last executing test programs: 2m18.717127851s ago: executing program 4 (id=227): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f00000002c0)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000240)=""/17, 0x11, 0xf98, 0x4, 0x9, 0x4, 0xc08}}, 0x120) read$FUSE(r1, &(0x7f0000006b40)={0x2020}, 0x2020) write$UHID_DESTROY(r1, &(0x7f0000000180), 0x4) 2m17.817904853s ago: executing program 4 (id=229): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) ioctl$BLKRASET(r1, 0x1262, &(0x7f0000000180)=0x8001) ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x7, 0x2003) syz_open_dev$usbmon(&(0x7f0000000280), 0x8000000, 0x200) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0xfe, 0x0, 0x7fff7ffc}]}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 2m16.163324893s ago: executing program 4 (id=233): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) symlink(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000000f00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') 2m16.021734796s ago: executing program 4 (id=236): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) sched_setscheduler(0x0, 0x7, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000200)='usb1', 0x4) setreuid(0xffffffffffffffff, 0xffffffffffffffff) syz_emit_vhci(0x0, 0x9) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8002, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x8000b, 0x7f, 0x20000006, 0x4d, 0x6, 0x2000005f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x8, 0x3, 0x2, 0x5, 0x24, 0x1, 0x0, 0x3c5b, 0x1, 0x21, 0x6, 0x1, 0x2, 0x200, 0xe661, 0x4, 0x8, 0x89d2, 0xc, 0x4c76, 0x80000000, 0x40000, 0x4, 0x0, 0x4, 0x80008071, 0x7, 0x800017, 0x9a, 0x407, 0x5, 0x38, 0x800008f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x7f, 0x0, 0x4, 0x4, 0x8, 0xc, 0xfffffffe, 0x40], [0x10000003, 0x6, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf5, 0x800, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x8, 0x1, 0x2f, 0x10, 0x315, 0xd, 0xea4, 0xffffffff, 0x7, 0x7, 0x7fff, 0x5a7c, 0x420, 0x8, 0x6, 0x0, 0xff, 0x4000001, 0x1000005, 0x5f31, 0xd, 0x40004e2, 0x2, 0x4, 0xb, 0x8, 0x20009, 0x9, 0x9, 0x9, 0x47, 0x8000, 0x4001, 0x4, 0x9, 0xfffffffb, 0x7, 0x9, 0x7b3, 0x3, 0x4, 0x9b, 0x3, 0x7, 0xbc45, 0x48c93690, 0x42, 0x3], [0x3, 0x9, 0x8004, 0x0, 0xfffffffe, 0x100, 0x5, 0x89, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x5, 0x9, 0x5, 0x4, 0x4a61eab3, 0x5, 0x8, 0x0, 0x3, 0x5, 0x2, 0xb, 0x5, 0x8, 0x2, 0x3, 0x2000000b, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fd, 0x7b, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x9, 0x5, 0x5, 0xac8, 0x2000af, 0x2, 0x4000003, 0x7ff, 0x12e, 0x4, 0x7, 0x0, 0x7, 0x5, 0x18, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x608, 0xbb73, 0x7, 0x8000b, 0x8, 0x938, 0x6, 0x6, 0x0, 0xb9, 0x8, 0x9, 0x401, 0x58, 0x451, 0x3, 0xff, 0x10000, 0x4, 0x7fff, 0x10003, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x4, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0x8, 0x9, 0xffffefff, 0x10003, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0x5, 0x5, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x8d67, 0x8, 0xf3e, 0x9, 0x8, 0xffd, 0xfffffffd, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2m15.187965666s ago: executing program 4 (id=238): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000003c0)={0x90, 0x405, 0x87, "757ec1471be8f8f93fd5e142eaf9cfd60c3eeb2be0de6a65860fd51df7bd4ad05d2e47a4311d59ff71b7393433e9fa5814913b02c46958961dab41eaf5ff41f17906ce0883498e542d5689f2f724a3c9346fe51101a197d212796eef655ff935f473d81a011e607a31ec47095549b6e20190e5b9daaecaeb7f7ecfdb47dd6e711ed28f125f5748bd051bb4c2d4ad9152"}) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, &(0x7f00000001c0)='1\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='secret\x00', &(0x7f0000000200)='AQB1234567890123456789012345678901234567890=\x00', 0x0) close(0x3) 2m14.180842681s ago: executing program 4 (id=241): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_read_part_table(0x1057, &(0x7f0000001080)="$eJzsz8FpAkEUBuB/spuQIZd0kG0ipYg1WIQs3jxZyGKB4mVll0FsQET4vsPw/sfwwwsvVUvyt2vhck5K269vl+/Pmo/s7/+/hrHmpz40HE9J5v63xWFK+m2S/+sSW928jOM6HkpblnSb6dn3AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMA7uAUAAP//+gYLHg==") 1m58.755149574s ago: executing program 32 (id=241): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_read_part_table(0x1057, &(0x7f0000001080)="$eJzsz8FpAkEUBuB/spuQIZd0kG0ipYg1WIQs3jxZyGKB4mVll0FsQET4vsPw/sfwwwsvVUvyt2vhck5K269vl+/Pmo/s7/+/hrHmpz40HE9J5v63xWFK+m2S/+sSW928jOM6HkpblnSb6dn3AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMA7uAUAAP//+gYLHg==") 18.672449378s ago: executing program 0 (id=593): io_setup(0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@stripe}, {@minixdf}, {@orlov}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3ny2zftO+vIi1k0jIi2o07SSYotgKxU3LgTdCg3ppIRMP0giNWkWE/0HRF0LbgS1KF3YdTcKbt1o3VpcCEVioyCikTsfSWxmkrSd5Ibk94Mz95w5d+Z5nrlM7j0wNwHsWgPZQxpxICLOJhGF+vNpRHRXe70Rldp+C/OzI7/Pz44ksbj42i9JJBFxd352pPFeSX27rz7ojYhvX0zif++sjjs5PTM+XC6XJurjI1MXLh+ZnJ55ZuzC8PnS+dLFo8efGzo2dHzwxFDbav3jx1M3fnv85Z8qf37617Vf3/84iVPRV59bWUe7DMTA0meyUmdEDLc7WE466vWsrDPpXOdF6SYnBQBAS+mKa7hHohAdsXzxVoivvss1OQAAAKAtFjsiFgEAAIAdLrH+BwAAgB2u8TuAu/OzI42W7y8Sttad0xHRX6t/od5qM51RqW57oysi9t5NYuVtrUntZQ9tICJu/3Dii6zFJt2HvJbKXEQ82uz4J9X6+6t3ca+uP42IwTbEH7hnvN3qf7q7df2n2hA/7/oB2J1unq6dyFaf/9Kl659ocv7rbHLuehB5n/8a138Lq67/luvvaHH99+oGY1z95MMrreay+p+/8dLnjZbFz7YPVdR9uDMX8Vhns/qTpfqTFvWf3WCMwt9XSq3m8q5/8aOIQ9G8/oZk7f9PdGR0rFwarD02jTH3zdBnreLnXX92/Pe2qH+94395gzHeOHPmequ59etPf+5OXq/2uuvPvDU8NTVxNKI7eWX188fqN7S30Nin8R5Z/YefWPv736z+LESl/jlka4G5+jYbv31PzBeuXf1yrfqztV+ex//cAx7/dzcY48mv3zvcam7l+jdrWfzbSW0tDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaUT0RZIWl/ppWixG7IuI/8fetHxpcuqp0UtvXjyXzUX0R1c6OlYuDUZEoTZOsvHRan95fOye8bMRsT8iPijsqY6LI5fK5/IuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCX7IqIvkrQYEWlELBTStFjMOysAAACg7frzTgAAAADYdNb/AAAAsPNZ/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDJ9h+8eSuJiMrJPdWW6a7PdeWaGbDZ0rwTAHLTkXcCQG46804AyM19rvFdLsAOlKwz39typqftuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwfR06cPNWEhGVk3uqLdNdn+tq+oqDW5gdsJnSvBMActOx1mTn1uUBbD1fcdi9mq/xgd0kWWe+d3mfyr9nejYtJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2n75qS9JiRKTVfpoWixH/iYj+6EpGx8qlwYj4b0R8X+jqycY9eScNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA201Oz4wPl8ulCR0dnXw7yfZIo9bJ+y8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mJyeGR8ul0sTk3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORtcnpmfLhcLk1soHP9fnZe0cm7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vNPAAAA///5ZQ4Q") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0xa0000, 0x0, 0x0, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) 17.500839976s ago: executing program 0 (id=598): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r2, &(0x7f00000004c0)="0434", 0x2, 0xd1, 0x0, 0x0) recvfrom$unix(r3, 0x0, 0x0, 0x10102, 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) 14.208149146s ago: executing program 0 (id=606): syz_open_procfs(0x0, 0x0) socket(0x1f, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r5}, &(0x7f00000007c0), &(0x7f0000000640)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, 0x0, &(0x7f0000000580)=r4}, 0x20) 11.449129423s ago: executing program 1 (id=615): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r5 = syz_open_pts(r4, 0x141601) write(r5, 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 10.72924248s ago: executing program 3 (id=616): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x6, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xf7ced54}, @TCA_TBF_PARMS={0x28, 0x1, {{0x40, 0x2, 0x9733, 0xfffb, 0x6}, {0xff, 0x2, 0x3, 0xf252, 0x7, 0xd7a0}, 0x7, 0x6, 0x22e5}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 9.252112006s ago: executing program 3 (id=619): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8000, 0x4, 0x6, 0x77}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 9.156316189s ago: executing program 5 (id=620): capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r0, 0x3c1ef5685f8d0157, 0xffffffff}, 0x14}}, 0x20004000) 9.022460332s ago: executing program 5 (id=621): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) ioctl$BLKRASET(r0, 0x1262, &(0x7f0000000180)=0x8001) ptrace$ARCH_MAP_VDSO_64(0x1e, 0x0, 0x7, 0x2003) syz_open_dev$usbmon(&(0x7f0000000280), 0x8000000, 0x200) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0xfe, 0x0, 0x7fff7ffc}]}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 8.503700404s ago: executing program 3 (id=622): io_setup(0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@stripe}, {@minixdf}, {@orlov}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0xa0000, 0x0, 0x0, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) 8.379960217s ago: executing program 1 (id=623): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r4}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffe49}, 0x42) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x4008000) 6.62717937s ago: executing program 1 (id=625): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x3c, 0x64, 0x20, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @multicast2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40054}, 0x4804) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$dsp(0xffffffffffffff9c, 0x0, 0x62f82, 0x0) mkdir(0x0, 0x1ff) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r1, 0x0, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000080)={0x1, 0x0, {0x3, 0x0, 0x13, 0xa, 0x0, 0x64}}) 6.60954153s ago: executing program 3 (id=627): syz_open_procfs(0x0, 0x0) r0 = socket(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) 5.579105935s ago: executing program 0 (id=628): socket$nl_netfilter(0x10, 0x3, 0xc) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {0x5, 0x1, 0x0, 0x1000}, 0x0, [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x4001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x6, 0xd127, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x816, 0x8, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x5, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x1001f, 0x0, 0x4, 0x0, 0x4, 0x0, 0x42ac, 0x10, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xe43, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4], [0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400000, 0x0, 0x4, 0x0, 0x7c45, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x81, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x526d, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0xfffffffe, 0x0, 0x4000, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x956, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) 5.578824135s ago: executing program 1 (id=629): io_setup(0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@stripe}, {@minixdf}, {@orlov}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0xa0000, 0x0, 0x0, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 5.168093865s ago: executing program 2 (id=630): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='hybla', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) mount$binderfs(0x0, 0x0, &(0x7f0000000380), 0x402, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x62001, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x6, 0x65, 0x7, '\x00', 0x1ff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a3100000000090001007379"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x24000841}, 0x8000) ioctl$KVM_RUN(r1, 0xae80, 0x0) sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 5.138406706s ago: executing program 2 (id=631): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x2}, 0x1c) syz_emit_ethernet(0x12, &(0x7f0000000180)={@link_local, @random="b43df2afe7e3", @val={@void, {0x9900, 0x3, 0x0, 0x5}}, {@mpls_mc}}, 0x0) 4.368502474s ago: executing program 3 (id=632): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8000, 0x4, 0x6, 0x77}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 3.920055335s ago: executing program 2 (id=633): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r5 = syz_open_pts(r4, 0x141601) write(r5, 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 3.729805529s ago: executing program 0 (id=634): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='hybla', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24000000) syz_open_dev$video(0x0, 0x4, 0x0) mount$binderfs(0x0, 0x0, &(0x7f0000000380), 0x402, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x62001, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x6, 0x65, 0x7, '\x00', 0x1ff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.532394815s ago: executing program 1 (id=635): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000006300)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}, {@resgid}]}, 0xfe, 0x495, &(0x7f0000000e40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f00000001c0)=0x2, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f00000000c0)=r4, 0x4) close_range(r3, 0xffffffffffffffff, 0x0) unshare(0x28000600) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x4}, 0x1c) r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_DQBUF(r6, 0xc0585611, &(0x7f00000002c0)=@multiplanar_mmap={0xff, 0x5, 0x4, 0x400, 0x90, {}, {0x4, 0x0, 0x7, 0xf2, 0x7, 0x1, "b32ce756"}, 0xfffffe00, 0x1, {0x0}, 0x9}) 3.386398588s ago: executing program 5 (id=636): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r4}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffe49}, 0x42) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x4008000) 2.816868332s ago: executing program 2 (id=637): io_setup(0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@stripe}, {@minixdf}, {@orlov}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0xa0000, 0x0, 0x0, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 2.639187486s ago: executing program 0 (id=638): io_setup(0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@stripe}, {@minixdf}, {@orlov}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0xa0000, 0x0, 0x0, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) 2.638522856s ago: executing program 3 (id=639): syz_open_procfs(0x0, 0x0) socket(0x1f, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r5}, &(0x7f00000007c0), &(0x7f0000000640)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, 0x0, &(0x7f0000000580)=r4}, 0x20) 2.094893719s ago: executing program 5 (id=640): rename(&(0x7f0000000000)='./bus\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r2, 0x0, 0x0, 0xffffffffffffffff) listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000003640)={0x2020}, 0x2038) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000080)={0x3, 0x5}) futex(0x0, 0x5, 0x1, &(0x7f0000000000)={0x77359400}, 0x0, 0x0) 1.760228127s ago: executing program 2 (id=641): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='hybla', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) mount$binderfs(0x0, 0x0, &(0x7f0000000380), 0x402, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x62001, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x6, 0x65, 0x7, '\x00', 0x1ff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a3100000000090001007379"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x24000841}, 0x8000) ioctl$KVM_RUN(r1, 0xae80, 0x0) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 1.012108175s ago: executing program 1 (id=642): syz_open_procfs(0x0, 0x0) r0 = socket(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) 984.408326ms ago: executing program 5 (id=643): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x3c, 0x64, 0x20, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @multicast2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40054}, 0x4804) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$dsp(0xffffffffffffff9c, 0x0, 0x62f82, 0x0) mkdir(0x0, 0x1ff) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r1, 0x0, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000080)={0x1, 0x0, {0x3, 0x0, 0x13, 0xa, 0x0, 0x64}}) 962.610787ms ago: executing program 2 (id=644): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dvb_dvr(&(0x7f0000000340), 0x0, 0x20000) ppoll(&(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x20080058) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x4, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000540)={@link_local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1000, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo={0x8, 0x0, 0x0, 0x6, 0x3}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) mount(&(0x7f0000000300), 0x0, &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x3c, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000180)) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x68}}, 0x0) 0s ago: executing program 5 (id=645): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000002000006000000000000", @ANYRES32=r2], 0x20}}, 0x4000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]}) close_range(r4, 0xffffffffffffffff, 0x600000000000000) kernel console output (not intermixed with test programs): v packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.601543][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.614685][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.621883][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.651850][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.676519][ T4190] device hsr_slave_0 entered promiscuous mode [ 62.684106][ T4190] device hsr_slave_1 entered promiscuous mode [ 62.690990][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.700161][ T4190] Cannot create hsr debugfs directory [ 62.710768][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.718436][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.746371][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.814124][ T4194] device hsr_slave_0 entered promiscuous mode [ 62.821050][ T4194] device hsr_slave_1 entered promiscuous mode [ 62.827907][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.835896][ T4194] Cannot create hsr debugfs directory [ 62.863471][ T4192] device hsr_slave_0 entered promiscuous mode [ 62.870373][ T4192] device hsr_slave_1 entered promiscuous mode [ 62.877130][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.885088][ T4192] Cannot create hsr debugfs directory [ 62.894111][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 62.903014][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 62.908971][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 62.973078][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 62.979625][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 63.165845][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.177275][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.188457][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.202279][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.266547][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.287360][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.296783][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.313750][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.363922][ T4190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.378020][ T4190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.395471][ T4190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.425148][ T4190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.442523][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.478898][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.489680][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.500469][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.517563][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.527029][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.537749][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.548506][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.558202][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.568016][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.575554][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.605649][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.619611][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.639134][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.649073][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.659658][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.668994][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.676098][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.696071][ T4194] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.707642][ T4194] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.716543][ T4194] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.735784][ T4194] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.754164][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.781350][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.794696][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.802484][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.811474][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.822310][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.831879][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.840755][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.847871][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.856443][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.889060][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.906783][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.917561][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.926442][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.937542][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.946811][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.956082][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.965266][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.974232][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.982735][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.994627][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.014338][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.022096][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.030394][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.039507][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.049970][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.059414][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.066628][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.092854][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.105722][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.121014][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.129764][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.138956][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.149093][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.157021][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.168104][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.177051][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.184164][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.218200][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.229476][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.239245][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.248347][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.256987][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.267671][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.286024][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.299253][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.315313][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.330652][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.341185][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.355180][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.364922][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.381176][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.389784][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.398144][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.407491][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.418752][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.427690][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.439316][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.448707][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.461584][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.471054][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.480026][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.487224][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.498583][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.507314][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.516022][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.523333][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.533352][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.551013][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.563233][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.586867][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.597781][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.621639][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.631066][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.640042][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.650342][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.660118][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.669533][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.678525][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.686379][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.694291][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.702801][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.711924][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.728561][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.737880][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.746231][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.756084][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.783829][ T4192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.814131][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.828851][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.858831][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.871260][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.881227][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.890540][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.899757][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.908371][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.917562][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.929917][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.939192][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.973394][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 64.974577][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.984689][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 64.989144][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.011717][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 65.012862][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.029368][ T4187] device veth0_vlan entered promiscuous mode [ 65.046953][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.057212][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.067102][ T1282] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.074228][ T1282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.081458][ T4229] Bluetooth: hci2: command 0x041b tx timeout [ 65.084184][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.090521][ T4229] Bluetooth: hci4: command 0x041b tx timeout [ 65.108049][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.128550][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.138583][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.147469][ T1282] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.154796][ T1282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.163215][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.171809][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.180938][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.188985][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.236848][ T4187] device veth1_vlan entered promiscuous mode [ 65.253928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.271171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.280515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.289818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.298696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.306336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.313964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.322829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.332216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.349522][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.358343][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.371946][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.384631][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.394638][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.412845][ T4194] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.426545][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.450243][ T4186] device veth0_vlan entered promiscuous mode [ 65.464777][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.472912][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.489249][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.498806][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.507518][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.517615][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.526371][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.535446][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.542905][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.550497][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.569022][ T4187] device veth0_macvtap entered promiscuous mode [ 65.581189][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.595755][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.613965][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.644664][ T4187] device veth1_macvtap entered promiscuous mode [ 65.665409][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.683887][ T4186] device veth1_vlan entered promiscuous mode [ 65.730697][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.739274][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.749829][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.759315][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.769307][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.778826][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.804771][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.831786][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.842694][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.854123][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.863976][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.872688][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.881752][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.906872][ T4186] device veth0_macvtap entered promiscuous mode [ 65.924518][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.933944][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.942682][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.954961][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.963348][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.972079][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.981432][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.989901][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.998855][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.015306][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.046142][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.055126][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.065098][ T4192] device veth0_vlan entered promiscuous mode [ 66.074200][ T4186] device veth1_macvtap entered promiscuous mode [ 66.124455][ T4192] device veth1_vlan entered promiscuous mode [ 66.140189][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.148975][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.159715][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.168422][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.182507][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.190432][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.209880][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.221230][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.233635][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.247313][ T4190] device veth0_vlan entered promiscuous mode [ 66.266346][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.275437][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.284951][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.294944][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.303655][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.337149][ T4190] device veth1_vlan entered promiscuous mode [ 66.345460][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.356176][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.368160][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.381136][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.389781][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.398423][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.407382][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.416966][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.433307][ T4194] device veth0_vlan entered promiscuous mode [ 