last executing test programs: 23.75968794s ago: executing program 2 (id=433): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x240, &(0x7f0000000740)="$eJzs3TFoM2UcBvDnLonf169Bqi6CoIKIaKHUTXCpi0JBShERVKiIuCitUFvcWicXB51VOrkUcbM6SpfioghOVTvURdDiYHHQIZJcCrUNKKbm5LvfDy65S+69/3vcPW+yvEmAxppJspCklWQ2SSdJcX6He6tlZri5M3WwkvR6T/1SDPartitn7aaTbCd5JMl+WeSVdrK599zxb4dPPPD2Ruf+D/eenZroSQ6dHB89efrB0lufLD68+dU3Py0VWUj3L+d19YoRr7WL5Pb/otj/RNGuuwf8E8tvfPxtP/d3JLlvkP9OylQX7531W/Y7eej94a7XL7Z99+ev75p0f4Gr1et1+p+B2z2gccok3RTlXJJqvSzn5qrv8N+1bpSvrq2/Pvvy2sbqS3WPVMBV6SZHj3927dPpC/n/sVXlH7h59fP/9PLu9/3101bdvQEmqZ//2Re2Hoz8Q+PIPzSX/ENzyT80l/xDc8k/NJf8Q3PJPzSX/ENzyT801/n8AwDN0rt2eU7w2c+31DEfGZicmocfAAAAAAAAAAAAAAAAAABghJ2pg5WzZVI1v3gvOXksSXtU/dbg/4iT64PHG78WaZ9rW1TNxvL8PWMeYEwf1Tz7+tYf6q3/5d311t9aTbbfTDLfbl++/4rh/ffv3fY373deHLPAmB59pt76f+zWW3/xMPm8P/7Mjxp/ytw5eB49/nT712/M+q/9PuYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmJg/AwAA//9gT2U9") mkdir(&(0x7f0000000040)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x2000004) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_LIST(r1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0x1c, 0x1, 0x2, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x1c}}, 0x4008852) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xc, 0x1}}]}}]}, 0x38}}, 0x24040084) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) 18.963987642s ago: executing program 2 (id=441): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@oldalloc}, {@block_validity}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {}, {@i_version}, {@nomblk_io_submit}, {@nodioread_nolock}]}, 0x6, 0x434, &(0x7f0000000940)="$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") open(&(0x7f0000000100)='./bus\x00', 0x24040, 0x10) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4008, &(0x7f0000000600)={[{@nobarrier}]}, 0xfe, 0x269, &(0x7f0000000200)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) close(0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000fcfff1ff00000000000000008500000036000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r4, r6, 0x25, 0x4, @void}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f00000004c0)={0x10, 0x0, 0x0, 0x7ffffff}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001800dd8d26bd70000073ae6bda7dbf00000002008000ff00000600290000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000440}, 0x8c0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000080000000900000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r9, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r9, &(0x7f0000000100), &(0x7f0000000140)=@udp6=r3, 0x1}, 0x20) 7.963395495s ago: executing program 4 (id=462): getpid() getpgrp(0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000780)=ANY=[@ANYRES16=r0], 0x0, 0x7, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x15, 0x0, 0x0) mknodat$null(r0, 0x0, 0x1d4e, 0x103) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) r2 = dup3(0xffffffffffffffff, r1, 0x0) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) alarm(0x9) 7.911730581s ago: executing program 3 (id=464): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='xprt_transmit\x00'}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r4}, 0xe) r5 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) creat(&(0x7f0000000040)='./file0\x00', 0x0) getresuid(&(0x7f0000002f00), 0x0, 0x0) getegid() syz_fuse_handle_req(r5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) bpf$MAP_CREATE(0x0, 0x0, 0x50) 7.827441969s ago: executing program 4 (id=465): syz_emit_ethernet(0x66, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x58, 0xffff, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0xa888, 0x88be, 0x86ddffff, {{0x0, 0x1, 0xfe}}}, {0x8, 0x22eb, 0x3, {{}, 0x2, {0x9}}}}}}}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 7.678242254s ago: executing program 4 (id=466): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}]}}) 7.111700439s ago: executing program 2 (id=467): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r6, &(0x7f0000000000)={0x24, @none={0x0, 0x3}}, 0x14) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x80) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000540)={0xfffffff7, 0x200401, 0xe, 0xc6cf, 0x91, "0000080100000200800200000000000300", 0x7ff, 0x1fd}) dup2(r0, r1) 6.724395478s ago: executing program 3 (id=468): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x8) recvmmsg(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000040c0)=""/29, 0x1d}, 0x2}], 0x400000000000194, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 6.683837902s ago: executing program 4 (id=469): syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x200, &(0x7f00000002c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x8402, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r0, 0xe0ffff, 0x19, 0x3) 6.545197555s ago: executing program 3 (id=470): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000007c0)={'pim6reg1\x00', 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0xa, 0x2400000001, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r4}, 0x10) close(r0) 6.367905083s ago: executing program 4 (id=472): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10) keyctl$chown(0x4, 0x0, 0xee00, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x1c8, 0xfdef) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x404, 0x80000000, 0x5, 0x8, 0x80, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf254, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x800004, 0x0, 0x800001ff, 0x8000, 0x3ff, 0x4, 0xd, 0x3, 0xba55, 0xffc, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x0, 0x0, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x85, 0x40, 0x9, 0x7, 0x4], [0x6, 0x1e, 0x3, 0x8003, 0xfffffffe, 0x43, 0x0, 0x5, 0x75, 0x1, 0x4, 0x7ffd, 0x72c, 0x1c32, 0x3, 0x9, 0x10100, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x2, 0x981, 0x4, 0x100, 0x3ff, 0x3, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x0, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x100, 0x0, 0x2, 0x401, 0xb, 0x3, 0x379, 0x9, 0x2000c, 0x5, 0x7, 0x6, 0x2, 0x1, 0x3, 0x8, 0x6, 0x200, 0x3], [0x400, 0x3, 0xffff, 0x5, 0x7, 0x20, 0x7, 0x8, 0x8, 0x10, 0x7, 0x9, 0xe8a, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0x7, 0xe55, 0x10, 0x80000001, 0x4, 0x101, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xd, 0x47, 0x2, 0x3, 0x4, 0x7, 0x5, 0x40, 0x6, 0x8001, 0x6, 0x6, 0x8, 0x956, 0xffffffff, 0x6, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0x0, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x83ab0f28, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xd, 0x402, 0x800, 0xfffffffe, 0x1000, 0x7f, 0x5, 0x9, 0x4, 0x8e8, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x7, 0x80, 0x2, 0x5, 0x8800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x6, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x6, 0xfffffffd, 0x7, 0xe, 0x2, 0x80e, 0xf, 0x133, 0x8]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 6.159722913s ago: executing program 3 (id=474): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x44004}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xb, 0x5, 0x52a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0xfffffffe, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x800809, 0x4, 0xa7, 0x1000, 0x6, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff77, 0x401, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x8, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0x10000, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x4, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x401, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x9, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x603, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x2, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x7, 0x5, 0x7f, 0x59, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x84, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x5, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x2, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6.159285793s ago: executing program 0 (id=475): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x0, 0xe6, 0x2, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87}, {0x9, 0x8, 0x8, '\x00', 0x10}, {0xff, 0x7f, 0xd3, '\x00', 0x69}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xf5, '\x00', 0xb4}, {0xf, 0x4, 0x54, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x5, 0xc}, {0x7f, 0x5, 0x4a, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xfb, 0x58, 0xff, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x8, '\x00', 0x6}, {0xf, 0xee, 0x8, '\x00', 0x3}, {0x3d, 0x2, 0xf, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x9}, {0x4, 0xc, 0x5, '\x00', 0xe9}, {0x7, 0x2, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x83, '\x00', 0x7c}, {0x10, 0x6, 0x92, '\x00', 0x10}, {0x1, 0x3, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 5.664173992s ago: executing program 3 (id=476): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000180)={[{}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') preadv(r4, &(0x7f0000000140)=[{&(0x7f0000000040)=""/7, 0x7}, {0x0, 0x500}], 0x2, 0xe7, 0xf) 5.630738585s ago: executing program 1 (id=477): r0 = socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r4}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x7) 5.251739063s ago: executing program 0 (id=478): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x2c, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008040}, 0x40000) 4.36841604s ago: executing program 1 (id=479): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000700), 0x10, 0x202a80) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_SET_PROPBIT(r4, 0x4004556e, 0xe) syz_usb_connect(0x1, 0x0, 0x0, &(0x7f0000000840)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x200, 0xf8, 0xd1, 0xc, 0x10, 0xb}, 0x1d, 0x0, 0x2, [{0x0, 0x0}, {0x2, &(0x7f0000000800)=@string={0x2}}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() 4.322400654s ago: executing program 0 (id=480): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001400b5952cbd7000ffdbdf250a180000", @ANYRES32=r1, @ANYBLOB="14000600010000000100000001000000feffffff140002"], 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 4.119761714s ago: executing program 0 (id=481): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0xf, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x80) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="01020400000000002800128008000100736974001c00"], 0x58}}, 0x0) 1.657051087s ago: executing program 0 (id=482): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) pipe2$9p(&(0x7f00000027c0)={0xffffffffffffffff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000082}, 0x0) 1.554502727s ago: executing program 2 (id=483): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="8520"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.41976568s ago: executing program 0 (id=484): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) clock_adjtime(0x2, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x100000001, 0x5, 0x100000000000000, 0x6, 0x0, 0x800000, 0x6, 0x0, 0x4, 0x9, 0x0, 0x1e87, 0xfffffffffffffffc, 0x7, 0x0, 0x1000, 0x8, 0x4, 0x3, 0x7, 0x4}) r5 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r8, 0x16, 0x0, @void}, 0x10) r9 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x4e20, 0x0, @mcast1}}, 0x1}, 0x90) 1.41941113s ago: executing program 2 (id=485): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000005300)=[{0x80000006, 0x66}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 938.868868ms ago: executing program 2 (id=486): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000032a9000070100f3ff83"], 0x0}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r1, 0x4b4c, &(0x7f0000000080)) 938.519288ms ago: executing program 1 (id=487): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6}]}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x462, &(0x7f0000001040)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff81004d0086dd695204bd04282ffffc020000000000000000000000000001200100000000000000000000000000022101"], 0x0) 938.230808ms ago: executing program 1 (id=488): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 833.69µs ago: executing program 1 (id=489): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x42020, &(0x7f00000005c0)={[{@uuid_off, 0x3a}, {@uuid_off}, {@index_off}], [{@func={'func', 0x3d, 'PATH_CHECK'}}, {@euid_eq}, {@appraise}, {@smackfstransmute}, {@smackfshat={'smackfshat', 0x3d, 'GPL\x00'}}, {@dont_measure}, {@pcr={'pcr', 0x3d, 0x31}}, {@hash}], 0x2f}) 485.57µs ago: executing program 1 (id=490): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) poll(&(0x7f0000000080), 0x0, 0x5e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000680)='sched_switch\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400), 0x8) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0) fcntl$getown(r3, 0x9) 263.91µs ago: executing program 3 (id=491): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x499, 0x62, "3833d4d33f20f5cc8ee788ffff2d076a5929003795d3f83f366cb583b2a1f935ebcc3319ce5809ee5001bcb8c53674ce068e0f40a3e868350a19a24645bf6df568567af9c2aac5eb43a3e1f2aa5ef86612a38708afbd4a926f5dc311a315e628ab7c"}) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x9, @dev={0xfe, 0x80, '\x00', 0x7}, 0x5}, 0x1c) write$binfmt_misc(r4, &(0x7f0000000040), 0xfe46) 0s ago: executing program 4 (id=492): syz_open_procfs$pagemap(0x0, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x28a400) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) socket(0x10, 0x3, 0x6) socket$inet(0x2, 0x3, 0x1) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) creat(&(0x7f0000000040)='./file7\x00', 0x1a2) socket$inet(0x2, 0x801, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r0], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.168' (ED25519) to the list of known hosts. [ 66.633766][ T4170] cgroup: Unknown subsys name 'net' [ 66.797317][ T4170] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.392104][ T4170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 