last executing test programs: 2m2.801047404s ago: executing program 0 (id=87): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x6b, 0x1, 0x1, 0x36}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m2.109292727s ago: executing program 0 (id=89): removexattr(0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioperm(0x1, 0x7, 0x3ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x2000000, 0x2}]}]}}, &(0x7f0000000280)=""/265, 0x32, 0x109, 0x1}, 0x28) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000680)={[{@usrquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x1) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x65) openat(0xffffffffffffff9c, 0x0, 0x2141, 0x59) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x6) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="7f45"], 0x78) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x26, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000340)="fb", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e23, 0x3, @loopback, 0x1}}, 0x0, 0x0, 0x6, 0x0, "10baa70a93289349d889de25b87376f6622d337642b89005000000000000001b7ef6619dd6b2ca4edb6f7debd38b6d889a8c986b33e249c3157f1f370dfd6700"}, 0xd8) r4 = dup(r3) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r4) 1m56.089375845s ago: executing program 0 (id=103): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xd, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x7, 0x0, 0xd6e}}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r3, 0x1, 0x5004) syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r4, &(0x7f0000000080)='4', 0x1) 1m47.075739497s ago: executing program 0 (id=120): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x840, 0x0) io_setup(0x1, &(0x7f0000002500)=0x0) socket$inet6(0xa, 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0x800000010000, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x81901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x110) io_submit(r1, 0x1, &(0x7f00000011c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x5, r0, 0x0, 0x0, 0xe3}]) 1m41.687567015s ago: executing program 0 (id=129): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) write(r0, &(0x7f0000000000)="0d9ccf1cb8d871123f1c06000000000000009a42ffffff7f0000000057a02c6bb4a8afdd55b057d1b81536fbdd13d4c4fc4e6e3223649035442a47fccedbea15ad2fcd7e0cb1215da7e6012a7c9db853055d64", 0x53) r1 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r1, &(0x7f00000091c0)=""/16384, 0x4000) 1m38.832161232s ago: executing program 0 (id=135): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000f56dba73413b3ca32d807cdf7c0000003000000000000000000000000000000000000000c2"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000bf4000dfd499f34b76dd62000000000000000000000000002c080000e8c103", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x8782, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_gettime(r4, 0x0) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) fstat(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast2, @in6=@empty, 0x4e24, 0x9, 0x4e22, 0x1485, 0x2, 0xa0, 0x80, 0x1d, 0x0, r6}, {0x2, 0x2, 0x5, 0xf20, 0x3, 0x9, 0x1cf840, 0x7}, {0x34, 0x4, 0x2, 0x1}, 0x4, 0x6e6bbc, 0x1, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d5, 0x33}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3501, 0x0, 0x1, 0x2, 0xfffffffe, 0x7, 0x80000001}}, 0xe8) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f0000002080)="$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") r8 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x5) fallocate(r8, 0x0, 0x0, 0x8800000) 1m23.761973024s ago: executing program 32 (id=135): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000f56dba73413b3ca32d807cdf7c0000003000000000000000000000000000000000000000c2"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000bf4000dfd499f34b76dd62000000000000000000000000002c080000e8c103", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x8782, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_gettime(r4, 0x0) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) fstat(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast2, @in6=@empty, 0x4e24, 0x9, 0x4e22, 0x1485, 0x2, 0xa0, 0x80, 0x1d, 0x0, r6}, {0x2, 0x2, 0x5, 0xf20, 0x3, 0x9, 0x1cf840, 0x7}, {0x34, 0x4, 0x2, 0x1}, 0x4, 0x6e6bbc, 0x1, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d5, 0x33}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3501, 0x0, 0x1, 0x2, 0xfffffffe, 0x7, 0x80000001}}, 0xe8) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f0000002080)="$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") r8 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x5) fallocate(r8, 0x0, 0x0, 0x8800000) 26.041216059s ago: executing program 5 (id=170): prlimit64(0x0, 0xf, &(0x7f0000000000)={0xfffffffffffffffa, 0xfffffffffffffffb}, 0x0) brk(0x689d80000000) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[]) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) syz_io_uring_setup(0xe57, 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 12.24018842s ago: executing program 3 (id=316): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0100000000004f39d14812"], 0x1c}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="90f7ffff880a1c42e015bce1bae2ffffffff7af02cf23009970cc96916b530ab76e40da522aeaf", @ANYRES16=r1, @ANYBLOB="020028bd7000fbdbdf250100000008000300", @ANYRES32=0x0, @ANYBLOB="0c000600030000000000000008000300", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='7', 0x1) openat(r2, 0x0, 0x440002, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) r3 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89fe, &(0x7f0000000340)={'ip6tnl0\x00', 0x0}) epoll_create1(0x0) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r5 = syz_mount_image$fuse(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x210060, &(0x7f0000000580)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}, {@max_read={'max_read', 0x3d, 0x8000000000000000}}], [{@dont_appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x35, 0x37, 0x38, 0x64, 0x38, 0x38, 0x62], 0x2d, [0x65, 0x33, 0x65, 0x32], 0x2d, [0x32, 0x65, 0x36, 0x31], 0x2d, [0x65, 0x36, 0x30, 0x64], 0x2d, [0x33, 0x33, 0xf, 0x32, 0x33, 0x38, 0x30, 0x39]}}}, {@dont_measure}]}}, 0x1, 0x0, &(0x7f00000006c0)="c8d3803b5ce06c19db00ab3143e0fc5fcdd5b19a0b0f9f3c3a71643a1034d63f46b4a6f98daeaa37354a6e4f7d2f5b3b11e98172ec99dd3f3518095e5e210dc54a479f17336f15b10e97beed75b0ce4d829157c18db3fb4d96b13a3f4a70c977fd627cb53c") r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000002000010026bd7000ffffffff0a14204003000006fffffff014000100ff020000000000000000000000000001140002"], 0x44}, 0x1, 0x0, 0x0, 0x40814}, 0x4000004) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) mkdirat(r5, &(0x7f0000000740)='./file0\x00', 0x163) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) 12.23599009s ago: executing program 4 (id=317): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0), 0xfe, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)="b2", 0x1, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 10.662246235s ago: executing program 1 (id=318): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x9) socket$nl_route(0x10, 0x3, 0x0) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) process_vm_writev(r3, &(0x7f0000000400)=[{0x0}, {0x0}, {&(0x7f0000000340)=""/116, 0x74}], 0x3, 0x0, 0x0, 0x0) setresgid(0x0, 0xee01, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setgroups(0x1, &(0x7f0000000080)=[0xee00]) setuid(0xee01) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) 10.662050145s ago: executing program 2 (id=319): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x601, 0xd) write(r0, &(0x7f00000001c0)='p:s/p`b/file0:0\f-', 0x11) 10.661357035s ago: executing program 3 (id=320): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x9) socket$nl_route(0x10, 0x3, 0x0) r1 = add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) process_vm_writev(r3, &(0x7f0000000400)=[{0x0}, {0x0}, {&(0x7f0000000340)=""/116, 0x74}], 0x3, 0x0, 0x0, 0x0) setresgid(0x0, 0xee01, 0x0) setgroups(0x1, &(0x7f0000000080)=[0xee00]) setuid(0xee01) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) 10.650916706s ago: executing program 4 (id=321): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) lgetxattr(&(0x7f0000000240)='./file1\x00', &(0x7f00000003c0)=@known='trusted.overlay.upper\x00', &(0x7f0000000300)=""/187, 0xbb) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711814000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='net/igmp6\x00') read$FUSE(r3, &(0x7f0000002a80)={0x2020}, 0x2020) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x200a017, 0x0, 0x1, 0x0, 0x0) r4 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x8) openat$cgroup(r5, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) 9.011880703s ago: executing program 2 (id=322): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) alarm(0x8000000000000001) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, &(0x7f0000000100)) 9.011565603s ago: executing program 3 (id=323): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@nombcache}, {}, {@delalloc}, {@grpid}, {@init_itable}, {@resuid}, {@grpid}, {@quota}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 9.011311313s ago: executing program 4 (id=324): unshare(0x24060400) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, 0x0, 0x0) 7.887357087s ago: executing program 1 (id=325): process_vm_writev(0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0) 5.971545437s ago: executing program 1 (id=326): creat(&(0x7f0000001340)='./file0\x00', 0xecf86c37d53049cc) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118, 0x0, r3}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x200, 0x4003bfff, 0x2b8, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r4}}], 0x1, 0x0, 0x0) 5.971233987s ago: executing program 2 (id=327): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x3fe, &(0x7f00000001c0)=0x0) io_getevents(r1, 0x1, 0x1, &(0x7f0000004600)=[{}], 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) 5.970913417s ago: executing program 3 (id=328): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f0000000180)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x388}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000400)="80004b77efe55463", 0x8}], 0x1, &(0x7f0000000440)=[@dontfrag={{0x14, 0x29, 0x3e, 0x5}}], 0x18}, 0x4) 5.970638857s ago: executing program 4 (id=329): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x4404, &(0x7f0000001280)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x1, 0x11f4, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x1000, 0xd}) 4.091838056s ago: executing program 1 (id=330): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000021, 0x0, 0x1af}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x100000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.090975096s ago: executing program 2 (id=331): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0100000000004f39d14812"], 0x1c}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="90f7ffff880a1c42e015bce1bae2ffffffff7af02cf23009970cc96916b530ab76e40da522aeaf", @ANYRES16=r1, @ANYBLOB="020028bd7000fbdbdf250100000008000300", @ANYRES32=0x0, @ANYBLOB="0c000600030000000000000008000300", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='7', 0x1) openat(r2, 0x0, 0x440002, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) r3 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89fe, &(0x7f0000000340)={'ip6tnl0\x00', 0x0}) epoll_create1(0x0) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) syz_mount_image$fuse(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x210060, &(0x7f0000000580)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}, {@max_read={'max_read', 0x3d, 0x8000000000000000}}], [{@dont_appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x35, 0x37, 0x38, 0x64, 0x38, 0x38, 0x62], 0x2d, [0x65, 0x33, 0x65, 0x32], 0x2d, [0x32, 0x65, 0x36, 0x31], 0x2d, [0x65, 0x36, 0x30, 0x64], 0x2d, [0x33, 0x33, 0xf, 0x32, 0x33, 0x38, 0x30, 0x39]}}}, {@dont_measure}]}}, 0x1, 0x0, &(0x7f00000006c0)="c8d3803b5ce06c19db00ab3143e0fc5fcdd5b19a0b0f9f3c3a71643a1034d63f46b4a6f98daeaa37354a6e4f7d2f5b3b11e98172ec99dd3f3518095e5e210dc54a479f17336f15b10e97beed75b0ce4d829157c18db3fb4d96b13a3f4a70c977fd627cb53c") r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000002000010026bd7000ffffffff0a14204003000006fffffff014000100ff020000000000000000000000000001140002"], 0x44}, 0x1, 0x0, 0x0, 0x40814}, 0x4000004) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) 4.035315439s ago: executing program 3 (id=332): setresuid(0x0, 0xee00, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x104c00) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68) 4.035127499s ago: executing program 4 (id=333): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x40000000000, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x402e831, 0xffffffffffffffff, 0xf6d0d000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4d, 0x0, 0x0) 2.096527341s ago: executing program 1 (id=334): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) userfaultfd(0x80001) r0 = syz_io_uring_setup(0x141f, &(0x7f0000000080)={0x0, 0xa63f, 0x400, 0x201, 0x14a}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000006"], 0x50) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_io_uring_submit$UBLK(r1, r2, r3, &(0x7f00000003c0)=@ublk_get_features_sqe={0x2e, 0x69, 0x0, 0xffffffffffffffff, 0x80207513, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffbb1, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0}}) io_uring_enter(r0, 0x20, 0x20, 0x1, 0x0, 0x0) 2.095754531s ago: executing program 2 (id=335): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xd, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x7, 0x0, 0xd6e}}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r3, 0x1, 0x5004) syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r4, &(0x7f0000000080)='4', 0x1) 2.094938111s ago: executing program 3 (id=336): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x582, 0xeb, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xa, 0xb0, 0xc, {0x8, 0xb, 0x0, 0x2, 0x1, 0x23, 0x30, 0xe5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa, 0x8000}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x120, 0x1, 0x9, 0x10, {0xa, 0x25, 0x25, 0x5, 0x50, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x6, 0xe3, 0x1, {0xa, 0x25, 0x25, 0x2, 0xd, 0xffff}}}}}}}}]}}, 0x0) shutdown(r0, 0x1) 2.094639631s ago: executing program 4 (id=337): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, 0x0, &(0x7f0000000100)) 1.50356ms ago: executing program 1 (id=338): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) alarm(0x8000000000000001) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, &(0x7f0000000100)) 0s ago: executing program 2 (id=339): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@nombcache}, {}, {@delalloc}, {@grpid}, {@init_itable}, {@resuid}, {@grpid}, {@quota}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): promiscuous mode [ 69.706610][ T4279] device hsr_slave_1 entered promiscuous mode [ 69.722466][ T4273] device hsr_slave_0 entered promiscuous mode [ 69.729927][ T4273] device hsr_slave_1 entered promiscuous mode [ 69.736637][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.744727][ T4273] Cannot create hsr debugfs directory [ 69.784510][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.791797][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.817892][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.832342][ T4285] device hsr_slave_0 entered promiscuous mode [ 69.839785][ T4285] device hsr_slave_1 entered promiscuous mode [ 69.846724][ T4285] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.854309][ T4285] Cannot create hsr debugfs directory [ 69.888749][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.895865][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.922279][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.942531][ T4282] device