last executing test programs: 7.134810795s ago: executing program 4 (id=346): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x3ffffffe]}, 0x8, 0x80000) readv(r0, &(0x7f0000000b80)=[{&(0x7f0000000280)=""/221, 0xdd}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) 6.985847502s ago: executing program 4 (id=349): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x1000, 0x1, r0}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 6.459422627s ago: executing program 3 (id=352): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2008800, &(0x7f0000000200), 0x1, 0x445, &(0x7f0000001dc0)="$eJzs3E2IVeUbAPDnnJnxYxz/d/wTTUWglGgRjjrXahVoixZtXAhCH0JDXj/w6oR3ojShLBAhIlpIghDTMlrkokURQbSJoBYtCiJJqBZhWCEt2t2495w7XvQM2dXruU2/H5y573nvued5X85weB845wngP2tNRGyNiKGImIyISt6f5lu8lG2t445Vz+5rbUk0mzt+SyKJiFr17L7OuZL8c0X+s2UR8f+tSTw8fHXcxpGjB6br9drhfH/j7MFnNjaOHN2w/+D03tre2qHqlgemprbcX33wxs313MTLMTW1deS99WtOfvnxa9+0xjuWf9c9jxspWaBzWz+ClWikq50UXG8GzxunXv+o7DEAADdfmq/9h9vr/0oMRbZ4O3/uyUuVeHG07PEBAAAA16/ZHMo/AQAAgMUrkfsDAADAItd5DqBWPbuvs92sZw9W3BtxcVtEjGfxO+8XZ98Ot98fjvzd0pE+xL/rfB9O+g80Hi03/lc7y42/6t1y4899V278p9aVG/+nH8qNv3Z1ufFPzUR8si0rgHD1/S9t1zzoWBIRS/OaBsuv6exDf3vE6k8v3/+OXXX/S+fvf60zXc+LWCfnLpwo6p94JOLi8Yg7hoviJ/Pxk7ymQ682fH18V1H/qosRzbcj1kVx/OiKv3B9iI179tdrm7K/xfGrLzxeKerf/lk2/9EF4o/nxw111YnoxenRXR+sLOjfOZnFv+fu4ut/W9f8/5fX5hjvIf6a2+vbi/rXvZrF373A/Luv/6oe4nbM/dL4saj//S3XcVIAoGdpe22TpJPz7TSdnMzWe7fEaFqfaczet2fm2UO7szXQeIyknaVWth4ZSVr7m/O1SWd/6or9ar6GOFlZ3t6ffHqmvrvsyQMAAMAiNxbx/ROvfDix4or8/+dKlv8DAAAA/36t/P/OubfOtNp/FD4dCQAAAAyKerO337Xy/0snfv085P8AAACwaMn/AQAAYPHr5P9jC9T/W9lVu29TXn/4i8rI0j37l8XmsgcPAAAAXJNW/p9++9j5xpGjB6br9dphDY2BajyU/6cOyniSARtPvxsl3pwAAIC+uLzoL3skAAAAQP+kF5KIaG3rK2vHbl39zkT3t0uSP9vVAZZExHNndrz5/PTs7OHNrf7f5/tnT+f9U2XNAQAAAOjWydM7eTwAAAAAAAAAAAAAADD4bkY58bLnCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwI3zVwAAAP//QNGSjg==") fsmount(0xffffffffffffffff, 0x0, 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0xa00410, &(0x7f0000000100), 0x1, 0x4bc, &(0x7f0000000a40)="$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") socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='\f', 0x1, 0x8000c61) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 4.589568374s ago: executing program 2 (id=357): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r1, 0x5) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)="89", 0x1}], 0x1}}], 0x1, 0x20000000) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)=ANY=[], 0x8397de475a1b5b02) 4.228499711s ago: executing program 2 (id=359): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x200000) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f0000000100)='12345678-1234-1234-1234-123456789612', 0x24, 0xc30) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 4.119644547s ago: executing program 1 (id=360): unshare(0x20000400) socket$xdp(0x2c, 0x3, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x3482, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x101042, 0x65) pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0x84fed0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x4000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, 0x0, 0x0, 0x8000c61) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r2, r3, 0x0, 0xe3aa6ea) 3.930156856s ago: executing program 3 (id=361): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) unshare(0x26020480) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000044000180060001000200000008000500000000000c00070000000000000000000800090000000000090006006e6f6e6500000000080008000000000008000b"], 0x58}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000800000000000816020001df7200"], 0x2c}}, 0x0) 3.921640176s ago: executing program 0 (id=362): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/cluster/mycluster/node/node0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/cluster/mycluster/node/node0/ipv4_address\x00', 0x1, 0x0) write(r0, &(0x7f0000000b00)='127.0.0.1', 0x9) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETS(r1, 0x5402, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/cluster/mycluster/node/node0/num\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='0\n', 0x2) 3.772696843s ago: executing program 2 (id=363): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) r2 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000180)=0x1) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f00000000c0)={0x1, {0xf8000002, 0x8b8, 0xc4f, 0x870}}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCGABS20(r3, 0x80184560, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 3.769272503s ago: executing program 0 (id=364): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 3.504213926s ago: executing program 4 (id=365): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x400, 0x1410c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/current_tracer\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='blk', 0x3) ioctl$HDIO_GETGEO(r1, 0x301, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000140)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000002c0)={r4, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, r4, {0xe, 0x1}}}, 0x24}}, 0x4) 3.374387372s ago: executing program 3 (id=366): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) r2 = syz_open_dev$evdev(0x0, 0x1, 0x200) syz_usb_disconnect(r2) syz_usb_connect$printer(0x4, 0x2d, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) syz_usb_connect$printer(0x6, 0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, 0x0) 3.268263347s ago: executing program 1 (id=367): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x11, 0x1, 0xffff) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x3}) socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) 3.178164731s ago: executing program 2 (id=368): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80000) ioctl$int_in(r2, 0x5452, &(0x7f0000000580)=0xff) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) recvmsg$unix(r2, &(0x7f0000003980)={0x0, 0x0, &(0x7f0000003880)=[{&(0x7f00000035c0)=""/74, 0x4a}], 0x1}, 0x101) recvmmsg$unix(r2, &(0x7f0000003400)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/186}, {&(0x7f00000006c0)=""/248}]}}], 0x4000000000002dd, 0x10100, 0x0) 2.839656987s ago: executing program 4 (id=369): unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000240)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x4) sendfile(r0, r0, &(0x7f00000001c0), 0x7fa) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8002, &(0x7f0000000d40)={[{@journal_dev={'journal_dev', 0x3d, 0x3}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@quota}, {@noload}, {@user_xattr}, {@mblk_io_submit}, {@noinit_itable}, {@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x47f, &(0x7f0000000300)="$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") symlinkat(0x0, 0xffffffffffffff9c, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x404, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) 2.737273092s ago: executing program 2 (id=370): fsopen(0x0, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) inotify_init() r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000180)={0x18, 0x2, {0xfffe, @dev={0xac, 0x14, 0x14, 0x90}}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0xfff8, @multicast1}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000340)=0x1) writev(r3, &(0x7f0000000300)=[{&(0x7f00000000c0)="802bb5e0b2af5ab45285f1529c", 0xd}, {&(0x7f0000000200)="191656", 0x3}, {0x0}], 0x3) 2.513063572s ago: executing program 2 (id=371): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0xcc, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x4, 0x0, 0x2, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0xfffffffe, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000800)) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703260000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000004) 2.503938033s ago: executing program 3 (id=372): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)=0x0) timer_create(0x0, 0x0, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_gettime(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map, r2, 0x20, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) statx(0xffffffffffffffff, 0x0, 0x800, 0x20, 0x0) setuid(0x0) 2.399606947s ago: executing program 3 (id=373): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xffff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x16, 0x0, 0x2, 0x3ff, 0x8, 0x2}, {0x7, 0x2, 0x5ec, 0x1, 0xad, 0x200}, 0xffff0001, 0x8000, 0xb9f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x9e57194a6724d2b5}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r3, 0x3e}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000700)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb6ad67d196186e061f7092e2fe1ef9a0d699e9d080edab4bfdf0700000000000033b67507b05c35577587287c161a312d2351cf0f9c19d2f0d2b52ace0218941304c45c9b529492322ecf2cf8c68a126cb82558982cdcd02dba2f605704bcafe6da433b11d59d071d79e32748a1317a1d68c1be05f1f584dde4be8c1262a925fbabe0af8c00a5181f9c85b647ed0e5f", 0xb5}, {&(0x7f00000002c0)="8caed476f6bcc737902ee6863118a0f660978f27dfa8e77e65d30f0c994994af1fb65ee49983e655d3f7be317d2380b0ed8e916769d5f1b8dc7a927e6401a10223ad90d5dc45614dec7e4c2f19d2b70807aaef8fc9e45c7a65583d15a94480840f4e4fc9ee8e3b7f8fd1aaf800d9176af51346ea81ee48fdc01f072780ff849a4fe9197b8926a16412b4da7b627e43d71ec1b367bbd9454ab97566775449de0c9e1b429acb005171cfd0b37d5e807f54ece988ae6a50773488ded126b8fc9559f66619d6002a53923e4e93bf09354a28cdd2c6a0653731e3ff0fac", 0xdb}, {&(0x7f0000000440)="99dcbf373748a116444c10801b7c8f48ff3cc4222eaa9a8ecd976fe5c2b153b8012daa0155cbb1", 0x27}, {&(0x7f0000000480)="5dc2db6fa9b830b5bedc2a54b2d4091ce8c28ef121944d189544096016abb738c8d7cbee8455797c78611bc5b5633e30c7ee1093b90e3208ecb225f6d0d29465fa81ca56e738ef1e7c0480a7b780ec614330e809a1523dbfda40a01ee577449b2adcf3ac4a416128f9b100695ec34ba5c785caca8eaf21639695869be83d5597e7d5c5d74690449c0b1589212d14268d86d6e9df6605662594a579a01f6247f8789ee2753104a9ff6c977436258777b047c00743caeee11953c7ee9f75783afc3e3e6951ad94872aef0797363080994c6e7ff1645c", 0xd5}, {&(0x7f0000000b00)="7bddac51b6b38bbab189b84ebc6063c560070782f2b8071de259d62d9ab16f8dbe75fb1c4566ea50322ed6140982205dd2e4ab0049fa54e29f7f24e07ce90f9ab021368fc7fe35abd535cd4a238a650dba0f6cd8c2571340e71d4d1d1448a671abeafde582bbbc7458772667b08492d548ea72048e78720a32cddf42058dda263f3f3466228169a4aff6f0655a9a7127e166e270ed31b91702545835336ef729202b0217f1807fb1c8b7bc3b0ef109a66bb52eef969e0a1034716dc20598eee5debaefe008d548ddee490f627221d5b0a92e4cb4b0ad1068dc259e5cc7a564f03ed6e00dad19705620164bc1171ecdc3053ef0b3dcd13b62c9060f6bca43a1e654f0a543f4dda756efdee8ae70a21ab9c81707894462fecd1cd9826a4e26bf261005ce8c4cbc46b63e46f06cb4369aace3555cd0e11dac7a95ce3aec9d2bb03583606b81ea29615949c513c9591c0971e1a999d4713d2f3954d5a264bf5ab0ec856b562ddf062202210171140bb4bd1eaca8283c4fd36951fb83672effe7b5126e9458f1f5f3d41a0f51966295c5f8b1a358a0bb47847892d3dfd8e0ff68030fc5e975bc25ad99827736e1f27053a2ad9f28dc981c68439de1c94f6acdb9e661db21b1e7596b87af22a4af5a37f3a54a1a3630770885eb620e1b6c613283beee82990001df7faf28fcef2a63b863f7f9827105af3aa6e0fa698cce7119af4baa9332f91f1434d5f712afe153a7db193fed726a896b3d7fd8d00d46a96d7694103ea6fcc61656c5a7f317856219db27643e30a2544393aa55154d381869a4a773a21567d7240bf6940dfd18d6d703923f97966d3f87eedb8067b89597fe9ba1854f8efa5088fdf8e1c20c235fc4221f11f48ced48e5e724045bf72e0bc67b417b93a7c46ea239249c80d29770b1204488f71a95a2ec49d673993331124ba55fa9d2dae768b97c2f4dc8a02afb6a6475be1e32c2381338ee819fc554f53a16c54d989c0d5e53d9dc9b15083100ef608e2e4b4d253f5fcb75b97c01e6b4e8121ae58a4f9c52f872299b59fe81c7fba3ab9f54650aee339996b27d54245dd1af8d18248588f630b957a8b226c8dd622256b75fc2228fbe1e440a687f71e6eb96c0f8f9dd52725fb31a6d22e06fb8cb42263d3e8a5bac7326bfa1cd92744c077ecb663b1e3e4f6eb3eaca6b610e50373667acb192c943a8606ebf9a1c69e21a79e9e6303dd9611c2f44cb5e4f67063918556a9c56173fb387cb14bb4577728683493017c31839052c9e634a4c64e241602725d1f078a58b4eb4ba6bbabf349b6155c7e8629c80cb4da22039adfc8b2f551741526cae59a6e9b583236b04e9561b51fa2a755fa13e353b0f8210d95faaf73471f6c0d85d32bd2ad81e7c3631e7a473fcc2a43e1b3333e6840a12637c7ae1c3bd3d2a0ae3d67105fc7b31de802fffb37088c922309ccc1b0ee85e4795b1745d2c40001da45e7357397201909696498431d810a97bfa45ce67af18daa9da91e0db2e29545bf84b1628898f41a13c8930a9d73f8c3a2b234fbb90f8f52cafff774ed740ce78f64eae53563ad227ff83e0fbdeabb1de777e58806f7b7010bd33b8d7599ac6449f9b0814d8a5f9d47ccd289310981c2d96782ebe2c40a8914dade88760ba175ccdaf82b4b18365cd87e8d4c93b38c79db182e2c2b7839196382ea1ec5e55a1236ea6ce0ad8cf44fb27d0da66cf4dbc37569eca789046cbc90c752c458717be4589633a9607b11ca0dbec73c819ba2e7a965759aaabb6ede7512b2c6a1758462b6409a77fb83c25af21d98a96972593c46005bece9ca52d49e4a5bed2a24a0136698a4dbad33c5481ab76c2f5c84d5f717e3b0f6d41a4017ff62477cf7efe50084770ff4a6995ccc3bcf4766b2acb7c4dce21e66f270a573d45e829850fe12dbfd3c2d5cd10b556c7dc3c179cd45f36fe314ef760791f17354a563a40bd013a70fdbc89c000e0625ba67e2cb2b4ab0d26f8ba092af5485ec417a30a661e6b459054551afc50a08caf0f191323a69e098610b879ed15bfd39c03ee94865c047c6ffd20427ddf2066ac0f2215d12a38b7be53b2722c5a3fd67e137d3a76bce78c70be21b385bd07b8514c55a54408a051c37127c784e36b945d01021145b89160bac94b11c5656aeb8949a6f315cdb3d812780729e12cb5c85405381add02467e39ad1588e139a18f836535a0e84702ec406ca49ad0cbad9cff79e0e8b8b6a1ab912ea8142ee978d5e92469213a73bd19833c2df4095dcd1246a57fb2b49635af52bed31e62a1068a873cf859b24f3212ca8ceed0be2c574a073b3968579df1049571898769620ab5ad7ece881250677c35b5cb2438d9db8a3dec87595adc090705710fe393ba36ea9a4e484de1a6aba671b4a411aaf445cd3caf8768ea647416ffd4be0bd028e8e7d31fe4ea73310ee2f3ed55a1b1f84f3123dfc7f96e6cf17d575a5bc64ad25314524b3b114a0fd81522e8ede0dfc6659806fe35dd05fe20fc1f73f3dc780748381b46d5cc4c7d7f2e113cac0dc848f70023b7ea93526a6fd746b9461101b071b0f024df9eea2abf7ed4d8788e1928046a9bf8927b2700064776a4a63ba281e74e77ebeca80172e41c41e88853bfe4d75f261550d43892bae87d8ce3adad46827d33202f1549d929f90f587da1ba07cf4f6f2cfacbfbfc51687b55daa9a4fa81d8f67efe2e31a5fc6282d080f6c90d648aabd2f69e0710a06fc4a6b4158dcea59f463162f384265857d527587f0a9d11742f8377cd5cc3d46b79338a7221604a0ca978c7243c4a9a73484dcb1f85f0401e32295924a8746c7edfb07616a1925baad8a20c79ae197a1775116386bb9330172cf656a22fb654696a7702ea30805215a820125984a308a60cd7ede1f137dbe43c0ada5b2951f9ef2c317e29ece9aea31045ccbcbd8a222d2af82b736c4186efc36d5e565ad2b72f3cf68bfd4c20e156b7f19ed683c751c9b89e6b2b1e0d15454f7afc316193d39fe58dfa4db929d060a9cd0965a1ec6acc6185b6c4d9620fd6826c3b0d18905763a625e15fdb5c9652b5a5cde312fee991d520efaa7552978051d667b7e4d3508e902be4aee042e34eae15f43012c42924acf19bbe725be0ec44c6e41789b9d5ab15a845ba20102898b128dc291d8ed69ef76804489e79aa5248e3e11ec12e4f2fe4d2d535828fa5ee9d01b16c740ff1a234aad4afef7d1c989760fc6756b721808885f5f741f27dcb6674433848db5cc51d0e88adde764d8ec43089fcbdf9ba087bcbe3bd0ada1eae0421f44e8c3733eddd82d32f223b1bd283d73f3b28ae077a8886be7645bf56d93aff7ea96533e7d9182ad66bc3b1b9e854eccfa3d4a4c4713cac7ae3336746318b244649afe1c2e5db919ac395b02af31793615bd010c3b085a897b7754a12fffb610a2638d70e2c3b1eb3fa87e0c6324b4720f4e318455f367c5c912c5ca10e6b3e7f692ac9ef9277197fa493b8a20a63feea2dc3ccada7b08f9f4805f5d8140d74db2df0b2b3e404934a00c1ef6098c5acf3d8266ef751f3d212a9431f52a0d1471113c4bd90d20065c89f43e71951c0939fb87c157fb548e9c0627d951c63cafa53808dae0ef6a7e104ff945267ac4edd42a0fc1c46d6f9a780aa0e2983f7078c54c647576c025647eb68ad4af851d85e459dc2f8b6139e539874c17de6f3748f51ed55a3c67d8bec0d7a0976d782cf91a1ae60ba9d51511b1407eb16c7610866455447dc4ad148298e6b1b0e4b833b667f709aa9d0ee1759bb87ac44543a39e44f1fe5f33eeea9b11c03f9fc39d66d5ab765f8ef074b22c71cff1b69367d24e91da4bc35e2fdfea1a77a9f41a2f0896870e0fcfd69d51f716638cd63184bd76c648c192e990f2c675478aa15cc5a804882f4be47155909e5f2265c5842153d928f06d61000cc72e37c87fbdba0a47738fef6e6154c21fee513a9e12635c767b5c4b17da6392ba7e3a833bd5d826129ae11dc3a625a249fec9b2410bdeb18d52a075f2ed2bb3e3efdf01f23b87cccdae9aa15f4978751d42b7c6df7533895528acabaadb49aeabe720388f2de167d5471f6a8a576234e0281e34e6d86413df713caea8abd80ba60dac8f37d39a58c929263034e01e5c59c2be798463abd50a430b40ca7ce97ad70ea89ddc2c817d712791f78cded6dc674682761c250d574d5eb041d99dfc91f75f832e0b1d4518b6af48cf24881a61faa7885dbe1e6722d15d0b220c2bee24467ba34fce9f85730de38c7359dddde1fb7c31ec9c3bd14c7bc8a6ebacbcc735178bddf7a07228b8d5c5d87731f1b703648ce74a9e49ce90ce2f6a128c0d5a8c33a7d89a761833098c651e2887e2b4deabb462cad2895718fd605dc018fed465eb7e9ec5d147155b1c4c9032ece2624af1150a6343f76594d13ecfc6fd3856a88b69dcac05411a4f929f14347cf2c6ae3d37ed4801e0f41e077a8f28356b46cca30068178a1d433901b39b3c607d1937962e185d61d0030ad18e658ab5aba033b0d879395e33e8b96aee9cd77055de23501085e4a5aa9bc8c676467751b946af9b382e230d89ad3a506779a64d736311b3a8aff1ef778365af1af48d4cf9352ef4939e4a0ea2d69ae9395404dc992acf99e2241e1403d3390152e57ad28dbcb87d0d3c618c6fd93822174f066a9d318951895bcfae43ea0af777a0244a802196ed8f04914ea868d727453d79e2629abc735a1b6570a7ace08042bddfcb6173b7a5110bfd6c2f4f0f2d858f99a48a4475044aa1049b65687924353cfd93ecef296928dd7a20fdf1ad18612e3e2851fa6686dca47abe789d90bafeea3c1ed095812c77cb292dea0716a8f88842ce6b1d80bb7cb2b91358ded09bb2398e299c30fd2765300a98f99cd0b96c3fc4d43e20cd8668af58be91cd4dd2078a37a2ba048a0a705915129702610fd5e0c0ceb3fe36d7a96d050b71ad7cab9d062242257f191f6037e7d579c05c8ec55b396d5b459ee1a31d22adaa77d0ede48a1e71b60401ce327ff04a95815450935a7259a96a240eff73589699c72696e2591894673f28e8e4a766ecf35c90aa4046c4ac54f21c4e65dcb2bfa5db4a2422773995c086e1282699d9f4f61abad41cc617ad99537f23e70da8394d7bbac7c4612c567bcf5c00d2325176c41e4e3f0cbc6eff4ae053b650737bc3ef9ebfdc8283aa4b82de3e1e6f671a92f1822a05d917622ec3bf41459f329da27503047706b89131a2c1090f5a4293f038b3eb1d2be516708bd7221221d873f1fe9e7e0f89232d0d2ad6ac375314a499d8d16fecf64c073a795831c1f7c85af606a519eb8efe263c157091373fb0e7225eaaaf3036c9669f6b5d054727bda9b7e884a1daf44000d51d9ef6676aec7b568653e2cf7acbfa645fd95422542725aad66e47ca970aac3b9058f55c2d2280e233c4278e0088a69c0788f2d188e696de7058fbbbaecd83bde173e6bfdcafdb658640c473783743d2c09010c34c34bdedd83f2c0dc997a8956a41c07c60589a0812859dd206cadbc9880520e56c91e09550cf15b5ef20f6ff10e1ddd2cae1b2242cc6c60519fc660ce63f518839c4d7b23fd2027cb3a8d2c3a27b6462418c9eccf1742099f6906d2b8627c543b05eddf968a1e", 0xf9a}], 0x5}, 0x0) 2.34860635s ago: executing program 0 (id=374): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) sync_file_range(r1, 0xc, 0x2000000006, 0x6) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv2(r2, &(0x7f0000000080)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0x0, 0x0, 0x3) 2.299124572s ago: executing program 0 (id=375): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x200005, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000004c0)=':', 0x1, 0x4000845, &(0x7f0000000140)={0x11, 0x88a8, r5, 0x1, 0x3, 0x6, @local}, 0x14) 2.187155307s ago: executing program 1 (id=376): open(&(0x7f0000000040)='.\x00', 0x8c00, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x8, 0x40000183}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) clock_adjtime(0x0, 0x0) listen(0xffffffffffffffff, 0x1000) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x801, &(0x7f00000003c0)=ANY=[], 0x2, 0x184, &(0x7f0000000400)="$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") 2.062222533s ago: executing program 3 (id=377): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYRESHEX, @ANYBLOB], 0x1, 0x217, &(0x7f0000000a80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000a40)={0x14, 0x0, 0x4, 0x101, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 1.891880462s ago: executing program 0 (id=378): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x31}, 0x20048888) 1.789082436s ago: executing program 1 (id=379): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000140)=0xfffffff7, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e25, 0x400000}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8100002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendto$inet6(r0, 0x0, 0xfffffd72, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 1.72034038s ago: executing program 1 (id=380): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mysys\x00', 0x1ff) r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x800) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./mysys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mysys/class/i2c-dev/i2c-0/device/new_device\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='typec_fusb302 0x22\n\x00', 0x13) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mysys/class/i2c-dev/i2c-1/device/new_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='typec_fusb302 0x22\n\x00', 0x13) syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) socket$inet6(0xa, 0x1, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000100)="26c2", 0xfffff, 0xffffffffffffffff) 1.628061424s ago: executing program 4 (id=381): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x24) 803.528533ms ago: executing program 0 (id=382): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f, 0x0, 0xee01}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x1000, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0x20000}, {{@in6=@empty, 0x404d5, 0x2b}, 0x0, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffd}}, 0xe4) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[], 0x10}}, 0x0) openat$sndtimer(0xffffff9c, 0x0, 0xc0004) 704.748287ms ago: executing program 1 (id=383): setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="b702000026000000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000002b000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc525d78c07f17e4d5b3185b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b534dfd8e012e79578e51bc53099e90f4580d660551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b6fbce3f897226c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a0806000000020000000000230048f941b13d924bcf334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c063f7130856f756436303767d2e24f29e5dad9796edb697a6ea1182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c50500721fc7aa2a583726c64c0fb6ca996d278fb00bba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a411f450f173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75ee93f9959e3d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007981699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef660200a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749feaecf69ba83a71caa9bdddc679f1b826f54b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f54d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cd2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ed65af3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c02b53d44bd84bf6770157e96bbb96b5e1f165c87e7ad68a3600b3d357fa9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8989d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3d0bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501ae03002af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9fd04bdc7e5fee4bd52db996e633792118efdb6b88023e80da74fdf723c7f0b2e9f3bb90613508c00a292a0c5b87a4f8ff35eba73ce9ebf77d0c842063a7b42c757d828678d38e6a868eaead4f19cdeb7cfc100ceabb4a3999cce5d36ecfe80def20f7187bab75515226f4d9b30e0567612210d492468781999ce795522b726bdf37b15e9afde32a7052cc909eb08cca312c557bff04cf1fbb0dcfe8ac00"/2832], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000540)="8826a93a48dbaecc409e4d8e000068a0", 0x0, 0x3400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) listen(r0, 0x402) syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x6, 0x1, 0x4, 0x2, 0xa}]}}}}}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000017c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r3], 0x1c}}, 0x2000040) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r4, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffe}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8001}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xb7b}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x4c}}, 0x0) 0s ago: executing program 4 (id=384): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket(0x6, 0x2, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x8070bd28, 0xfffffffa, {0x2, 0x18, 0x1ef, 0x0, r2}, [@IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1d}}, @IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64000100}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x871ac4b32833d133}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x20008084) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {0xf}, {0xfff1}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x800) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.81' (ED25519) to the list of known hosts. [ 57.207554][ T4173] cgroup: Unknown subsys name 'net' [ 57.337750][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.551869][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.423877][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 60.486559][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 60.529285][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 60.595373][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 60.611881][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.619236][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.628478][ T4187] device bridge_slave_0 entered promiscuous mode [ 60.642144][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.649410][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.657863][ T4187] device bridge_slave_1 entered promiscuous mode [ 60.709117][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.716277][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.724785][ T4195] device bridge_slave_0 entered promiscuous mode [ 60.732704][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.739772][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.748584][ T4188] device bridge_slave_0 entered promiscuous mode [ 60.768771][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.779020][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 60.790243][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.797399][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.805786][ T4195] device bridge_slave_1 entered promiscuous mode [ 60.818306][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.825498][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.833355][ T4188] device bridge_slave_1 entered promiscuous mode [ 60.845605][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.868309][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.905004][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.931545][ T4187] team0: Port device team_slave_0 added [ 60.950778][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.967514][ T4187] team0: Port device team_slave_1 added [ 60.978040][ T4195] team0: Port device team_slave_0 added [ 60.985711][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.007846][ T4195] team0: Port device team_slave_1 added [ 61.020348][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.027669][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.035954][ T4186] device bridge_slave_0 entered promiscuous mode [ 61.049235][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.056397][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.064423][ T4186] device bridge_slave_1 entered promiscuous mode [ 61.091883][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.098970][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.125316][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.153810][ T4188] team0: Port device team_slave_0 added [ 61.159780][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.167425][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.175298][ T4191] device bridge_slave_0 entered promiscuous mode [ 61.183683][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.190648][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.216595][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.228048][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.235101][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.261710][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.279706][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.286795][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.313239][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.327168][ T4188] team0: Port device team_slave_1 added [ 