70.371819][ T4180] chnl_net:caif_netlink_parms(): no params data found [ 70.503807][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 70.559209][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 70.579815][ T4180] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.590307][ T4180] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.599085][ T4180] device bridge_slave_0 entered promiscuous mode [ 70.623371][ T4180] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.630482][ T4180] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.639541][ T4180] device bridge_slave_1 entered promiscuous mode [ 70.653116][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 70.668353][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 70.726745][ T4180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.741509][ T4180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.806824][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.814238][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.822390][ T4185] device bridge_slave_0 entered promiscuous mode [ 70.844830][ T4180] team0: Port device team_slave_0 added [ 70.853047][ T4180] team0: Port device team_slave_1 added [ 70.867801][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.875079][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.883200][ T4185] device bridge_slave_1 entered promiscuous mode [ 70.930394][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.937669][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.946271][ T4195] device bridge_slave_0 entered promiscuous mode [ 70.968611][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.975838][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.984189][ T4188] device bridge_slave_0 entered promiscuous mode [ 70.999569][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.007413][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.016171][ T4195] device bridge_slave_1 entered promiscuous mode [ 71.024328][ T4180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.031412][ T4180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.057617][ T4180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.069915][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.077104][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.085296][ T4184] device bridge_slave_0 entered promiscuous mode [ 71.093448][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.100553][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.108935][ T4188] device bridge_slave_1 entered promiscuous mode [ 71.117940][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.136098][ T4180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.143365][ T4180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.169756][ T4180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.186083][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.193260][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.201401][ T4184] device bridge_slave_1 entered promiscuous mode [ 71.218512][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.240470][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.272952][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.298906][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.334225][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.351532][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.362950][ T4185] team0: Port device team_slave_0 added [ 71.384575][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.392058][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.403302][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.416666][ T4180] device hsr_slave_0 entered promiscuous mode [ 71.423750][ T4180] device hsr_slave_1 entered promiscuous mode [ 71.432917][ T4185] team0: Port device team_slave_1 added [ 71.448041][ T4195] team0: Port device team_slave_0 added [ 71.484487][ T4188] team0: Port device team_slave_0 added [ 71.493121][ T4195] team0: Port device team_slave_1 added [ 71.517573][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.524767][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.550855][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.563358][ T4188] team0: Port device team_slave_1 added [ 71.569479][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.576525][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.602534][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.624910][ T4184] team0: Port device team_slave_0 added [ 71.658117][ T4184] team0: Port device team_slave_1 added [ 71.685080][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.695019][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.722359][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.754974][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.762101][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.788341][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.807801][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.815387][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.841646][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.857334][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.865212][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.891491][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.907968][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.916100][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.942423][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.956976][ T4185] device hsr_slave_0 entered promiscuous mode [ 71.964389][ T4185] device hsr_slave_1 entered promiscuous mode [ 71.971271][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.979091][ T4185] Cannot create hsr debugfs directory [ 71.992293][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.999300][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.025804][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.101852][ T3157] Bluetooth: hci4: command 0x0409 tx timeout [ 72.101852][ T4181] Bluetooth: hci1: command 0x0409 tx timeout [ 72.102985][ T4181] Bluetooth: hci2: command 0x0409 tx timeout [ 72.129993][ T4181] Bluetooth: hci3: command 0x0409 tx timeout [ 72.136429][ T4181] Bluetooth: hci0: command 0x0409 tx timeout [ 72.181327][ T4188] device hsr_slave_0 entered promiscuous mode [ 72.188270][ T4188] device hsr_slave_1 entered promiscuous mode [ 72.195401][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.203427][ T4188] Cannot create hsr debugfs directory [ 72.212021][ T4195] device hsr_slave_0 entered promiscuous mode [ 72.219252][ T4195] device hsr_slave_1 entered promiscuous mode [ 72.226150][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.233883][ T4195] Cannot create hsr debugfs directory [ 72.249391][ T4184] device hsr_slave_0 entered promiscuous mode [ 72.256362][ T4184] device hsr_slave_1 entered promiscuous mode [ 72.263124][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.271173][ T4184] Cannot create hsr debugfs directory [ 72.548035][ T4180] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.563882][ T4180] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.573952][ T4180] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.589228][ T4180] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.630394][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.661780][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.671603][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.682139][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.751896][ T4195] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.777213][ T4195] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.796304][ T4195] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.807892][ T4195] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.875791][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.883945][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.896370][ T4180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.905336][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.937430][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.947536][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.958011][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.971968][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.988588][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.998716][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.008524][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.032585][ T4180] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.041854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.052147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.061688][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.068952][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.093607][ T4184] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.111958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.120201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.129265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.138706][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.145857][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.155038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.166485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.175219][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.182337][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.190198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.224896][ T4184] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.235900][ T4184] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.246207][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.256311][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.265339][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.279717][ T1235] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.286906][ T1235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.299069][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.308188][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.317056][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.327247][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.336106][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.345728][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.362658][ T4184] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.393753][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.404832][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.415838][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.425729][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.436380][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.446113][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.468863][ T4180] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.479732][ T4180] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.506995][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.522951][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.538428][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.550707][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.570275][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.579382][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.594401][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.604723][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.616500][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.641343][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.661723][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.670218][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.688275][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.704112][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.718686][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.733065][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.771907][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.784114][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.794825][ T641] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.801972][ T641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.812227][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.821752][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.830306][ T641] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.837496][ T641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.846515][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.884673][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.895544][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.905499][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.922009][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.937122][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.946579][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.955753][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.985705][ T4195] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.002732][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.024789][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.039750][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.047831][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.063336][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.072467][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.081767][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.090346][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.099150][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.109012][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.122890][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.134633][ T4180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.154282][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.164119][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.175911][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.184567][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 74.191752][ T21] Bluetooth: hci3: command 0x041b tx timeout [ 74.197879][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 74.204254][ T21] Bluetooth: hci4: command 0x041b tx timeout [ 