hsr_slave_0 entered promiscuous mode [ 69.950130][ T4282] device hsr_slave_1 entered promiscuous mode [ 69.957115][ T4282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.964684][ T4282] Cannot create hsr debugfs directory [ 70.036098][ T4287] Bluetooth: hci3: command 0x0409 tx timeout [ 70.042448][ T4287] Bluetooth: hci2: command 0x0409 tx timeout [ 70.045288][ T4277] Bluetooth: hci0: command 0x0409 tx timeout [ 70.049107][ T4287] Bluetooth: hci4: command 0x0409 tx timeout [ 70.054575][ T4277] Bluetooth: hci1: command 0x0409 tx timeout [ 70.114760][ T4272] device hsr_slave_0 entered promiscuous mode [ 70.122202][ T4272] device hsr_slave_1 entered promiscuous mode [ 70.129143][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.137043][ T4272] Cannot create hsr debugfs directory [ 70.348635][ T4279] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.373683][ T4279] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.393346][ T4279] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.407568][ T4279] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.474679][ T4273] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.497322][ T4273] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.510152][ T4282] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.527128][ T4273] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.550943][ T4282] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.560077][ T4282] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.570287][ T4282] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.579219][ T4273] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.626323][ T4272] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.637170][ T4272] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.646676][ T4272] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.670490][ T4272] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.749416][ T4285] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.770886][ T4285] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.789363][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.803162][ T4285] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.813074][ T4285] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.841826][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.851951][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.862019][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.897985][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.907778][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.917703][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.924911][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.946979][ T4282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.963366][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.974138][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.983805][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.992469][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.999726][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.009904][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.048603][ T4282] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.056200][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.064983][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.074746][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.083968][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.091999][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.100250][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.109901][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.128148][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.144991][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.154402][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.163432][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.173386][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.181006][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.189912][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.198772][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.207408][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.216224][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.224732][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.248795][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.260448][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.300239][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.318429][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.326213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.338338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.347756][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.354925][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.364742][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.379993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.390491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.403774][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.410543][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.421512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.431199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.442246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.451520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.462027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.471365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.480630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.489910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.497974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.506731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.519815][ T4282] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.540125][ T4285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.548930][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.573014][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.600200][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.612353][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.630290][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.637614][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.696596][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.712752][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.736413][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.750420][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.757611][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.766507][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.775699][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.784089][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.791828][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.800661][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.809686][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.818482][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.825651][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.833400][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.842665][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.851674][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.866093][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.909136][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.919501][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.927656][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.937575][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.946637][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.961833][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.982847][ T4285] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.990615][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.999978][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.009930][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.018620][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.030239][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.040195][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.049136][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.090783][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.100360][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.110672][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.115667][ T4277] Bluetooth: hci1: command 0x041b tx timeout [ 72.120555][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.124564][ T4277] Bluetooth: hci4: command 0x041b tx timeout [ 72.134674][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.147272][ T49] Bluetooth: hci0: command 0x041b tx timeout [ 72.147332][ T4287] Bluetooth: hci2: command 0x041b tx timeout [ 72.153304][ T49] Bluetooth: hci3: command 0x041b tx timeout [ 72.163307][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.174437][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.183212][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.192042][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.200780][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.209828][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.218491][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.225668][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.233442][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.242348][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.252226][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.259519][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.268662][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.276861][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.284333][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.299567][ T4272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.313413][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.323748][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.342024][ T4282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.349913][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.360192][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.369803][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.378506][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.387996][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.400211][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.409099][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.418653][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.428253][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.493501][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.520843][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.534265][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.558098][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.592146][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.610952][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.626932][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.639999][ T4279] device veth0_vlan entered promiscuous mode [ 72.656444][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.664832][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.700101][ T4279] device veth1_vlan entered promiscuous mode [ 72.711443][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.722629][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.739165][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.752121][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.800745][ T4282] device veth0_vlan entered promiscuous mode [ 72.821390][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.831347][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.869837][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.886540][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.916386][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.930523][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.963088][ T4279] device veth0_macvtap entered promiscuous mode [ 72.979101][ T4282] device veth1_vlan entered promiscuous mode [ 73.008240][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.020010][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.030095][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.038633][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.047137][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.054667][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.062446][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.076781][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.086014][ T4279] device veth1_macvtap entered promiscuous mode [ 73.123039][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.132377][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.149454][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.158881][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.174944][ T4282] device veth0_macvtap entered promiscuous mode [ 73.190491][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.219333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.229537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.240254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.249388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.262154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.285833][ T4282] device veth1_macvtap entered promiscuous mode [ 73.310674][ T4273] device veth0_vlan entered promiscuous mode [ 73.326126][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.335696][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.344253][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.354980][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.367937][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.377883][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.387216][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.396838][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.405941][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.413917][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.438100][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.447741][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.461685][ T4273] device veth1_vlan entered promiscuous mode [ 73.472137][ T4279] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.484238][ T4279] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.494355][ T4279] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.503491][ T4279] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.514218][ T4272] device veth0_vlan entered promiscuous mode [ 73.523482][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.532199][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.540164][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.548932][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.557398][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.570546][ T4285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.601173][ T4272] device veth1_vlan entered promiscuous mode [ 73.632791][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.666434][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.683543][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.716622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.734585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.755848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.764815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.774137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.783693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.821825][ T4273] device veth0_macvtap entered promiscuous mode [ 73.833172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.842177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.852293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.867349][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.879545][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.893580][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.911564][ T4272] device veth0_macvtap entered