res=0 errno=0 [ 148.839511][ T5264] nvmet: failed to open file ./img: (-22) [ 148.860101][ T25] audit: type=1800 audit(1790329398.359:47): pid=5264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.271" name="device_path" dev="configfs" ino=36325 res=0 errno=0 [ 148.932020][ T25] audit: type=1800 audit(1790329398.359:48): pid=5264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.271" name="enable" dev="configfs" ino=36326 res=0 errno=0 [ 149.046341][ T25] audit: type=1800 audit(1790329398.569:49): pid=5267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.272" name="attr_allow_any_host" dev="configfs" ino=36950 res=0 errno=0 [ 149.063250][ T5267] nvmet: failed to open file ./img: (-22) [ 149.109610][ T25] audit: type=1800 audit(1790329398.569:50): pid=5267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.272" name="device_path" dev="configfs" ino=36951 res=0 errno=0 [ 149.199439][ T25] audit: type=1800 audit(1790329398.569:51): pid=5267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.272" name="enable" dev="configfs" ino=36952 res=0 errno=0 [ 149.259912][ T25] audit: type=1800 audit(1790329398.669:52): pid=5267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.272" name="addr_trtype" dev="configfs" ino=36953 res=0 errno=0 [ 149.301231][ T5267] nvmet: transport type 0 not supported [ 149.489850][ T5270] nvme_fabrics: missing parameter 'transport=%s' [ 149.498068][ T25] audit: type=1800 audit(1790329399.019:53): pid=5281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.268" name="device_path" dev="configfs" ino=36344 res=0 errno=0 [ 149.601098][ T5281] nvmet: failed to open file ./img: (-22) [ 149.640753][ T25] audit: type=1800 audit(1790329399.109:54): pid=5281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.268" name="enable" dev="configfs" ino=36350 res=0 errno=0 [ 149.911701][ T5270] nvme_fabrics: missing parameter 'nqn=%s' [ 150.269150][ T5281] nvmet: transport type 0 not supported [ 152.471747][ T5298] netlink: 256 bytes leftover after parsing attributes in process `syz.4.278'. [ 152.766755][ T25] audit: type=1800 audit(1790329402.289:55): pid=5301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.283" name="attr_allow_any_host" dev="configfs" ino=36382 res=0 errno=0 [ 152.769055][ T5301] nvmet: failed to open file ./img: (-22) [ 152.821182][ T5304] loop3: detected capacity change from 0 to 512 [ 153.413807][ T25] audit: type=1800 audit(1790329402.289:56): pid=5301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.283" name="device_path" dev="configfs" ino=36383 res=0 errno=0 [ 153.457399][ T5304] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 153.668272][ T25] audit: type=1800 audit(1790329402.289:57): pid=5301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.283" name="enable" dev="configfs" ino=36384 res=0 errno=0 [ 154.575916][ T25] audit: type=1800 audit(1790329404.099:58): pid=5326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.287" name="attr_allow_any_host" dev="configfs" ino=36413 res=0 errno=0 [ 154.578549][ T5326] nvmet: failed to open file ./img: (-22) [ 154.654539][ T5304] EXT4-fs (loop3): 1 truncate cleaned up [ 154.674149][ T5326] nvmet: transport type 0 not supported [ 154.701727][ T4234] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 154.710482][ T5304] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none. [ 154.762991][ T5329] nvme_fabrics: missing parameter 'transport=%s' [ 154.772258][ T25] audit: type=1800 audit(1790329404.099:59): pid=5326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.287" name="device_path" dev="configfs" ino=36414 res=0 errno=0 [ 154.783835][ T5329] nvme_fabrics: missing parameter 'nqn=%s' [ 154.811289][ T5335] x_tables: unsorted entry at hook 3 [ 154.832004][ T25] audit: type=1800 audit(1790329404.099:60): pid=5326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.287" name="enable" dev="configfs" ino=36415 res=0 errno=0 [ 154.855108][ T5334] nvmet: failed to open file ./img: (-22) [ 154.924373][ T5334] nvmet: transport type 0 not supported [ 154.924413][ T25] audit: type=1800 