74.210386][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 74.212077][ T641] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.223517][ T641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.261816][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.280362][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.289330][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.297872][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.312298][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.320285][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.335600][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.347379][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.356060][ T641] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.363192][ T641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.372114][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.381423][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.403748][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.421794][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.433255][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.460676][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.470164][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.479759][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.495190][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.526072][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.538478][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.549016][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.557885][ T641] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.565103][ T641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.577693][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.586923][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.599396][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.608449][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.617477][ T641] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.624674][ T641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.632880][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.641560][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.649896][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.658741][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.668439][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.677884][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.699456][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.715677][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.724468][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.735274][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.744726][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.754807][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.763370][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.771580][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.785171][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.795770][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.804198][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.815688][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.824988][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.836465][ T4180] device veth0_vlan entered promiscuous mode [ 74.850449][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.868295][ T4185] device veth0_vlan entered promiscuous mode [ 74.889031][ T4180] device veth1_vlan entered promiscuous mode [ 74.907324][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.918745][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.936516][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.945737][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.960473][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.969627][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.987106][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.020899][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.029180][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.038143][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.047916][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.057939][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.068907][ T4185] device veth1_vlan entered promiscuous mode [ 75.080466][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.122415][ T4195] device veth0_vlan entered promiscuous mode [ 75.139327][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.150012][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.165644][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.174322][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.186764][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.197806][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.215876][ T4180] device veth0_macvtap entered promiscuous mode [ 75.252295][ T4195] device veth1_vlan entered promiscuous mode [ 75.270975][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.279075][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.295359][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.308128][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.317154][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.328395][ T4180] device veth1_macvtap entered promiscuous mode [ 75.345399][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.353482][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.370149][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.380149][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.395868][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.406270][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.437390][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.448189][ T4185] device veth0_macvtap entered promiscuous mode [ 75.468664][ T4185] device veth1_macvtap entered promiscuous mode [ 75.480036][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.488909][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.497995][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.507071][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.518359][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.545162][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.554926][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.565417][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.574403][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.611439][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.623340][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.635195][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.645449][ T4195] device veth0_macvtap entered promiscuous mode [ 75.658196][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.666929][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.676236][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.685439][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.693451][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.702184][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.711816][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.725242][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.736984][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.757319][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.771725][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.780340][ T4180] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.797400][ T4180] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.806920][ T4180] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.824493][ T4180] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.839482][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.849820][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.858564][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.869301][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.881941][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.889860][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.900292][ T4188] device veth0_vlan entered promiscuous mode [ 75.911658][ T4195] device veth1_macvtap entered promiscuous mode [ 75.921764][ T4188] device veth1_vlan entered promiscuous mode [ 75.932051][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.943552][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.953157][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.962139][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.021872][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.035801][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.046504][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.059932][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.072636][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.102827][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.127494][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.137135][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.150394][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.159513][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.168782][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.178666][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.192249][ T4188] device veth0_macvtap entered promiscuous mode [ 76.214617][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.227372][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.238027][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.253798][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.262189][ T4269] Bluetooth: hci1: command 0x040f tx timeout [ 76.270191][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.286801][ T4188] device veth1_macvtap entered promiscuous mode [ 76.293535][ T4269] Bluetooth: hci4: command 0x040f tx timeout [ 76.310772][ T4269] Bluetooth: hci2: command 0x040f tx timeout [ 76.317406][ T4269] Bluetooth: hci3: command 0x040f tx timeout [ 76.328562][ T4269] Bluetooth: hci0: command 0x040f tx timeout [ 76.348013][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.366158][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.376274][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.389903][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.409632][ T4195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.419300][ T4195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.428620][ T4195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.437797][ T4195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.514665][ T1235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.528625][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.540450][ T1235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.548102][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.563700][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.574497][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.585905][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.596689][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.608570][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.654648][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.674914][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.684491][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.694045][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.703381][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.716526][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.729731][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.740100][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.752965][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.763097][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.774214][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.785907][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.797536][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.807078][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.816678][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.827633][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.843570][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.852582][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.862228][ T4226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.871824][ T4226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.889010][ T4184] device veth0_vlan entered promiscuous mode [ 76.906577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.921620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.929927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.940147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.948483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.962588][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.976606][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.030141][ T4226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.032129][ T4184] device veth1_vlan entered promiscuous mode [ 77.045463][ T4226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.061386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.070360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.104638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.116047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.141509][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.149644][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.157735][ T4226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.169796][ T4226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.210116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.236024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.257795][ T4184] device veth0_macvtap entered promiscuous mode [ 77.274967][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.302583][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.317815][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.340130][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.356085][ T4184] device veth1_macvtap entered promiscuous mode [ 77.371661][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.409444][ T4226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.428927][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.433236][ T4226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.450054][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.477830][ T4302] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.515228][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.529118][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.539493][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.553873][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.568797][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.579767][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.591659][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.602608][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.619519][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.651312][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.659387][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.678181][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.711505][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.723233][ T4302] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 77.738510][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.782032][ T4302] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 77.798431][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.812350][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.827620][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.841517][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.857347][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.919957][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.954141][ T4308] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 78.011098][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.025635][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.099056][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.429882][ T4269] Bluetooth: hci0: command 0x0419 tx timeout [ 78.490207][ T4269] Bluetooth: hci3: command 0x0419 tx timeout [ 78.615663][ T4269] Bluetooth: hci2: command 0x0419 tx timeout [ 78.916275][ T4184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.998494][ T4184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.037007][ T4269] Bluetooth: hci4: command 0x0419 tx timeout [ 79.046364][ T4269] Bluetooth: hci1: command 0x0419 tx timeout [ 79.055818][ T4184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.070319][ T4184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.083122][ T4316] loop1: detected capacity change from 0 to 16 [ 79.158571][ T4318] loop2: detected capacity change from 0 to 512 [ 79.197107][ T4318] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 79.310025][ T4316] erofs: (device loop1): mounted with root inode @ nid 36. [ 79.422574][ T4323] tipc: Started in network mode [ 79.427875][ T4323] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 79.439542][ T4323] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 79.449248][ T4323] tipc: Enabled bearer , priority 10 [ 79.529862][ T4318] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 79.762806][ T4318] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.8: attempt to clear invalid blocks 2 len 1 [ 80.140721][ T4318] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 80.194417][ T4318] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.8: invalid indirect mapped block 1819239214 (level 0) [ 80.231298][ T4318] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.8: invalid indirect mapped block 1819239214 (level 1) [ 80.273503][ T4318] EXT4-fs (loop2): 1 truncate cleaned up [ 80.279216][ T4318] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 81.391593][ T4330] erofs: (device loop1): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 81.404639][ T4330] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 81.644593][ T3157] tipc: Node number set to 1 [ 81.984779][ T4325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.186986][ T4325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.449010][ T4336] loop0: detected capacity change from 0 to 16 [ 82.485383][ T4336] erofs: Unknown parameter '00000000000000000000' [ 82.770582][ C0] sched: RT throttling activated [ 82.857754][ T4340] loop1: detected capacity change from 0 to 256 [ 82.898835][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.005971][ T4335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.061592][ T4335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.102535][ T4340] FAT-fs (loop1): Directory bread(block 64) failed [ 83.171400][ T4340] FAT-fs (loop1): Directory bread(block 65) failed [ 83.194128][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.231999][ T4340] FAT-fs (loop1): Directory bread(block 66) failed [ 83.331213][ T4340] FAT-fs (loop1): Directory bread(block 67) failed [ 83.596073][ T4340] FAT-fs (loop1): Directory bread(block 68) failed [ 83.791170][ T4340] FAT-fs (loop1): Directory bread(block 69) failed [ 84.563606][ T4340] FAT-fs (loop1): Directory bread(block 70) failed [ 84.587950][ T4340] FAT-fs (loop1): Directory bread(block 71) failed [ 84.594834][ T4340] FAT-fs (loop1): Directory bread(block 72) failed [ 84.601797][ T4340] FAT-fs (loop1): Directory bread(block 73) failed [ 84.968708][ T4354] loop0: detected capacity change from 0 to 512 [ 85.058375][ T4354] EXT4-fs (loop0): Ignoring removed oldalloc option [ 85.065526][ T4354] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 85.078769][ T4354] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 85.124852][ T4350] netlink: 'syz.1.14': attribute type 12 has an invalid length. [ 85.339359][ T4354] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2826: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 85.353089][ T4354] EXT4-fs (loop0): 1 truncate cleaned up [ 85.358832][ T4354] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,oldalloc,dioread_lock,debug_want_extra_isize=0x000000000000007c,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 86.627145][ T4362] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 86.772290][ T13] cfg80211: failed to load regulatory.db [ 86.838095][ T4369] loop2: detected capacity change from 0 to 8192 [ 86.914563][ T4374] loop3: detected capacity change from 0 to 256 [ 87.153996][ T4374] FAT-fs (loop3): Directory bread(block 64) failed [ 87.183100][ T4374] FAT-fs (loop3): Directory bread(block 65) failed [ 87.203148][ T4374] FAT-fs (loop3): Directory bread(block 66) failed [ 87.221433][ T4185] EXT4-fs error (device loop0): mb_free_blocks:1860: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 87.225819][ T4374] FAT-fs (loop3): Directory bread(block 67) failed [ 87.317616][ T4374] FAT-fs (loop3): Directory bread(block 68) failed [ 87.332059][ T4382] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 87.372297][ T4374] FAT-fs (loop3): Directory bread(block 69) failed [ 87.388130][ T4374] FAT-fs (loop3): Directory bread(block 70) failed [ 87.419382][ T4374] FAT-fs (loop3): Directory bread(block 71) failed [ 87.460435][ T4374] FAT-fs (loop3): Directory bread(block 72) failed [ 87.483781][ T4374] FAT-fs (loop3): Directory bread(block 73) failed [ 87.509264][ T4386] loop0: detected capacity change from 0 to 16 [ 87.537529][ T4386] erofs: (device loop0): mounted with root inode @ nid 36. [ 87.720826][ T26] audit: type=1800 audit(1768200448.867:2): pid=4374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.17" name="file1" dev="loop3" ino=1048592 res=0 errno=0 [ 88.002057][ T4392] erofs: (device loop0): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 88.015012][ T4392] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 89.853705][ T4417] loop2: detected capacity change from 0 to 16 [ 89.918281][ T4411] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 89.948003][ T4417] erofs: (device loop2): mounted with root inode @ nid 36. [ 89.966006][ T4411] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 90.301619][ T4423] netlink: 96 bytes leftover after parsing attributes in process `syz.2.31'. [ 90.592319][ T4421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.32'. [ 90.846690][ T4421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.32'. [ 91.328112][ T4435] loop2: detected capacity change from 0 to 16 [ 91.416357][ T4435] erofs: (device loop2): mounted with root inode @ nid 36. [ 91.536484][ T4437] binder: BINDER_SET_CONTEXT_MGR already set [ 91.543126][ T4437] binder: 4430:4437 ioctl 4018620d 200000004a80 returned -16 [ 92.213987][ T4441] erofs: (device loop2): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 92.226880][ T4441] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 93.460436][ T4464] loop0: detected capacity change from 0 to 128 [ 93.836137][ T4462] loop4: detected capacity change from 0 to 8192 [ 95.123055][ T4477] netlink: 44 bytes leftover after parsing attributes in process `syz.1.48'. [ 95.509872][ T4486] loop1: detected capacity change from 0 to 256 [ 95.761166][ T4491] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 96.009456][ T4496] loop1: detected capacity change from 0 to 256 [ 97.502448][ T4516] hub 8-0:1.0: USB hub found [ 97.551444][ T4516] hub 8-0:1.0: 1 port detected [ 98.391209][ T4522] netlink: 12 bytes leftover after parsing attributes in process `syz.4.55'. [ 98.417746][ T4526] loop1: detected capacity change from 0 to 1024 [ 98.447441][ T26] audit: type=1326 audit(1768200459.597:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4527 comm="syz.0.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c93ed7749 code=0x7ffc0000 [ 98.511851][ T26] audit: type=1326 audit(1768200459.597:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4527 comm="syz.0.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f5c93ed7749 code=0x7ffc0000 [ 98.626652][ T26] audit: type=1326 audit(1768200459.617:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4527 comm="syz.0.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c93ed7749 code=0x7ffc0000 [ 98.740474][ T4526] EXT4-fs (loop1): Ignoring removed orlov option [ 98.766632][ T26] audit: type=1326 audit(1768200459.617:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4527 comm="syz.0.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c93ed7749 code=0x7ffc0000 [ 98.813570][ T4526] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 98.826174][ T26] audit: type=1326 audit(1768200459.617:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4527 comm="syz.0.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f5c93ed7749 code=0x7ffc0000 [ 98.857192][ T26] audit: type=1326 audit(1768200459.617:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4527 comm="syz.0.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c93ed7749 code=0x7ffc0000 [ 98.879987][ T26] audit: type=1326 audit(1768200459.617:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4527 comm="syz.0.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c93ed7749 code=0x7ffc0000 [ 98.902592][ T26] audit: type=1326 audit(1768200459.617:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4527 comm="syz.0.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5c93ed7749 code=0x7ffc0000 [ 98.925385][ T26] audit: type=1326 audit(1768200459.617:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4527 comm="syz.0.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5c93ed7783 code=0x7ffc0000 [ 98.962184][ T26] audit: type=1804 audit(1768200460.117:12): pid=4521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.61" name="/newroot/14/bus/bus" dev="loop1" ino=18 res=1 errno=0 [ 99.439557][ T4537] x_tables: duplicate underflow at hook 1 [ 99.909976][ T4528] loop0: detected capacity change from 0 to 40427 [ 99.953044][ T4528] F2FS-fs (loop0): build fault injection attr: rate: 174, type: 0x1ffff [ 100.004679][ T4547] loop1: detected capacity change from 0 to 1024 [ 100.151971][ T4547] EXT4-fs (loop1): Ignoring removed orlov option [ 100.599888][ T4547] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 100.716714][ T3157] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.101012][ T3157] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.139799][ T3157] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 101.171058][ T3157] usb 3-1: config 1 has no interface number 0 [ 101.192446][ T3157] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.235418][ T3157] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 101.431025][ T3157] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.463067][ T3157] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.488808][ T3157] usb 3-1: Product: syz [ 101.497802][ T3157] usb 3-1: Manufacturer: syz [ 101.511896][ T3157] usb 3-1: SerialNumber: syz [ 101.516949][ T4567] loop0: detected capacity change from 0 to 128 [ 101.594022][ T4567] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.622435][ T4567] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 101.649400][ T3157] usb 3-1: selecting invalid altsetting 1 [ 101.944624][ T3157] cdc_ncm 3-1:1.1: bind() failure [ 101.966959][ T3157] usb 3-1: USB disconnect, device number 2 [ 104.023920][ T4584] loop3: detected capacity change from 0 to 128 [ 104.091418][ T4584] ======================================================= [ 104.091418][ T4584] WARNING: The mand mount option has been deprecated and [ 104.091418][ T4584] and is ignored by this kernel. Remove the mand [ 104.091418][ T4584] option from the mount to silence this warning. [ 104.091418][ T4584] ======================================================= [ 104.281482][ T4584] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouid32,barrier=0x0000000000000de2,,errors=continue. Quota mode: none. [ 104.333929][ T4584] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.260751][ T4616] loop2: detected capacity change from 0 to 512 [ 106.396880][ T4616] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.87: inode has both inline data and extents flags [ 106.421255][ T4616] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.87: couldn't read orphan inode 15 (err -117) [ 106.461637][ T4616] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 106.549459][ T4621] overlayfs: unrecognized mount option "00000040000" or missing value [ 108.396548][ T4634] loop0: detected capacity change from 0 to 1024 [ 108.531655][ T4634] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 108.979994][ T4644] loop4: detected capacity change from 0 to 2048 [ 109.102989][ T4295] Alternate GPT is invalid, using primary GPT. [ 109.505992][ T4295] loop4: p2 p3 p7 [ 110.113070][ T4654] loop3: detected capacity change from 0 to 512 [ 110.170987][ T4654] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 110.229292][ T4654] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.96: inode has both inline data and extents flags [ 110.271192][ T4654] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.96: couldn't read orphan inode 15 (err -117) [ 110.313381][ T4654] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 110.424577][ T4644] Alternate GPT is invalid, using primary GPT. [ 110.436631][ T4644] loop4: p2 p3 p7 [ 111.210726][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 111.240598][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 111.250592][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 111.260588][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 111.270594][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 111.280592][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 111.290590][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 111.300591][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 111.310588][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 111.319481][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 111.434945][ T4319] udevd[4319]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 111.455321][ T4295] udevd[4295]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 111.484776][ T4395] udevd[4395]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 111.573188][ T4395] udevd[4395]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 111.585735][ T4319] udevd[4319]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 111.638848][ T4669] netlink: 'syz.4.100': attribute type 12 has an invalid length. [ 111.647943][ T4295] udevd[4295]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 112.153305][ T4660] loop1: detected capacity change from 0 to 40427 [ 112.172453][ T4677] Zero length message leads to an empty skb [ 112.255104][ T4660] F2FS-fs (loop1): invalid crc value [ 112.334627][ T4678] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz.3.96: inode has both inline data and extents flags [ 112.356663][ T4678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.96'. [ 112.365638][ T4678] device bridge_slave_1 left promiscuous mode [ 112.373260][ T4678] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.397848][ T4678] device bridge_slave_0 left promiscuous mode [ 112.404307][ T4678] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.435689][ T4660] F2FS-fs (loop1): Found nat_bits in checkpoint [ 112.744440][ T4660] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 113.703656][ T4698] loop2: detected capacity change from 0 to 128 [ 113.736650][ T4188] attempt to access beyond end of device [ 113.736650][ T4188] loop1: rw=2049, want=45104, limit=40427 [ 113.955365][ T4700] attempt to access beyond end of device [ 113.955365][ T4700] loop2: rw=2049, want=649, limit=128 [ 114.053304][ T4698] attempt to access beyond end of device [ 114.053304][ T4698] loop2: rw=524288, want=369, limit=128 [ 114.141282][ T4700] attempt to access beyond end of device [ 114.141282][ T4700] loop2: rw=0, want=153, limit=128 [ 114.175428][ T4698] attempt to access beyond end of device [ 114.175428][ T4698] loop2: rw=0, want=153, limit=128 [ 114.243187][ T4700] attempt to access beyond end of device [ 114.243187][ T4700] loop2: rw=0, want=153, limit=128 [ 114.262768][ T4705] loop4: detected capacity change from 0 to 256 [ 114.316941][ T4698] attempt to access beyond end of device [ 114.316941][ T4698] loop2: rw=0, want=153, limit=128 [ 114.331553][ T4705] exfat: Unknown parameter 'GPL' [ 114.386154][ T4700] attempt to access beyond end of device [ 114.386154][ T4700] loop2: rw=0, want=153, limit=128 [ 115.838841][ T4708] loop2: detected capacity change from 0 to 40427 [ 115.914214][ T4708] F2FS-fs (loop2): invalid crc value [ 116.001680][ T4708] F2FS-fs (loop2): Found nat_bits in checkpoint [ 116.044399][ T4712] loop1: detected capacity change from 0 to 40427 [ 116.193074][ T4712] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 116.231155][ T4712] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 116.311881][ T4722] loop3: detected capacity change from 0 to 128 [ 116.999525][ T4712] F2FS-fs (loop1): invalid crc value [ 117.036279][ T4708] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 117.069388][ T4712] F2FS-fs (loop1): Found nat_bits in checkpoint [ 117.278732][ T4735] syz.0.118[4735] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.278847][ T4735] syz.0.118[4735] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.721582][ T4735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.118'. [ 117.786437][ T4712] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 117.812911][ T4712] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 119.481198][ T4755] syz.3.126 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 120.050727][ T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 120.510774][ T13] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.526954][ T13] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.630922][ T13] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 120.657326][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 120.668395][ T13] usb 1-1: SerialNumber: syz [ 120.738183][ T4782] loop2: detected capacity change from 0 to 1024 [ 120.745777][ T4254] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 120.787978][ T4782] EXT4-fs (loop2): Ignoring removed orlov option [ 120.796479][ T4784] loop3: detected capacity change from 0 to 4096 [ 120.816352][ T4782] EXT4-fs (loop2): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 120.844798][ T26] kauditd_printk_skb: 39 callbacks suppressed [ 120.844814][ T26] audit: type=1804 audit(1768200481.997:52): pid=4782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.134" name="/newroot/25/bus/bus" dev="loop2" ino=18 res=1 errno=0 [ 120.990126][ T4784] EXT4-fs (loop3): Test dummy encryption mode enabled [ 121.005443][ T13] usb 1-1: 0:2 : does not exist [ 121.014970][ T13] usb 1-1: unit 5: unexpected type 0x09 [ 121.026822][ T4784] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,test_dummy_encryption,block_validity,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 121.108756][ T13] usb 1-1: USB disconnect, device number 2 [ 121.170977][ T4254] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.209887][ T4254] usb 2-1: config 0 interface 0 has no altsetting 0 [ 121.243238][ T4254] usb 2-1: New USB device found, idVendor=05a4, idProduct=1700, bcdDevice= 0.00 [ 121.261141][ T4254] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.284959][ T4254] usb 2-1: config 0 descriptor?? [ 121.456477][ T4295] udevd[4295]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.820899][ T4254] usbhid 2-1:0.0: can't add hid device: -71 [ 121.826953][ T4254] usbhid: probe of 2-1:0.0 failed with error -71 [ 121.875695][ T4254] usb 2-1: USB disconnect, device number 2 [ 122.074441][ T4809] loop3: detected capacity change from 0 to 256 [ 122.290834][ T1108] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 123.037643][ T4821] loop1: detected capacity change from 0 to 512 [ 123.086017][ T4821] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 123.285638][ T4821] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 123.374458][ T4821] Quota error (device loop1): write_blk: dquota write failed [ 123.407942][ T4821] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 123.466317][ T4821] EXT4-fs error (device loop1): ext4_acquire_dquot:6209: comm syz.1.143: Failed to acquire dquot type 0 [ 123.528100][ T4821] EXT4-fs (loop1): 1 truncate cleaned up [ 123.554640][ T4821] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,noblock_validity,inode_readahead_blks=0x0000000000001000,barrier=0x0000000000000000,journal_dev=0x0000000000000005,dioread_lock,data_err=ignore,noinit_itable,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback. [ 124.826512][ T1108] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.866297][ T1108] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.990926][ T1108] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 125.014944][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 125.102035][ T1108] usb 1-1: SerialNumber: syz [ 125.180333][ T4839] loop1: detected capacity change from 0 to 1024 [ 125.187326][ T1108] usb 1-1: can't set config #1, error -71 [ 125.202260][ T1108] usb 1-1: USB disconnect, device number 3 [ 125.449338][ T4839] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 125.481048][ T4839] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.319734][ T4863] x_tables: duplicate underflow at hook 1 [ 126.881740][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 126.919255][ T4870] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 128.901827][ T4879] loop3: detected capacity change from 0 to 256 [ 129.037071][ T4879] FAT-fs (loop3): Directory bread(block 64) failed [ 129.064450][ T4879] FAT-fs (loop3): Directory bread(block 65) failed [ 129.090346][ T4879] FAT-fs (loop3): Directory bread(block 66) failed [ 129.194889][ T4879] FAT-fs (loop3): Directory bread(block 67) failed [ 129.201597][ T4879] FAT-fs (loop3): Directory bread(block 68) failed [ 129.208148][ T4879] FAT-fs (loop3): Directory bread(block 69) failed [ 129.214799][ T4879] FAT-fs (loop3): Directory bread(block 70) failed [ 129.222856][ T4879] FAT-fs (loop3): Directory bread(block 71) failed [ 129.229462][ T4879] FAT-fs (loop3): Directory bread(block 72) failed [ 129.237010][ T4879] FAT-fs (loop3): Directory bread(block 73) failed [ 129.799021][ T4883] loop4: detected capacity change from 0 to 2048 [ 129.901588][ T4883] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 129.925594][ T4890] loop2: detected capacity change from 0 to 2048 [ 130.081156][ T4181] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 130.171878][ T4890] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,nojournal_checksum,,errors=continue. Quota mode: none. [ 130.380791][ T4181] usb 2-1: Using ep0 maxpacket: 16 [ 131.265122][ T4181] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.944654][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.951148][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.985381][ T4181] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.010450][ T4181] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 133.034182][ T4181] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 133.110765][ T4181] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.121242][ T4917] loop1: detected capacity change from 0 to 4096 [ 133.158298][ T4181] usb 2-1: config 0 descriptor?? [ 133.225456][ T4181] usb 2-1: can't set config #0, error -71 [ 133.233547][ T4917] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 133.254523][ T4181] usb 2-1: USB disconnect, device number 3 [ 134.709829][ T4935] loop3: detected capacity change from 0 to 8192 [ 134.725179][ T4936] loop2: detected capacity change from 0 to 8192 [ 135.171490][ T4944] loop2: detected capacity change from 0 to 16 [ 135.417976][ T4944] erofs: (device loop2): mounted with root inode @ nid 36. [ 136.080671][ T4232] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 136.187205][ T4957] erofs: (device loop2): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 136.226429][ T4957] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 136.320691][ T4232] usb 1-1: Using ep0 maxpacket: 16 [ 136.381076][ T4957] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 136.440949][ T4232] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 136.449992][ T4957] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 136.470216][ T4232] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.520723][ T4232] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 136.705457][ T4232] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 136.744155][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.784149][ T4232] usb 1-1: Product: syz [ 136.788374][ T4232] usb 1-1: Manufacturer: syz [ 136.824179][ T4232] usb 1-1: SerialNumber: syz [ 137.257134][ T4973] loop2: detected capacity change from 0 to 1024 [ 137.349846][ T4973] EXT4-fs (loop2): Ignoring removed orlov option [ 137.367169][ T4973] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 137.403654][ T4973] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 137.475731][ T4970] syz.2.188 (4970) used greatest stack depth: 18560 bytes left [ 137.487026][ T4982] device veth0_to_team entered promiscuous mode [ 137.941865][ T4232] usb 1-1: 0:2 : does not exist [ 138.149299][ T4232] usb 1-1: USB disconnect, device number 4 [ 138.270676][ T4334] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 138.402936][ T4295] udevd[4295]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 138.609802][ T5013] loop2: detected capacity change from 0 to 2048 [ 138.631417][ T4334] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 138.652953][ T4334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.682374][ T5015] cgroup: release_agent respecified [ 138.734482][ T5015] overlayfs: upper fs does not support file handles, falling back to index=off. [ 138.744075][ T5015] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 139.242733][ T4334] usb 2-1: config 0 descriptor?? [ 139.481471][ T5013] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,resuid=0x0000000000000000,noblock_validity,bsdgroups,debug_want_extra_isize=0x0000000000000006,,errors=continue. Quota mode: none. [ 141.572285][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 141.928281][ T4334] usb 2-1: USB disconnect, device number 4 [ 143.171617][ T5027] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 145.074873][ T5041] loop4: detected capacity change from 0 to 256 [ 147.608280][ T5066] loop2: detected capacity change from 0 to 512 [ 147.745930][ T5066] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback. [ 147.780847][ T5066] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 151.129549][ T5087] loop2: detected capacity change from 0 to 40427 [ 151.168142][ T5087] F2FS-fs (loop2): Invalid log_blocksize (64), supports only 12 [ 151.197864][ T5087] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 151.235738][ T5087] F2FS-fs (loop2): invalid crc value [ 151.429055][ T5087] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 151.767921][ T5087] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 151.788383][ T5087] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 152.331650][ T5112] syz.0.226[5112] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.331844][ T5112] syz.0.226[5112] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.385152][ T26] audit: type=1326 audit(1768200513.537:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5111 comm="syz.0.