promiscuous mode [ 73.928578][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.937758][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.947081][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.963425][ T4282] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.973118][ T4282] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.984681][ T4282] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.993862][ T4282] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.022281][ T4273] device veth1_macvtap entered promiscuous mode [ 74.034426][ T4272] device veth1_macvtap entered promiscuous mode [ 74.060700][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.090866][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.132160][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.146561][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.165342][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.191028][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.195911][ T4287] Bluetooth: hci2: command 0x040f tx timeout [ 74.201185][ T4277] Bluetooth: hci0: command 0x040f tx timeout [ 74.207158][ T4287] Bluetooth: hci1: command 0x040f tx timeout [ 74.213042][ T4277] Bluetooth: hci4: command 0x040f tx timeout [ 74.219361][ T49] Bluetooth: hci3: command 0x040f tx timeout [ 74.240947][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.249944][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.259525][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.267941][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.278050][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.312453][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.322650][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.362189][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.373956][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.384394][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.395068][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.408303][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.421473][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.433238][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.442531][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.453696][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.464806][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.476536][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.488612][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.509403][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.509622][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.527907][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.529583][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.544459][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.553332][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.562254][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.574584][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.588808][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.601265][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.612020][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.621893][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.634236][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.645283][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.656456][ T4273] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.665996][ T4273] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.674717][ T4273] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.692111][ T4273] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.713643][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.721678][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.732149][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.742256][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.753913][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.769097][ T4272] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.780053][ T4272] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.789230][ T4272] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.798721][ T4272] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.823231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.832317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.846855][ T4285] device veth0_vlan entered promiscuous mode [ 74.869622][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.878842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.883064][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.899613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.908590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.923616][ T4285] device veth1_vlan entered promiscuous mode [ 75.140090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.175255][ T4338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.313044][ T4338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.407740][ T4357] loop3: detected capacity change from 0 to 1024 [ 75.716784][ T4357] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 76.377367][ T4287] Bluetooth: hci4: command 0x0419 tx timeout [ 76.383449][ T4287] Bluetooth: hci0: command 0x0419 tx timeout [ 76.389678][ T4287] Bluetooth: hci2: command 0x0419 tx timeout [ 76.396482][ T49] Bluetooth: hci1: command 0x0419 tx timeout [ 76.402608][ T49] Bluetooth: hci3: command 0x0419 tx timeout [ 76.452926][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.475888][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.629778][ T4327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.685496][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.722514][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.731715][ T4327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.795993][ T4285] device veth0_macvtap entered promiscuous mode [ 76.834143][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.848566][ T4362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.885653][ T4362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.908991][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.921693][ T4371] loop1: detected capacity change from 0 to 128 [ 76.925107][ C0] sched: RT throttling activated [ 76.938340][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.953142][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.967593][ T4285] device veth1_macvtap entered promiscuous mode [ 77.014464][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.080343][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.121021][ T4371] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 77.130157][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.147022][ T4371] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.169433][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.182933][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.193375][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.204322][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.214534][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.225873][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.246606][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 77.262982][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.287746][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.339521][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.591606][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.613067][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.624056][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.639572][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.652115][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.664859][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.677039][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.691532][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.696909][ T4379] loop3: detected capacity change from 0 to 2048 [ 77.702115][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.730664][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.744339][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.771061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.793555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.949383][ T4379] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 78.020065][ T4285] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.029374][ T4285] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.039366][ T4285] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.053461][ T4285] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.290099][ T4387] EXT4-fs error (device loop3): ext4_find_extent:936: inode #2: comm syz.3.6: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 78.779269][ T4390] loop0: detected capacity change from 0 to 256 [ 78.799722][ T4390] ======================================================= [ 78.799722][ T4390] WARNING: The mand mount option has been deprecated and [ 78.799722][ T4390] and is ignored by this kernel. Remove the mand [ 78.799722][ T4390] option from the mount to silence this warning. [ 78.799722][ T4390] ======================================================= [ 78.895465][ T4390] exfat: Deprecated parameter 'namecase' [ 79.005811][ T4390] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb3694, utbl_chksum : 0xe619d30d) [ 79.054065][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 79.083180][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.091781][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.113573][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.192310][ T4390] exFAT-fs (loop0): error, found bogus dentry(5) beyond unused empty group(4) (start_clu : 5, cur_clu : 5) [ 79.215282][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.223151][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.242660][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.274513][ T4398] loop1: detected capacity change from 0 to 512 [ 79.294145][ T4396] exFAT-fs (loop0): error, found bogus dentry(5) beyond unused empty group(4) (start_clu : 5, cur_clu : 5) [ 79.327867][ T4398] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 79.432367][ T4398] Quota error (device loop1): do_check_range: Getting dqdh_entries 64 out of range 0-14 [ 79.439308][ T4401] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.460371][ T4398] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 79.743161][ T4398] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.8: Failed to acquire dquot type 1 [ 80.048121][ T4404] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 80.074723][ T4373] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 80.177352][ T4398] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.8: corrupted inode contents [ 80.192059][ T4408] loop0: detected capacity change from 0 to 128 [ 80.219360][ T4398] EXT4-fs error (device loop1): ext4_dirty_inode:6166: inode #16: comm syz.1.8: mark_inode_dirty error [ 80.224407][ T4408] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 80.245071][ T4398] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.8: corrupted inode contents [ 80.299885][ T4398] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.8: mark_inode_dirty error [ 80.316657][ T4408] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 80.339753][ T4398] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.8: corrupted inode contents [ 80.374747][ T4398] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 80.426181][ T4398] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.8: corrupted inode contents [ 80.498688][ T4398] EXT4-fs error (device loop1): ext4_truncate:4325: inode #16: comm syz.1.8: mark_inode_dirty error [ 80.544293][ T4398] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 80.643107][ T4398] EXT4-fs (loop1): 1 truncate cleaned up [ 80.655231][ T4398] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 80.785443][ T4398] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.479299][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 81.977522][ T9] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 82.279234][ T4425] FAULT_INJECTION: forcing a failure. [ 82.279234][ T4425] name fail_futex, interval 1, probability 0, space 0, times 1 [ 82.391909][ T4425] CPU: 0 PID: 4425 Comm: syz.0.13 Not tainted syzkaller #0 [ 82.399461][ T4425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 82.410197][ T4425] Call Trace: [ 82.413589][ T4425] [ 82.416632][ T4425] dump_stack_lvl+0x188/0x24e [ 82.421362][ T4425] ? show_regs_print_info+0x12/0x12 [ 82.426881][ T4425] ? load_image+0x410/0x410 [ 82.431427][ T4425] ? key_instantiate_and_link+0x4b0/0x4b0 [ 82.437226][ T4425] should_fail_ex+0x390/0x4c0 [ 82.441987][ T4425] get_futex_key+0x1b1/0x1000 [ 82.446696][ T4425] ? key_payload_reserve+0x3b0/0x3b0 [ 82.452113][ T4425] ? futex_setup_timer+0xc0/0xc0 [ 82.457175][ T4425] futex_wake+0x123/0x4f0 [ 82.461636][ T4425] ? futex_wake_mark+0x150/0x150 [ 82.466802][ T4425] ? __se_sys_keyctl+0x162/0x870 [ 82.471782][ T4425] do_futex+0x2e2/0x320 [ 82.476070][ T4425] ? __ia32_sys_get_robust_list+0x100/0x100 [ 82.482019][ T4425] __se_sys_futex+0x381/0x410 [ 82.486734][ T4425] ? __x64_sys_futex+0xf0/0xf0 [ 82.488533][ T4436] loop4: detected capacity change from 0 to 128 [ 82.491521][ T4425] ? __x64_sys_futex+0x1d/0xf0 [ 82.502556][ T4425] do_syscall_64+0x4c/0xa0 [ 82.506998][ T4425] ? clear_bhb_loop+0x60/0xb0 [ 82.511874][ T4425] ? clear_bhb_loop+0x60/0xb0 [ 82.516605][ T4425] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 82.522625][ T4425] RIP: 0033:0x7f3b5439e159 [ 82.527084][ T4425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.546718][ T4425] RSP: 002b:00007f3b5529e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 82.555176][ T4425] RAX: ffffffffffffffda RBX: 00007f3b54625fa8 RCX: 00007f3b5439e159 [ 82.563270][ T4425] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3b54625fac [ 82.571302][ T4425] RBP: 00007f3b54625fa0 R08: 000e91dc921cd0c0 R09: 0000000000000000 [ 82.579396][ T4425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.587411][ T4425] R13: 00007f3b54626038 R14: 00007ffc93fdbd40 R15: 00007ffc93fdbe28 [ 82.595455][ T4425] [ 82.678421][ T4436] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 82.688851][ T4436] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 82.775296][ T4442] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13'. [ 82.794768][ T4442] ip_tables: iptables: counters copy to user failed while replacing table [ 82.843805][ T4444] loop3: detected capacity change from 0 to 512 [ 82.881765][ T4444] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.930628][ T4444] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 82.974208][ T4444] EXT4-fs (loop3): 1 truncate cleaned up [ 82.985819][ T4444] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 83.835219][ T4452] loop2: detected capacity change from 0 to 128 [ 83.863139][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 83.881006][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 83.903972][ T4452] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 83.962428][ T4452] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.808822][ T4285] EXT4-fs (loop4): unmounting filesystem. [ 85.124474][ T4480] 9pnet_fd: Insufficient options for proto=fd [ 85.239637][ T4479] overlayfs: failed to resolve './file0': -2 [ 85.255444][ T2173] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 85.468348][ T2173] usb 4-1: unable to get BOS descriptor or descriptor too short [ 85.505835][ T2173] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.558959][ T4482] capability: warning: `syz.4.23' uses 32-bit capabilities (legacy support in use) [ 86.315139][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 86.335114][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 86.345113][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 86.355121][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 86.365118][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 