audit(1790329404.129:61): pid=5326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.287" name="addr_trtype" dev="configfs" ino=36416 res=0 errno=0 [ 154.960641][ T25] audit: type=1800 audit(1790329404.379:62): pid=5334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.289" name="device_path" dev="configfs" ino=36433 res=0 errno=0 [ 155.062018][ T4234] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 155.078407][ T25] audit: type=1800 audit(1790329404.379:63): pid=5334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.289" name="enable" dev="configfs" ino=36434 res=0 errno=0 [ 155.092239][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.159943][ T4234] usb 5-1: config 0 descriptor?? [ 155.282478][ T4234] cp210x 5-1:0.0: cp210x converter detected [ 155.945006][ T5352] netlink: 68 bytes leftover after parsing attributes in process `syz.4.284'. [ 156.090074][ T5314] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 156.984044][ T4234] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 157.051713][ T4234] usb 5-1: cp210x converter now attached to ttyUSB0 [ 158.418114][ T4234] usb 5-1: USB disconnect, device number 4 [ 158.520265][ T4234] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 158.543420][ T4234] cp210x 5-1:0.0: device disconnected [ 158.680606][ T5377] loop1: detected capacity change from 0 to 512 [ 158.738826][ T5377] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 158.803496][ T5377] EXT4-fs (loop1): 1 truncate cleaned up [ 158.809615][ T5377] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none. [ 158.934917][ T25] audit: type=1800 audit(1790329408.459:64): pid=5381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.302" name="attr_allow_any_host" dev="configfs" ino=37083 res=0 errno=0 [ 158.964316][ T5381] nvmet: failed to open file ./img: (-22) [ 158.975944][ T25] audit: type=1800 audit(1790329408.489:65): pid=5381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.302" name="device_path" dev="configfs" ino=37084 res=0 errno=0 [ 159.069134][ T5381] nvmet: transport type 0 not supported [ 159.102519][ T25] audit: type=1800 audit(1790329408.489:66): pid=5381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.302" name="enable" dev="configfs" ino=37085 res=0 errno=0 [ 159.122613][ T25] audit: type=1800 audit(1790329408.609:67): pid=5385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.303" name="device_path" dev="configfs" ino=37086 res=0 errno=0 [ 159.234699][ T5390] netlink: 256 bytes leftover after parsing attributes in process `syz.3.304'. [ 159.265799][ T5385] nvmet: failed to open file ./img: (-22) [ 159.863731][ T25] audit: type=1800 audit(1790329408.779:68): pid=5385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.303" name="enable" dev="configfs" ino=37089 res=0 errno=0 [ 160.095936][ T25] audit: type=1800 audit(1790329408.809:69): pid=5385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.303" name="addr_trtype" dev="configfs" ino=37090 res=0 errno=0 [ 160.540227][ T5387] nvme_fabrics: missing parameter 'transport=%s' [ 160.611688][ T5385] nvmet: transport type 0 not supported [ 160.620634][ T5407] input: syz1 as /devices/virtual/input/input5 [ 160.646286][ T5387] nvme_fabrics: missing parameter 'nqn=%s' [ 161.552004][ T2103] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 161.933172][ T2103] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 47434, setting to 1024 [ 162.927799][ T2103] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 163.211816][ T2103] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 164.623968][ T2103] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.711341][ T2103] usb 5-1: Product: syz [ 164.739410][ T2103] usb 5-1: Manufacturer: syz [ 165.405986][ T5441] netlink: 128 bytes leftover after parsing attributes in process `syz.1.315'. [ 165.584246][ T2103] usb 5-1: SerialNumber: syz [ 165.614152][ T2103] usb 5-1: can't set config #1, error -71 [ 165.627685][ T2103] usb 5-1: USB disconnect, device number 5 [ 166.285582][ T5449] loop2: detected capacity change from 0 to 512 [ 166.361886][ T5449] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 166.572452][ T5449] EXT4-fs (loop2): 1 truncate cleaned up [ 166.578138][ T5449] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none. [ 168.699280][ T5481] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.328'. [ 169.281371][ T5469] zram: Cannot change disksize for initialized device [ 171.549969][ T4174] Bluetooth: hci2: command 0x0406 tx timeout [ 171.709580][ T4174] Bluetooth: hci3: command 0x0406 tx timeout [ 171.715691][ T4174] Bluetooth: hci1: command 0x0406 tx timeout [ 171.721752][ T4174] Bluetooth: hci4: command 0x0406 tx timeout [ 171.897218][ T5504] loop3: detected capacity change from 0 to 512 [ 172.015709][ T5504] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 172.082675][ T5504] EXT4-fs (loop3): 1 truncate cleaned up [ 172.088872][ T5504] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none. [ 172.323687][ T5513] x_tables: unsorted entry at hook 3 [ 174.631493][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880606ba000: rx timeout, send abort [ 175.140945][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880606ba000: abort rx timeout. Force session deactivation [ 175.426806][ T5550] xt_hashlimit: size too large, truncated to 1048576 [ 175.433673][ T5550] xt_hashlimit: max too large, truncated to 1048576 [ 175.552626][ T25] audit: type=1800 audit(1790329425.049:70): pid=5549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.351" name="attr_allow_any_host" dev="configfs" ino=36721 res=0 errno=0 [ 175.646381][ T25] audit: type=1800 audit(1790329425.049:71): pid=5549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.351" name="device_path" dev="configfs" ino=36722 res=0 errno=0 [ 175.699921][ T5549] nvmet: transport type 0 not supported [ 177.123349][ T5565] x_tables: unsorted entry at hook 3 [ 177.188067][ T5568] device syzkaller0 entered promiscuous mode [ 178.875361][ T5598] No source specified [ 179.508336][ T5599] xt_hashlimit: size too large, truncated to 1048576 [ 179.515115][ T5599] xt_hashlimit: max too large, truncated to 1048576 [ 180.509731][ T25] audit: type=1800 audit(1790329430.029:72): pid=5607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.368" name="attr_allow_any_host" dev="configfs" ino=36820 res=0 errno=0 [ 180.588335][ T5607] nvmet: failed to open file ./img: (-22) [ 181.880539][ T25] audit: type=1800 audit(1790329430.109:73): pid=5607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.368" name="device_path" dev="configfs" ino=37355 res=0 errno=0 [ 181.903463][ T25] audit: type=1800 audit(1790329430.109:74): pid=5607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.368" name="enable" dev="configfs" ino=37356 res=0 errno=0 [ 181.964917][ T5607] nvmet: transport type 0 not supported [ 182.002626][ T25] audit: type=1800 audit(1790329431.469:75): pid=5607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.368" name="addr_trtype" dev="configfs" ino=36821 res=0 errno=0 [ 182.006728][ T5607] nvme_fabrics: missing parameter 'transport=%s' [ 182.081707][ T5607] nvme_fabrics: missing parameter 'nqn=%s' [ 182.116603][ T5621] netlink: 32 bytes leftover after parsing attributes in process `syz.1.372'. [ 182.167348][ T5621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.372'. [ 183.584195][ T5629] 8021q: adding VLAN 0 to HW filter on device bond3 [ 183.616323][ T5634] loop3: detected capacity change from 0 to 512 [ 183.638407][ T5636] loop1: detected capacity change from 0 to 512 [ 183.647973][ T5636] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 183.663421][ T5636] EXT4-fs (loop1): 1 truncate cleaned up [ 183.669730][ T5636] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none. [ 183.897693][ T5634] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 185.466749][ T5634] EXT4-fs (loop3): 1 truncate cleaned up [ 185.491727][ T5634] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none. [ 189.831819][ T4231] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 189.887083][ T5680] xt_hashlimit: size too large, truncated to 1048576 [ 189.964381][ T5680] xt_hashlimit: max too large, truncated to 1048576 [ 190.431770][ T4231] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 