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c93ed7749 code=0x7ffc0000 [ 152.513933][ T26] audit: type=1326 audit(1768200513.567:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5111 comm="syz.0.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f5c93ed7749 code=0x7ffc0000 [ 152.906379][ T26] audit: type=1326 audit(1768200513.587:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5111 comm="syz.0.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c93ed7749 code=0x7ffc0000 [ 153.479903][ T26] audit: type=1326 audit(1768200514.627:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5123 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c93ed7749 code=0x7ffc0000 [ 153.512022][ T5122] loop2: detected capacity change from 0 to 256 [ 153.546212][ T5122] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 153.578570][ T26] audit: type=1326 audit(1768200514.667:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5123 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c93ed7749 code=0x7ffc0000 [ 153.698567][ T26] audit: type=1326 audit(1768200514.677:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5123 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5c93ed7749 code=0x7ffc0000 [ 153.847930][ T5126] 9pnet: Insufficient options for proto=fd [ 153.900893][ T26] audit: type=1326 audit(1768200514.687:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5123 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5c93ed7783 code=0x7ffc0000 [ 155.062476][ T5133] tipc: Started in network mode [ 155.067522][ T5133] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 155.076569][ T5133] tipc: Enabling of bearer rejected, failed to enable media [ 155.088537][ T5133] 9pnet: Insufficient options for proto=fd [ 155.329719][ T26] audit: type=1326 audit(1768200514.717:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5123 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5c93ed61ff code=0x7ffc0000 [ 155.517207][ T26] audit: type=1326 audit(1768200514.717:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5123 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f5c93ed77d7 code=0x7ffc0000 [ 155.700107][ T26] audit: type=1326 audit(1768200514.717:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5123 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5c93ed5f90 code=0x7ffc0000 [ 156.795786][ T5156] loop4: detected capacity change from 0 to 16 [ 156.836706][ T5160] netlink: 292 bytes leftover after parsing attributes in process `syz.1.239'. [ 156.847221][ T5159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.238'. [ 156.861835][ T5156] erofs: (device loop4): mounted with root inode @ nid 36. [ 157.283412][ T5156] attempt to access beyond end of device [ 157.283412][ T5156] loop4: rw=524288, want=48, limit=16 [ 157.295068][ T5156] attempt to access beyond end of device [ 157.295068][ T5156] loop4: rw=524288, want=40, limit=16 [ 157.480767][ T4254] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 157.810602][ T4254] usb 3-1: Using ep0 maxpacket: 8 [ 157.837221][ T5169] netlink: 96 bytes leftover after parsing attributes in process `syz.1.242'. [ 157.951038][ T4254] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.019960][ T4254] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.080419][ T5171] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 158.088328][ T5171] IPv6: NLM_F_CREATE should be set when creating new route [ 158.090732][ T4254] usb 3-1: config 0 interface 0 has no altsetting 0 [ 158.126648][ T5174] loop1: detected capacity change from 0 to 1024 [ 158.139307][ T4254] usb 3-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 158.168365][ T4254] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.177192][ T5174] EXT4-fs (loop1): inline encryption not supported [ 158.191273][ T5174] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 158.224748][ T4254] usb 3-1: config 0 descriptor?? [ 158.308053][ T5174] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,sysvgroups,data_err=ignore,barrier=0x000000000000007f,data_err=ignore,grpquota,dioread_nolock,nobarrier,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 158.496674][ T5183] loop3: detected capacity change from 0 to 128 [ 158.551923][ T5183] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 158.589372][ T5183] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 159.220929][ T4254] usbhid 3-1:0.0: can't add hid device: -71 [ 159.232387][ T4254] usbhid: probe of 3-1:0.0 failed with error -71 [ 159.270110][ T4254] usb 3-1: USB disconnect, device number 3 [ 160.776924][ T5195] loop2: detected capacity change from 0 to 131072 [ 160.808360][ T5171] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.815866][ T5171] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.851499][ T5195] F2FS-fs (loop2): Test dummy encryption mode enabled [ 160.862517][ T5195] F2FS-fs (loop2): invalid crc value [ 160.897828][ T5195] F2FS-fs (loop2): Found nat_bits in checkpoint [ 160.966890][ T5195] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 162.592626][ T5171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.754007][ T5171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.744818][ T5203] loop2: detected capacity change from 0 to 2048 [ 163.848736][ T5203] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,nojournal_checksum,,errors=continue. Quota mode: none. [ 163.872579][ T5171] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.881559][ T5171] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.890459][ T5171] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.899469][ T5171] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.256334][ T5211] loop2: detected capacity change from 0 to 2048 [ 164.452934][ T5211] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 165.638929][ T5217] loop4: detected capacity change from 0 to 512 [ 165.668916][ T5217] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 165.709287][ T5217] EXT4-fs (loop4): 1 truncate cleaned up [ 165.718758][ T5217] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 165.794420][ T5217] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2229: inode #15: comm syz.4.252: corrupted in-inode xattr [ 165.829687][ T5217] EXT4-fs (loop4): Remounting filesystem read-only [ 165.839227][ T5217] EXT4-fs warning (device loop4): ext4_xattr_set_entry:1761: inode #15: comm syz.4.252: unable to update i_inline_off [ 165.858077][ T5217] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2229: inode #15: comm syz.4.252: corrupted in-inode xattr [ 165.878354][ T5217] EXT4-fs (loop4): Remounting filesystem read-only [ 166.412207][ T4195] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 167.815289][ T5226] loop1: detected capacity change from 0 to 1024 [ 169.504021][ T5226] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,inode_readahead_blks=0x0000000000000008,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 169.627793][ T5226] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.650797][ T5257] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 170.252152][ T5269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.265'. [ 170.583482][ T5266] loop4: detected capacity change from 0 to 4096 [ 170.655187][ T5266] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 170.707503][ T5266] EXT4-fs (loop4): Test dummy encryption mode enabled [ 170.956415][ T5266] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 171.920054][ T5284] 9pnet: Insufficient options for proto=fd [ 172.188252][ T5295] netlink: 'syz.4.271': attribute type 13 has an invalid length. [ 172.214720][ T5295] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 172.284638][ T5295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 172.301642][ T5295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 173.589241][ T5311] netlink: 592 bytes leftover after parsing attributes in process `syz.1.276'. [ 173.881849][ T5322] loop4: detected capacity change from 0 to 256 [ 173.931393][ T5322] exfat: Deprecated parameter 'utf8' [ 173.936997][ T5322] exfat: Deprecated parameter 'utf8' [ 173.958114][ T5322] exfat: Deprecated parameter 'utf8' [ 173.977472][ T5322] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 174.224390][ T5333] syz.3.283[5333] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.224491][ T5333] syz.3.283[5333] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.600051][ T5342] device syzkaller0 entered promiscuous mode [ 174.653839][ T5340] loop3: detected capacity change from 0 to 512 [ 175.341984][ T5324] loop1: detected capacity change from 0 to 40427 [ 175.388556][ T5324] F2FS-fs (loop1): Unrecognized mount option "" or missing value [ 176.080277][ T5346] netlink: 'syz.0.287': attribute type 13 has an invalid length. [ 176.252710][ T5349] loop1: detected capacity change from 0 to 512 [ 176.331564][ T5340] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback. [ 176.375190][ T5340] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 176.463667][ T5349] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback. [ 176.536715][ T5360] overlayfs: upper fs does not support file handles, falling back to index=off. [ 176.546530][ T5360] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 177.034997][ T5349] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 177.181933][ T26] kauditd_printk_skb: 78 callbacks suppressed [ 177.181947][ T26] audit: type=1800 audit(1768200538.337:141): pid=5361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.286" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 177.280866][ T26] audit: type=1800 audit(1768200538.437:142): pid=5349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.289" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 177.282229][ T5364] bridge: RTM_NEWNEIGH with invalid ether address [ 181.169222][ T5401] loop3: detected capacity change from 0 to 512 [ 182.138236][ T5401] EXT4-fs (loop3): Ignoring removed oldalloc option [ 182.181387][ T5401] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 182.264265][ T5401] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 182.391856][ T5401] EXT4-fs (loop3): 1 truncate cleaned up [ 182.435223][ T5401] EXT4-fs (loop3): mounted filesystem without journal. Opts: oldalloc,block_validity,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000080,bsddf,i_version,nomblk_io_submit,nodioread_nolock,,errors=continue. Quota mode: none. [ 182.590771][ T5412] binder: 5411:5412 ioctl 40046210 0 returned -14 [ 183.081555][ T26] audit: type=1800 audit(1768200544.237:143): pid=5418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.301" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 185.500606][ T5444] loop2: detected capacity change from 0 to 16 [ 185.649346][ T5446] loop3: detected capacity change from 0 to 2048 [ 185.846368][ T5444] erofs: (device loop2): mounted with root inode @ nid 36. [ 185.860917][ T5446] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 185.909528][ T5444] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 186.187677][ T5446] loop3: detected capacity change from 0 to 256 [ 186.214652][ T5446] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 186.278479][ T5446] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 186.381466][ T5446] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62d793a, utbl_chksum : 0xe619d30d) [ 186.513854][ T5495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.314'. [ 187.049505][ T5496] loop2: detected capacity change from 0 to 2048 [ 187.319237][ T5496] Alternate GPT is invalid, using primary GPT. [ 187.345268][ T5496] loop2: p2 p3 p7 [ 187.818891][ T4319] udevd[4319]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 187.821716][ T4395] udevd[4395]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 187.878016][ T4295] udevd[4295]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 187.952886][ T4341] udevd[4341]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 187.953266][ T4319] udevd[4319]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 187.981887][ T4295] udevd[4295]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 188.699829][ T5502] loop3: detected capacity change from 0 to 40427 [ 188.738126][ T5502] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 188.777597][ T5502] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 188.847409][ T5502] F2FS-fs (loop3): invalid crc value [ 188.916966][ T5502] F2FS-fs (loop3): Found nat_bits in checkpoint [ 189.114566][ T5502] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 189.126459][ T5502] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 189.659160][ T5540] loop2: detected capacity change from 0 to 256 [ 189.715215][ T5540] exfat: Unknown parameter 'keep_last_dots' [ 190.205156][ T5547] loop3: detected capacity change from 0 to 256 [ 190.330333][ T5547] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 190.432655][ T5547] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 190.463879][ T5547] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62d793a, utbl_chksum : 0xe619d30d) [ 192.000639][ T13] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 