86.375124][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 86.385113][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 86.395118][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 86.405114][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 86.425131][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 86.759043][ T41] cfg80211: failed to load regulatory.db [ 86.887645][ T2173] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.943111][ T2173] usb 4-1: string descriptor 0 read error: -22 [ 86.959402][ T2173] usb 4-1: New USB device found, idVendor=1235, idProduct=8208, bcdDevice= 0.40 [ 86.961662][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 86.982583][ T2173] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.071628][ T2173] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 87.210578][ T2173] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 87.308408][ T4367] udevd[4367]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 87.310532][ T4474] process 'syz.3.22' launched './file1' with NULL argv: empty string added [ 87.416367][ T4388] usb 4-1: USB disconnect, device number 2 [ 87.458233][ T4491] loop0: detected capacity change from 0 to 128 [ 87.552765][ T4491] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 87.565423][ T4491] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 90.450036][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 90.752556][ T4513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.35'. [ 91.112105][ T4519] loop2: detected capacity change from 0 to 128 [ 91.174863][ T4522] loop0: detected capacity change from 0 to 512 [ 92.019590][ T4519] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 92.461828][ T4522] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 92.477093][ T4519] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.489022][ T4533] Driver unsupported XDP return value 0 on prog (id 5) dev N/A, expect packet loss! [ 92.588714][ T4522] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.507683][ T4545] loop1: detected capacity change from 0 to 4096 [ 94.593308][ T4545] EXT4-fs: inline encryption not supported [ 94.607884][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 94.628273][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 94.640587][ T4545] EXT4-fs: inline encryption not supported [ 94.828326][ T4545] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 95.175914][ T4556] loop2: detected capacity change from 0 to 8192 [ 95.454739][ T4558] loop3: detected capacity change from 0 to 4096 [ 96.018974][ T4558] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 96.351016][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 96.819872][ T4570] loop0: detected capacity change from 0 to 512 [ 96.832588][ T4570] EXT4-fs: Ignoring removed nobh option [ 97.931234][ T4570] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 97.942442][ T4570] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.997219][ T4570] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #2: comm syz.0.48: corrupted inode contents [ 98.013067][ T4570] EXT4-fs error (device loop0): ext4_dirty_inode:6166: inode #2: comm syz.0.48: mark_inode_dirty error [ 98.035014][ T4570] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #2: comm syz.0.48: corrupted inode contents [ 98.052420][ T4570] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.48: mark_inode_dirty error [ 98.212370][ T4578] usb usb7: usbfs: process 4578 (syz.0.48) did not claim interface 0 before use [ 98.725825][ T26] audit: type=1326 audit(1789509909.621:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4581 comm="syz.4.52" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81f19e159 code=0x7ffc0000 [ 98.861876][ T26] audit: type=1326 audit(1789509909.761:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4581 comm="syz.4.52" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81f19e159 code=0x7ffc0000 [ 100.977654][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 101.050987][ T26] audit: type=1326 audit(1789509909.781:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4581 comm="syz.4.52" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7ff81f19e159 code=0x7ffc0000 [ 101.201820][ T26] audit: type=1326 audit(1789509909.781:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4581 comm="syz.4.52" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81f19e159 code=0x7ffc0000 [ 101.358117][ T26] audit: type=1326 audit(1789509909.781:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4581 comm="syz.4.52" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81f19e159 code=0x7ffc0000 [ 101.485302][ T26] audit: type=1326 audit(1789509909.781:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4581 comm="syz.4.52" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7ff81f19e159 code=0x7ffc0000 [ 101.605278][ T26] audit: type=1326 audit(1789509909.781:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4581 comm="syz.4.52" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81f19e159 code=0x7ffc0000 [ 101.670965][ T4600] loop0: detected capacity change from 0 to 128 [ 101.740081][ T26] audit: type=1326 audit(1789509909.781:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4581 comm="syz.4.52" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81f19e159 code=0x7ffc0000 [ 101.828301][ T4600] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 102.116626][ T4600] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.133575][ T26] audit: type=1326 audit(1789509909.781:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4581 comm="syz.4.52" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff81f19e159 code=0x7ffc0000 [ 103.241340][ T26] audit: type=1326 audit(1789509909.781:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4581 comm="syz.4.52" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81f19e159 code=0x7ffc0000 [ 103.868154][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 103.921697][ T4623] loop1: detected capacity change from 0 to 512 [ 104.033339][ T4620] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x10) [ 104.043586][ T4623] EXT4-fs error (device loop1): __ext4_iget:5102: inode #14: block 1886221359: comm syz.1.60: invalid block [ 104.075493][ T4620] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 104.084450][ T4623] EXT4-fs (loop1): Remounting filesystem read-only [ 104.109006][ T4623] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.60: couldn't read orphan inode 14 (err -117) [ 104.185868][ T4620] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0xb) [ 104.194251][ T4620] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 104.218279][ T4623] EXT4-fs (loop1): Remounting filesystem read-only [ 104.285365][ T4623] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 104.635179][ T4350] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 105.865292][ T4350] usb 2-1: device descriptor read/64, error -71 [ 106.162532][ T4643] ip_tables: iptables: counters copy to user failed while replacing table [ 106.192892][ T4350] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 106.935547][ T4350] usb 2-1: device descriptor read/64, error -71 [ 106.993796][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 107.065551][ T4350] usb usb2-port1: attempt power cycle [ 107.316996][ T4655] loop1: detected capacity change from 0 to 4096 [ 107.364260][ T4655] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 107.426221][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 107.943837][ T4663] loop0: detected capacity change from 0 to 128 [ 107.986516][ T4663] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 108.012340][ T4663] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.799760][ T4683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.66'. [ 110.408526][ T4689] loop1: detected capacity change from 0 to 512 [ 110.417339][ T4690] Zero length message leads to an empty skb [ 110.980378][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 111.274546][ T4675] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.283552][ T4675] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.448907][ T4689] EXT4-fs (loop1): Test dummy encryption mode enabled [ 111.457707][ T4689] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 111.638630][ T4689] EXT4-fs (loop1): 1 truncate cleaned up [ 111.646170][ T4689] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 112.022420][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 112.762633][ T4717] loop2: detected capacity change from 0 to 128 [ 113.014759][ T4675] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.078587][ T4675] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.103775][ T4717] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 113.145693][ T4717] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 114.147681][ T4675] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.157777][ T4675] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.167281][ T4675] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.176814][ T4675] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.380615][ T4675] syz.3.66 (4675) used greatest stack depth: 20688 bytes left [ 114.800344][ T4733] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 115.581001][ T4732] overlayfs: failed to resolve './file0': -2 [ 115.593176][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 115.679813][ T4735] loop0: detected capacity change from 0 to 128 [ 115.879742][ T4735] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 115.998289][ T4747] loop1: detected capacity change from 0 to 128 [ 116.129122][ T4747] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 116.139413][ T4747] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 116.402407][ T4735] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.460183][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 117.208857][ T4756] fuse: Bad value for 'fd' [ 117.258902][ T4756] loop2: detected capacity change from 0 to 1024 [ 117.824205][ T4756] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #3: block 1: comm syz.2.92: lblock 1 mapped to illegal pblock 1 (length 1) [ 117.840495][ T4756] __quota_error: 33 callbacks suppressed [ 117.840516][ T4756] Quota error (device loop2): write_blk: dquota write failed [ 117.854648][ T4756] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 117.866078][ T4756] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.92: Failed to acquire dquot type 0 [ 117.884549][ T4756] EXT4-fs error (device loop2): ext4_free_blocks:6220: comm syz.2.92: Freeing blocks not in datazone - block = 0, count = 4096 [ 117.902615][ T4756] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.92: Invalid inode bitmap blk 0 in block_group 0 [ 117.919021][ T4756] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 117.932843][ T4756] EXT4-fs (loop2): 1 orphan inode deleted [ 117.938749][ T4756] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 117.970048][ T4757] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:17: lblock 1 mapped to illegal pblock 1 (length 1) [ 118.117341][ T4757] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 118.126404][ T4757] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:17: Failed to release dquot type 0 [ 118.269308][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 119.522267][ T4772] loop2: detected capacity change from 0 to 128 [ 120.444829][ T4772] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 120.454483][ T4772] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 120.508923][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 120.601693][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 121.078825][ T4784] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 122.078889][ T4787] loop0: detected capacity change from 0 to 128 [ 122.094554][ T4789] loop2: detected capacity change from 0 to 1024 [ 123.404661][ T4789] EXT4-fs: Ignoring removed nomblk_io_submit option [ 123.437964][ T4787] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 123.471717][ T4787] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 123.491699][ T4789] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 123.820465][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 124.914687][ T4813] FAULT_INJECTION: forcing a failure. [ 124.914687][ T4813] name failslab, interval 1, probability 0, space 0, times 1 [ 124.991508][ T4813] CPU: 0 PID: 4813 Comm: syz.1.100 Not tainted syzkaller #0 [ 124.998905][ T4813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 125.009049][ T4813] Call Trace: [ 125.012367][ T4813] [ 125.015335][ T4813] dump_stack_lvl+0x188/0x24e [ 125.020095][ T4813] ? show_regs_print_info+0x12/0x12 [ 125.025597][ T4813] ? load_image+0x410/0x410 [ 125.030913][ T4813] ? __might_sleep+0xd0/0xd0 [ 125.035564][ T4813] ? __lock_acquire+0x7c40/0x7c40 [ 125.040914][ T4813] should_fail_ex+0x390/0x4c0 [ 125.045933][ T4813] should_failslab+0x5/0x20 [ 125.050487][ T4813] slab_pre_alloc_hook+0x59/0x300 [ 125.055559][ T4813] ? key_alloc+0x346/0x1030 [ 125.060097][ T4813] __kmem_cache_alloc_node+0x4f/0x270 [ 125.065856][ T4813] ? key_alloc+0x346/0x1030 [ 125.070447][ T4813] __kmalloc_node_track_caller+0xa0/0x240 [ 125.076863][ T4813] kmemdup+0x27/0x60 [ 125.081209][ T4813] key_alloc+0x346/0x1030 [ 125.085879][ T4813] keyring_alloc+0x41/0xa0 [ 125.090433][ T4813] install_process_keyring_to_cred+0x96/0x120 [ 125.097225][ T4813] keyctl_set_reqkey_keyring+0x10d/0x1b0 [ 125.103278][ T4813] __se_sys_keyctl+0x162/0x870 [ 125.108172][ T4813] ? __x64_sys_keyctl+0xc0/0xc0 [ 125.113213][ T4813] ? do_futex+0x2e2/0x320 [ 125.117561][ T4813] ? __ia32_sys_get_robust_list+0x100/0x100 [ 125.123686][ T4813] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 125.129718][ T4813] ? lock_chain_count+0x20/0x20 [ 125.134778][ T4813] ? lockdep_hardirqs_on+0x94/0x140 [ 125.140005][ T4813] ? __x64_sys_keyctl+0x1c/0xc0 [ 125.144874][ T4813] do_syscall_64+0x4c/0xa0 [ 125.149552][ T4813] ? clear_bhb_loop+0x60/0xb0 [ 125.154272][ T4813] ? clear_bhb_loop+0x60/0xb0 [ 125.159079][ T4813] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 125.165100][ T4813] RIP: 0033:0x7f514d99e159 [ 125.169706][ T4813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.189647][ T4813] RSP: 002b:00007f514e8e4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 125.198107][ T4813] RAX: ffffffffffffffda RBX: 00007f514dc25fa0 RCX: 00007f514d99e159 [ 125.206234][ T4813] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000e [ 125.214267][ T4813] RBP: 00007f514da3506b R08: 0000000000000000 R09: 0000000000000000 [ 125.222372][ T4813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.230443][ T4813] R13: 00007f514dc26038 R14: 00007f514dc25fa0 R15: 00007ffe108ff898 [ 125.238500][ T4813] [ 127.142385][ T4820] loop3: detected capacity change from 0 to 8192 [ 127.358434][ T4820] loop3: p1 p2 < > p3 p4 < p5 > [ 127.387728][ T4820] loop3: partition table partially beyond EOD, truncated [ 127.537755][ T4820] loop3: p1 size 1342439424 extends beyond EOD, truncated [ 127.799410][ T4820] loop3: p2 start 16384 is beyond EOD, truncated [ 127.920152][ T4820] loop3: p3 start 67108864 is beyond EOD, truncated [ 128.214935][ T4820] loop3: p5 size 1342439424 extends beyond EOD, truncated [ 129.647463][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 129.912301][ T4849] loop1: detected capacity change from 0 to 1024 [ 132.004298][ T4849] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 132.839980][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.846476][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.893234][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 135.614512][ T4876] loop3: detected capacity change from 0 to 128 [ 135.645997][ T4876] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 135.727054][ T4876] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.446606][ T4880] loop1: detected capacity change from 0 to 128 [ 136.618856][ T4880] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 