61.333312][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.340386][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.348211][ T4191] device bridge_slave_1 entered promiscuous mode [ 61.371589][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.398248][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.405377][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.431405][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.456243][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.479325][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.486340][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.512762][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.532912][ T4195] device hsr_slave_0 entered promiscuous mode [ 61.539633][ T4195] device hsr_slave_1 entered promiscuous mode [ 61.552534][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.575006][ T4187] device hsr_slave_0 entered promiscuous mode [ 61.581591][ T4187] device hsr_slave_1 entered promiscuous mode [ 61.593602][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.601379][ T4187] Cannot create hsr debugfs directory [ 61.635672][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.657760][ T4186] team0: Port device team_slave_0 added [ 61.667896][ T4186] team0: Port device team_slave_1 added [ 61.687390][ T4188] device hsr_slave_0 entered promiscuous mode [ 61.694406][ T4188] device hsr_slave_1 entered promiscuous mode [ 61.701211][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.709103][ T4188] Cannot create hsr debugfs directory [ 61.743469][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.750523][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.776536][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.790115][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.797193][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.823575][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.839785][ T4191] team0: Port device team_slave_0 added [ 61.871103][ T4191] team0: Port device team_slave_1 added [ 61.899104][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.906408][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.932724][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.969344][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.976393][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.002614][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.030324][ T4186] device hsr_slave_0 entered promiscuous mode [ 62.037772][ T4186] device hsr_slave_1 entered promiscuous mode [ 62.044804][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.052692][ T4186] Cannot create hsr debugfs directory [ 62.090710][ T4191] device hsr_slave_0 entered promiscuous mode [ 62.098399][ T4191] device hsr_slave_1 entered promiscuous mode [ 62.105396][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.113168][ T4191] Cannot create hsr debugfs directory [ 62.213431][ T1107] Bluetooth: hci4: command 0x0409 tx timeout [ 62.217912][ T1109] Bluetooth: hci0: command 0x0409 tx timeout [ 62.220290][ T1107] Bluetooth: hci2: command 0x0409 tx timeout [ 62.226473][ T1109] Bluetooth: hci3: command 0x0409 tx timeout [ 62.238494][ T1109] Bluetooth: hci1: command 0x0409 tx timeout [ 62.337796][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.349385][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.363859][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.373349][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.403728][ T4188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.413415][ T4188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.428129][ T4188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.438127][ T4188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.489730][ T4195] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.500302][ T4195] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.514848][ T4195] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.524545][ T4195] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.595948][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.643399][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.656496][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.665999][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.684736][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.696116][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.707195][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.719118][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.765611][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.785479][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.810529][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.835793][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.845003][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.856841][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.865192][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.873646][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.887655][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.901104][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.910454][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.920241][ T3064] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.927797][ T3064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.937337][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.978352][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.987253][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.996219][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.007363][ T3064] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.014513][ T3064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.023075][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.031706][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.040405][ T3064] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.047517][ T3064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.055681][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.064856][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.073228][ T3064] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.080266][ T3064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.088037][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.097180][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.106796][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.115417][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.124716][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.133995][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.142745][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.150525][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.159176][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.169330][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.195448][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.204802][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.213851][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.222950][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.231199][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.240386][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.249307][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.258444][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.266813][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.275797][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.285576][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.294084][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.305448][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.316722][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.328769][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.339195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.348657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.357357][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.364726][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.373957][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.384867][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.396870][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.419231][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.428271][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.443301][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.454003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.466798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.481822][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.492419][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.500783][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.507911][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.515799][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.525027][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.548881][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.559672][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.584123][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.593454][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.601209][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.610874][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.621287][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.633052][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.641773][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.656970][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.669433][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.696427][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.706256][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.715987][ T3064] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.723388][ T3064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.733970][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.743043][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.751425][ T3064] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.758552][ T3064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.766831][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.775451][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.784142][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.793346][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.801667][ T3064] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.808779][ T3064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.817053][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.826430][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.835336][ T3064] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.842459][ T3064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.850434][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.858365][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.866569][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.874838][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.890104][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.904325][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.915077][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.924151][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.942898][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.979155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.990943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.000524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.008593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.017511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.027353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.036114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.045501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.054370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.065641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.074624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.083319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.091663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.100393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.109719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.124553][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.139664][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.162813][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.181166][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.190058][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.216357][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.231821][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.247633][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.263140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.271618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.288058][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.302691][ T4230] Bluetooth: hci2: command 0x041b tx timeout [ 64.302872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.310921][ T4230] Bluetooth: hci1: command 0x041b tx timeout [ 64.317695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.330834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.339546][ T4230] Bluetooth: hci3: command 0x041b tx timeout [ 64.340830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.350827][ T4230] Bluetooth: hci0: command 0x041b tx timeout [ 64.360688][ T4230] Bluetooth: hci4: command 0x041b tx timeout [ 64.392301][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.400625][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.438934][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.454507][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.483229][ T4187] device veth0_vlan entered promiscuous mode [ 64.496629][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.507400][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.525952][ T4187] device veth1_vlan entered promiscuous mode [ 64.546340][ T4195] device veth0_vlan entered promiscuous mode [ 