66.450663][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.460469][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.469220][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.477705][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.489045][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.508307][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.517708][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.526964][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.536091][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.549104][ T4192] device veth0_macvtap entered promiscuous mode [ 66.554354][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.568204][ T4192] device veth1_macvtap entered promiscuous mode [ 66.575717][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.591054][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.608236][ T4194] device veth1_vlan entered promiscuous mode [ 66.642179][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.646104][ T4190] device veth0_macvtap entered promiscuous mode [ 66.658514][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.672269][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.682296][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.691818][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.708408][ T4190] device veth1_macvtap entered promiscuous mode [ 66.735431][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.747915][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.761054][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.772436][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.784573][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.796274][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.808259][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.844906][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.859361][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.869440][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.884749][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.900380][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.917811][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.927869][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.940412][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.959988][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.971321][ T4194] device veth0_macvtap entered promiscuous mode [ 66.991817][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.004763][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.016949][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.028195][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.039035][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.050517][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.056725][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 67.064057][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.072734][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 67.075959][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.092309][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 67.093035][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.108303][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.117641][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.134317][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 67.136154][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.140923][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 67.172776][ T1282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.186030][ T1282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.382733][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.503177][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.534287][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.571700][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.604385][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.655850][ T4194] device veth1_macvtap entered promiscuous mode [ 67.684061][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.713379][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.751687][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.791153][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.829937][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.870039][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.926610][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.956909][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.980702][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.034926][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.095772][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.104954][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.114234][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.123105][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.135066][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.146616][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.177262][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.236289][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.248885][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.260323][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.271678][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.281920][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.292884][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.303541][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.314633][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.326957][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.344750][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.360907][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.389773][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.400944][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.411671][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.423007][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.443003][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.461502][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.472023][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.488724][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.502618][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.529702][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.552372][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.564511][ T4194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.574934][ T4194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.584255][ T4194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.593403][ T4194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.661152][ T4235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.694405][ T4235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.716016][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.174827][ T4231] Bluetooth: hci1: command 0x0419 tx timeout [ 69.181282][ T4231] Bluetooth: hci0: command 0x0419 tx timeout [ 69.187441][ T4231] Bluetooth: hci3: command 0x0419 tx timeout [ 69.207368][ T4235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.217234][ T4231] Bluetooth: hci2: command 0x0419 tx timeout [ 69.227587][ T4231] Bluetooth: hci4: command 0x0419 tx timeout [ 69.284370][ T4235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.324724][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.478790][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.510564][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.523659][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.529353][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.694321][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.697662][ T1282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.709645][ T1282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.711413][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.728284][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.354011][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.360764][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.766064][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.783500][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.807086][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.994768][ T4312] netlink: 'syz.2.3': attribute type 10 has an invalid length. [ 73.027727][ T4312] team0: Port device dummy0 added [ 73.743331][ T4312] syz.2.3 (4312) used greatest stack depth: 20176 bytes left [ 73.795984][ T4322] loop3: detected capacity change from 0 to 512 [ 73.912998][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 