136.628104][ T4880] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 136.821748][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 136.851093][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 137.186322][ T4894] FAULT_INJECTION: forcing a failure. [ 137.186322][ T4894] name fail_futex, interval 1, probability 0, space 0, times 0 [ 137.261011][ T4894] CPU: 1 PID: 4894 Comm: syz.2.128 Not tainted syzkaller #0 [ 137.268456][ T4894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 137.278699][ T4894] Call Trace: [ 137.282008][ T4894] [ 137.284974][ T4894] dump_stack_lvl+0x188/0x24e [ 137.289754][ T4894] ? show_regs_print_info+0x12/0x12 [ 137.294981][ T4894] ? load_image+0x410/0x410 [ 137.296092][ T4892] loop1: detected capacity change from 0 to 512 [ 137.299523][ T4894] ? key_instantiate_and_link+0x4b0/0x4b0 [ 137.299565][ T4894] should_fail_ex+0x390/0x4c0 [ 137.299596][ T4894] get_futex_key+0x1b1/0x1000 [ 137.299618][ T4894] ? key_payload_reserve+0x3b0/0x3b0 [ 137.299647][ T4894] ? futex_setup_timer+0xc0/0xc0 [ 137.299670][ T4894] futex_wake+0x123/0x4f0 [ 137.299692][ T4894] ? futex_wake_mark+0x150/0x150 [ 137.299718][ T4894] ? __se_sys_keyctl+0x162/0x870 [ 137.299746][ T4894] do_futex+0x2e2/0x320 [ 137.299768][ T4894] ? __ia32_sys_get_robust_list+0x100/0x100 [ 137.299790][ T4894] __se_sys_futex+0x381/0x410 [ 137.299814][ T4894] ? __x64_sys_futex+0xf0/0xf0 [ 137.299835][ T4894] ? __x64_sys_futex+0x1d/0xf0 [ 137.299851][ T4894] do_syscall_64+0x4c/0xa0 [ 137.299868][ T4894] ? clear_bhb_loop+0x60/0xb0 [ 137.299886][ T4894] ? clear_bhb_loop+0x60/0xb0 [ 137.299905][ T4894] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 137.390407][ T4894] RIP: 0033:0x7fd384d9e159 [ 137.394945][ T4894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.414846][ T4894] RSP: 002b:00007fd385bd20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 137.423357][ T4894] RAX: ffffffffffffffda RBX: 00007fd385025fa8 RCX: 00007fd384d9e159 [ 137.431421][ T4894] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd385025fac [ 137.439574][ T4894] RBP: 00007fd385025fa0 R08: 0009348ff7bf87d8 R09: 0000000000000000 [ 137.447572][ T4894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.455543][ T4894] R13: 00007fd385026038 R14: 00007fffa60c8be0 R15: 00007fffa60c8cc8 [ 137.463576][ T4894] [ 137.575862][ T4892] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 137.603286][ T4892] System zones: 1-12 [ 137.719027][ T4892] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.132: missing EA_INODE flag [ 137.780007][ T4892] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.132: error while reading EA inode 12 err=-117 [ 137.832446][ T4892] EXT4-fs (loop1): 1 orphan inode deleted [ 137.858713][ T4892] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 138.112401][ T4905] IPv6: NLM_F_CREATE should be specified when creating new route [ 138.905401][ T4908] loop0: detected capacity change from 0 to 1024 [ 139.071310][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 139.181813][ T4910] Bluetooth: MGMT ver 1.22 [ 139.820148][ T4908] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 144.265686][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 144.955194][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 144.981624][ T7] usb 4-1: config 4 has an invalid interface number: 51 but max is 0 [ 145.045396][ T7] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 146.097129][ T7] usb 4-1: config 4 has no interface number 0 [ 146.106828][ T7] usb 4-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 146.165184][ T7] usb 4-1: config 4 interface 51 has no altsetting 0 [ 146.188329][ T7] usb 4-1: string descriptor 0 read error: -71 [ 146.194668][ T7] usb 4-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 146.227602][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.523490][ T7] usb 4-1: can't set config #4, error -71 [ 146.583143][ T7] usb 4-1: USB disconnect, device number 3 [ 146.789127][ T4975] FAULT_INJECTION: forcing a failure. [ 146.789127][ T4975] name fail_futex, interval 1, probability 0, space 0, times 0 [ 146.825426][ T4975] CPU: 0 PID: 4975 Comm: syz.2.153 Not tainted syzkaller #0 [ 146.832794][ T4975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 146.843648][ T4975] Call Trace: [ 146.846938][ T4975] [ 146.849872][ T4975] dump_stack_lvl+0x188/0x24e [ 146.854736][ T4975] ? show_regs_print_info+0x12/0x12 [ 146.859945][ T4975] ? load_image+0x410/0x410 [ 146.864457][ T4975] ? key_instantiate_and_link+0x4b0/0x4b0 [ 146.870319][ T4975] should_fail_ex+0x390/0x4c0 [ 146.875049][ T4975] get_futex_key+0x1b1/0x1000 [ 146.879761][ T4975] ? key_payload_reserve+0x3b0/0x3b0 [ 146.885185][ T4975] ? futex_setup_timer+0xc0/0xc0 [ 146.890149][ T4975] futex_wake+0x123/0x4f0 [ 146.894594][ T4975] ? futex_wake_mark+0x150/0x150 [ 146.899579][ T4975] ? __se_sys_keyctl+0x162/0x870 [ 146.904718][ T4975] do_futex+0x2e2/0x320 [ 146.909110][ T4975] ? __ia32_sys_get_robust_list+0x100/0x100 [ 146.915066][ T4975] __se_sys_futex+0x381/0x410 [ 146.919813][ T4975] ? __x64_sys_futex+0xf0/0xf0 [ 146.924974][ T4975] ? __x64_sys_futex+0x1d/0xf0 [ 146.930002][ T4975] do_syscall_64+0x4c/0xa0 [ 146.934462][ T4975] ? clear_bhb_loop+0x60/0xb0 [ 146.939162][ T4975] ? clear_bhb_loop+0x60/0xb0 [ 146.943878][ T4975] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 146.949791][ T4975] RIP: 0033:0x7fd384d9e159 [ 146.954213][ T4975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.974261][ T4975] RSP: 002b:00007fd385bd20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 146.982864][ T4975] RAX: ffffffffffffffda RBX: 00007fd385025fa8 RCX: 00007fd384d9e159 [ 146.990939][ T4975] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd385025fac [ 146.999385][ T4975] RBP: 00007fd385025fa0 R08: 002cf7d599a005d8 R09: 0000000000000000 [ 147.007376][ T4975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.015356][ T4975] R13: 00007fd385026038 R14: 00007fffa60c8be0 R15: 00007fffa60c8cc8 [ 147.023472][ T4975] [ 147.185341][ T7] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 147.643561][ T4983] FAULT_INJECTION: forcing a failure. [ 147.643561][ T4983] name failslab, interval 1, probability 0, space 0, times 0 [ 147.738861][ T4983] CPU: 1 PID: 4983 Comm: syz.1.156 Not tainted syzkaller #0 [ 147.746232][ T4983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 147.756676][ T4983] Call Trace: [ 147.760436][ T4983] [ 147.763540][ T4983] dump_stack_lvl+0x188/0x24e [ 147.769138][ T4983] ? show_regs_print_info+0x12/0x12 [ 147.774648][ T4983] ? load_image+0x410/0x410 [ 147.779296][ T4983] ? __might_sleep+0xd0/0xd0 [ 147.784464][ T4983] ? __lock_acquire+0x7c40/0x7c40 [ 147.789565][ T4983] should_fail_ex+0x390/0x4c0 [ 147.794412][ T4983] should_failslab+0x5/0x20 [ 147.798969][ T4983] slab_pre_alloc_hook+0x59/0x300 [ 147.804023][ T4983] kmem_cache_alloc+0x56/0x2f0 [ 147.808880][ T4983] ? getname_flags+0xb7/0x500 [ 147.813580][ T4983] getname_flags+0xb7/0x500 [ 147.818139][ T4983] __x64_sys_mknod+0x77/0xa0 [ 147.822873][ T4983] do_syscall_64+0x4c/0xa0 [ 147.827437][ T4983] ? clear_bhb_loop+0x60/0xb0 [ 147.832147][ T4983] ? clear_bhb_loop+0x60/0xb0 [ 147.836865][ T4983] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 147.842800][ T4983] RIP: 0033:0x7f514d99e159 [ 147.847275][ T4983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.866921][ T4983] RSP: 002b:00007f514e8e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 147.875363][ T4983] RAX: ffffffffffffffda RBX: 00007f514dc25fa0 RCX: 00007f514d99e159 [ 147.883391][ T4983] RDX: 0000000000000702 RSI: 0000000000000000 RDI: 0000000000000000 [ 147.891386][ T4983] RBP: 00007f514da3506b R08: 0000000000000000 R09: 0000000000000000 [ 147.899654][ T4983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.907641][ T4983] R13: 00007f514dc26038 R14: 00007f514dc25fa0 R15: 00007ffe108ff898 [ 147.915727][ T4983] [ 147.918786][ C1] vkms_vblank_simulate: vblank timer overrun [ 147.961976][ T7] usb 4-1: unable to get BOS descriptor or descriptor too short [ 147.991081][ T7] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 148.035157][ T7] usb 4-1: can't read configurations, error -71 [ 150.544650][ T4999] syz.3.162 (4999) used greatest stack depth: 17376 bytes left [ 151.520607][ T5012] loop3: detected capacity change from 0 to 512 [ 151.665416][ T5012] EXT4-fs (loop3): Test dummy encryption mode enabled [ 151.757143][ T5012] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 151.921415][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 153.084860][ T5037] overlayfs: failed to resolve './bus': -2 [ 153.174212][ T5038] fuse: Bad value for 'fd' [ 153.242657][ T5038] loop2: detected capacity change from 0 to 1024 [ 153.700242][ T5038] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #3: block 1: comm syz.2.169: lblock 1 mapped to illegal pblock 1 (length 1) [ 153.716683][ T5038] Quota error (device loop2): write_blk: dquota write failed [ 153.724177][ T5038] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 153.734431][ T5038] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.169: Failed to acquire dquot type 0 [ 154.626119][ T5038] EXT4-fs error (device loop2): ext4_free_blocks:6220: comm syz.2.169: Freeing blocks not in datazone - block = 0, count = 4096 [ 154.645582][ T5038] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.169: Invalid inode bitmap blk 0 in block_group 0 [ 154.658707][ T5038] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 154.667874][ T5038] EXT4-fs (loop2): 1 orphan inode deleted [ 154.673672][ T5038] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 154.696850][ T4358] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 154.785682][ T4358] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 154.794208][ T4358] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:7: Failed to release dquot type 0 [ 155.104035][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 157.153133][ T4287] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 157.163921][ T4287] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 157.177092][ T4287] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 157.186540][ T4287] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 157.198046][ T4287] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 157.205666][ T4287] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 157.449162][ T5059] loop1: detected capacity change from 0 to 4096 [ 157.481821][ T5059] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 157.726069][ T5060] chnl_net:caif_netlink_parms(): no params data found [ 157.864060][ T5074] loop3: detected capacity change from 0 to 1024 [ 159.022056][ T26] audit: type=1800 audit(1789509969.921:45): pid=5071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.177" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 159.986563][ T4287] Bluetooth: hci5: command 0x0409 tx timeout [ 159.997379][ T26] audit: type=1800 audit(1789509969.971:46): pid=5059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.177" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 160.167230][ T5074] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 161.000505][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 162.035663][ T4287] Bluetooth: hci5: command 0x041b tx timeout [ 162.255924][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 162.314458][ T5060] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.393439][ T5060] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.464607][ T5060] device bridge_slave_0 entered promiscuous mode [ 162.482945][ T5095] tipc: Can't bind to reserved service type 2 [ 162.564173][ T5060] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.600794][ T5060] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.640662][ T5060] device bridge_slave_1 entered promiscuous mode [ 162.688739][ T5097] loop3: detected capacity change from 0 to 256 [ 162.813063][ T5097] FAT-fs (loop3): Directory bread(block 1285) failed [ 162.856659][ T5060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.875591][ T5097] FAT-fs (loop3): Directory bread(block 1286) failed [ 162.882390][ T5097] FAT-fs (loop3): Directory bread(block 1287) failed [ 162.943970][ T5097] FAT-fs (loop3): Directory bread(block 1288) failed [ 162.957806][ T5060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.013590][ T5097] FAT-fs (loop3): FAT read failed (blocknr 1281) [ 163.155486][ T5060] team0: Port device team_slave_0 added [ 163.190648][ T5060] team0: Port device team_slave_1 added [ 163.270433][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 163.344659][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 163.435377][ T5112] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 163.629152][ T5060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.643770][ T5060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.713750][ T5120] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 164.356676][ T4287] Bluetooth: hci5: command 0x040f tx timeout [ 164.527450][ T5060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.643378][ T5060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.684886][ T5060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.820716][ T5060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.956146][ T5132] loop1: detected capacity change from 0 to 256 [ 164.989062][ T5127] binder: 5126:5127 ioctl 4018620d 0 returned -22 [ 166.436993][ T4287] Bluetooth: hci5: command 0x0419 tx timeout [ 167.006247][ T5135] loop2: detected capacity change from 0 to 1024 [ 167.590451][ T5135] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 167.627789][ T5060] device hsr_slave_0 entered promiscuous mode [ 167.705744][ T5060] device hsr_slave_1 entered promiscuous mode [ 167.719872][ T5135] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 167.730008][ T4906] EXT4-fs (loop0): unmounting filesystem. [ 167.748772][ T5135] random: crng reseeded on system resumption [ 167.819214][ T5060] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.829338][ T5060] Cannot create hsr debugfs directory [ 168.266643][ T5146] overlayfs: failed to resolve './bus': -2 [ 168.354384][ T5148] fuse: Bad value for 'fd' [ 168.413500][ T5148] loop3: detected capacity change from 0 to 1024 [ 168.501247][ T5148] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #3: block 1: comm syz.3.198: lblock 1 mapped to illegal pblock 1 (length 1) [ 168.518216][ T5148] Quota error (device loop3): write_blk: dquota write failed [ 168.526082][ T5148] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 168.537939][ T5148] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.198: Failed to acquire dquot type 0 [ 168.569489][ T5148] EXT4-fs error (device loop3): ext4_free_blocks:6220: comm syz.3.198: Freeing blocks not in datazone - block = 0, count = 4096 [ 168.593288][ T5148] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.198: Invalid inode bitmap blk 0 in block_group 0 [ 168.606650][ T11] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 168.621723][ T5148] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 168.630697][ T5148] EXT4-fs (loop3): 1 orphan inode deleted [ 168.637014][ T5148] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 168.835179][ T11] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 168.843978][ T11] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:1: Failed to release dquot type 0 [ 170.236910][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 170.515363][ T5159] syz.3.201 uses obsolete (PF_INET,SOCK_PACKET) [ 172.020942][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 173.334620][ T5060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.939152][ T4463] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.051898][ T5060] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.059111][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 175.087821][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.129445][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.157220][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.256744][ T4757] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.264190][ T4757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.337935][ T5183] FAULT_INJECTION: forcing a failure. [ 175.337935][ T5183] name failslab, interval 1, probability 0, space 0, times 0 [ 175.464558][ T4463] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.545253][ T5183] CPU: 0 PID: 5183 Comm: syz.1.210 Not tainted syzkaller #0 [ 175.552631][ T5183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 175.562732][ T5183] Call Trace: [ 175.566049][ T5183] [ 175.569006][ T5183] dump_stack_lvl+0x188/0x24e [ 175.573726][ T5183] ? show_regs_print_info+0x12/0x12 [ 175.578990][ T5183] ? load_image+0x410/0x410 [ 175.583546][ T5183] ? __lock_acquire+0x7c40/0x7c40 [ 175.588625][ T5183] should_fail_ex+0x390/0x4c0 [ 175.593355][ T5183] should_failslab+0x5/0x20 [ 175.597893][ T5183] slab_pre_alloc_hook+0x59/0x300 [ 175.602963][ T5183] kmem_cache_alloc+0x56/0x2f0 [ 175.607763][ T5183] ? key_alloc+0x302/0x1030 [ 175.612270][ T5183] key_alloc+0x302/0x1030 [ 175.616694][ T5183] keyring_alloc+0x41/0xa0 [ 175.621114][ T5183] install_process_keyring_to_cred+0x96/0x120 [ 175.627188][ T5183] keyctl_set_reqkey_keyring+0x10d/0x1b0 [ 175.632927][ T5183] __se_sys_keyctl+0x162/0x870 [ 175.637778][ T5183] ? __x64_sys_keyctl+0xc0/0xc0 [ 175.642661][ T5183] ? do_futex+0x310/0x320 [ 175.647080][ T5183] ? __ia32_sys_get_robust_list+0x100/0x100 [ 175.653011][ T5183] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 175.659013][ T5183] ? lock_chain_count+0x20/0x20 [ 175.663880][ T5183] ? lockdep_hardirqs_on+0x94/0x140 [ 175.669179][ T5183] ? __x64_sys_keyctl+0x1c/0xc0 [ 175.674042][ T5183] do_syscall_64+0x4c/0xa0 [ 175.678471][ T5183] ? clear_bhb_loop+0x60/0xb0 [ 175.683142][ T5183] ? clear_bhb_loop+0x60/0xb0 [ 175.687832][ T5183] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 175.693728][ T5183] RIP: 0033:0x7f514d99e159 [ 175.698144][ T5183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.717860][ T5183] RSP: 002b:00007f514e8e4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 175.726388][ T5183] RAX: ffffffffffffffda RBX: 00007f514dc25fa0 RCX: 00007f514d99e159 [ 175.734399][ T5183] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000e [ 175.742379][ T5183] RBP: 00007f514da3506b R08: 0000000000000000 R09: 0000000000000000 [ 175.750435][ T5183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.758589][ T5183] R13: 00007f514dc26038 R14: 00007f514dc25fa0 R15: 00007ffe108ff898 [ 175.766588][ T5183] [ 175.786082][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.801235][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.841059][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.869051][ T4757] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.876307][ T4757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.931376][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.952751][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.068327][ T5060] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 176.135253][ T5060] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.184009][ T5184] ip_tables: iptables: counters copy to user failed while replacing table [ 176.421968][ T4463] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.213433][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.268037][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.295935][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.363993][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.388363][ T5208] loop2: detected capacity change from 0 to 16 [ 177.405980][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 177.442853][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.457763][ T5208] erofs: (device loop2): mounted with root inode @ nid 36. [ 177.492919][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 177.541176][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.563162][ T5208] erofs: (device loop2): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 177.670195][ T5208] syz.2.212: attempt to access beyond end of device [ 177.670195][ T5208] loop2: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 177.720980][ T4463] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.855969][ T5208] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 178.885301][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 178.946813][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 178.957991][ T5208] syz.2.212: attempt to access beyond end of device [ 178.957991][ T5208] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 178.961137][ T5218] loop3: detected capacity change from 0 to 2048 [ 178.994976][ T5218] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 179.200291][ T5208] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -4065 in[4096, 0] out[8192] [ 179.279889][ T26] audit: type=1800 audit(1789509990.181:47): pid=5208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.212" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 179.745386][ T3600] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 180.015463][ T3600] usb 4-1: Using ep0 maxpacket: 8 [ 180.025967][ T3600] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 191, changing to 7 [ 180.089927][ T3600] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 180.129940][ T3600] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.170593][ T3600] usb 4-1: Product: syz [ 180.190888][ T3600] usb 4-1: Manufacturer: syz [ 180.203348][ T3600] usb 4-1: SerialNumber: syz [ 180.316988][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 180.324652][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.550616][ T5060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.918709][ T5241] FAULT_INJECTION: forcing a failure. [ 181.918709][ T5241] name fail_futex, interval 1, probability 0, space 0, times 0 [ 181.951609][ T3600] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 181.965275][ T5241] CPU: 0 PID: 5241 Comm: syz.1.221 Not tainted syzkaller #0 [ 181.972651][ T5241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 181.983362][ T5241] Call Trace: [ 181.986893][ T5241] [ 181.989879][ T5241] dump_stack_lvl+0x188/0x24e [ 181.995566][ T5241] ? show_regs_print_info+0x12/0x12 [ 182.001207][ T5241] ? load_image+0x410/0x410 [ 182.005783][ T5241] ? key_instantiate_and_link+0x4b0/0x4b0 [ 182.012190][ T5241] should_fail_ex+0x390/0x4c0 [ 182.017106][ T5241] get_futex_key+0x1b1/0x1000 [ 182.021961][ T5241] ? key_payload_reserve+0x3b0/0x3b0 [ 182.025366][ T3600] snd-usb-audio: probe of 4-1:1.1 failed with error -22 [ 182.028527][ T5241] ? futex_setup_timer+0xc0/0xc0 [ 182.028574][ T5241] futex_wake+0x123/0x4f0 [ 182.028601][ T5241] ? futex_wake_mark+0x150/0x150 [ 182.050378][ T5241] ? __se_sys_keyctl+0x162/0x870 [ 182.055906][ T5241] do_futex+0x2e2/0x320 [ 182.060217][ T5241] ? __ia32_sys_get_robust_list+0x100/0x100 [ 182.066351][ T5241] __se_sys_futex+0x381/0x410 [ 182.071346][ T5241] ? __x64_sys_futex+0xf0/0xf0 [ 182.077091][ T5241] ? __x64_sys_futex+0x1d/0xf0 [ 182.082341][ T5241] do_syscall_64+0x4c/0xa0 [ 182.086801][ T5241] ? clear_bhb_loop+0x60/0xb0 [ 182.092072][ T5241] ? clear_bhb_loop+0x60/0xb0 [ 182.097085][ T5241] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 182.103214][ T5241] RIP: 0033:0x7f514d99e159 [ 182.107682][ T5241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.127455][ T5241] RSP: 002b:00007f514e8e40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 182.136370][ T5241] RAX: ffffffffffffffda RBX: 00007f514dc25fa8 RCX: 00007f514d99e159 [ 182.144815][ T5241] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f514dc25fac [ 182.153005][ T5241] RBP: 00007f514dc25fa0 R08: 0034b778c1318620 R09: 0000000000000000 [ 182.161114][ T5241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.169367][ T5241] R13: 00007f514dc26038 R14: 00007ffe108ff7b0 R15: 00007ffe108ff898 [ 182.177476][ T5241] [ 182.380534][ T4346] udevd[4346]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 182.540543][ T5250] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 182.896695][ T3600] snd-usb-audio: probe of 4-1:1.2 failed with error -22 [ 183.014255][ T3600] usb 4-1: USB disconnect, device number 6 [ 183.097461][ T5247] netlink: 24 bytes leftover after parsing attributes in process `syz.1.221'. [ 183.126636][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 184.289928][ T26] audit: type=1326 audit(1789509995.191:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5261 comm="syz.2.219" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd384d9e159 code=0x7ffc0000 [ 185.455844][ T26] audit: type=1326 audit(1789509995.191:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5261 comm="syz.2.219" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd384d9e159 code=0x7ffc0000 [ 186.735240][ T26] audit: type=1326 audit(1789509995.401:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5261 comm="syz.2.219" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fd384d9e159 code=0x7ffc0000 [ 186.909812][ T26] audit: type=1326 audit(1789509995.401:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5261 comm="syz.2.219" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd384d9e159 code=0x7ffc0000 [ 187.325965][ T26] audit: type=1326 audit(1789509995.401:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5261 comm="syz.2.219" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd384d9e159 code=0x7ffc0000 [ 187.374028][ T26] audit: type=1326 audit(1789509995.401:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5261 comm="syz.2.219" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7fd384d9e159 code=0x7ffc0000 [ 188.190946][ T26] audit: type=1326 audit(1789509995.401:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5261 comm="syz.2.219" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd384d9e159 code=0x7ffc0000 [ 188.792726][ T26] audit: type=1326 audit(1789509995.401:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5261 comm="syz.2.219" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd384d9e159 code=0x7ffc0000 [ 188.833789][ T26] audit: type=1326 audit(1789509995.401:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5261 comm="syz.2.219" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd384d9e159 code=0x7ffc0000 [ 188.858176][ T26] audit: type=1326 audit(1789509995.401:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5261 comm="syz.2.219" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd384d9e159 code=0x7ffc0000 [ 189.179747][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 189.194632][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 189.256159][ T5301] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 189.391381][ T4881] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 190.002192][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 190.021854][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 190.052707][ T5060] device veth0_vlan entered promiscuous mode [ 190.078353][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 190.093899][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 190.117911][ T5305] FAULT_INJECTION: forcing a failure. [ 190.117911][ T5305] name fail_futex, interval 1, probability 0, space 0, times 0 [ 190.131023][ T5305] CPU: 0 PID: 5305 Comm: syz.1.231 Not tainted syzkaller #0 [ 190.138519][ T5305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 190.141243][ T5060] device veth1_vlan entered promiscuous mode [ 190.148750][ T5305] Call Trace: [ 190.148765][ T5305] [ 190.148774][ T5305] dump_stack_lvl+0x188/0x24e [ 190.148804][ T5305] ? show_regs_print_info+0x12/0x12 [ 190.148822][ T5305] ? load_image+0x410/0x410 [ 190.148846][ T5305] ? key_instantiate_and_link+0x4b0/0x4b0 [ 190.148870][ T5305] should_fail_ex+0x390/0x4c0 [ 190.186656][ T5305] get_futex_key+0x1b1/0x1000 [ 190.191388][ T5305] ? key_payload_reserve+0x3b0/0x3b0 [ 190.196864][ T5305] ? futex_setup_timer+0xc0/0xc0 [ 190.201817][ T5305] futex_wake+0x123/0x4f0 [ 190.206167][ T5305] ? futex_wake_mark+0x150/0x150 [ 190.211141][ T5305] ? __se_sys_keyctl+0x162/0x870 [ 190.216116][ T5305] do_futex+0x2e2/0x320 [ 190.220309][ T5305] ? __ia32_sys_get_robust_list+0x100/0x100 [ 190.226216][ T5305] __se_sys_futex+0x381/0x410 [ 190.231273][ T5305] ? __x64_sys_futex+0xf0/0xf0 [ 190.236218][ T5305] ? __x64_sys_futex+0x1d/0xf0 [ 190.240991][ T5305] do_syscall_64+0x4c/0xa0 [ 190.245425][ T5305] ? clear_bhb_loop+0x60/0xb0 [ 190.250109][ T5305] ? clear_bhb_loop+0x60/0xb0 [ 190.254792][ T5305] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 190.260705][ T5305] RIP: 0033:0x7f514d99e159 [ 190.265145][ T5305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.285113][ T5305] RSP: 002b:00007f514e8e40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 190.293537][ T5305] RAX: ffffffffffffffda RBX: 00007f514dc25fa8 RCX: 00007f514d99e159 [ 190.301691][ T5305] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f514dc25fac [ 190.309929][ T5305] RBP: 00007f514dc25fa0 R08: 0005087070cbf1c0 R09: 0000000000000000 [ 190.318105][ T5305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.326085][ T5305] R13: 00007f514dc26038 R14: 00007ffe108ff7b0 R15: 00007ffe108ff898 [ 190.334194][ T5305] [ 190.352787][ T4881] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.377656][ T4881] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.390577][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 190.398753][ T4881] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.411077][ T4881] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 190.424591][ T4881] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 190.434088][ T4881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.146394][ T4881] lg-g15 0003:046D:C222.0001: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.2-1/input0 [ 191.237873][ T4881] lg-g15 0003:046D:C222.0001: Error -38 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver [ 191.251378][ T4277] Bluetooth: hci0: command 0x0406 tx timeout [ 191.257551][ T4277] Bluetooth: hci3: command 0x0406 tx timeout [ 191.259957][ T4287] Bluetooth: hci4: command 0x0406 tx timeout [ 191.264254][ T4277] Bluetooth: hci2: command 0x0406 tx timeout [ 191.347816][ T5316] overlayfs: failed to resolve './file0': -2 [ 191.360965][ T5314] fido_id[5314]: Failed to get parent HID device: No such file or directory [ 191.382240][ T4881] usb 3-1: USB disconnect, device number 2 [ 191.541939][ T5060] device veth0_macvtap entered promiscuous mode [ 191.573592][ T5312] netlink: 24 bytes leftover after parsing attributes in process `syz.1.231'. [ 191.593915][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 191.614960][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 191.656047][ T5060] device veth1_macvtap entered promiscuous mode [ 191.676795][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 191.935088][ T5324] loop3: detected capacity change from 0 to 4096 [ 192.894039][ T4463] device hsr_slave_0 left promiscuous mode [ 192.908893][ T5324] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 192.970402][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 192.977319][ T4463] device hsr_slave_1 left promiscuous mode [ 193.066373][ T4463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.095512][ T4463] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.122312][ T4463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.141121][ T4463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.161941][ T4463] device bridge_slave_1 left promiscuous mode [ 193.183179][ T4463] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.241849][ T4463] device bridge_slave_0 left promiscuous mode [ 193.258565][ T4463] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.270170][ T5336] loop2: detected capacity change from 0 to 4096 [ 193.296804][ T5336] EXT4-fs: inline encryption not supported [ 193.302745][ T5336] EXT4-fs: inline encryption not supported [ 193.371606][ T5336] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 