64.579345][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.588213][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.597753][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.607383][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.616422][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.645275][ T4187] device veth0_macvtap entered promiscuous mode [ 64.666696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.676107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.685204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.693702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.701217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.718730][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.747504][ T4195] device veth1_vlan entered promiscuous mode [ 64.761984][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.771735][ T4187] device veth1_macvtap entered promiscuous mode [ 64.780983][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.790358][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.799469][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.808720][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.816739][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.828900][ T4188] device veth0_vlan entered promiscuous mode [ 64.857448][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.866122][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.875269][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.886108][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.895349][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.904392][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.913714][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.921728][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.930077][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.938490][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.952952][ T4191] device veth0_vlan entered promiscuous mode [ 64.960156][ T4188] device veth1_vlan entered promiscuous mode [ 64.990500][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.007497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.016264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.024657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.033702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.042538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.050982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.059679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.068818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.082035][ T4195] device veth0_macvtap entered promiscuous mode [ 65.099086][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.115257][ T4191] device veth1_vlan entered promiscuous mode [ 65.124589][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.133058][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.141077][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.149886][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.158971][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.167560][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.177035][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.185118][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.195165][ T4186] device veth0_vlan entered promiscuous mode [ 65.212019][ T4195] device veth1_macvtap entered promiscuous mode [ 65.223652][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.232936][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.241653][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.253055][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.266142][ T4188] device veth0_macvtap entered promiscuous mode [ 65.276470][ T4188] device veth1_macvtap entered promiscuous mode [ 65.285196][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.293610][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.301710][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.310559][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.319611][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.334377][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.349882][ T4186] device veth1_vlan entered promiscuous mode [ 65.372168][ T4191] device veth0_macvtap entered promiscuous mode [ 65.397375][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.410306][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.433792][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.441235][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.450080][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.460131][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.469030][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.477949][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.488189][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.502122][ T4191] device veth1_macvtap entered promiscuous mode [ 65.516545][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.528372][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.540227][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.564804][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.576578][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.588603][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.599362][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.611070][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.621978][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.632970][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.643639][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.655430][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.667178][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.678154][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.686565][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.694697][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.705956][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.715862][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.724646][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.733818][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.743624][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.752824][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.761958][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.773892][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.787328][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.796405][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.805426][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.816383][ T4186] device veth0_macvtap entered promiscuous mode [ 65.832530][ T4195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.841373][ T4195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.850759][ T4195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.860429][ T4195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.890587][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.894373][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.903486][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.919090][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.923610][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.937315][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.947651][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.958417][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.969955][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.980480][ T4186] device veth1_macvtap entered promiscuous mode [ 66.015879][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.024754][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.033088][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.041995][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.051828][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.063648][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.074341][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.085322][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.095309][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.107129][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.118182][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.155051][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.164007][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.179800][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.190617][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.201011][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.211759][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.225331][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.236333][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.246808][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.257684][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.269416][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.280069][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.290583][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.300974][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.311878][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.322060][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.332852][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.346285][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.357400][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.369047][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.377313][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 66.383776][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 66.388787][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.392042][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.407620][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.407695][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 66.416563][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.421830][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 66.435073][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.445788][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.458822][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.469279][ T4232] Bluetooth: hci4: command 0x040f tx timeout [ 66.474791][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.485364][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.494475][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.503308][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.535758][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.548135][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.558297][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.567656][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.686886][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.710595][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.743076][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.750959][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.766111][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.777975][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.801284][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.826729][ T4266] binder: BC_ACQUIRE_RESULT not supported [ 66.835392][ T4266] binder: 4265:4266 ioctl c0306201 200000000240 returned -22 [ 66.843450][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.851309][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.875454][ T4266] loop1: detected capacity change from 0 to 128 [ 66.882980][ T3064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.891338][ T3064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.909690][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.913296][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.926133][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.929929][ T3064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.962930][ T3064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.978779][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.004727][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.044598][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.067016][ T3064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.087016][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.099309][ T3064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.114516][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.128422][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.437449][ T4278] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 67.824730][ T4286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 68.288572][ T4289] device syzkaller0 entered promiscuous mode [ 68.407501][ T4297] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 68.461586][ T1109] Bluetooth: hci2: command 0x0419 tx timeout [ 68.469982][ T1109] Bluetooth: hci1: command 0x0419 tx timeout [ 69.300316][ T1109] Bluetooth: hci3: command 0x0419 tx timeout [ 69.306912][ T1109] Bluetooth: hci0: command 0x0419 tx timeout [ 69.314056][ T1109] Bluetooth: hci4: command 0x0419 tx timeout [ 69.421641][ T4297] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 69.492053][ T4316] loop1: detected capacity change from 0 to 256 [ 69.744641][ T4314] loop0: detected capacity change from 0 to 4096 [ 70.279923][ T4314] ======================================================= [ 70.279923][ T4314] WARNING: The mand mount option has been deprecated and [ 70.279923][ T4314] and is ignored by this kernel. Remove the mand [ 70.279923][ T4314] option from the mount to silence this warning. [ 70.279923][ T4314] ======================================================= [ 70.427648][ T4314] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 70.441378][ T4314] ntfs3: loop0: Failed to load $BadClus. [ 70.522420][ T4231] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 70.678543][ T4331] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 70.805427][ T4231] usb 3-1: Using ep0 maxpacket: 16 [ 70.827853][ T4319] loop4: detected capacity change from 0 to 40427 [ 70.909859][ T4319] F2FS-fs (loop4): invalid crc value [ 71.086176][ T4319] F2FS-fs (loop4): Found nat_bits in checkpoint [ 71.864950][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.895776][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.959906][ T4319] F2FS-fs (loop4): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 72.053032][ T4231] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 72.082033][ T4231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.100754][ T4231] usb 3-1: Product: syz [ 72.120338][ T4231] usb 3-1: Manufacturer: syz [ 72.130311][ T4231] usb 3-1: SerialNumber: syz [ 72.139674][ T4231] r8152-cfgselector 3-1: config 0 descriptor?? [ 72.230126][ T4355] set match dimension is over the limit! [ 72.293258][ T4264] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 72.512778][ T4322] netlink: 3684 bytes leftover after parsing attributes in process `syz.2.15'. [ 72.592492][ T4264] usb 4-1: Using ep0 maxpacket: 32 [ 72.722773][ T4264] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.790668][ T4264] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 72.855698][ T4264] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 72.941236][ T4264] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.157949][ T4264] usb 4-1: config 0 descriptor?? [ 73.439132][ T4366] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 73.498374][ T4231] r8152-cfgselector 3-1: Unknown version 0x0000 [ 73.512768][ T4231] r8152-cfgselector 3-1: bad CDC descriptors [ 73.555642][ T4231] r8152-cfgselector 3-1: Unknown version 0x0000 [ 73.566013][ T4231] r8152-cfgselector 3-1: USB disconnect, device number 2 [ 73.588046][ T4369] netlink: 'syz.4.30': attribute type 4 has an invalid length. [ 74.154999][ T4371] netlink: 'syz.4.30': attribute type 4 has an invalid length. [ 74.658439][ T4390] loop4: detected capacity change from 0 to 512 [ 74.700081][ T4390] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 74.739985][ T4390] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 74.857684][ T4347] loop3: detected capacity change from 0 to 16 [ 74.960339][ T4390] EXT4-fs (loop4): 1 truncate cleaned up [ 74.968231][ T4347] erofs: (device loop3): mounted with root inode @ nid 36. [ 74.972425][ T4390] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,noinit_itable,block_validity,errors=remount-ro,nombcache,. Quota mode: none. [ 75.478086][ T4347] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 589823 of nid 36 [ 75.633929][ T4347] erofs: (device loop3): z_erofs_readahead: readahead error at page 143 @ nid 36 [ 75.643169][ T4347] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 585727 of nid 36 [ 75.672245][ T4347] erofs: (device loop3): z_erofs_readahead: readahead error at page 142 @ nid 36 [ 75.702422][ T4347] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 581631 of nid 36 [ 75.742718][ T4347] erofs: (device loop3): z_erofs_readahead: readahead error at page 141 @ nid 36 [ 75.808617][ T4347] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 577535 of nid 36 [ 75.895409][ T4347] erofs: (device loop3): z_erofs_readahead: readahead error at page 140 @ nid 36 [ 75.985498][ T4347] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 573439 of nid 36 [ 76.172029][ T4347] erofs: (device loop3): z_erofs_readahead: readahead error at page 139 @ nid 36 [ 76.379666][ T4347] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 569343 of nid 36 [ 76.532093][ T4347] erofs: (device loop3): z_erofs_readahead: readahead error at page 138 @ nid 36 [ 76.668122][ T4347] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 565247 of nid 36 [ 76.809568][ T4347] erofs: (device loop3): z_erofs_readahead: readahead error at page 137 @ nid 36 [ 76.966792][ T4347] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 561151 of nid 36 [ 77.148121][ T4347] erofs: (device loop3): z_erofs_readahead: readahead error at page 136 @ nid 36 [ 77.331442][ T4347] erofs: (device loop3): z_erofs_readahead: readahead error at page 111 @ nid 36 [ 77.463513][ T4347] erofs: (device loop3): z_erofs_readahead: readahead error at page 110 @ nid 36 [ 77.604048][ T4347] erofs: (device loop3): z_erofs_readahead: readahead error at page 109 @ nid 36 [ 77.762153][ T4347] erofs: (device loop3): z_erofs_readahead: readahead error at page 108 @ nid 36 [ 78.045749][ T4347] erofs: (device loop3): z_erofs_readahead: readahead error at page 107 @ nid 36 [ 78.194270][ T4347] erofs: (device loop3): z_erofs_readahead: readahead error at page 106 @ nid 36 [ 78.481495][ T4347] attempt to access beyond end of device [ 78.481495][ T4347] loop3: rw=524288, want=13478624064, limit=16 [ 79.341865][ T4347] attempt to access beyond end of device [ 79.341865][ T4347] loop3: rw=524288, want=13478624072, limit=16 [ 79.361995][ T4347] attempt to access beyond end of device [ 79.361995][ T4347] loop3: rw=524288, want=14550774184, limit=16 [ 79.373920][ T4347] attempt to access beyond end of device [ 79.373920][ T4347] loop3: rw=524288, want=14550774192, limit=16 [ 79.386407][ T4347] attempt to access beyond end of device [ 79.386407][ T4347] loop3: rw=524288, want=13716630408, limit=16 [ 79.398407][ T4347] attempt to access beyond end of device [ 79.398407][ T4347] loop3: rw=524288, want=13716630416, limit=16 [ 79.411380][ T4347] attempt to access beyond end of device [ 79.411380][ T4347] loop3: rw=524288, want=790416, limit=16 [ 79.426275][ T4347] attempt to access beyond end of device [ 79.426275][ T4347] loop3: rw=524288, want=790424, limit=16 [ 79.437962][ T4347] attempt to access beyond end of device [ 79.437962][ T4347] loop3: rw=524288, want=104, limit=16 [ 79.449514][ T4347] attempt to access beyond end of device [ 79.449514][ T4347] loop3: rw=524288, want=112, limit=16 [ 79.498722][ T4232] usb 4-1: USB disconnect, device number 2 [ 79.644659][ T4431] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 79.821867][ T4431] loop1: detected capacity change from 0 to 1024 [ 80.362199][ C0] sched: RT throttling activated [ 80.522644][ T4431] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 2: comm syz.1.48: lblock 2 mapped to illegal pblock 2 (length 1) [ 80.601504][ T4431] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 80.616420][ T4442] loop4: detected capacity change from 0 to 512 [ 80.620449][ T4431] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 48: comm syz.1.48: lblock 0 mapped to illegal pblock 48 (length 1) [ 80.662112][ T4431] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 80.678920][ T4431] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.48: Failed to acquire dquot type 0 [ 80.756605][ T4442] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 80.756981][ T4431] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 80.786309][ T4431] EXT4-fs error (device loop1): ext4_evict_inode:284: inode #11: comm syz.1.48: mark_inode_dirty error [ 80.813094][ T26] audit: type=1800 audit(1789408073.092:2): pid=4433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.47" name="bus" dev="ramfs" ino=33209 res=0 errno=0 [ 80.819877][ T4442] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.852293][ T4431] EXT4-fs warning (device loop1): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 80.872716][ T4431] EXT4-fs (loop1): 1 orphan inode deleted [ 80.878580][ T4431] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000008001,noblock_validity,nolazytime,max_batch_time=0x0000000000000007,nodiscard,nouid32,noauto_da_alloc,,errors=continue. Quota mode: none. [ 80.902258][ T9] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 80.966460][ T9] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 81.002444][ T9] EXT4-fs error (device loop1): ext4_release_dquot:6272: comm kworker/u4:0: Failed to release dquot type 0 [ 81.071014][ T4453] loop3: detected capacity change from 0 to 128 [ 81.102102][ T4426] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 81.159766][ T4453] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 81.160593][ T4426] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 81.203452][ T4426] EXT4-fs error (device loop1): ext4_release_dquot:6272: comm kworker/u4:13: Failed to release dquot type 0 [ 81.267877][ T4187] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 81.310111][ T4187] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 81.321632][ T4187] EXT4-fs error (device loop1): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 81.420833][ T4470] loop1: detected capacity change from 0 to 512 [ 81.498876][ T4470] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 81.528834][ T4470] System zones: 1-12 [ 81.545066][ T4470] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.54: missing EA_INODE flag [ 81.552490][ T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 81.570685][ T4470] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.54: error while reading EA inode 12 err=-117 [ 81.585471][ T4306] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 81.590750][ T4470] EXT4-fs (loop1): 1 orphan inode deleted [ 81.600443][ T4470] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 82.012938][ T13] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.044469][ T4306] usb 4-1: not running at top speed; connect to a high speed hub [ 82.152989][ T4306] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.243419][ T13] usb 1-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 82.660593][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.669430][ T13] usb 1-1: Product: syz [ 82.674337][ T13] usb 1-1: Manufacturer: syz [ 82.679687][ T13] usb 1-1: SerialNumber: syz [ 82.737236][ T4306] usb 4-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 82.760814][ T4306] usb 4-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 82.769419][ T13] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 82.796390][ T4306] usb 4-1: Product: syz [ 82.800681][ T4306] usb 4-1: Manufacturer: syz [ 82.868768][ T4306] usb 4-1: Found UVC 1.00 device syz (225a:e1d4) [ 82.896695][ T4306] usb 4-1: No streaming interface found for terminal 2. [ 83.118147][ T4231] usb 4-1: USB disconnect, device number 3 [ 83.702433][ T13] gspca_mr97310a: reg read [21] error -71 [ 83.709542][ T13] mr97310a: probe of 1-1:1.0 failed with error -71 [ 83.779714][ T13] usb 1-1: USB disconnect, device number 2 [ 83.908920][ T26] audit: type=1804 audit(1789408076.192:3): pid=4491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.63" name="bus" dev="ramfs" ino=34056 res=1 errno=0 [ 83.960635][ T26] audit: type=1804 audit(1789408076.192:4): pid=4491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.63" name="bus" dev="ramfs" ino=34056 res=1 errno=0 [ 84.250966][ T4488] loop2: detected capacity change from 0 to 32768 [ 84.387855][ T4488] XFS (loop2): Mounting V5 Filesystem [ 84.565521][ T4488] XFS (loop2): Ending clean mount [ 84.666054][ T4488] XFS (loop2): Quotacheck needed: Please wait. [ 84.757462][ T4488] XFS (loop2): Quotacheck: Done. [ 84.770755][ T4515] loop0: detected capacity change from 0 to 128 [ 85.619005][ T4488] XFS (loop2): User initiated shutdown received. [ 85.648948][ C1] blk_update_request: I/O error, dev loop0, sector 16 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 85.704291][ T4488] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 85.791495][ T4488] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 85.829140][ T4523] loop1: detected capacity change from 0 to 1024 [ 86.015792][ T4195] XFS (loop2): Unmounting Filesystem [ 86.068681][ T4523] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 86.393857][ T4536] netlink: 28 bytes leftover after parsing attributes in process `syz.0.75'. [ 86.694293][ T7] cfg80211: failed to load regulatory.db [ 86.780023][ T4544] netlink: 'syz.3.79': attribute type 1 has an invalid length. [ 87.752486][ T13] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 88.182411][ T13] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 88.241058][ T13] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 88.653024][ T13] usb 4-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 88.729741][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.020473][ T13] usb 4-1: Product: syz [ 89.036883][ T13] usb 4-1: Manufacturer: syz [ 89.044367][ T13] usb 4-1: SerialNumber: syz [ 89.426904][ T13] kaweth 4-1:1.0: Firmware present in device. [ 89.704396][ T13] kaweth 4-1:1.0: Statistics collection: b4457386 [ 89.711066][ T13] kaweth 4-1:1.0: Multicast filter limit: 126a [ 89.722954][ T13] kaweth 4-1:1.0: MTU: 16919 [ 89.728268][ T13] kaweth 4-1:1.0: Read MAC address e0:44:89:1a:b1:31 [ 89.756963][ T4575] FAULT_INJECTION: forcing a failure. [ 89.756963][ T4575] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 89.771228][ T4575] CPU: 0 PID: 4575 Comm: syz.2.88 Not tainted syzkaller #0 [ 89.778448][ T4575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.788649][ T4575] Call Trace: [ 89.791939][ T4575] [ 89.794872][ T4575] dump_stack_lvl+0x188/0x250 [ 89.799561][ T4575] ? show_regs_print_info+0x20/0x20 [ 89.804783][ T4575] ? load_image+0x410/0x410 [ 89.809313][ T4575] ? uncharge_page+0x490/0x490 [ 89.814093][ T4575] should_fail+0x383/0x4b0 [ 89.818527][ T4575] prepare_alloc_pages+0x1e3/0x5b0 [ 89.823663][ T4575] __alloc_pages+0x11b/0x480 [ 89.828274][ T4575] ? zone_statistics+0x170/0x170 [ 89.833236][ T4575] ? rcu_lock_acquire+0x30/0x30 [ 89.838193][ T4575] ? alloc_pages+0x452/0x560 [ 89.842810][ T4575] __get_free_pages+0x8/0x30 [ 89.847423][ T4575] __tlb_remove_page_size+0x1f2/0x3f0 [ 89.852821][ T4575] unmap_page_range+0xfcf/0x2410 [ 89.857889][ T4575] unmap_vmas+0x131/0x250 [ 89.862244][ T4575] ? unmap_page_range+0x2410/0x2410 [ 89.867457][ T4575] ? __mutex_lock_common+0x435/0x2400 [ 89.872939][ T4575] ? exit_mm_release+0x16/0x30 [ 89.877733][ T4575] exit_mmap+0x3b9/0x640 [ 89.881999][ T4575] ? vm_brk+0x20/0x20 [ 89.886009][ T4575] ? uprobe_clear_state+0x2f6/0x460 [ 89.891230][ T4575] __mmput+0x115/0x390 [ 89.895319][ T4575] exit_mm+0x632/0x7b0 [ 89.899453][ T4575] ? perf_pmu_migrate_context+0xb70/0xb70 [ 89.901683][ T4581] syz.1.89 uses obsolete (PF_INET,SOCK_PACKET) [ 89.905191][ T4575] ? do_exit+0x2110/0x2110 [ 89.915910][ T4575] ? __ia32_sys_timer_delete+0x40/0x40 [ 89.921403][ T4575] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 89.926897][ T4575] ? tty_audit_exit+0x149/0x1f0 [ 89.931774][ T4575] do_exit+0x5b8/0x2110 [ 