190.635264][ T5690] No source specified [ 191.232954][ T4231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.326732][ T5685] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.389'. [ 191.411747][ T4231] usb 5-1: config 0 descriptor?? [ 192.429492][ T4231] cp210x 5-1:0.0: cp210x converter detected [ 192.905629][ T5705] x_tables: unsorted entry at hook 3 [ 192.936593][ T5707] loop4: detected capacity change from 0 to 512 [ 193.018077][ T5707] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 193.045335][ T4231] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 193.055617][ T4231] cp210x 5-1:0.0: querying part number failed [ 193.073799][ T4231] usb 5-1: cp210x converter now attached to ttyUSB0 [ 193.088670][ T4231] usb 5-1: USB disconnect, device number 6 [ 193.107037][ T4231] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 193.118809][ T4231] cp210x 5-1:0.0: device disconnected [ 193.255220][ T5707] EXT4-fs (loop4): 1 truncate cleaned up [ 193.271841][ T5707] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none. [ 194.108479][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.114883][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.010527][ T5737] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.402'. [ 197.113947][ T5750] block device autoloading is deprecated and will be removed. [ 197.353566][ T5758] No source specified [ 197.551760][ T4235] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 198.322558][ T4235] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 198.341738][ T4235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.354563][ T4235] usb 2-1: config 0 descriptor?? [ 199.019552][ T4235] cp210x 2-1:0.0: cp210x converter detected [ 199.279436][ T5775] netlink: 68 bytes leftover after parsing attributes in process `syz.1.406'. [ 199.301940][ T5755] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 199.471356][ T5778] xt_hashlimit: size too large, truncated to 1048576 [ 199.511162][ T5778] xt_hashlimit: max too large, truncated to 1048576 [ 199.571736][ T4235] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 199.997599][ T5764] netlink: 16 bytes leftover after parsing attributes in process `syz.4.409'. [ 201.781798][ T4235] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 201.801949][ T4235] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 201.877573][ T4235] usb 2-1: cp210x converter now attached to ttyUSB0 [ 201.896683][ T5793] loop3: detected capacity change from 0 to 512 [ 202.599346][ T5800] No source specified [ 204.115964][ T5793] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 204.224334][ T4235] usb 2-1: USB disconnect, device number 3 [ 204.477284][ T5793] EXT4-fs (loop3): 1 truncate cleaned up [ 204.502984][ T4235] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 204.529607][ T5793] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none. [ 204.567665][ T4235] cp210x 2-1:0.0: device disconnected [ 204.636662][ T5808] process 'syz.1.420' launched './file0' with NULL argv: empty string added [ 206.631771][ T1109] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 206.927899][ T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 207.031287][ T5843] No source specified [ 208.086424][ T1109] usb 5-1: Using ep0 maxpacket: 8 [ 208.504736][ T1109] usb 5-1: config 0 has no interfaces? [ 208.632115][ T7] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 209.961863][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.976847][ T7] usb 4-1: config 0 descriptor?? [ 210.001903][ T7] usb 4-1: can't set config #0, error -71 [ 210.018075][ T7] usb 4-1: USB disconnect, device number 4 [ 210.073511][ T5850] loop3: detected capacity change from 0 to 512 [ 210.232248][ T1109] usb 5-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 210.236488][ T5850] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 210.904436][ T1109] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.047485][ T5850] EXT4-fs (loop3): 1 truncate cleaned up [ 211.058616][ T5850] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none. [ 211.345839][ T1109] usb 5-1: config 0 descriptor?? [ 211.371759][ T1109] usb 5-1: can't set config #0, error -71 [ 211.389168][ T1109] usb 5-1: USB disconnect, device number 7 [ 211.842452][ T5875] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 212.008210][ T5885] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 212.054235][ T5885] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 212.128254][ T5890] No source specified [ 212.412103][ T1109] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 212.683118][ T5883] 8021q: adding VLAN 0 to HW filter on device bond4 [ 214.510005][ T1109] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 214.521261][ T1109] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.526775][ T5917] ip_tables: iptables: counters copy to user failed while replacing table [ 214.531156][ T1109] usb 4-1: config 0 descriptor?? [ 214.604092][ T5920] loop0: detected capacity change from 0 to 512 [ 214.624626][ T1109] cp210x 4-1:0.0: cp210x converter detected [ 214.683095][ T5920] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 214.796322][ T5925] xt_hashlimit: size too large, truncated to 1048576 [ 214.803164][ T5925] xt_hashlimit: max too large, truncated to 1048576 [ 214.946131][ T5920] EXT4-fs (loop0): 1 truncate cleaned up [ 215.008890][ T5920] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none. [ 215.253434][ T5926] netlink: 68 bytes leftover after parsing attributes in process `syz.3.444'. [ 215.849380][ T5932] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 216.486354][ T5947] No source specified [ 217.106578][ T1109] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 217.150990][ T1109] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 217.263118][ T1109] usb 4-1: cp210x converter now attached to ttyUSB0 [ 217.957901][ T1109] usb 4-1: USB disconnect, device number 5 [ 217.966580][ T1109] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 217.975263][ T1109] cp210x 4-1:0.0: device disconnected [ 218.612031][ T5975] xt_hashlimit: size too large, truncated to 1048576 [ 218.618781][ T5975] xt_hashlimit: max too large, truncated to 1048576 [ 219.593403][ T5984] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 219.616323][ T5986] loop2: detected capacity change from 0 to 512 [ 219.660825][ T5986] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 219.690948][ T5986] EXT4-fs (loop2): 1 truncate cleaned up [ 219.696732][ T5986] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none. [ 220.495494][ T4195] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 220.862029][ T5791] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 221.424211][ T4195] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 221.433641][ T4195] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.444047][ T4195] usb 5-1: config 0 descriptor?? [ 221.509159][ T25] audit: type=1800 audit(1790329471.029:76): pid=6020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.481" name="attr_allow_any_host" dev="configfs" ino=39011 res=0 errno=0 [ 221.534006][ T4195] cp210x 5-1:0.0: cp210x converter detected [ 221.534631][ T6020] nvmet: failed to open file ./img: (-22) [ 221.549531][ T25] audit: type=1800 audit(1790329471.059:77): pid=6020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.481" name="device_path" dev="configfs" ino=39012 res=0 errno=0 [ 221.574203][ T6020] nvme_fabrics: missing parameter 'transport=%s' [ 221.575200][ T5791] usb 2-1: Using ep0 maxpacket: 32 [ 221.580844][ T6020] nvme_fabrics: missing parameter 'nqn=%s' [ 221.588042][ T25] audit: type=1800 audit(1790329471.059:78): pid=6020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.481" name="enable" dev="configfs" ino=39013 res=0 errno=0 [ 221.613499][ T25] audit: type=1800 audit(1790329471.069:79): pid=6020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.481" name="addr_trtype" dev="configfs" ino=39014 res=0 errno=0 [ 221.751951][ T5791] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 221.761148][ T5791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.773066][ T5993] netlink: 68 bytes leftover after parsing attributes in process `syz.4.474'. [ 221.776121][ T5791] usb 2-1: config 0 descriptor?? [ 221.791892][ T13] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 221.848327][ T5791] as10x_usb: device has been detected [ 221.855258][ T5791] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 221.977549][ T5791] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 222.051763][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 222.053177][ T6003] ------------[ cut here ]------------ [ 222.114616][ T6003] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 222.115530][ T6003] WARNING: CPU: 1 PID: 6003 at kernel/locking/mutex.c:575 __mutex_lock_common+0x193b/0x2400 [ 222.146806][ T5791] as10x_usb: error during firmware upload part1 [ 222.169735][ T5791] Registered device nBox DVB-T Dongle [ 222.246236][ T6003] Modules linked in: [ 222.279876][ T6003] CPU: 1 PID: 6003 Comm: syz.1.477 Not tainted syzkaller #0 [ 222.288841][ T6003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 222.336461][ T6003] RIP: 0010:__mutex_lock_common+0x193b/0x2400 [ 222.554152][ T6003] Code: 00 00 83 3d 6e 8d c1 03 00 4c 8d b4 24 e0 00 00 00 0f 85 02 e8 ff ff 48 c7 c7 e0 1a 2b 8a 48 c7 c6 20 1b 2b 8a e8 95 84 ec ff <0f> 0b e9 e8 e7 ff ff e8 c9 b7 36 f7 e9 41 fb ff ff 0f 0b e9 63 f1 [ 222.691475][ T6003] RSP: 0018:ffffc900035efa80 EFLAGS: 00010246 [ 222.720533][ T6003] RAX: 91aa155be3f72e00 RBX: ffff888079982ce0 RCX: 0000000000080000 [ 222.728816][ T6003] RDX: ffffc90003e23000 RSI: 00000000000218f3 RDI: 00000000000218f4 [ 222.737043][ T6003] RBP: ffffc900035efc10 R08: ffff8880b912795b R09: 1ffff11017224f2b [ 222.745223][ T6003] R10: dffffc0000000000 R11: ffffed1017224f2c R12: 0000000000000000 [ 222.753539][ T6003] R13: dffffc0000000000 R14: ffffc900035efb60 R15: 0000000000000000 [ 222.761741][ T6003] FS: 00007f922ad2d6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 222.770750][ T6003] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 222.777956][ T6003] CR2: 0000200000007000 CR3: 000000001ed6a000 CR4: 00000000003506f0 [ 222.785983][ T6003] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 222.794140][ T6003] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 222.802182][ T6003] Call Trace: [ 222.805648][ T6003] [ 222.808566][ T6003] ? __mutex_lock_common+0x435/0x2400 [ 222.814130][ T6003] ? as102_dvb_dmx_start_feed+0x6c/0x280 [ 222.819770][ T6003] ? mutex_lock_io_nested+0x60/0x60 [ 222.826565][ T6003] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 222.832815][ T6003] ? mutex_unlock+0x10/0x10 [ 222.832842][ T4195] cp210x 5-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 222.837321][ T6003] ? mutex_lock_io_nested+0x60/0x60 [ 222.845916][ T4195] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 222.850069][ T6003] mutex_lock_interruptible_nested+0x17/0x20 [ 222.850095][ T6003] as102_dvb_dmx_start_feed+0x6c/0x280 [ 222.868273][ T6003] dmx_ts_feed_start_filtering+0x11c/0x210 [ 222.868731][ T4195] usb 5-1: cp210x converter now attached to ttyUSB0 [ 222.874125][ T6003] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 222.874151][ T6003] dvb_dmxdev_filter_start+0x422/0x1060 [ 222.874174][ T6003] dvb_demux_do_ioctl+0x47e/0x530 [ 222.874191][ T6003] dvb_usercopy+0x191/0x2b0 [ 222.874207][ T6003] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 222.874222][ T6003] ? dvb_generic_ioctl+0xb0/0xb0 [ 222.874245][ T6003] ? dvb_demux_poll+0x210/0x210 [ 222.874261][ T6003] dvb_demux_ioctl+0x25/0x30 [ 222.874277][ T6003] __se_sys_ioctl+0xfa/0x170 [ 222.874295][ T6003] do_syscall_64+0x4c/0xa0 [ 222.874312][ T6003] ? clear_bhb_loop+0x30/0x80 [ 222.874330][ T6003] ? clear_bhb_loop+0x30/0x80 [ 222.874347][ T6003] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 222.874366][ T6003] RIP: 0033:0x7f922cad5159 [ 222.874382][ T6003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.874396][ T6003] RSP: 002b:00007f922ad2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 222.874415][ T6003] RAX: ffffffffffffffda RBX: 00007f922cd5cfa0 RCX: 00007f922cad5159 [ 222.874429][ T6003] RDX: 0000200000000040 RSI: 0000000040146f2c RDI: 0000000000000005 [ 222.874440][ T6003] RBP: 00007f922cb6c06b R08: 0000000000000000 R09: 0000000000000000 [ 222.874452][ T6003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.874463][ T6003] R13: 00007f922cd5d038 R14: 00007f922cd5cfa0 R15: 00007ffc27dea768 [ 222.874481][ T6003] [ 222.874505][ T6003] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 222.874513][ T6003] CPU: 0 PID: 6003 Comm: syz.1.477 Not tainted syzkaller #0 [ 222.874528][ T6003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 222.874537][ T6003] Call Trace: [ 222.874542][ T6003] [ 222.900664][ T4195] usb 5-1: USB disconnect, device number 8 [ 222.901979][ T6003] dump_stack_lvl+0x188/0x250 [ 222.902003][ T6003] ? show_regs_print_info+0x20/0x20 [ 222.902018][ T6003] ? load_image+0x410/0x410 [ 222.902036][ T6003] panic+0x2f8/0x850 [ 222.902058][ T6003] ? bpf_jit_dump+0xd0/0xd0 [ 222.902079][ T6003] ? __mutex_lock_common+0x193b/0x2400 [ 222.938685][ T4195] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 222.940486][ T6003] __warn+0x248/0x2b0 [ 222.940512][ T6003] ? __mutex_lock_common+0x193b/0x2400 [ 222.940531][ T6003] report_bug+0x1b9/0x2e0 [ 222.950495][ T4195] cp210x 5-1:0.0: device disconnected [ 222.950795][ T6003] handle_bug+0x3a/0x70 [ 223.117181][ T6003] exc_invalid_op+0x16/0x40 [ 223.121678][ T6003] asm_exc_invalid_op+0x16/0x20 [ 223.126523][ T6003] RIP: 0010:__mutex_lock_common+0x193b/0x2400 [ 223.132578][ T6003] Code: 00 00 83 3d 6e 8d c1 03 00 4c 8d b4 24 e0 00 00 00 0f 85 02 e8 ff ff 48 c7 c7 e0 1a 2b 8a 48 c7 c6 20 1b 2b 8a e8 95 84 ec ff <0f> 0b e9 e8 e7 ff ff e8 c9 b7 36 f7 e9 41 fb ff ff 0f 0b e9 63 f1 [ 223.152189][ T6003] RSP: 0018:ffffc900035efa80 EFLAGS: 00010246 [ 223.158266][ T6003] RAX: 91aa155be3f72e00 RBX: ffff888079982ce0 RCX: 0000000000080000 [ 223.166220][ T6003] RDX: ffffc90003e23000 RSI: 00000000000218f3 RDI: 00000000000218f4 [ 223.174183][ T6003] RBP: ffffc900035efc10 R08: ffff8880b912795b R09: 1ffff11017224f2b [ 223.182144][ T6003] R10: dffffc0000000000 R11: ffffed1017224f2c R12: 0000000000000000 [ 223.190115][ T6003] R13: dffffc0000000000 R14: ffffc900035efb60 R15: 0000000000000000 [ 223.198080][ T6003] ? __mutex_lock_common+0x435/0x2400 [ 223.203440][ T6003] ? as102_dvb_dmx_start_feed+0x6c/0x280 [ 223.209053][ T6003] ? mutex_lock_io_nested+0x60/0x60 [ 223.214262][ T6003] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 223.220250][ T6003] ? mutex_unlock+0x10/0x10 [ 223.224737][ T6003] ? mutex_lock_io_nested+0x60/0x60 [ 223.229936][ T6003] mutex_lock_interruptible_nested+0x17/0x20 [ 223.235897][ T6003] as102_dvb_dmx_start_feed+0x6c/0x280 [ 223.241362][ T6003] dmx_ts_feed_start_filtering+0x11c/0x210 [ 223.247172][ T6003] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 223.253050][ T6003] dvb_dmxdev_filter_start+0x422/0x1060 [ 223.258598][ T6003] dvb_demux_do_ioctl+0x47e/0x530 [ 223.263605][ T6003] dvb_usercopy+0x191/0x2b0 [ 223.268106][ T6003] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 223.273629][ T6003] ? dvb_generic_ioctl+0xb0/0xb0 [ 223.278562][ T6003] ? dvb_demux_poll+0x210/0x210 [ 223.283388][ T6003] dvb_demux_ioctl+0x25/0x30 [ 223.287963][ T6003] __se_sys_ioctl+0xfa/0x170 [ 223.292554][ T6003] do_syscall_64+0x4c/0xa0 [ 223.296973][ T6003] ? clear_bhb_loop+0x30/0x80 [ 223.301632][ T6003] ? clear_bhb_loop+0x30/0x80 [ 223.306304][ T6003] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 223.312180][ T6003] RIP: 0033:0x7f922cad5159 [ 223.316599][ T6003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.336197][ T6003] RSP: 002b:00007f922ad2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 223.344609][ T6003] RAX: ffffffffffffffda RBX: 00007f922cd5cfa0 RCX: 00007f922cad5159 [ 223.352592][ T6003] RDX: 0000200000000040 RSI: 0000000040146f2c RDI: 0000000000000005 [ 223.360575][ T6003] RBP: 00007f922cb6c06b R08: 0000000000000000 R09: 0000000000000000 [ 223.368553][ T6003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.376527][ T6003] R13: 00007f922cd5d038 R14: 00007f922cd5cfa0 R15: 00007ffc27dea768 [ 223.384494][ T6003] [ 223.387734][ T6003] Kernel Offset: disabled [ 223.392078][ T6003] Rebooting in 86400 seconds..