193.402908][ T4463] device veth1_macvtap left promiscuous mode [ 193.412758][ T5342] overlayfs: failed to resolve './file0': -2 [ 193.430349][ T4463] device veth0_macvtap left promiscuous mode [ 193.457904][ T4463] device veth1_vlan left promiscuous mode [ 193.478193][ T4463] device veth0_vlan left promiscuous mode [ 194.284918][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.304329][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.153750][ T5353] FAULT_INJECTION: forcing a failure. [ 196.153750][ T5353] name fail_futex, interval 1, probability 0, space 0, times 0 [ 196.248391][ T5353] CPU: 1 PID: 5353 Comm: syz.2.250 Not tainted syzkaller #0 [ 196.255781][ T5353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 196.266027][ T5353] Call Trace: [ 196.269333][ T5353] [ 196.272366][ T5353] dump_stack_lvl+0x188/0x24e [ 196.277200][ T5353] ? show_regs_print_info+0x12/0x12 [ 196.282712][ T5353] ? load_image+0x410/0x410 [ 196.287264][ T5353] ? key_instantiate_and_link+0x4b0/0x4b0 [ 196.293024][ T5353] should_fail_ex+0x390/0x4c0 [ 196.297748][ T5353] get_futex_key+0x1b1/0x1000 [ 196.302449][ T5353] ? key_payload_reserve+0x3b0/0x3b0 [ 196.307770][ T5353] ? futex_setup_timer+0xc0/0xc0 [ 196.313084][ T5353] futex_wake+0x123/0x4f0 [ 196.317440][ T5353] ? futex_wake_mark+0x150/0x150 [ 196.322412][ T5353] ? __se_sys_keyctl+0x162/0x870 [ 196.327455][ T5353] do_futex+0x2e2/0x320 [ 196.331638][ T5353] ? __ia32_sys_get_robust_list+0x100/0x100 [ 196.337562][ T5353] __se_sys_futex+0x381/0x410 [ 196.342262][ T5353] ? __x64_sys_futex+0xf0/0xf0 [ 196.347056][ T5353] ? __x64_sys_futex+0x1d/0xf0 [ 196.351840][ T5353] do_syscall_64+0x4c/0xa0 [ 196.356331][ T5353] ? clear_bhb_loop+0x60/0xb0 [ 196.361044][ T5353] ? clear_bhb_loop+0x60/0xb0 [ 196.365739][ T5353] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 196.371717][ T5353] RIP: 0033:0x7fd384d9e159 [ 196.376427][ T5353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.396421][ T5353] RSP: 002b:00007fd385bd20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 196.404898][ T5353] RAX: ffffffffffffffda RBX: 00007fd385025fa8 RCX: 00007fd384d9e159 [ 196.413090][ T5353] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd385025fac [ 196.421094][ T5353] RBP: 00007fd385025fa0 R08: 0006d233b5acf418 R09: 0000000000000000 [ 196.429203][ T5353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.437207][ T5353] R13: 00007fd385026038 R14: 00007fffa60c8be0 R15: 00007fffa60c8cc8 [ 196.445323][ T5353] [ 196.749942][ T5355] FAULT_INJECTION: forcing a failure. [ 196.749942][ T5355] name fail_futex, interval 1, probability 0, space 0, times 0 [ 196.871935][ T5355] CPU: 1 PID: 5355 Comm: syz.4.242 Not tainted syzkaller #0 [ 196.879499][ T5355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 196.889674][ T5355] Call Trace: [ 196.893061][ T5355] [ 196.896005][ T5355] dump_stack_lvl+0x188/0x24e [ 196.900732][ T5355] ? show_regs_print_info+0x12/0x12 [ 196.906005][ T5355] ? load_image+0x410/0x410 [ 196.910546][ T5355] ? key_instantiate_and_link+0x4b0/0x4b0 [ 196.916298][ T5355] should_fail_ex+0x390/0x4c0 [ 196.921006][ T5355] get_futex_key+0x1b1/0x1000 [ 196.925708][ T5355] ? key_payload_reserve+0x3b0/0x3b0 [ 196.931115][ T5355] ? futex_setup_timer+0xc0/0xc0 [ 196.936087][ T5355] futex_wake+0x123/0x4f0 [ 196.940451][ T5355] ? futex_wake_mark+0x150/0x150 [ 196.945423][ T5355] ? __se_sys_keyctl+0x162/0x870 [ 196.950385][ T5355] do_futex+0x2e2/0x320 [ 196.954570][ T5355] ? __ia32_sys_get_robust_list+0x100/0x100 [ 196.960551][ T5355] __se_sys_futex+0x381/0x410 [ 196.965272][ T5355] ? __x64_sys_futex+0xf0/0xf0 [ 196.970064][ T5355] ? __x64_sys_futex+0x1d/0xf0 [ 196.974846][ T5355] do_syscall_64+0x4c/0xa0 [ 196.979370][ T5355] ? clear_bhb_loop+0x60/0xb0 [ 196.984069][ T5355] ? clear_bhb_loop+0x60/0xb0 [ 196.988798][ T5355] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 196.994705][ T5355] RIP: 0033:0x7ff81f19e159 [ 196.999148][ T5355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.000044][ T5357] loop1: detected capacity change from 0 to 512 [ 197.018774][ T5355] RSP: 002b:00007ff8200010e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 197.018809][ T5355] RAX: ffffffffffffffda RBX: 00007ff81f425fa8 RCX: 00007ff81f19e159 [ 197.018821][ T5355] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff81f425fac [ 197.018831][ T5355] RBP: 00007ff81f425fa0 R08: 002a9579afcafbf8 R09: 0000000000000000 [ 197.018842][ T5355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.018852][ T5355] R13: 00007ff81f426038 R14: 00007fffe551c9f0 R15: 00007fffe551cad8 [ 197.074107][ T5355] [ 197.106248][ T5357] EXT4-fs: Ignoring removed nomblk_io_submit option [ 197.146265][ T5357] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 197.554681][ T5365] loop3: detected capacity change from 0 to 4096 [ 197.653430][ T5365] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 197.755548][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 199.794465][ T5387] loop1: detected capacity change from 0 to 1024 [ 199.836148][ T5387] EXT4-fs: Ignoring removed nomblk_io_submit option [ 199.931076][ T5387] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 200.406716][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 200.837152][ T5397] loop1: detected capacity change from 0 to 512 [ 200.848256][ T5397] EXT4-fs: Ignoring removed nobh option [ 201.041714][ T5397] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 201.051496][ T5397] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.110309][ T5397] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #2: comm syz.1.260: corrupted inode contents [ 201.128381][ T5397] EXT4-fs error (device loop1): ext4_dirty_inode:6166: inode #2: comm syz.1.260: mark_inode_dirty error [ 201.145804][ T5397] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #2: comm syz.1.260: corrupted inode contents [ 201.161669][ T5397] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.260: mark_inode_dirty error [ 201.291982][ T5401] usb usb7: usbfs: process 5401 (syz.1.260) did not claim interface 0 before use [ 202.464145][ T4463] team0 (unregistering): Port device team_slave_1 removed [ 202.802397][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 202.813022][ T4463] team0 (unregistering): Port device team_slave_0 removed [ 202.979724][ T5406] loop3: detected capacity change from 0 to 512 [ 202.993196][ T4463] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.004813][ T5406] EXT4-fs: Ignoring removed orlov option [ 203.046378][ T5406] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 203.122404][ T5406] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #16: comm syz.3.262: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 203.160655][ T5406] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.262: couldn't read orphan inode 16 (err -117) [ 203.197682][ T5406] EXT4-fs (loop3): 1 orphan inode deleted [ 203.203613][ T5406] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 203.221996][ T4463] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.486051][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 204.550880][ T5424] loop3: detected capacity change from 0 to 512 [ 204.656212][ T5424] EXT4-fs: Ignoring removed nomblk_io_submit option [ 204.705943][ T5424] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 204.805467][ T5424] EXT4-fs (loop3): 1 truncate cleaned up [ 204.835320][ T5424] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 205.295306][ T4674] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 205.652861][ T4674] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 65132, setting to 64 [ 205.707782][ T4674] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 205.740308][ T4674] usb 2-1: config 0 interface 0 has no altsetting 0 [ 205.765352][ T4674] usb 2-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 205.784859][ T4674] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.807159][ T4674] usb 2-1: config 0 descriptor?? [ 205.825497][ T5428] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 206.127513][ T4463] bond0 (unregistering): Released all slaves [ 206.255852][ T4674] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 206.263454][ T4674] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x1 [ 206.277272][ T4674] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 206.307242][ T4674] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x5 [ 206.314660][ T4674] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x6 [ 206.366375][ T4674] magicmouse 0003:05AC:0269.0002: hidraw0: USB HID v0.05 Device [HID 05ac:0269] on usb-dummy_hcd.1-1/input0 [ 206.396318][ T5364] netlink: 24 bytes leftover after parsing attributes in process `syz.4.242'. [ 206.414398][ T5363] netlink: 24 bytes leftover after parsing attributes in process `syz.2.250'. [ 206.513369][ T4674] usb 2-1: USB disconnect, device number 5 [ 206.540337][ T5060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.569190][ T4279] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 206.642026][ T5060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.655133][ T4279] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 206.685309][ T5060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.703434][ T4279] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 206.709086][ T5433] fido_id[5433]: Failed to get parent HID device: No such file or directory [ 206.745327][ T5060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.755897][ T5060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.774771][ T5060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.795737][ T5060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.807271][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 206.823759][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 206.845819][ T5060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.862883][ T5060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.882745][ T5060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.893350][ T5060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.903482][ T5060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.914088][ T5060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.942782][ T5060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.961978][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 207.006959][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 207.027255][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 207.342027][ T5214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.406721][ T5214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.531860][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 208.568699][ T5214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.590053][ T5214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.616749][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 209.007259][ T5463] fuse: Bad value for 'fd' [ 209.067508][ T5463] loop2: detected capacity change from 0 to 1024 [ 209.908679][ T5463] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #3: block 1: comm syz.2.277: lblock 1 mapped to illegal pblock 1 (length 1) [ 209.923378][ T5463] __quota_error: 39 callbacks suppressed [ 209.923394][ T5463] Quota error (device loop2): write_blk: dquota write failed [ 209.936596][ T5463] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 209.946755][ T5463] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.277: Failed to acquire dquot type 0 [ 209.970852][ T5463] EXT4-fs error (device loop2): ext4_free_blocks:6220: comm syz.2.277: Freeing blocks not in datazone - block = 0, count = 4096 [ 209.984677][ T5463] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.277: Invalid inode bitmap blk 0 in block_group 0 [ 209.997761][ T47] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 210.012524][ T5463] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 210.052395][ T5463] EXT4-fs (loop2): 1 orphan inode deleted [ 210.058360][ T5463] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 210.129196][ T47] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 210.242423][ T47] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:3: Failed to release dquot type 0 [ 210.382027][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 210.514649][ T5472] loop1: detected capacity change from 0 to 1024 [ 210.564396][ T5472] EXT4-fs: Ignoring removed nomblk_io_submit option [ 210.592108][ T5473] FAULT_INJECTION: forcing a failure. [ 210.592108][ T5473] name failslab, interval 1, probability 0, space 0, times 0 [ 210.650949][ T5473] CPU: 0 PID: 5473 Comm: syz.2.281 Not tainted syzkaller #0 [ 210.658338][ T5473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 210.668612][ T5473] Call Trace: [ 210.671932][ T5473] [ 210.674895][ T5473] dump_stack_lvl+0x188/0x24e [ 210.679635][ T5473] ? show_regs_print_info+0x12/0x12 [ 210.684895][ T5473] ? load_image+0x410/0x410 [ 210.689468][ T5473] ? __lock_acquire+0x7c40/0x7c40 [ 210.694552][ T5473] should_fail_ex+0x390/0x4c0 [ 210.699294][ T5473] should_failslab+0x5/0x20 [ 210.703838][ T5473] slab_pre_alloc_hook+0x59/0x300 [ 210.709005][ T5473] kmem_cache_alloc+0x56/0x2f0 [ 210.713821][ T5473] ? key_alloc+0x302/0x1030 [ 210.718374][ T5473] key_alloc+0x302/0x1030 [ 210.722762][ T5473] keyring_alloc+0x41/0xa0 [ 210.727235][ T5473] install_process_keyring_to_cred+0x96/0x120 [ 210.733357][ T5473] keyctl_set_reqkey_keyring+0x10d/0x1b0 [ 210.739057][ T5473] __se_sys_keyctl+0x162/0x870 [ 210.743878][ T5473] ? __x64_sys_keyctl+0xc0/0xc0 [ 210.748773][ T5473] ? do_futex+0x310/0x320 [ 210.753148][ T5473] ? __ia32_sys_get_robust_list+0x100/0x100 [ 210.759103][ T5473] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 210.765134][ T5473] ? lock_chain_count+0x20/0x20 [ 210.770055][ T5473] ? lockdep_hardirqs_on+0x94/0x140 [ 210.775300][ T5473] ? __x64_sys_keyctl+0x1c/0xc0 [ 210.780201][ T5473] do_syscall_64+0x4c/0xa0 [ 210.784661][ T5473] ? clear_bhb_loop+0x60/0xb0 [ 210.789381][ T5473] ? clear_bhb_loop+0x60/0xb0 [ 210.794102][ T5473] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 210.800027][ T5473] RIP: 0033:0x7fd384d9e159 [ 210.804548][ T5473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.824365][ T5473] RSP: 002b:00007fd385bd2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 210.832894][ T5473] RAX: ffffffffffffffda RBX: 00007fd385025fa0 RCX: 00007fd384d9e159 [ 210.840983][ T5473] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000e [ 210.848954][ T5473] RBP: 00007fd384e3506b R08: 0000000000000000 R09: 0000000000000000 [ 210.856926][ T5473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.864897][ T5473] R13: 00007fd385026038 R14: 00007fd385025fa0 R15: 00007fffa60c8cc8 [ 210.873122][ T5473] [ 210.897447][ T5472] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 210.955364][ T5479] netlink: 24 bytes leftover after parsing attributes in process `syz.2.281'. [ 211.029156][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 211.277935][ T5485] Bluetooth: ISO socket layer initialized [ 211.498471][ T5485] loop4: detected capacity change from 128 to 0 [ 214.654102][ T5511] fuse: Bad value for 'fd' [ 214.668747][ T5510] loop3: detected capacity change from 0 to 1024 [ 214.762559][ T5510] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #3: block 1: comm syz.3.290: lblock 1 mapped to illegal pblock 1 (length 1) [ 214.777413][ T5510] Quota error (device loop3): write_blk: dquota write failed [ 214.784863][ T5510] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 214.795132][ T5510] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.290: Failed to acquire dquot type 0 [ 214.807032][ T5510] EXT4-fs error (device loop3): ext4_free_blocks:6220: comm syz.3.290: Freeing blocks not in datazone - block = 0, count = 4096 [ 214.822077][ T5510] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.290: Invalid inode bitmap blk 0 in block_group 0 [ 214.835523][ T5510] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 214.844520][ T5510] EXT4-fs (loop3): 1 orphan inode deleted [ 214.850563][ T5510] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 214.865258][ T47] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 214.925428][ T47] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 214.934061][ T47] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:3: Failed to release dquot type 0 [ 215.113397][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 216.440312][ T5534] netlink: 'syz.2.294': attribute type 10 has an invalid length. [ 216.808478][ T4463] device hsr_slave_0 left promiscuous mode [ 216.915726][ T4463] device hsr_slave_1 left promiscuous mode [ 216.955233][ T4463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.978687][ T4463] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.017946][ T4463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.039940][ T4463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.065957][ T4463] device bridge_slave_1 left promiscuous mode [ 217.083695][ T4463] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.106756][ T4463] device bridge_slave_0 left promiscuous mode [ 217.113119][ T4463] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.200916][ T4463] device veth1_macvtap left promiscuous mode [ 217.210161][ T4463] device veth0_macvtap left promiscuous mode [ 217.219969][ T4463] device veth1_vlan left promiscuous mode [ 217.228927][ T4463] device veth0_vlan left promiscuous mode [ 217.463387][ T5540] loop1: detected capacity change from 0 to 256 [ 217.474442][ T5540] exfat: Unknown parameter 'fmas{' [ 218.080995][ T5547] FAULT_INJECTION: forcing a failure. [ 218.080995][ T5547] name fail_futex, interval 1, probability 0, space 0, times 0 [ 218.128349][ T5547] CPU: 1 PID: 5547 Comm: syz.3.300 Not tainted syzkaller #0 [ 218.135729][ T5547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 218.145829][ T5547] Call Trace: [ 218.149149][ T5547] [ 218.152279][ T5547] dump_stack_lvl+0x188/0x24e [ 218.157014][ T5547] ? show_regs_print_info+0x12/0x12 [ 218.162276][ T5547] ? load_image+0x410/0x410 [ 218.166828][ T5547] ? key_instantiate_and_link+0x4b0/0x4b0 [ 218.172609][ T5547] should_fail_ex+0x390/0x4c0 [ 218.177345][ T5547] get_futex_key+0x1b1/0x1000 [ 218.182075][ T5547] ? key_payload_reserve+0x3b0/0x3b0 [ 218.187426][ T5547] ? futex_setup_timer+0xc0/0xc0 [ 218.192415][ T5547] futex_wake+0x123/0x4f0 [ 218.196802][ T5547] ? futex_wake_mark+0x150/0x150 [ 218.201804][ T5547] ? __se_sys_keyctl+0x162/0x870 [ 218.206796][ T5547] do_futex+0x2e2/0x320 [ 218.211005][ T5547] ? __ia32_sys_get_robust_list+0x100/0x100 [ 218.216954][ T5547] __se_sys_futex+0x381/0x410 [ 218.221688][ T5547] ? __x64_sys_futex+0xf0/0xf0 [ 218.226502][ T5547] ? __x64_sys_futex+0x1d/0xf0 [ 218.231402][ T5547] do_syscall_64+0x4c/0xa0 [ 218.236105][ T5547] ? clear_bhb_loop+0x60/0xb0 [ 218.240827][ T5547] ? clear_bhb_loop+0x60/0xb0 [ 218.245550][ T5547] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 218.251485][ T5547] RIP: 0033:0x7f7ba7f9e159 [ 218.255962][ T5547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.275781][ T5547] RSP: 002b:00007f7ba8dd20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 218.284287][ T5547] RAX: ffffffffffffffda RBX: 00007f7ba8225fa8 RCX: 00007f7ba7f9e159 [ 218.292573][ T5547] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7ba8225fac [ 218.300588][ T5547] RBP: 00007f7ba8225fa0 R08: 0002a6155ea9c720 R09: 0000000000000000 [ 218.308599][ T5547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.316715][ T5547] R13: 00007f7ba8226038 R14: 00007ffe5621c2f0 R15: 00007ffe5621c3d8 [ 218.324738][ T5547] [ 218.864757][ T4463] team0 (unregistering): Port device team_slave_1 removed [ 218.923374][ T4463] team0 (unregistering): Port device team_slave_0 removed [ 218.971569][ T4463] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.027699][ T4463] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.549068][ T4463] bond0 (unregistering): Released all slaves [ 219.679586][ T5562] netlink: 24 bytes leftover after parsing attributes in process `syz.3.300'. [ 220.353587][ T5578] loop3: detected capacity change from 0 to 4096 [ 220.478776][ T5578] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 220.506038][ T5578] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 220.565972][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 221.639103][ T5589] loop3: detected capacity change from 0 to 1024 [ 221.663891][ T5589] EXT4-fs: Ignoring removed nomblk_io_submit option [ 221.754890][ T5589] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 221.809950][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 224.437620][ T5619] FAULT_INJECTION: forcing a failure. [ 224.437620][ T5619] name fail_futex, interval 1, probability 0, space 0, times 0 [ 224.458487][ T5619] CPU: 1 PID: 5619 Comm: syz.3.316 Not tainted syzkaller #0 [ 224.465930][ T5619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 224.477489][ T5619] Call Trace: [ 224.480789][ T5619] [ 224.483743][ T5619] dump_stack_lvl+0x188/0x24e [ 224.488477][ T5619] ? show_regs_print_info+0x12/0x12 [ 224.494000][ T5619] ? load_image+0x410/0x410 [ 224.498545][ T5619] ? key_instantiate_and_link+0x4b0/0x4b0 [ 224.504309][ T5619] should_fail_ex+0x390/0x4c0 [ 224.509028][ T5619] get_futex_key+0x1b1/0x1000 [ 224.513732][ T5619] ? key_payload_reserve+0x3b0/0x3b0 [ 224.519052][ T5619] ? futex_setup_timer+0xc0/0xc0 [ 224.524021][ T5619] futex_wake+0x123/0x4f0 [ 224.528382][ T5619] ? futex_wake_mark+0x150/0x150 [ 224.533357][ T5619] ? __se_sys_keyctl+0x162/0x870 [ 224.538467][ T5619] do_futex+0x2e2/0x320 [ 224.542674][ T5619] ? __ia32_sys_get_robust_list+0x100/0x100 [ 224.548612][ T5619] __se_sys_futex+0x381/0x410 [ 224.553323][ T5619] ? __x64_sys_futex+0xf0/0xf0 [ 224.558120][ T5619] ? __x64_sys_futex+0x1d/0xf0 [ 224.562912][ T5619] do_syscall_64+0x4c/0xa0 [ 224.567362][ T5619] ? clear_bhb_loop+0x60/0xb0 [ 224.572078][ T5619] ? clear_bhb_loop+0x60/0xb0 [ 224.576798][ T5619] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.582814][ T5619] RIP: 0033:0x7f7ba7f9e159 [ 224.587273][ T5619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.607464][ T5619] RSP: 002b:00007f7ba8dd20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 224.615899][ T5619] RAX: ffffffffffffffda RBX: 00007f7ba8225fa8 RCX: 00007f7ba7f9e159 [ 224.623965][ T5619] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7ba8225fac [ 224.631936][ T5619] RBP: 00007f7ba8225fa0 R08: 00181b3f204e8100 R09: 0000000000000000 [ 224.639936][ T5619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.647937][ T5619] R13: 00007f7ba8226038 R14: 00007ffe5621c2f0 R15: 00007ffe5621c3d8 [ 224.656008][ T5619] [ 224.688916][ T5621] netlink: 24 bytes leftover after parsing attributes in process `syz.3.316'. [ 229.139554][ T5649] loop3: detected capacity change from 0 to 1024 [ 229.146906][ T5649] EXT4-fs: Ignoring removed nomblk_io_submit option [ 229.195344][ T5649] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 229.304090][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 232.561565][ T5674] FAULT_INJECTION: forcing a failure. [ 232.561565][ T5674] name fail_futex, interval 1, probability 0, space 0, times 0 [ 232.580641][ T5674] CPU: 0 PID: 5674 Comm: syz.2.331 Not tainted syzkaller #0 [ 232.588036][ T5674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 232.598106][ T5674] Call Trace: [ 232.601506][ T5674] [ 232.604451][ T5674] dump_stack_lvl+0x188/0x24e [ 232.609167][ T5674] ? show_regs_print_info+0x12/0x12 [ 232.614369][ T5674] ? load_image+0x410/0x410 [ 232.618884][ T5674] ? key_instantiate_and_link+0x4b0/0x4b0 [ 232.624604][ T5674] should_fail_ex+0x390/0x4c0 [ 232.629290][ T5674] get_futex_key+0x1b1/0x1000 [ 232.633975][ T5674] ? key_payload_reserve+0x3b0/0x3b0 [ 232.639264][ T5674] ? futex_setup_timer+0xc0/0xc0 [ 232.644210][ T5674] futex_wake+0x123/0x4f0 [ 232.648540][ T5674] ? futex_wake_mark+0x150/0x150 [ 232.653671][ T5674] ? __se_sys_keyctl+0x162/0x870 [ 232.658611][ T5674] do_futex+0x2e2/0x320 [ 232.662781][ T5674] ? __ia32_sys_get_robust_list+0x100/0x100 [ 232.668791][ T5674] __se_sys_futex+0x381/0x410 [ 232.673501][ T5674] ? __x64_sys_futex+0xf0/0xf0 [ 232.678271][ T5674] ? __x64_sys_futex+0x1d/0xf0 [ 232.683061][ T5674] do_syscall_64+0x4c/0xa0 [ 232.687580][ T5674] ? clear_bhb_loop+0x60/0xb0 [ 232.692261][ T5674] ? clear_bhb_loop+0x60/0xb0 [ 232.696962][ T5674] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 232.702864][ T5674] RIP: 0033:0x7fd384d9e159 [ 232.707304][ T5674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.726910][ T5674] RSP: 002b:00007fd385bd20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 232.735327][ T5674] RAX: ffffffffffffffda RBX: 00007fd385025fa8 RCX: 00007fd384d9e159 [ 232.743321][ T5674] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd385025fac [ 232.751304][ T5674] RBP: 00007fd385025fa0 R08: 001f424cd0b1b860 R09: 0000000000000000 [ 232.759275][ T5674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.767245][ T5674] R13: 00007fd385026038 R14: 00007fffa60c8be0 R15: 00007fffa60c8cc8 [ 232.775228][ T5674] [ 232.860485][ T5677] netlink: 24 bytes leftover after parsing attributes in process `syz.2.331'. [ 232.921753][ T5677] ip_tables: iptables: counters copy to user failed while replacing table [ 234.666648][ T5691] loop2: detected capacity change from 0 to 128 [ 234.778887][ T5691] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 234.791555][ T5691] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 235.112904][ T3600] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 235.155590][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 235.339045][ T3600] usb 4-1: New USB device found, idVendor=0582, idProduct=00eb, bcdDevice= 0.40 [ 235.351244][ T3600] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.359478][ T3600] usb 4-1: Product: syz [ 235.363674][ T3600] usb 4-1: Manufacturer: syz [ 235.372475][ T3600] usb 4-1: SerialNumber: syz [ 235.592144][ T3600] usb 4-1: Can't get UAC3 power state for id 10 [ 235.600862][ T3600] usb 4-1: BAAD MICROPHONE c_chmask mismatch [ 235.624544][ T4367] udevd[4367]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 235.652482][ T3600] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 235.664671][ T3600] usb 4-1: USB disconnect, device number 7 SYZFAIL: mount(sysfs) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: repeatedly failed to execute the program proc=5 req=170 state=1 status=67 (errno 9: Bad file descriptor) [ 236.654327][ T5700] loop2: detected capacity change from 0 to 1024 [ 236.664973][ T5700] EXT4-fs: Ignoring removed nomblk_io_submit option [ 236.802309][ T5700] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 237.107207][ T5692] EXT4-fs (loop2): unmounting filesystem. [ 237.586032][ T47] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.732960][ T47] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.857374][ T47] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.982029][ T47] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.228386][ T47] device hsr_slave_0 left promiscuous mode [ 239.234766][ T47] device hsr_slave_1 left promiscuous mode [ 239.241613][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.249461][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.257373][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.264891][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.272991][ T47] device bridge_slave_1 left promiscuous mode [ 239.279323][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.288125][ T47] device bridge_slave_0 left promiscuous mode [ 239.294529][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.314364][ T47] device veth1_macvtap left promiscuous mode [ 239.320627][ T47] device veth0_macvtap left promiscuous mode [ 239.327106][ T47] device veth1_vlan left promiscuous mode [ 239.332896][ T47] device veth0_vlan left promiscuous mode [ 239.890407][ T47] team0 (unregistering): Port device team_slave_1 removed [ 239.929145][ T47] team0 (unregistering): Port device team_slave_0 removed [ 239.971248][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.011986][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.319048][ T47] bond0 (unregistering): Released all slaves [ 240.831726][ T47] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.878837][ T47] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.942522][ T47] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.018006][ T47] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.397287][ T47] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.498040][ T47] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.549591][ T47] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.599217][ T47] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.092487][ T47] device hsr_slave_0 left promiscuous mode [ 243.099113][ T47] device hsr_slave_1 left promiscuous mode [ 243.105756][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.113177][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.120999][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.128669][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.136642][ T47] device bridge_slave_1 left promiscuous mode [ 243.142871][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.152291][ T47] device bridge_slave_0 left promiscuous mode [ 243.158785][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.169487][ T47] device hsr_slave_0 left promiscuous mode [ 243.176040][ T47] device hsr_slave_1 left promiscuous mode [ 243.182728][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.190469][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.198052][ T47] device bridge_slave_1 left promiscuous mode [ 243.204294][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.212401][ T47] device bridge_slave_0 left promiscuous mode [ 243.218808][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.230526][ T47] device hsr_slave_0 left promiscuous mode [ 243.237139][ T47] device hsr_slave_1 left promiscuous mode [ 243.243415][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.251037][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.258878][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.266512][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.274041][ T47] device bridge_slave_1 left promiscuous mode [ 243.282739][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.291984][ T47] device bridge_slave_0 left promiscuous mode [ 243.298481][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.327718][ T47] device veth1_macvtap left promiscuous mode [ 243.333777][ T47] device veth0_macvtap left promiscuous mode [ 243.339913][ T47] device veth1_vlan left promiscuous mode [ 243.345945][ T47] device veth0_vlan left promiscuous mode [ 243.352721][ T47] device veth1_macvtap left promiscuous mode [ 243.358845][ T47] device veth0_macvtap left promiscuous mode [ 243.364920][ T47] device veth1_vlan left promiscuous mode [ 243.370995][ T47] device veth0_vlan left promiscuous mode [ 243.904429][ T47] team0 (unregistering): Port device team_slave_1 removed [ 243.946015][ T47] team0 (unregistering): Port device team_slave_0 removed [ 243.986199][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.027811][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.318947][ T47] bond0 (unregistering): Released all slaves [ 244.798418][ T47] team0 (unregistering): Port device team_slave_1 removed [ 244.837521][ T47] team0 (unregistering): Port device team_slave_0 removed [ 244.876882][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.916543][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.208377][ T47] bond0 (unregistering): Released all slaves [ 245.673015][ T47] team0 (unregistering): Port device team_slave_1 removed [ 245.714648][ T47] team0 (unregistering): Port device team_slave_0 removed [ 245.757912][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.797741][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.061694][ T47] bond0 (unregistering): Released all slaves