192.189708][ T5560] loop4: detected capacity change from 0 to 131072 [ 192.286822][ T5560] F2FS-fs (loop4): Test dummy encryption mode enabled [ 192.297139][ T5560] F2FS-fs (loop4): invalid crc value [ 192.365028][ T5560] F2FS-fs (loop4): Found nat_bits in checkpoint [ 192.453227][ T5560] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 192.661002][ T13] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 193.122350][ T5577] fscrypt (loop4, inode 10): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 193.270055][ T13] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 193.330794][ T13] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 193.409784][ T13] usb 1-1: config 220 has no interface number 2 [ 193.455133][ T13] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 193.526257][ T13] usb 1-1: config 220 interface 0 has no altsetting 0 [ 193.570856][ T13] usb 1-1: config 220 interface 76 has no altsetting 0 [ 193.611760][ T13] usb 1-1: config 220 interface 1 has no altsetting 0 [ 193.841093][ T13] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 193.850469][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.898989][ T13] usb 1-1: Product: syz [ 193.909142][ T13] usb 1-1: Manufacturer: syz [ 193.919332][ T13] usb 1-1: SerialNumber: syz [ 194.204185][ T5566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.334'. [ 194.265479][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.276109][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.381986][ T13] uvcvideo 1-1:220.1: Unknown video format 077d0405-0000-0000-0000-000600000084 [ 194.410831][ T13] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 195.010237][ T13] usb 1-1: No valid video chain found. [ 195.026279][ T13] usb 1-1: selecting invalid altsetting 0 [ 195.130167][ T5593] device veth0_to_team entered promiscuous mode [ 195.212250][ T13] usb 1-1: selecting invalid altsetting 0 [ 195.218054][ T13] usbtest: probe of 1-1:220.1 failed with error -22 [ 195.400368][ T13] usb 1-1: USB disconnect, device number 5 [ 196.005067][ T5599] netlink: 96 bytes leftover after parsing attributes in process `syz.0.339'. [ 196.022814][ T5589] loop4: detected capacity change from 0 to 2048 [ 197.438037][ T21] Bluetooth: hci2: command 0x0406 tx timeout [ 197.471442][ T1108] Bluetooth: hci4: command 0x0406 tx timeout [ 197.477548][ T1108] Bluetooth: hci1: command 0x0406 tx timeout [ 197.501950][ T1108] Bluetooth: hci3: command 0x0406 tx timeout [ 197.638233][ T1108] Bluetooth: hci0: command 0x0406 tx timeout [ 199.559497][ T5631] loop1: detected capacity change from 0 to 128 [ 200.447934][ T5631] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 200.485039][ T5631] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 200.597024][ T4337] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 207.500779][ T26] audit: type=1326 audit(1768200568.647:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5687 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c93ed7749 code=0x7fc00000 [ 208.058885][ T26] audit: type=1326 audit(1768200568.647:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5687 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5c93ed7749 code=0x7fc00000 [ 208.136056][ T26] audit: type=1326 audit(1768200568.647:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5687 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c93ed7749 code=0x7fc00000 [ 208.175481][ T26] audit: type=1326 audit(1768200568.697:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5687 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c93ed7749 code=0x7fc00000 [ 208.238980][ T26] audit: type=1326 audit(1768200568.697:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5687 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c93ed7749 code=0x7fc00000 [ 208.303845][ T26] audit: type=1326 audit(1768200568.707:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5687 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c93ed7749 code=0x7fc00000 [ 208.397656][ T26] audit: type=1326 audit(1768200568.707:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5687 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c93ed7749 code=0x7fc00000 [ 208.502592][ T26] audit: type=1326 audit(1768200568.847:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5687 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c93ed7749 code=0x7fc00000 [ 208.525045][ T26] audit: type=1326 audit(1768200568.917:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5687 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c93ed7749 code=0x7fc00000 [ 208.617296][ T5712] loop2: detected capacity change from 0 to 256 [ 208.832307][ T5712] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbc8dc3cd, utbl_chksum : 0xe619d30d) [ 208.998806][ T26] audit: type=1326 audit(1768200568.997:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5687 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c93ed7749 code=0x7fc00000 [ 209.391493][ T5715] loop3: detected capacity change from 0 to 512 [ 209.722208][ T5715] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 211.594944][ T5734] loop1: detected capacity change from 0 to 128 [ 211.910949][ T5715] EXT4-fs (loop3): failed to open journal device unknown-block(0,8) -6 [ 213.168154][ T5755] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.388' resets device [ 213.472684][ T5759] overlayfs: missing 'lowerdir' [ 213.625449][ T5754] ipt_CLUSTERIP: Please specify destination IP [ 215.818918][ T5776] netlink: 96 bytes leftover after parsing attributes in process `syz.4.397'. [ 216.705046][ T5770] loop1: detected capacity change from 0 to 40427 [ 216.798303][ T5770] F2FS-fs (loop1): invalid crc value [ 216.832652][ T5770] F2FS-fs (loop1): Found nat_bits in checkpoint [ 216.898370][ T5770] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 220.389961][ T5813] loop4: detected capacity change from 0 to 512 [ 220.509828][ T5813] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.410: inode has both inline data and extents flags [ 220.541915][ T5813] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.410: couldn't read orphan inode 15 (err -117) [ 220.585223][ T5813] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 220.627473][ T5815] loop1: detected capacity change from 0 to 4096 [ 220.695575][ T5815] EXT4-fs (loop1): Test dummy encryption mode enabled [ 220.733712][ T5815] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 220.815022][ T5815] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 221.915305][ T5822] loop4: detected capacity change from 0 to 40427 [ 222.256224][ T5815] 9pnet: Insufficient options for proto=fd [ 222.452489][ T5830] loop3: detected capacity change from 0 to 512 [ 222.689465][ T5832] netlink: 96 bytes leftover after parsing attributes in process `syz.0.415'. [ 222.727930][ T5815] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 222.776406][ T5822] F2FS-fs (loop4): Mismatch start address, segment0(0) cp_blkaddr(512) [ 222.804461][ T5822] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 223.021983][ T5830] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback. [ 223.122141][ T5822] F2FS-fs (loop4): Found nat_bits in checkpoint [ 223.200845][ T5830] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 223.298827][ T26] kauditd_printk_skb: 59 callbacks suppressed [ 223.298843][ T26] audit: type=1800 audit(1768200584.447:213): pid=5830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.414" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 223.380785][ T5822] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 223.395039][ T5822] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 224.087775][ T5853] xt_CT: No such helper "snmp_trap" [ 224.415213][ T5858] loop4: detected capacity change from 0 to 256 [ 224.681264][ T5864] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 224.895672][ T5858] FAT-fs (loop4): Directory bread(block 64) failed [ 224.938696][ T5858] FAT-fs (loop4): Directory bread(block 65) failed [ 224.976375][ T5858] FAT-fs (loop4): Directory bread(block 66) failed [ 225.027823][ T5858] FAT-fs (loop4): Directory bread(block 67) failed [ 225.070963][ T5858] FAT-fs (loop4): Directory bread(block 68) failed [ 225.129116][ T5858] FAT-fs (loop4): Directory bread(block 69) failed [ 225.150974][ T5858] FAT-fs (loop4): Directory bread(block 70) failed [ 225.199736][ T5858] FAT-fs (loop4): Directory bread(block 71) failed [ 225.231269][ T5858] FAT-fs (loop4): Directory bread(block 72) failed [ 225.262619][ T5858] FAT-fs (loop4): Directory bread(block 73) failed [ 226.620604][ T4181] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 226.980718][ T4181] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 226.992170][ T4181] usb 4-1: config 0 has no interface number 0 [ 227.004842][ T4181] usb 4-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 227.039265][ T4181] usb 4-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 227.240753][ T4181] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 227.257358][ T4181] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.266193][ T4181] usb 4-1: Product: syz [ 227.277098][ T4181] usb 4-1: Manufacturer: syz [ 227.282122][ T4181] usb 4-1: SerialNumber: syz [ 227.305280][ T4181] usb 4-1: config 0 descriptor?? [ 227.330894][ T5874] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 227.342307][ T5874] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 227.372309][ T4181] smsc95xx v2.0.0 [ 227.401385][ T5887] xt_hashlimit: size too large, truncated to 1048576 [ 227.584187][ T5874] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 227.625522][ T5892] netlink: 24 bytes leftover after parsing attributes in process `syz.0.430'. [ 227.636754][ T5874] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 227.984986][ T5901] loop2: detected capacity change from 0 to 128 [ 228.002232][ T5898] kvm [5897]: vcpu0, guest rIP: 0xfff0 unimplemented HWCR wrmsr: 0xb7 [ 228.087463][ T5901] EXT4-fs (loop2): Test dummy encryption mode enabled [ 228.109815][ T5901] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 576460752303423507)! [ 228.167832][ T5901] EXT4-fs (loop2): group descriptors corrupted! [ 228.880707][ T4181] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 228.892920][ T4181] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 228.920701][ T4181] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 228.940692][ T4181] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 228.954835][ T4181] usb 4-1: USB disconnect, device number 2 [ 229.352061][ T5917] loop3: detected capacity change from 0 to 256 [ 232.925339][ T5934] loop2: detected capacity change from 0 to 512 [ 232.990376][ T5934] EXT4-fs (loop2): Ignoring removed oldalloc option [ 233.047168][ T5934] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 233.093333][ T5934] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 233.177309][ T5941] batadv_slave_0: Caught tx_queue_len zero misconfig [ 233.190380][ T5934] EXT4-fs (loop2): 1 truncate cleaned up [ 233.207605][ T5934] EXT4-fs (loop2): mounted filesystem without journal. Opts: oldalloc,block_validity,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000080,bsddf,i_version,nomblk_io_submit,nodioread_nolock,,errors=continue. Quota mode: none. [ 233.315214][ T26] audit: type=1800 audit(1768200594.467:214): pid=5934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.441" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 233.534243][ T13] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 233.634862][ T5949] netlink: 'syz.2.441': attribute type 13 has an invalid length. [ 233.938572][ T5952] loop3: detected capacity change from 0 to 512 [ 234.244017][ T5952] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback. [ 234.309469][ T5952] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 234.321114][ T13] usb 5-1: Using ep0 maxpacket: 32 [ 234.378348][ T26] audit: type=1800 audit(1768200595.527:215): pid=5952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.446" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 234.450837][ T13] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.473969][ T13] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 234.498977][ T13] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 234.516153][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.542114][ T13] usb 5-1: config 0 descriptor?? [ 234.587090][ T13] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 234.755904][ T5961] netlink: 96 bytes leftover after parsing attributes in process `syz.3.446'. [ 235.632353][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.641393][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.688229][ T4232] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 237.021293][ T4232] usb 4-1: Using ep0 maxpacket: 16 [ 237.291124][ T4232] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.329590][ T4232] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 237.712767][ T4262] usb 5-1: USB disconnect, device number 2 [ 238.720976][ T4232] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 238.731479][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.739513][ T4232] usb 4-1: Product: syz [ 238.749229][ T5981] loop4: detected capacity change from 0 to 512 [ 238.813095][ T5981] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 238.832309][ T4232] usb 4-1: Manufacturer: syz [ 238.836985][ T4232] usb 4-1: SerialNumber: syz [ 238.860074][ T5981] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 238.907932][ T5981] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 240.440377][ T5990] loop4: detected capacity change from 0 to 512 [ 240.478604][ T4232] usb 4-1: 0:2 : does not exist [ 240.653110][ T5990] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 240.873298][ T5990] EXT4-fs (loop4): 1 truncate cleaned up [ 240.879078][ T5990] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota,. Quota mode: writeback. [ 241.205169][ T4232] usb 4-1: USB disconnect, device number 3 [ 241.547846][ T4295] udevd[4295]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 241.818125][ T5949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.028975][ T5949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.626001][ T5998] loop9: detected capacity change from 0 to 7 [ 242.637349][ T5998] Dev loop9: unable to read RDB block 7 [ 242.660628][ T5998] loop9: unable to read partition table [ 242.666523][ T5998] loop9: partition table beyond EOD, truncated [ 242.704199][ T5998] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 242.704199][ T5998] ) failed (rc=-5) [ 243.146216][ T6006] loop3: detected capacity change from 0 to 2048 [ 243.202065][ T6006] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 243.268620][ T6008] loop4: detected capacity change from 0 to 2048 [ 243.323676][ T5949] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.332869][ T5949] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.341897][ T5949] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.350879][ T5949] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.378760][ T6006] loop3: detected capacity change from 0 to 256 [ 243.399869][ T6008] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 243.432610][ T6006] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 243.443713][ T6006] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 243.468618][ T6006] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62d793a, utbl_chksum : 0xe619d30d) [ 243.525556][ T4184] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 245.032663][ T6028] loop4: detected capacity change from 0 to 16 [ 245.151795][ T6028] erofs: (device loop4): mounted with root inode @ nid 36. [ 245.217290][ T6028] attempt to access beyond end of device [ 245.217290][ T6028] loop4: rw=0, want=40, limit=16 [ 245.252583][ T6028] attempt to access beyond end of device [ 245.252583][ T6028] loop4: rw=524288, want=48, limit=16 [ 245.277716][ T6028] attempt to access beyond end of device [ 245.277716][ T6028] loop4: rw=524288, want=40, limit=16 [ 245.431668][ T6033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.471'. [ 245.610576][ T6045] x_tables: duplicate underflow at hook 1 [ 246.143457][ T6060] loop3: detected capacity change from 0 to 512 [ 246.610571][ T6060] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: writeback. [ 246.857521][ T6060] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.427402][ T6081] block device autoloading is deprecated and will be removed. [ 250.641928][ T6091] overlayfs: failed to resolve './file0': -2 [ 251.007988][ T6099] sysfs: Unknown parameter 'uuid' [ 251.020584][ T4231] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 251.280634][ T4231] usb 3-1: Using ep0 maxpacket: 16 [ 251.401185][ T4231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.467095][ T4231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.512856][ T4231] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 251.552940][ T4231] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 251.601428][ T4231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.681812][ T4231] usb 3-1: config 0 descriptor?? [ 251.740621][ T4180] [ 251.743135][ T4180] ====================================================== [ 251.750178][ T4180] WARNING: possible circular locking dependency detected [ 251.757222][ T4180] syzkaller #0 Not tainted [ 251.761667][ T4180] ------------------------------------------------------ [ 251.768696][ T4180] syz-executor/4180 is trying to acquire lock: [ 251.774862][ T4180] ffff888060551938 ((wq_completion)loop3){+.+.}-{0:0}, at: flush_workqueue+0x126/0x1380 [ 251.784640][ T4180] [ 251.784640][ T4180] but task is already holding lock: [ 251.792017][ T4180] ffff888020777468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 251.800831][ T4180] [ 251.800831][ T4180] which lock already depends on the new lock. [ 251.800831][ T4180] [ 251.811259][ T4180] [ 251.811259][ T4180] the existing dependency chain (in reverse order) is: [ 251.820293][ T4180] [ 251.820293][ T4180] -> #6 (&lo->lo_mutex){+.+.}-{3:3}: [ 251.827791][ T4180] __mutex_lock_common+0x1eb/0x2390 [ 251.833534][ T4180] mutex_lock_killable_nested+0x17/0x20 [ 251.839628][ T4180] lo_open+0x6a/0x100 [ 251.844159][ T4180] blkdev_get_whole+0x90/0x390 [ 251.849460][ T4180] blkdev_get_by_dev+0x2d0/0xa60 [ 251.854943][ T4180] blkdev_open+0x12d/0x2c0 [ 251.859897][ T4180] do_dentry_open+0x7ff/0xf80 [ 251.865127][ T4180] path_openat+0x2682/0x2f30 [ 251.870258][ T4180] do_filp_open+0x1b3/0x3e0 [ 251.875309][ T4180] do_sys_openat2+0x142/0x4a0 [ 251.880525][ T4180] __x64_sys_openat+0x135/0x160 [ 251.885921][ T4180] do_syscall_64+0x4c/0xa0 [ 251.890885][ T4180] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 251.897321][ T4180] [ 251.897321][ T4180] -> #5 (&disk->open_mutex){+.+.}-{3:3}: [ 251.905171][ T4180] __mutex_lock_common+0x1eb/0x2390 [ 251.910924][ T4180] mutex_lock_nested+0x17/0x20 [ 251.916242][ T4180] blkdev_get_by_dev+0x157/0xa60 [ 251.921761][ T4180] swsusp_check+0x9b/0x2a0 [ 251.926756][ T4180] software_resume+0xc6/0x3b0 [ 251.931973][ T4180] resume_store+0xe4/0x130 [ 251.936933][ T4180] kernfs_fop_write_iter+0x379/0x4c0 [ 251.942765][ T4180] vfs_write+0x712/0xd00 [ 251.947546][ T4180] ksys_write+0x14d/0x250 [ 251.952416][ T4180] do_syscall_64+0x4c/0xa0 [ 251.957383][ T4180] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 251.963825][ T4180] [ 251.963825][ T4180] -> #4 (system_transition_mutex/1){+.+.}-{3:3}: [ 251.972370][ T4180] __mutex_lock_common+0x1eb/0x2390 [ 251.978116][ T4180] mutex_lock_nested+0x17/0x20 [ 251.983423][ T4180] software_resume+0x7c/0x3b0 [ 251.988651][ T4180] resume_store+0xe4/0x130 [ 251.993609][ T4180] kernfs_fop_write_iter+0x379/0x4c0 [ 251.999441][ T4180] vfs_write+0x712/0xd00 [ 252.004227][ T4180] ksys_write+0x14d/0x250 [ 252.009094][ T4180] do_syscall_64+0x4c/0xa0 [ 252.014063][ T4180] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 252.020510][ T4180] [ 252.020510][ T4180] -> #3 (&of->mutex){+.+.}-{3:3}: [ 252.027745][ T4180] __mutex_lock_common+0x1eb/0x2390 [ 252.033489][ T4180] mutex_lock_nested+0x17/0x20 [ 252.038806][ T4180] kernfs_seq_start+0x51/0x3c0 [ 252.044118][ T4180] seq_read_iter+0x3c4/0xd50 [ 252.049259][ T4180] vfs_read+0x725/0xcf0 [ 252.053957][ T4180] ksys_read+0x14d/0x250 [ 252.058839][ T4180] do_syscall_64+0x4c/0xa0 [ 252.063801][ T4180] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 252.070236][ T4180] [ 252.070236][ T4180] -> #2 (&p->lock){+.+.}-{3:3}: [ 252.077299][ T4180] __mutex_lock_common+0x1eb/0x2390 [ 252.083040][ T4180] mutex_lock_nested+0x17/0x20 [ 252.088362][ T4180] seq_read_iter+0xad/0xd50 [ 252.093426][ T4180] do_iter_readv_writev+0x497/0x600 [ 252.099166][ T4180] do_iter_read+0x20b/0x7c0 [ 252.104209][ T4180] loop_process_work+0x18dc/0x2480 [ 252.109862][ T4180] process_one_work+0x863/0x1000 [ 252.115339][ T4180] worker_thread+0xaa8/0x12a0 [ 252.120561][ T4180] kthread+0x436/0x520 [ 252.125174][ T4180] ret_from_fork+0x1f/0x30 [ 252.130140][ T4180] [ 252.130140][ T4180] -> #1 ((work_completion)(&worker->work)){+.+.}-{0:0}: [ 252.139315][ T4180] process_one_work+0x7bf/0x1000 [ 252.144797][ T4180] worker_thread+0xaa8/0x12a0 [ 252.150020][ T4180] kthread+0x436/0x520 [ 252.154636][ T4180] ret_from_fork+0x1f/0x30 [ 252.159600][ T4180] [ 252.159600][ T4180] -> #0 ((wq_completion)loop3){+.+.}-{0:0}: [ 252.167710][ T4180] __lock_acquire+0x2c33/0x7c60 [ 252.173110][ T4180] lock_acquire+0x197/0x3f0 [ 252.178162][ T4180] flush_workqueue+0x142/0x1380 [ 252.183560][ T4180] drain_workqueue+0xcf/0x380 [ 252.188797][ T4180] destroy_workqueue+0x7b/0xb20 [ 252.194201][ T4180] __loop_clr_fd+0x234/0xb90 [ 252.199343][ T4180] blkdev_put+0x53f/0x7d0 [ 252.204229][ T4180] deactivate_locked_super+0x93/0xf0 [ 252.210066][ T4180] cleanup_mnt+0x418/0x4d0 [ 252.215037][ T4180] task_work_run+0x125/0x1a0 [ 252.220192][ T4180] exit_to_user_mode_loop+0x10f/0x130 [ 252.226487][ T4180] exit_to_user_mode_prepare+0xee/0x180 [ 252.232583][ T4180] syscall_exit_to_user_mode+0x16/0x40 [ 252.238599][ T4180] do_syscall_64+0x58/0xa0 [ 252.243562][ T4180] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 252.249996][ T4180] [ 252.249996][ T4180] other info that might help us debug this: [ 252.249996][ T4180] [ 252.260237][ T4180] Chain exists of: [ 252.260237][ T4180] (wq_completion)loop3 --> &disk->open_mutex --> &lo->lo_mutex [ 252.260237][ T4180] [ 252.273744][ T4180] Possible unsafe locking scenario: [ 252.273744][ T4180] [ 252.281210][ T4180] CPU0 CPU1 [ 252.286591][ T4180] ---- ---- [ 252.291985][ T4180] lock(&lo->lo_mutex); [ 252.296251][ T4180] lock(&disk->open_mutex); [ 252.303383][ T4180] lock(&lo->lo_mutex); [ 252.310161][ T4180] lock((wq_completion)loop3); [ 252.315028][ T4180] [ 252.315028][ T4180] *** DEADLOCK *** [ 252.315028][ T4180] [ 252.323182][ T4180] 2 locks held by syz-executor/4180: [ 252.328478][ T4180] #0: ffff8880205f5918 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0 [ 252.337825][ T4180] #1: ffff888020777468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 252.347087][ T4180] [ 252.347087][ T4180] stack backtrace: [ 252.353012][ T4180] CPU: 0 PID: 4180 Comm: syz-executor Not tainted syzkaller #0 [ 252.360577][ T4180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 252.370668][ T4180] Call Trace: [ 252.373974][ T4180] [ 252.376926][ T4180] dump_stack_lvl+0x168/0x230 [ 252.381646][ T4180] ? load_image+0x3b0/0x3b0 [ 252.386178][ T4180] ? show_regs_print_info+0x20/0x20 [ 252.391407][ T4180] ? print_circular_bug+0x12b/0x1a0 [ 252.396634][ T4180] check_noncircular+0x274/0x310 [ 252.401601][ T4180] ? add_chain_block+0x940/0x940 [ 252.406563][ T4180] ? lockdep_lock+0xdc/0x1e0 [ 252.411189][ T4180] ? mark_lock+0x94/0x320 [ 252.415546][ T4180] __lock_acquire+0x2c33/0x7c60 [ 252.420437][ T4180] ? verify_lock_unused+0x140/0x140 [ 252.425669][ T4180] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 252.431682][ T4180] ? verify_lock_unused+0x140/0x140 [ 252.436911][ T4180] ? verify_lock_unused+0x140/0x140 [ 252.442131][ T4180] ? verify_lock_unused+0x140/0x140 [ 252.447357][ T4180] ? memset+0x1e/0x40 [ 252.451366][ T4180] lock_acquire+0x197/0x3f0 [ 252.455920][ T4180] ? flush_workqueue+0x126/0x1380 [ 252.460976][ T4180] ? __mutex_trylock_common+0x14f/0x250 [ 252.466561][ T4180] ? read_lock_is_recursive+0x10/0x10 [ 252.471984][ T4180] ? __init_swait_queue_head+0xa5/0x150 [ 252.477560][ T4180] flush_workqueue+0x142/0x1380 [ 252.482436][ T4180] ? flush_workqueue+0x126/0x1380 [ 252.487492][ T4180] ? __lock_acquire+0x7c60/0x7c60 [ 252.492542][ T4180] ? lock_chain_count+0x20/0x20 [ 252.497415][ T4180] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 252.502812][ T4180] ? lockdep_hardirqs_off+0x70/0x100 [ 252.508128][ T4180] ? rcu_work_rcufn+0x110/0x110 [ 252.512996][ T4180] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 252.518668][ T4180] ? finish_wait+0xc0/0x1d0 [ 252.523196][ T4180] drain_workqueue+0xcf/0x380 [ 252.527897][ T4180] destroy_workqueue+0x7b/0xb20 [ 252.532772][ T4180] __loop_clr_fd+0x234/0xb90 [ 252.537392][ T4180] ? lo_release+0x172/0x1f0 [ 252.541913][ T4180] ? lo_open+0x100/0x100 [ 252.546182][ T4180] blkdev_put+0x53f/0x7d0 [ 252.550533][ T4180] deactivate_locked_super+0x93/0xf0 [ 252.555855][ T4180] cleanup_mnt+0x418/0x4d0 [ 252.560295][ T4180] ? lockdep_hardirqs_on+0x94/0x140 [ 252.565515][ T4180] task_work_run+0x125/0x1a0 [ 252.570129][ T4180] exit_to_user_mode_loop+0x10f/0x130 [ 252.575528][ T4180] exit_to_user_mode_prepare+0xee/0x180 [ 252.581108][ T4180] syscall_exit_to_user_mode+0x16/0x40 [ 252.586590][ T4180] do_syscall_64+0x58/0xa0 [ 252.591045][ T4180] ? clear_bhb_loop+0x30/0x80 [ 252.595741][ T4180] ? clear_bhb_loop+0x30/0x80 [ 252.600439][ T4180] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 252.606362][ T4180] RIP: 0033:0x7f47f0e5aa77 [ 252.610804][ T4180] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 252.630445][ T4180] RSP: 002b:00007ffc5fdc1d18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 252.638884][ T4180] RAX: 0000000000000000 RBX: 00007f47f0eddd7d RCX: 00007f47f0e5aa77 [ 252.646874][ T4180] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc5fdc1dd0 [ 252.654866][ T4180] RBP: 00007ffc5fdc1dd0 R08: 0000000000000000 R09: 0000000000000000 [ 252.662851][ T4180] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc5fdc2e60 [ 252.670841][ T4180] R13: 00007f47f0eddd7d R14: 000000000003cb4d R15: 00007ffc5fdc2ea0 [ 252.678845][ T4180] [ 252.852275][ T1108] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 252.963144][ T4231] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 252.972826][ T4231] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 252.980328][ T4231] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 253.465244][ T4231] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 253.472592][ T4231] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 253.479834][ T4231] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 253.487144][ T4231] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 253.494450][ T4231] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 253.501951][ T4231] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 253.509672][ T4231] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 253.523568][ T4231] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0001/input/input10 [ 253.580541][ T1108] usb 5-1: Using ep0 maxpacket: 16 [ 253.604639][ T4231] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 253.639002][ T4231] usb 3-1: USB disconnect, device number 4 [ 253.700824][ T1108] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.718868][ T1108] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 253.840442][ T6110] fido_id[6110]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 253.890853][ T1108] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 253.899917][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.908138][ T1108] usb 5-1: Product: syz [ 253.912402][ T1108] usb 5-1: Manufacturer: syz [ 253.917044][ T1108] usb 5-1: SerialNumber: syz [ 254.230699][ T1108] usb 5-1: 0:2 : does not exist [ 254.247219][ T1108] usb 5-1: USB disconnect, device number 3 [ 255.701937][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.708230][ T1420] ieee802154 phy1 wpan1: encryption failed: -22