89.935959][ T4575] ? put_task_struct+0x80/0x80 [ 89.940776][ T4575] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 89.946869][ T4575] ? _raw_spin_lock_irq+0xb7/0xf0 [ 89.951924][ T4575] do_group_exit+0x12c/0x2f0 [ 89.956528][ T4575] ? lockdep_hardirqs_on+0x94/0x140 [ 89.961746][ T4575] get_signal+0x7eb/0x12e0 [ 89.966177][ T4575] arch_do_signal_or_restart+0xe6/0x12a0 [ 89.971847][ T4575] ? futex_exit_release+0x1c0/0x1c0 [ 89.977062][ T4575] ? get_sigframe_size+0x10/0x10 [ 89.982105][ T4575] ? __context_tracking_exit+0x4c/0x80 [ 89.987654][ T4575] ? exit_to_user_mode_loop+0x3b/0x130 [ 89.993113][ T4575] exit_to_user_mode_loop+0x9e/0x130 [ 89.998384][ T4575] exit_to_user_mode_prepare+0xee/0x180 [ 90.003927][ T4575] syscall_exit_to_user_mode+0x16/0x40 [ 90.009503][ T4575] do_syscall_64+0x58/0xa0 [ 90.013943][ T4575] ? clear_bhb_loop+0x30/0x80 [ 90.018767][ T4575] ? clear_bhb_loop+0x30/0x80 [ 90.023452][ T4575] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.029504][ T4575] RIP: 0033:0x7f2d842ec159 [ 90.033970][ T4575] Code: Unable to access opcode bytes at RIP 0x7f2d842ec12f. [ 90.041456][ T4575] RSP: 002b:00007f2d825440e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 90.049896][ T4575] RAX: 0000000000000001 RBX: 00007f2d84573fa8 RCX: 00007f2d842ec159 [ 90.057958][ T4575] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2d84573fac [ 90.065998][ T4575] RBP: 00007f2d84573fa0 R08: 00292aca8c761ccb R09: 0000000000000000 [ 90.074171][ T4575] R10: 000000000000006a R11: 0000000000000246 R12: 0000000000000000 [ 90.082155][ T4575] R13: 00007f2d84574038 R14: 00007ffde17aeb60 R15: 00007ffde17aec48 [ 90.090138][ T4575] [ 91.253217][ T26] audit: type=1800 audit(1789408083.542:5): pid=4597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.94" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 91.500338][ T13] kaweth 4-1:1.0: kaweth interface created at eth1 [ 91.962579][ T13] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 92.082508][ T7] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 92.262503][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 92.382618][ T13] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 92.414589][ T13] usb 3-1: config 0 has no interface number 0 [ 92.420722][ T13] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 92.426485][ T4232] usb 4-1: USB disconnect, device number 4 [ 92.461050][ T4619] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (4096) [ 92.470898][ T13] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 92.485881][ T4619] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 92.643797][ T13] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 92.660614][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.669895][ T13] usb 3-1: Product: syz [ 92.680398][ T13] usb 3-1: Manufacturer: syz [ 92.685486][ T13] usb 3-1: SerialNumber: syz [ 92.715017][ T13] usb 3-1: config 0 descriptor?? [ 92.778611][ T4610] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 92.787756][ T4610] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 93.186151][ T4634] loop4: detected capacity change from 0 to 512 [ 93.238570][ T4610] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 93.427449][ T4610] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 93.448816][ T4634] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 93.537612][ T4634] EXT4-fs error (device loop4): ext4_orphan_get:1436: comm syz.4.104: bad orphan inode 131083 [ 93.581552][ T4634] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000000,dioread_lock,nojournal_checksum,,errors=continue. Quota mode: none. [ 93.863694][ T4654] netlink: 'syz.4.108': attribute type 7 has an invalid length. [ 93.891055][ T4654] netlink: 'syz.4.108': attribute type 7 has an invalid length. [ 93.941292][ T4654] Zero length message leads to an empty skb [ 93.963138][ T4659] fuse: Bad value for 'fd' [ 94.120201][ T4666] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.129206][ T4666] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.171948][ T4666] device bridge_slave_1 left promiscuous mode [ 94.181102][ T4666] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.231851][ T4666] device bridge_slave_0 left promiscuous mode [ 94.238746][ T4666] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.393678][ T4680] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 94.572462][ T7] usb 2-1: unable to get BOS descriptor or descriptor too short [ 94.576955][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 94.649740][ T4694] netlink: 11834 bytes leftover after parsing attributes in process `syz.1.118'. [ 94.722496][ T7] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 94.730733][ T7] usb 2-1: can't read configurations, error -71 [ 94.922538][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 95.230284][ T4680] crypto_alloc_aead failed rc=-4 [ 95.292772][ T23] usb 5-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 95.328480][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.369755][ T4710] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 95.391683][ T23] usb 5-1: Product: syz [ 95.406147][ T23] usb 5-1: Manufacturer: syz [ 95.422425][ T23] usb 5-1: SerialNumber: syz [ 96.295762][ T13] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 96.320328][ T4666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.112'. [ 96.322463][ T13] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 96.505878][ T23] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 96.510830][ T13] asix: probe of 3-1:0.34 failed with error -71 [ 96.527371][ T13] usb 3-1: USB disconnect, device number 3 [ 96.556794][ T23] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 96.661869][ T4738] xt_CONNSECMARK: invalid mode: 0 [ 97.177378][ T23] snd-usb-audio: probe of 5-1:1.0 failed with error -71 [ 97.239237][ T23] usb 5-1: USB disconnect, device number 2 [ 97.271436][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.378808][ T4750] netlink: 32 bytes leftover after parsing attributes in process `syz.4.131'. [ 97.730412][ T4764] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 98.488843][ T4770] netlink: 'syz.1.140': attribute type 1 has an invalid length. [ 98.517045][ T4772] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 98.541972][ T4770] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.638388][ T4774] bond1: (slave veth3): Enslaving as an active interface with a down link [ 98.758981][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 98.827939][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 98.920209][ T4770] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 99.472079][ T4776] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 99.683596][ T4776] bond1: (slave batadv1): making interface the new active one [ 99.723667][ T4776] device batadv1 entered promiscuous mode [ 99.730103][ T4776] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 99.765963][ T4801] loop3: detected capacity change from 0 to 128 [ 99.779987][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 100.271706][ T26] audit: type=1326 audit(1789408092.552:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4800 comm="syz.3.147" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b1922159 code=0x7ffc0000 [ 100.608511][ T26] audit: type=1326 audit(1789408092.552:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4800 comm="syz.3.147" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f01b18e298e code=0x7ffc0000 [ 100.701128][ T26] audit: type=1326 audit(1789408092.552:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4800 comm="syz.3.147" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b1922159 code=0x7ffc0000 [ 100.738192][ T26] audit: type=1326 audit(1789408092.582:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4800 comm="syz.3.147" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f01b18e298e code=0x7ffc0000 [ 100.859832][ T26] audit: type=1326 audit(1789408092.582:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4800 comm="syz.3.147" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f01b18e298e code=0x7ffc0000 [ 100.884466][ T26] audit: type=1326 audit(1789408092.582:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4800 comm="syz.3.147" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f01b18e298e code=0x7ffc0000 [ 100.889473][ T4820] loop4: detected capacity change from 0 to 4096 [ 100.909665][ T26] audit: type=1326 audit(1789408092.582:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4800 comm="syz.3.147" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f01b18e298e code=0x7ffc0000 [ 101.010383][ T4820] EXT4-fs (loop4): Unrecognized mount option "uid<00000000000000060929" or missing value [ 101.023143][ T26] audit: type=1326 audit(1789408092.582:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4800 comm="syz.3.147" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f01b18e298e code=0x7ffc0000 [ 101.077860][ T26] audit: type=1326 audit(1789408092.592:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4800 comm="syz.3.147" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f01b18e298e code=0x7ffc0000 [ 101.134051][ T26] audit: type=1326 audit(1789408092.592:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4800 comm="syz.3.147" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f01b18e298e code=0x7ffc0000 [ 102.314750][ T4846] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 102.370917][ T4846] overlayfs: failed to look up (tracing) for ino (-66) [ 102.459348][ T4856] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0 [ 102.487322][ T4855] device macvtap1 entered promiscuous mode [ 102.518510][ T4855] device macvtap2 entered promiscuous mode [ 102.562284][ T4264] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 102.833805][ T4862] loop3: detected capacity change from 0 to 2048 [ 102.932388][ T4264] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.961401][ T4264] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.976627][ T4264] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 103.016617][ T4865] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.062355][ T4264] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 103.112343][ T4264] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.152943][ T4264] usb 5-1: config 0 descriptor?? [ 104.172410][ T4264] usbhid 5-1:0.0: can't add hid device: -71 [ 104.178691][ T4264] usbhid: probe of 5-1:0.0 failed with error -71 [ 104.226622][ T4264] usb 5-1: USB disconnect, device number 3 [ 104.425916][ T4880] x_tables: unsorted entry at hook 2 [ 104.448959][ T4869] loop1: detected capacity change from 0 to 512 [ 104.536390][ T4869] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 106.149319][ T4901] netlink: 'syz.1.179': attribute type 1 has an invalid length. [ 106.296473][ T4901] 8021q: adding VLAN 0 to HW filter on device bond2 [ 106.410531][ T4904] loop3: detected capacity change from 0 to 2048 [ 106.581321][ T4907] 8021q: adding VLAN 0 to HW filter on device bond3 [ 106.612431][ T4907] bond2: (slave bond3): Enslaving as an active interface with a down link [ 106.776080][ T4917] jffs2: notice: (4917) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 106.820275][ T4909] bond2 (unregistering): (slave bond3): Releasing active interface [ 106.895840][ T4909] bond2 (unregistering): Released all slaves [ 107.025118][ T4904] Alternate GPT is invalid, using primary GPT. [ 107.089151][ T4904] loop3: p1 p2 p3 [ 107.099493][ T4904] loop3: partition table partially beyond EOD, truncated [ 107.437197][ T4935] set match dimension is over the limit! [ 107.530466][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 107.642081][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 107.764494][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 107.948578][ T26] kauditd_printk_skb: 59 callbacks suppressed [ 107.948593][ T26] audit: type=1326 audit(1789408100.232:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4934 comm="syz.0.193" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffaf9e77159 code=0x0 [ 108.853374][ T4943] device syzkaller0 entered promiscuous mode [ 109.270161][ T4951] loop3: detected capacity change from 0 to 16 [ 109.294382][ T4947] FAULT_INJECTION: forcing a failure. [ 109.294382][ T4947] name failslab, interval 1, probability 0, space 0, times 1 [ 109.336224][ T4951] erofs: (device loop3): mounted with root inode @ nid 36. [ 109.532471][ T4947] CPU: 1 PID: 4947 Comm: syz.4.195 Not tainted syzkaller #0 [ 109.539979][ T4947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.550048][ T4947] Call Trace: [ 109.553348][ T4947] [ 109.556369][ T4947] dump_stack_lvl+0x188/0x250 [ 109.561262][ T4947] ? show_regs_print_info+0x20/0x20 [ 109.566481][ T4947] ? load_image+0x410/0x410 [ 109.571181][ T4947] ? __lock_acquire+0x7b50/0x7b50 [ 109.576808][ T4947] should_fail+0x383/0x4b0 [ 109.581326][ T4947] should_failslab+0x5/0x20 [ 109.585846][ T4947] slab_pre_alloc_hook+0x51/0xc0 [ 109.590808][ T4947] ? key_alloc+0x302/0x1030 [ 109.595355][ T4947] kmem_cache_alloc+0x3d/0x280 [ 109.600237][ T4947] ? key_user_lookup+0x1b8/0x450 [ 109.605194][ T4947] key_alloc+0x302/0x1030 [ 109.609667][ T4947] ? memcpy+0x3c/0x60 [ 109.613776][ T4947] request_key_auth_new+0x6b3/0x920 [ 109.619295][ T4947] ? request_key_auth_rcu_disposal+0x20/0x20 [ 109.625403][ T4947] ? up_write+0x1b6/0x410 [ 109.629770][ T4947] request_key_and_link+0xd26/0x13b0 [ 109.635102][ T4947] ? complete_request_key+0xa0/0xa0 [ 109.641579][ T4947] ? __might_sleep+0xf0/0xf0 [ 109.646454][ T4947] ? restrict_link_reject+0x10/0x10 [ 109.651734][ T4947] ? keyring_search_rcu+0x280/0x280 [ 109.656974][ T4947] ? down_read+0x1aa/0x2e0 [ 109.661420][ T4947] __se_sys_request_key+0x293/0x350 [ 109.666868][ T4947] ? __x64_sys_request_key+0xa0/0xa0 [ 109.672192][ T4947] ? lockdep_hardirqs_on+0x94/0x140 [ 109.677535][ T4947] do_syscall_64+0x4c/0xa0 [ 109.681983][ T4947] ? clear_bhb_loop+0x30/0x80 [ 109.686776][ T4947] ? clear_bhb_loop+0x30/0x80 [ 109.691567][ T4947] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.697529][ T4947] RIP: 0033:0x7fad80a56159 [ 109.702525][ T4947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.722450][ T4947] RSP: 002b:00007fad7ecae028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 109.731155][ T4947] RAX: ffffffffffffffda RBX: 00007fad80cddfa0 RCX: 00007fad80a56159 [ 109.739152][ T4947] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000200000000040 [ 109.747147][ T4947] RBP: 00007fad80aed03b R08: 0000000000000000 R09: 0000000000000000 [ 109.755173][ T4947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.763252][ T4947] R13: 00007fad80cde038 R14: 00007fad80cddfa0 R15: 00007ffe0b8a9368 [ 109.771256][ T4947] [ 111.207487][ T4976] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4186] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4976] [ 112.162951][ T4986] loop1: detected capacity change from 0 to 512 [ 112.412209][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 113.512219][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 113.522217][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 113.532211][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 113.542210][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 113.552204][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 113.562195][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 113.572211][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 113.582204][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 113.592208][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 114.417959][ T4995] device syzkaller0 entered promiscuous mode [ 114.588653][ T5006] loop1: detected capacity change from 0 to 2048 [ 114.669254][ T5006] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 114.759992][ T5006] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.807622][ T5012] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 114.880363][ T5007] loop4: detected capacity change from 0 to 8192 [ 114.900706][ T9] device batadv1 left promiscuous mode [ 115.010428][ T5014] infiniband syz2: set down [ 115.016567][ T5014] infiniband syz2: added ipvlan0 [ 115.490444][ T5014] RDS/IB: syz2: added [ 115.585416][ T5014] smc: adding ib device syz2 with port count 1 [ 115.612460][ T5014] smc: ib device syz2 port 1 has pnetid [ 117.804533][ T5042] loop1: detected capacity change from 0 to 128 [ 117.853868][ T5042] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 117.947190][ T5042] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 118.012638][ T26] audit: type=1800 audit(1789408110.302:76): pid=5042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.227" name="file1" dev="loop1" ino=104 res=0 errno=0 [ 118.325326][ T5056] loop4: detected capacity change from 0 to 64 [ 119.350817][ T5064] device syzkaller0 entered promiscuous mode [ 119.453732][ T5068] netlink: 20 bytes leftover after parsing attributes in process `syz.2.237'. [ 119.585464][ T5072] EXT4-fs warning (device sda1): ext4_group_extend:1831: need to use ext2online to resize further [ 120.679596][ T5116] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 121.459274][ T26] audit: type=1326 audit(1789408113.742:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5118 comm="syz.0.255" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf9e77159 code=0x7fc00000 [ 121.583457][ T26] audit: type=1326 audit(1789408113.772:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5118 comm="syz.0.255" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ffaf9e77159 code=0x7fc00000 [ 121.630048][ T5124] usb usb8: usbfs: process 5124 (syz.1.257) did not claim interface 0 before use [ 121.777030][ T5128] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 122.073824][ T5131] Cannot find add_set index 0 as target [ 122.444387][ T26] audit: type=1326 audit(1789408114.732:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5118 comm="syz.0.255" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf9e77159 code=0x7fc00000 [ 122.499020][ T26] audit: type=1326 audit(1789408114.732:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5118 comm="syz.0.255" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7ffaf9e77159 code=0x7fc00000 [ 124.937471][ T26] audit: type=1326 audit(1789408114.732:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5118 comm="syz.0.255" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf9e77159 code=0x7fc00000 [ 124.964492][ T26] audit: type=1326 audit(1789408114.732:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5118 comm="syz.0.255" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf9e77159 code=0x7fc00000 [ 124.993978][ T26] audit: type=1326 audit(1789408114.732:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5118 comm="syz.0.255" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf9e77159 code=0x7fc00000 [ 125.018598][ T26] audit: type=1326 audit(1789408114.732:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5118 comm="syz.0.255" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf9e77159 code=0x7fc00000 [ 125.029390][ T5141] loop2: detected capacity change from 0 to 256 [ 125.046119][ T26] audit: type=1326 audit(1789408114.732:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5118 comm="syz.0.255" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf9e77159 code=0x7fc00000 [ 125.075081][ T26] audit: type=1326 audit(1789408114.732:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5118 comm="syz.0.255" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf9e77159 code=0x7fc00000 [ 125.101325][ T26] audit: type=1326 audit(1789408114.732:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5118 comm="syz.0.255" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf9e77159 code=0x7fc00000 [ 125.165362][ T26] audit: type=1326 audit(1789408114.732:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5118 comm="syz.0.255" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf9e77159 code=0x7fc00000 [ 125.189786][ T26] audit: type=1326 audit(1789408114.732:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5118 comm="syz.0.255" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf9e77159 code=0x7fc00000 [ 125.213993][ T26] audit: type=1326 audit(1789408114.732:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5118 comm="syz.0.255" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf9e77159 code=0x7fc00000 [ 125.216620][ T5141] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 125.300373][ T5151] device bridge1 entered promiscuous mode [ 125.351627][ T5141] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 125.363394][ T5151] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 125.551683][ T5159] loop4: detected capacity change from 0 to 4096 [ 125.676611][ T5160] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 126.638520][ T5170] comedi comedi0: 8255: I/O port conflict (0x9,4) [ 126.646131][ T5170] comedi comedi0: 8255: I/O port conflict (0xcb,4) [ 127.451435][ T5178] loop3: detected capacity change from 0 to 128 [ 127.512109][ T5185] device bridge0 entered promiscuous mode [ 127.527579][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 127.564105][ T5189] trusted_key: encrypted_key: insufficient parameters specified [ 127.619241][ T5185] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 127.676842][ T5178] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 127.754623][ T5178] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 127.887285][ T5196] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.035728][ T5196] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.105265][ T5196] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.174421][ T5196] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.912281][ T4264] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 129.622552][ T4264] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 130.002553][ T4264] usb 3-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 130.022127][ T4264] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 130.064551][ T4264] usb 3-1: Product: syz [ 130.071823][ T5249] netlink: 'syz.1.297': attribute type 1 has an invalid length. [ 130.074670][ T4264] usb 3-1: Manufacturer: syz [ 130.090317][ T5243] tipc: Started in network mode [ 130.096667][ T5243] tipc: Node identity 4, cluster identity 4711 [ 130.117086][ T5243] tipc: Node number set to 4 [ 130.154463][ T5249] device lo entered promiscuous mode [ 130.215206][ T5249] device tunl0 entered promiscuous mode [ 130.437762][ T5217] udc-core: couldn't find an available UDC or it's busy [ 130.445463][ T5217] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 130.454272][ T5249] device gre0 entered promiscuous mode [ 130.871346][ T5261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.300'. [ 130.883191][ T5217] udc-core: couldn't find an available UDC or it's busy [ 130.900150][ T5217] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 130.920619][ T5249] device gretap0 entered promiscuous mode [ 130.989789][ T5249] device erspan0 entered promiscuous mode [ 131.040666][ T5249] device ip_vti0 entered promiscuous mode [ 131.139791][ T5249] device ip6_vti0 entered promiscuous mode [ 131.177400][ T5249] device sit0 entered promiscuous mode [ 131.230462][ T5249] device ip6tnl0 entered promiscuous mode [ 131.281167][ T5249] device ip6gre0 entered promiscuous mode [ 131.666510][ T4264] input: Samsung SUR40 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input5 [ 132.216475][ T5249] device syz_tun entered promiscuous mode [ 132.252926][ T4264] usb 3-1: USB disconnect, device number 4 [ 132.331204][ T5249] device ip6gretap0 entered promiscuous mode [ 132.366006][ T5276] binder: 5275:5276 ioctl c0306201 200000000280 returned -14 [ 132.385344][ T5249] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.392884][ T5249] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.464298][ T5279] Cannot find del_set index 4 as target [ 132.589207][ T5249] device bridge0 entered promiscuous mode [ 132.776181][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.783986][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.839791][ T5247] device syzkaller0 entered promiscuous mode [ 133.469284][ T5294] loop3: detected capacity change from 0 to 128 [ 133.645131][ T5303] Illegal XDP return value 4294967294, expect packet loss! [ 133.718576][ T5305] loop4: detected capacity change from 0 to 1024 [ 133.765876][ T5310] binder_alloc: 5309: pid 5309 spamming oneway? 2 buffers allocated for a total size of 5120 [ 133.852329][ T5321] binder_alloc: 5309: pid 5309 spamming oneway? 3 buffers allocated for a total size of 5128 [ 133.864531][ T5305] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: none. [ 133.881160][ T5305] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.053168][ T5326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.318'. [ 134.067913][ T5330] EXT4-fs error (device loop4): ext4_free_blocks:6231: comm syz.4.312: Freeing blocks not in datazone - block = 0, count = 16 [ 134.714567][ T4373] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm kworker/u4:10: bg 0: block 112: padding at end of block bitmap is not set [ 134.917989][ T4373] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 135.064167][ T4373] EXT4-fs (loop4): This should not happen!! Data will be lost [ 135.064167][ T4373] [ 135.074079][ T4373] EXT4-fs (loop4): Total free blocks count 0 [ 135.075601][ T5326] device bond1 entered promiscuous mode [ 135.089473][ T4373] EXT4-fs (loop4): Free/Dirty block details [ 135.105702][ T4373] EXT4-fs (loop4): free_blocks=16 [ 135.110885][ T4373] EXT4-fs (loop4): dirty_blocks=16 [ 135.126090][ T4373] EXT4-fs (loop4): Block reservation details [ 135.132528][ T4373] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 135.140982][ T5326] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.202253][ T5337] netlink: 14 bytes leftover after parsing attributes in process `syz.3.321'. [ 136.009952][ T26] kauditd_printk_skb: 30 callbacks suppressed [ 136.009968][ T26] audit: type=1326 audit(1789408128.292:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5350 comm="syz.1.324" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8862b3e159 code=0x7ffc0000 [ 136.049294][ T5351] syz.1.324 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 136.112845][ T26] audit: type=1326 audit(1789408128.332:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5350 comm="syz.1.324" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f8862b3e159 code=0x7ffc0000 [ 136.168564][ T5356] device syzkaller0 entered promiscuous mode [ 136.210114][ T26] audit: type=1326 audit(1789408128.332:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5350 comm="syz.1.324" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8862b3e159 code=0x7ffc0000 [ 136.228573][ T5361] netlink: 36 bytes leftover after parsing attributes in process `syz.0.326'. [ 136.254292][ T26] audit: type=1326 audit(1789408128.332:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5350 comm="syz.1.324" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8862b3e159 code=0x7ffc0000 [ 136.363279][ T4232] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 136.388979][ T26] audit: type=1326 audit(1789408128.332:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5350 comm="syz.1.324" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8862b3e159 code=0x7ffc0000 [ 136.672651][ T26] audit: type=1326 audit(1789408128.332:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5350 comm="syz.1.324" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f8862b3e159 code=0x7ffc0000 [ 137.613607][ T26] audit: type=1326 audit(1789408128.342:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5350 comm="syz.1.324" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8862b3e159 code=0x7ffc0000 [ 137.693804][ T26] audit: type=1326 audit(1789408128.342:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5350 comm="syz.1.324" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8862afe98e code=0x7ffc0000 [ 137.788385][ T5363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.326'. [ 137.806561][ T5361] netlink: 'syz.0.326': attribute type 4 has an invalid length. [ 137.858595][ T5361] netlink: 152 bytes leftover after parsing attributes in process `syz.0.326'. [ 137.863533][ T26] audit: type=1326 audit(1789408128.342:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5350 comm="syz.1.324" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8862b3ddeb code=0x7ffc0000 [ 137.902068][ T26] audit: type=1326 audit(1789408128.342:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5350 comm="syz.1.324" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8862b3ddeb code=0x7ffc0000 [ 137.932831][ T5361] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 138.672430][ T4232] usb 2-1: not running at top speed; connect to a high speed hub [ 138.720703][ T5398] netlink: 20 bytes leftover after parsing attributes in process `syz.0.334'. [ 138.758822][ T5398] capability: warning: `syz.0.334' uses 32-bit capabilities (legacy support in use) [ 138.802702][ T4232] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 959, setting to 64 [ 138.849164][ T4232] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1072, setting to 64 [ 139.122387][ T4232] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 139.136611][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.154538][ T4232] usb 2-1: Product: ␊ [ 139.233540][ T4232] usb 2-1: can't set config #1, error -71 [ 139.327945][ T4232] usb 2-1: USB disconnect, device number 4 [ 139.397564][ T5423] device syzkaller0 entered promiscuous mode [ 140.176725][ T1107] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 140.443362][ T1107] usb 3-1: Using ep0 maxpacket: 16 [ 140.563767][ T1107] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 140.767946][ T1107] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 140.782932][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.791910][ T1107] usb 3-1: Product: syz [ 140.809561][ T1107] usb 3-1: Manufacturer: syz [ 140.834391][ T1107] usb 3-1: SerialNumber: syz [ 140.984039][ T5480] loop3: detected capacity change from 0 to 512 [ 141.052573][ T1107] r8152-cfgselector 3-1: config 0 descriptor?? [ 141.394974][ T5480] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 141.407601][ T5480] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.536857][ T1107] r8152-cfgselector 3-1: Unknown version 0x1030 [ 141.651138][ T5462] ODEBUG: Out of memory. ODEBUG disabled [ 142.404921][ T1107] r8152-cfgselector 3-1: Unknown version 0x0000 [ 142.435656][ T1107] r8152-cfgselector 3-1: bad CDC descriptors [ 142.561286][ T1107] r8152-cfgselector 3-1: Unknown version 0x0000 [ 142.609460][ T1107] r8152-cfgselector 3-1: USB disconnect, device number 5 [ 142.843088][ T5503] sctp: failed to load transform for md5: -2 [ 143.004441][ T5524] loop0: detected capacity change from 0 to 4096 [ 143.153458][ T5527] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 143.196965][ T5527] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 143.250441][ T5527] ldm_validate_privheads(): Cannot find PRIVHEAD 2. [ 143.286298][ T5527] loop0: [ 143.467679][ T5536] netlink: 'syz.2.363': attribute type 10 has an invalid length. [ 143.573986][ T5536] team0: Port device dummy0 added [ 143.626569][ T5538] netlink: 'syz.2.363': attribute type 10 has an invalid length. [ 143.638976][ T5539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.361'. [ 143.693847][ T5538] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 143.760372][ T5538] team0: Failed to send options change via netlink (err -105) [ 143.795962][ T5538] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 143.826613][ T5538] team0: Port device dummy0 removed [ 143.858528][ T5538] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 143.879333][ T5542] device batadv_slave_1 entered promiscuous mode [ 143.893272][ T5546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.365'. [ 143.928076][ T5546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.083569][ T5546] device batadv_slave_1 left promiscuous mode [ 144.101746][ T5546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.503174][ T5557] loop4: detected capacity change from 0 to 512 [ 144.625519][ T5557] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 144.740697][ T5557] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.369: corrupted in-inode xattr [ 144.773172][ T5557] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.369: couldn't read orphan inode 15 (err -117) [ 144.869692][ T5557] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,quota,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback. [ 144.916442][ T5576] device syzkaller0 entered promiscuous mode [ 145.030619][ T5585] loop1: detected capacity change from 0 to 8 [ 145.118254][ T5592] loop3: detected capacity change from 0 to 128 [ 145.190274][ T5585] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 145.583267][ T5604] typec_fusb302 0-0022: I2C/SMBus block functionality not supported! [ 145.681848][ T5604] i2c i2c-0: new_device: Instantiated device typec_fusb302 at 0x22 [ 146.131677][ T5603] input: syz0 as /devices/virtual/input/input6 [ 146.358664][ T5601] Invalid option length (1047276) for dns_resolver key [ 146.972479][ T5568] netlink: 'syz.2.371': attribute type 10 has an invalid length. [ 147.048861][ T5568] netlink: 40 bytes leftover after parsing attributes in process `syz.2.371'. [ 147.074974][ T5568] device veth1_to_team entered promiscuous mode [ 147.081909][ T5568] bridge0: port 3(veth1_to_team) entered blocking state [ 147.100126][ T5568] bridge0: port 3(veth1_to_team) entered disabled state [ 147.147359][ T5568] bridge0: port 3(veth1_to_team) entered blocking state [ 147.154435][ T5568] bridge0: port 3(veth1_to_team) entered forwarding state [ 147.216545][ T1107] [ 147.218912][ T1107] ====================================================== [ 147.226732][ T1107] WARNING: possible circular locking dependency detected [ 147.233945][ T1107] syzkaller #0 Not tainted [ 147.238542][ T1107] ------------------------------------------------------ [ 147.245850][ T1107] kworker/0:2/1107 is trying to acquire lock: [ 147.252118][ T1107] ffff888063201028 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 147.263355][ T1107] [ 147.263355][ T1107] but task is already holding lock: [ 147.270811][ T1107] ffffffff8d6d6b68 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 147.280689][ T1107] [ 147.280689][ T1107] which lock already depends on the new lock. [ 147.280689][ T1107] [ 147.291202][ T1107] [ 147.291202][ T1107] the existing dependency chain (in reverse order) is: [ 147.300303][ T1107] [ 147.300303][ T1107] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 147.308323][ T1107] __mutex_lock_common+0x1e5/0x2400 [ 147.314665][ T1107] mutex_lock_nested+0x17/0x20 [ 147.319983][ T1107] rfkill_register+0x2f/0x970 [ 147.325297][ T1107] hci_register_dev+0x459/0x980 [ 147.330933][ T1107] vhci_create_device+0x32e/0x5c0 [ 147.336500][ T1107] vhci_write+0x389/0x440 [ 147.341363][ T1107] vfs_write+0x748/0xd70 [ 147.346226][ T1107] ksys_write+0x153/0x260 [ 147.351178][ T1107] do_syscall_64+0x4c/0xa0 [ 147.356125][ T1107] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 147.362595][ T1107] [ 147.362595][ T1107] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 147.370870][ T1107] __mutex_lock_common+0x1e5/0x2400 [ 147.376616][ T1107] mutex_lock_nested+0x17/0x20 [ 147.381921][ T1107] vhci_send_frame+0x88/0x100 [ 147.383301][ T5630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.384'. [ 147.387137][ T1107] hci_send_frame+0x1a9/0x2e0 [ 147.401124][ T1107] hci_tx_work+0x9b5/0x16d0 [ 147.406259][ T1107] process_one_work+0x867/0xff0 [ 147.411693][ T1107] worker_thread+0xad7/0x12a0 [ 147.417008][ T1107] kthread+0x42e/0x520 [ 147.421785][ T1107] ret_from_fork+0x1f/0x30 [ 147.426737][ T1107] [ 147.426737][ T1107] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 147.435970][ T1107] __flush_work+0x116/0x210 [ 147.441014][ T1107] hci_dev_do_close+0x201/0x1020 [ 147.446585][ T1107] hci_dev_close+0xd9/0x180 [ 147.451629][ T1107] sock_do_ioctl+0xfb/0x320 [ 147.456668][ T1107] sock_ioctl+0x48a/0x700 [ 147.461535][ T1107] __se_sys_ioctl+0xfa/0x170 [ 147.466656][ T1107] do_syscall_64+0x4c/0xa0 [ 147.471606][ T1107] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 147.478043][ T1107] [ 147.478043][ T1107] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 147.485785][ T1107] __mutex_lock_common+0x1e5/0x2400 [ 147.491518][ T1107] mutex_lock_nested+0x17/0x20 [ 147.492295][ T5630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.384'. [ 147.496811][ T1107] bg_scan_update+0x44/0x3b0 [ 147.496835][ T1107] process_one_work+0x867/0xff0 [ 147.496850][ T1107] worker_thread+0xad7/0x12a0 [ 147.521237][ T1107] kthread+0x42e/0x520 [ 147.525846][ T1107] ret_from_fork+0x1f/0x30 [ 147.530947][ T1107] [ 147.530947][ T1107] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 147.540784][ T1107] __lock_acquire+0x2c66/0x7b50 [ 147.546170][ T1107] lock_acquire+0x19e/0x400 [ 147.551214][ T1107] __flush_work+0x116/0x210 [ 147.556267][ T1107] __cancel_work_timer+0x3f4/0x560 [ 147.561910][ T1107] hci_request_cancel_all+0xcc/0x300 [ 147.567825][ T1107] hci_dev_do_close+0x4e/0x1020 [ 147.573213][ T1107] hci_rfkill_set_block+0x101/0x180 [ 147.578948][ T1107] rfkill_set_block+0x1c1/0x3c0 [ 147.584334][ T1107] rfkill_epo+0x75/0x170 [ 147.589123][ T1107] rfkill_op_handler+0x76/0x220 [ 147.594506][ T1107] process_one_work+0x867/0xff0 [ 147.599903][ T1107] worker_thread+0xad7/0x12a0 [ 147.605115][ T1107] kthread+0x42e/0x520 [ 147.609715][ T1107] ret_from_fork+0x1f/0x30 [ 147.615011][ T1107] [ 147.615011][ T1107] other info that might help us debug this: [ 147.615011][ T1107] [ 147.625259][ T1107] Chain exists of: [ 147.625259][ T1107] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 147.625259][ T1107] [ 147.641185][ T1107] Possible unsafe locking scenario: [ 147.641185][ T1107] [ 147.648820][ T1107] CPU0 CPU1 [ 147.654190][ T1107] ---- ---- [ 147.659557][ T1107] lock(rfkill_global_mutex); [ 147.664325][ T1107] lock(&data->open_mutex); [ 147.671440][ T1107] lock(rfkill_global_mutex); [ 147.678740][ T1107] lock((work_completion)(&hdev->bg_scan_update)); [ 147.685334][ T1107] [ 147.685334][ T1107] *** DEADLOCK *** [ 147.685334][ T1107] [ 147.693486][ T1107] 3 locks held by kworker/0:2/1107: [ 147.698791][ T1107] #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 147.709187][ T1107] #1: ffffc900044d7d00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 147.719568][ T1107] #2: ffffffff8d6d6b68 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 147.729280][ T1107] [ 147.729280][ T1107] stack backtrace: [ 147.735598][ T1107] CPU: 0 PID: 1107 Comm: kworker/0:2 Not tainted syzkaller #0 [ 147.743190][ T1107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 147.753453][ T1107] Workqueue: events rfkill_op_handler [ 147.758859][ T1107] Call Trace: [ 147.762145][ T1107] [ 147.765078][ T1107] dump_stack_lvl+0x188/0x250 [ 147.769957][ T1107] ? load_image+0x410/0x410 [ 147.774698][ T1107] ? show_regs_print_info+0x20/0x20 [ 147.779925][ T1107] ? print_circular_bug+0x12b/0x1a0 [ 147.785139][ T1107] check_noncircular+0x296/0x330 [ 147.790094][ T1107] ? add_chain_block+0x9b0/0x9b0 [ 147.795042][ T1107] ? lockdep_lock+0xf1/0x1f0 [ 147.799818][ T1107] ? __lock_acquire+0x1305/0x7b50 [ 147.804953][ T1107] ? mark_lock+0x94/0x320 [ 147.809295][ T1107] ? _find_first_zero_bit+0xd1/0xf0 [ 147.814588][ T1107] __lock_acquire+0x2c66/0x7b50 [ 147.819545][ T1107] ? verify_lock_unused+0x140/0x140 [ 147.824948][ T1107] ? verify_lock_unused+0x140/0x140 [ 147.830868][ T1107] lock_acquire+0x19e/0x400 [ 147.835387][ T1107] ? __flush_work+0xfa/0x210 [ 147.840210][ T1107] ? __lock_acquire+0x7b50/0x7b50 [ 147.845796][ T1107] ? read_lock_is_recursive+0x10/0x10 [ 147.851213][ T1107] ? start_flush_work+0x784/0x830 [ 147.856373][ T1107] ? __lock_acquire+0x13dc/0x7b50 [ 147.861415][ T1107] __flush_work+0x116/0x210 [ 147.866068][ T1107] ? __flush_work+0xfa/0x210 [ 147.870678][ T1107] ? flush_work+0x20/0x20 [ 147.875116][ T1107] ? try_to_grab_pending+0xfb/0x820 [ 147.880333][ T1107] ? mark_lock+0x94/0x320 [ 147.884674][ T1107] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 147.890684][ T1107] ? lock_chain_count+0x20/0x20 [ 147.896160][ T1107] ? mark_lock+0x94/0x320 [ 147.899679][ T5635] loop1: detected capacity change from 0 to 32768 [ 147.900500][ T1107] ? __cancel_work_timer+0x36a/0x560 [ 147.900530][ T1107] __cancel_work_timer+0x3f4/0x560 [ 147.919127][ T1107] ? cancel_work_sync+0x20/0x20 [ 147.923991][ T1107] ? __cancel_work+0x1f9/0x2e0 [ 147.928858][ T1107] ? lockdep_hardirqs_on+0x94/0x140 [ 147.934146][ T1107] ? __cancel_work+0x27b/0x2e0 [ 147.938913][ T1107] ? cancel_work+0x20/0x20 [ 147.943422][ T1107] ? __rwlock_init+0x140/0x140 [ 147.948201][ T1107] hci_request_cancel_all+0xcc/0x300 [ 147.953476][ T1107] hci_dev_do_close+0x4e/0x1020 [ 147.958318][ T1107] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 147.964242][ T1107] ? _raw_spin_unlock+0x40/0x40 [ 147.969192][ T1107] hci_rfkill_set_block+0x101/0x180 [ 147.974427][ T1107] ? rcu_lock_release+0x20/0x20 [ 147.979373][ T1107] rfkill_set_block+0x1c1/0x3c0 [ 147.984390][ T1107] rfkill_epo+0x75/0x170 [ 147.988744][ T1107] rfkill_op_handler+0x76/0x220 [ 147.993674][ T1107] process_one_work+0x867/0xff0 [ 147.998534][ T1107] ? worker_detach_from_pool+0x240/0x240 [ 148.004178][ T1107] ? lockdep_hardirqs_off+0x70/0x100 [ 148.009451][ T1107] ? _raw_spin_lock_irq+0xb7/0xf0 [ 148.014462][ T1107] ? _raw_spin_lock_irqsave+0x100/0x100 [ 148.020003][ T1107] ? wq_worker_running+0x97/0x170 [ 148.025009][ T1107] worker_thread+0xad7/0x12a0 [ 148.029683][ T1107] kthread+0x42e/0x520 [ 148.033743][ T1107] ? rcu_lock_release+0x20/0x20 [ 148.038675][ T1107] ? kthread_blkcg+0xd0/0xd0 [ 148.043249][ T1107] ret_from_fork+0x1f/0x30 [ 148.048077][ T1107] [ 148.077704][ T5635] JBD2: Ignoring recovery information on journal [ 148.162748][ T5635] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 148.223453][ T26] kauditd_printk_skb: 21 callbacks suppressed [ 148.223467][ T26] audit: type=1804 audit(1789408140.512:152): pid=5635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.387" name="/newroot/78/bus/bus" dev="loop1" ino=17058 res=1 errno=0 [ 148.349302][ T4187] ocfs2: Unmounting device (7,1) on (node local)