73.932983][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 73.942974][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 73.952972][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 73.962966][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 73.972980][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 73.982975][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 73.992972][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 74.002972][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 74.012971][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 75.095051][ T4322] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.4: Unrecognised inode hash code 255 [ 75.179539][ T4322] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.4: Corrupt directory, running e2fsck is recommended [ 75.230038][ T4322] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 75.257803][ T4332] device syzkaller0 entered promiscuous mode [ 75.309155][ T4322] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.4: corrupted in-inode xattr [ 75.410438][ T4322] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.4: couldn't read orphan inode 15 (err -117) [ 75.476206][ T4322] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,noblock_validity,abort,dioread_lock,stripe=0x00000000000000e3,grpjquota=.nouser_xattr,nolazytime,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 75.795119][ T4322] ======================================================= [ 75.795119][ T4322] WARNING: The mand mount option has been deprecated and [ 75.795119][ T4322] and is ignored by this kernel. Remove the mand [ 75.795119][ T4322] option from the mount to silence this warning. [ 75.795119][ T4322] ======================================================= [ 75.834232][ T4338] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.904680][ T4322] EXT4-fs error (device loop3): ext4_remount:6062: comm syz.3.4: Abort forced by user [ 75.930961][ T4322] EXT4-fs (loop3): Remounting filesystem read-only [ 76.003366][ T4322] EXT4-fs (loop3): re-mounted. Opts: minixdf,noblock_validity,abort,dioread_lock,stripe=0x00000000000000e3,grpjquota=.nouser_xattr,nolazytime,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 76.291446][ T4322] EXT4-fs error (device loop3): ext4_remount:6062: comm syz.3.4: Abort forced by user [ 76.305405][ T4322] EXT4-fs (loop3): Remounting filesystem read-only [ 76.312055][ T4322] EXT4-fs (loop3): re-mounted. Opts: minixdf,noblock_validity,abort,dioread_lock,stripe=0x00000000000000e3,grpjquota=.nouser_xattr,nolazytime,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 76.842103][ T4354] loop4: detected capacity change from 0 to 2048 [ 76.895468][ T4354] UDF-fs: bad mount option "†ir½s°00000000000000000000" or missing value [ 77.095773][ T1111] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 77.623446][ T1111] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 77.913403][ T1111] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 77.953080][ T1111] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.972907][ T1111] usb 4-1: Product: syz [ 77.977387][ T1111] usb 4-1: Manufacturer: syz [ 77.991423][ T1111] usb 4-1: SerialNumber: syz [ 78.029371][ T1111] usb 4-1: config 0 descriptor?? [ 78.046888][ T4364] device syzkaller0 entered promiscuous mode [ 78.292566][ T1111] usb 4-1: USB disconnect, device number 2 [ 80.313172][ T4228] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 80.899353][ T4383] vivid-000: ================= START STATUS ================= [ 80.908138][ T4383] vivid-000: Radio HW Seek Mode: Bounded [ 80.914415][ T4383] vivid-000: Radio Programmable HW Seek: false [ 80.920725][ T4383] vivid-000: RDS Rx I/O Mode: Block I/O [ 80.926451][ T4383] vivid-000: Generate RBDS Instead of RDS: false [ 80.932905][ T4383] vivid-000: RDS Reception: true [ 80.938119][ T4383] vivid-000: RDS Program Type: 0 inactive [ 80.944023][ T4383] vivid-000: RDS PS Name: inactive [ 80.949434][ T4383] vivid-000: RDS Radio Text: inactive [ 80.955184][ T4383] vivid-000: RDS Traffic Announcement: false inactive [ 80.962158][ T4383] vivid-000: RDS Traffic Program: false inactive [ 80.968740][ T4383] vivid-000: RDS Music: false inactive [ 80.974561][ T4383] vivid-000: ================== END STATUS ================== [ 82.227291][ T1108] cfg80211: failed to load regulatory.db [ 82.433078][ T4228] usb 5-1: Using ep0 maxpacket: 8 [ 82.493105][ T4228] usb 5-1: device descriptor read/all, error -71 [ 83.375540][ T4391] loop1: detected capacity change from 0 to 256 [ 83.490285][ T26] audit: type=1800 audit(1786308181.091:2): pid=4391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.36" name="file1" dev="loop1" ino=1048590 res=0 errno=0 [ 83.759582][ T4396] trusted_key: encrypted_key: insufficient parameters specified [ 85.033030][ T4233] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 85.483146][ T4233] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 86.453294][ T4233] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 86.472511][ T4233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.480677][ T4233] usb 4-1: Product: syz [ 86.488754][ T4233] usb 4-1: Manufacturer: syz [ 86.502538][ T4233] usb 4-1: SerialNumber: syz [ 86.525443][ T4233] usb 4-1: config 0 descriptor?? [ 86.787496][ T23] usb 4-1: USB disconnect, device number 3 [ 86.868242][ T4421] loop0: detected capacity change from 0 to 764 [ 87.476774][ T4425] vivid-004: ================= START STATUS ================= [ 87.484636][ T4425] vivid-004: Radio HW Seek Mode: Bounded [ 87.491176][ T4425] vivid-004: Radio Programmable HW Seek: false [ 87.498341][ T4425] vivid-004: RDS Rx I/O Mode: Block I/O [ 87.504345][ T4425] vivid-004: Generate RBDS Instead of RDS: false [ 87.511198][ T4425] vivid-004: RDS Reception: true [ 87.516610][ T4425] vivid-004: RDS Program Type: 0 inactive [ 87.523256][ T4425] vivid-004: RDS PS Name: inactive [ 87.528793][ T4425] vivid-004: RDS Radio Text: inactive [ 87.534728][ T4425] vivid-004: RDS Traffic Announcement: false inactive [ 87.541748][ T4425] vivid-004: RDS Traffic Program: false inactive [ 87.548402][ T4425] vivid-004: RDS Music: false inactive [ 87.554124][ T4425] vivid-004: ================== END STATUS ================== [ 88.847780][ T4421] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 89.201607][ T4432] Zero length message leads to an empty skb [ 89.555875][ T4434] loop4: detected capacity change from 0 to 8192 [ 90.311293][ T4448] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 90.646261][ T4456] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 90.666684][ T4456] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 92.064500][ T4465] vivid-002: ================= START STATUS ================= [ 92.073716][ T4465] vivid-002: Radio HW Seek Mode: Bounded [ 92.079874][ T4465] vivid-002: Radio Programmable HW Seek: false [ 92.086837][ T4465] vivid-002: RDS Rx I/O Mode: Block I/O [ 92.093262][ T4465] vivid-002: Generate RBDS Instead of RDS: false [ 92.099902][ T4465] vivid-002: RDS Reception: true [ 92.105044][ T4465] vivid-002: RDS Program Type: 0 inactive [ 92.110958][ T4465] vivid-002: RDS PS Name: inactive [ 92.116660][ T4465] vivid-002: RDS Radio Text: inactive [ 92.122279][ T4465] vivid-002: RDS Traffic Announcement: false inactive [ 92.129846][ T4465] vivid-002: RDS Traffic Program: false inactive [ 92.136774][ T4465] vivid-002: RDS Music: false inactive [ 92.142866][ T4465] vivid-002: ================== END STATUS ================== [ 93.816230][ T4478] gadgetfs: bound to dummy_udc driver [ 94.432997][ T4232] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 94.984648][ T4486] ODEBUG: Out of memory. ODEBUG disabled [ 95.656494][ T4232] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 95.669784][ T4488] loop1: detected capacity change from 0 to 256 [ 96.132942][ C0] sched: RT throttling activated [ 96.303596][ T4491] netlink: 'syz.1.61': attribute type 10 has an invalid length. [ 96.333294][ T4232] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 96.360451][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.401706][ T4232] usb 3-1: Product: syz [ 96.418211][ T4232] usb 3-1: Manufacturer: syz [ 96.436083][ T4232] usb 3-1: SerialNumber: syz [ 96.459512][ T4491] team0: Device veth1_vlan failed to register rx_handler [ 96.502570][ T4232] usb 3-1: config 0 descriptor?? [ 96.658634][ T4232] usb 3-1: can't set config #0, error -71 [ 96.683363][ T4232] usb 3-1: USB disconnect, device number 2 [ 100.548037][ T4533] vivid-004: ================= START STATUS ================= [ 100.555940][ T4533] vivid-004: Radio HW Seek Mode: Bounded [ 100.561945][ T4533] vivid-004: Radio Programmable HW Seek: false [ 100.568489][ T4533] vivid-004: RDS Rx I/O Mode: Block I/O [ 100.574383][ T4533] vivid-004: Generate RBDS Instead of RDS: false [ 100.580976][ T4533] vivid-004: RDS Reception: true [ 100.586045][ T4533] vivid-004: RDS Program Type: 0 inactive [ 100.593653][ T4533] vivid-004: RDS PS Name: inactive [ 100.599043][ T4533] vivid-004: RDS Radio Text: inactive [ 100.604874][ T4533] vivid-004: RDS Traffic Announcement: false inactive [ 100.612013][ T4533] vivid-004: RDS Traffic Program: false inactive [ 100.618644][ T4533] vivid-004: RDS Music: false inactive [ 100.624381][ T4533] vivid-004: ================== END STATUS ================== [ 105.168230][ T4568] loop3: detected capacity change from 0 to 4096 [ 106.210286][ T4568] ntfs3: Unknown parameter 'nocase' [ 107.874880][ T4585] device syzkaller0 entered promiscuous mode [ 108.220939][ T4595] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 108.244235][ T4595] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 108.759522][ T4608] syz.0.100 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 108.771284][ T4608] CPU: 0 PID: 4608 Comm: syz.0.100 Not tainted syzkaller #0 [ 108.778692][ T4608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.788783][ T4608] Call Trace: [ 108.792175][ T4608] [ 108.795123][ T4608] dump_stack_lvl+0x188/0x250 [ 108.799849][ T4608] ? show_regs_print_info+0x20/0x20 [ 108.805078][ T4608] ? load_image+0x410/0x410 [ 108.809626][ T4608] ? local_lock_release+0x170/0x170 [ 108.814849][ T4608] ? __rwlock_init+0x140/0x140 [ 108.819696][ T4608] dump_header+0xd9/0x780 [ 108.824057][ T4608] oom_kill_process+0x20e/0x3d0 [ 108.829555][ T4608] out_of_memory+0xdb2/0x1190 [ 108.835506][ T4608] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 108.841176][ T4608] ? mutex_lock_io_nested+0x60/0x60 [ 108.846500][ T4608] ? unregister_oom_notifier+0x20/0x20 [ 108.852003][ T4608] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 108.857586][ T4608] ? mem_cgroup_oom_trylock+0x210/0x210 [ 108.858031][ T4593] loop4: detected capacity change from 0 to 40427 [ 108.863166][ T4608] ? do_raw_spin_unlock+0x11d/0x230 [ 108.863224][ T4608] try_charge_memcg+0x1075/0x15b0 [ 108.863262][ T4608] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 108.885707][ T4608] ? rcu_lock_acquire+0x30/0x30 [ 108.890608][ T4608] obj_cgroup_charge_pages+0x87/0x190 [ 108.896020][ T4608] ? __memcg_kmem_charge_page+0x380/0x380 [ 108.901947][ T4608] ? rcu_lock_acquire+0x30/0x30 [ 108.906830][ T4608] obj_cgroup_charge+0x19f/0x320 [ 108.911810][ T4608] ? mod_objcg_mlstate+0x2e0/0x2e0 [ 108.916952][ T4608] slab_pre_alloc_hook+0x9d/0xc0 [ 108.921911][ T4608] ? new_inode_pseudo+0x77/0x210 [ 108.926876][ T4608] kmem_cache_alloc+0x3d/0x280 [ 108.931665][ T4608] new_inode_pseudo+0x77/0x210 [ 108.936453][ T4608] new_inode+0x25/0x1d0 [ 108.940635][ T4608] binderfs_binder_device_create+0x19a/0xa90 [ 108.946684][ T4608] binderfs_fill_super+0xb29/0xf30 [ 108.951821][ T4608] ? ida_alloc_range+0x7cb/0x860 [ 108.956800][ T4608] ? binderfs_fs_context_reconfigure+0x200/0x200 [ 108.963180][ T4608] ? up_write+0x1b6/0x410 [ 108.964949][ T4593] F2FS-fs (loop4): invalid crc value [ 108.967801][ T4608] ? kill_litter_super+0xa0/0xa0 [ 108.967836][ T4608] ? binderfs_fs_context_reconfigure+0x200/0x200 [ 108.967862][ T4608] get_tree_nodev+0xb0/0x160 [ 108.967885][ T4608] vfs_get_tree+0x88/0x270 [ 108.994061][ T4608] do_new_mount+0x247/0xa40 [ 108.998692][ T4608] __se_sys_mount+0x2e3/0x3d0 [ 109.003498][ T4608] ? __x64_sys_mount+0xc0/0xc0 [ 109.008293][ T4608] ? lockdep_hardirqs_on+0x94/0x140 [ 109.013600][ T4608] ? __x64_sys_mount+0x1c/0xc0 [ 109.018598][ T4608] do_syscall_64+0x4c/0xa0 [ 109.023125][ T4608] ? clear_bhb_loop+0x30/0x80 [ 109.027823][ T4608] ? clear_bhb_loop+0x30/0x80 [ 109.032537][ T4608] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.038833][ T4608] RIP: 0033:0x7f884da0e0d9 [ 109.043552][ T4608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.063392][ T4608] RSP: 002b:00007f884bc66028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 109.072741][ T4608] RAX: ffffffffffffffda RBX: 00007f884dc95fa0 RCX: 00007f884da0e0d9 [ 109.081001][ T4608] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000000000000000 [ 109.089039][ T4608] RBP: 00007f884daa5024 R08: 0000000000000000 R09: 0000000000000000 [ 109.097233][ T4608] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000000 [ 109.097837][ T4593] F2FS-fs (loop4): Found nat_bits in checkpoint [ 109.106205][ T4608] R13: 00007f884dc96038 R14: 00007f884dc95fa0 R15: 00007ffd2048f0b8 [ 109.106243][ T4608] [ 109.208689][ T4608] memory: usage 8kB, limit 8kB, failcnt 21 [ 109.231042][ T4608] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 109.278026][ T4593] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 109.298565][ T4608] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 110.997548][ T4608] Memory cgroup stats for /syz0/test: [ 110.998428][ T4608] anon 0 [ 110.998428][ T4608] file 0 [ 110.998428][ T4608] kernel_stack 0 [ 110.998428][ T4608] pagetables 0 [ 110.998428][ T4608] percpu 0 [ 110.998428][ T4608] sock 0 [ 110.998428][ T4608] shmem 0 [ 110.998428][ T4608] file_mapped 0 [ 110.998428][ T4608] file_dirty 0 [ 110.998428][ T4608] file_writeback 0 [ 110.998428][ T4608] swapcached 0 [ 110.998428][ T4608] anon_thp 0 [ 110.998428][ T4608] file_thp 0 [ 110.998428][ T4608] shmem_thp 0 [ 110.998428][ T4608] inactive_anon 0 [ 110.998428][ T4608] active_anon 0 [ 110.998428][ T4608] inactive_file 0 [ 110.998428][ T4608] active_file 0 [ 110.998428][ T4608] unevictable 0 [ 110.998428][ T4608] slab_reclaimable 5448 [ 110.998428][ T4608] slab_unreclaimable 2632 [ 110.998428][ T4608] slab 8080 [ 110.998428][ T4608] workingset_refault_anon 0 [ 110.998428][ T4608] workingset_refault_file 0 [ 110.998428][ T4608] workingset_activate_anon 0 [ 110.998428][ T4608] workingset_activate_file 0 [ 111.603173][ T4608] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.100,pid=4607,uid=0 [ 111.705645][ T4608] Memory cgroup out of memory: Killed process 4608 (syz.0.100) total-vm:104292kB, anon-rss:1416kB, file-rss:22528kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 112.053187][ T13] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 112.185229][ T4638] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 112.215764][ T4638] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 113.350762][ T4649] device syzkaller0 entered promiscuous mode [ 114.373937][ T13] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 114.408309][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.433331][ T13] usb 4-1: Product: syz [ 114.437847][ T13] usb 4-1: Manufacturer: syz [ 114.921579][ T4664] fuse: Unknown parameter 'group_i' [ 115.502983][ T13] usb 4-1: SerialNumber: syz [ 115.532835][ T13] usb 4-1: config 0 descriptor?? [ 115.563093][ T13] usb 4-1: can't set config #0, error -71 [ 115.751136][ T13] usb 4-1: USB disconnect, device number 4 [ 116.627442][ T4680] device syzkaller0 entered promiscuous mode [ 117.719065][ T4696] netlink: 12 bytes leftover after parsing attributes in process `syz.4.127'. [ 118.484744][ T4696] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.607060][ T4702] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 118.654451][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 119.121499][ T26] audit: type=1804 audit(1786308216.721:3): pid=4715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.134" name="bus" dev="ramfs" ino=35071 res=1 errno=0 [ 119.153896][ T4709] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 119.162049][ T4709] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 119.973022][ T21] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 120.355547][ T4731] loop0: detected capacity change from 0 to 512 [ 120.514593][ T4731] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 120.633114][ T21] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 120.676148][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.803153][ T21] usb 3-1: Product: syz [ 120.818907][ T21] usb 3-1: Manufacturer: syz [ 121.256467][ T21] usb 3-1: SerialNumber: syz [ 121.462972][ T21] usb 3-1: config 0 descriptor?? [ 121.587208][ T4751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.142'. [ 121.711515][ T4751] bridge1: port 1(dummy0) entered blocking state [ 121.757546][ T1108] usb 3-1: USB disconnect, device number 3 [ 121.790991][ T4751] bridge1: port 1(dummy0) entered disabled state [ 121.854519][ T4751] device dummy0 entered promiscuous mode [ 121.887507][ T4755] netlink: 'syz.1.142': attribute type 10 has an invalid length. [ 121.913194][ T4755] netlink: 40 bytes leftover after parsing attributes in process `syz.1.142'. [ 121.955200][ T4755] bridge1: port 1(dummy0) entered blocking state [ 121.961834][ T4755] bridge1: port 1(dummy0) entered forwarding state [ 122.017186][ T4755] bridge1: port 1(dummy0) entered disabled state [ 123.110149][ T4770] binder: 4764:4770 ioctl 4018620d 0 returned -22 [ 124.519693][ T4783] loop4: detected capacity change from 0 to 64 [ 124.788728][ T4786] loop1: detected capacity change from 0 to 4096 [ 125.235813][ T4786] ntfs3: loop1: failed to replay log file. Can't mount rw! [ 125.973066][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 127.033124][ T7] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 127.042329][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.068001][ T7] usb 2-1: Product: syz [ 127.072207][ T7] usb 2-1: Manufacturer: syz [ 127.092520][ T7] usb 2-1: SerialNumber: syz [ 127.374318][ T7] usb 2-1: config 0 descriptor?? [ 127.651390][ T7] usb 2-1: USB disconnect, device number 2 [ 127.689683][ T4807] loop2: detected capacity change from 0 to 32768 [ 127.867069][ T4807] XFS (loop2): Mounting V5 Filesystem [ 127.949357][ T4807] XFS (loop2): Ending clean mount [ 128.236650][ T4192] XFS (loop2): Unmounting Filesystem [ 128.316182][ T4832] loop3: detected capacity change from 0 to 256 [ 128.415719][ T4832] exfat: Deprecated parameter 'utf8' [ 128.421398][ T4832] exfat: Deprecated parameter 'utf8' [ 128.673825][ T4832] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 128.878703][ T4846] netlink: 'syz.1.172': attribute type 4 has an invalid length. [ 129.533589][ T4228] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 131.193651][ T4228] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 131.464259][ T4228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.472328][ T4228] usb 2-1: Product: syz [ 131.531522][ T4228] usb 2-1: Manufacturer: syz [ 131.547091][ T4228] usb 2-1: SerialNumber: syz [ 131.583459][ T4228] usb 2-1: config 0 descriptor?? [ 131.815649][ T4877] loop2: detected capacity change from 0 to 128 [ 131.830733][ T4232] usb 2-1: USB disconnect, device number 3 [ 131.924555][ T4877] FAT-fs (loop2): Unrecognized mount option "fmask=0000000000000000ã¥3Oošjnonumtail=0" or missing value [ 132.746485][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.752843][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.158339][ T4918] loop1: detected capacity change from 0 to 764 [ 135.655360][ T4928] loop3: detected capacity change from 0 to 1024 [ 137.436718][ T4954] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 137.445121][ T4954] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 137.584291][ T4196] Bluetooth: hci4: link tx timeout [ 137.592623][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 137.749529][ T4196] Bluetooth: hci4: link tx timeout [ 137.754829][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 137.774638][ T4196] Bluetooth: hci4: link tx timeout [ 137.779852][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 138.662339][ T4196] Bluetooth: hci4: link tx timeout [ 138.667546][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.191137][ T4233] Bluetooth: hci4: command 0x0406 tx timeout [ 140.203005][ T4196] Bluetooth: hci4: link tx timeout [ 140.208146][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.649967][ T5019] netlink: 16 bytes leftover after parsing attributes in process `syz.4.211'. [ 141.054893][ T4196] Bluetooth: hci4: link tx timeout [ 141.060056][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 141.154706][ T4196] Bluetooth: hci4: link tx timeout [ 141.159981][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 141.702029][ T5031] kvm [5030]: vcpu0, guest rIP: 0x913e disabled perfctr wrmsr: 0xc1 data 0x0 [ 141.728061][ T4196] Bluetooth: hci4: link tx timeout [ 141.733279][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 141.843331][ T5031] kvm [5030]: vcpu0, guest rIP: 0x913e disabled perfctr wrmsr: 0xc2 data 0x0 [ 141.869750][ T5031] kvm [5030]: vcpu0, guest rIP: 0x913e ignored wrmsr: 0x11e data 0xbe702111 [ 142.677830][ T5046] jffs2: notice: (5046) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 144.279951][ T1108] hid-generic 0F98:0004:0009.0001: unknown main item tag 0x0 [ 144.300012][ T1108] hid-generic 0F98:0004:0009.0001: unknown main item tag 0x0 [ 144.327078][ T1108] hid-generic 0F98:0004:0009.0001: unknown main item tag 0x0 [ 144.350823][ T1108] hid-generic 0F98:0004:0009.0001: unknown main item tag 0x0 [ 144.371735][ T1108] hid-generic 0F98:0004:0009.0001: unknown main item tag 0x0 [ 144.395368][ T1108] hid-generic 0F98:0004:0009.0001: unknown main item tag 0x0 [ 144.418665][ T1108] hid-generic 0F98:0004:0009.0001: unknown main item tag 0x0 [ 144.441104][ T1108] hid-generic 0F98:0004:0009.0001: unknown main item tag 0x0 [ 144.468267][ T1108] hid-generic 0F98:0004:0009.0001: unknown main item tag 0x0 [ 144.491476][ T1108] hid-generic 0F98:0004:0009.0001: unknown main item tag 0x0 [ 144.515442][ T1108] hid-generic 0F98:0004:0009.0001: unknown main item tag 0x0 [ 144.540985][ T1108] hid-generic 0F98:0004:0009.0001: unknown main item tag 0x0 [ 144.566414][ T1108] hid-generic 0F98:0004:0009.0001: unknown main item tag 0x0 [ 144.587203][ T1108] hid-generic 0F98:0004:0009.0001: unknown main item tag 0x0 [ 144.609912][ T1108] hid-generic 0F98:0004:0009.0001: unknown main item tag 0x0 [ 144.635474][ T1108] hid-generic 0F98:0004:0009.0001: unknown main item tag 0x0 [ 144.657577][ T1108] hid-generic 0F98:0004:0009.0001: unknown main item tag 0x0 [ 144.715805][ T1108] hid-generic 0F98:0004:0009.0001: hidraw0: HID v0.04 Device [syz1] on syz0 [ 145.383617][ T5071] fido_id[5071]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 145.743231][ T4196] Bluetooth: hci4: link tx timeout [ 145.750329][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 146.012803][ T4196] Bluetooth: hci4: link tx timeout [ 146.018573][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 146.787006][ T4196] Bluetooth: hci4: link tx timeout [ 146.792453][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 147.614745][ T4196] Bluetooth: hci4: link tx timeout [ 147.620084][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 147.938618][ T5106] program syz.4.238 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 148.040758][ T4966] Set syz1 is full, maxelem 65536 reached [ 148.652017][ T4196] Bluetooth: hci4: link tx timeout [ 148.657437][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 148.680465][ T5109] loop2: detected capacity change from 0 to 256 [ 148.932570][ T5116] netlink: 'syz.0.237': attribute type 10 has an invalid length. [ 148.940221][ T5111] loop3: detected capacity change from 0 to 8192 [ 149.007982][ T5116] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 149.036788][ T5114] netlink: 14 bytes leftover after parsing attributes in process `syz.0.237'. [ 149.048715][ T5111] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 149.133652][ T5114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.190024][ T5114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.244649][ T5114] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 149.662065][ T5114] bond0 (unregistering): Released all slaves [ 149.684673][ T5121] loop4: detected capacity change from 0 to 8192 [ 149.707822][ T5134] netlink: 12 bytes leftover after parsing attributes in process `syz.2.245'. [ 149.728972][ T4196] Bluetooth: hci4: link tx timeout [ 149.734231][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 149.883234][ T4179] loop4: p2 p3 p4 [ 149.902262][ T4179] loop4: p2 size 64053 extends beyond EOD, truncated [ 150.975968][ T4196] Bluetooth: hci4: link tx timeout [ 150.981126][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 151.081239][ T4179] loop4: p3 start 65280 is beyond EOD, truncated [ 151.126708][ T4179] loop4: p4 size 50331904 extends beyond EOD, truncated [ 151.326173][ T5121] loop4: p2 p3 p4 [ 151.330447][ T5121] loop4: p2 size 64053 extends beyond EOD, truncated [ 151.420614][ T5121] loop4: p3 start 65280 is beyond EOD, truncated [ 151.458564][ T5121] loop4: p4 size 50331904 extends beyond EOD, truncated [ 152.669132][ T5149] loop2: detected capacity change from 0 to 32768 [ 152.877026][ T5149] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 153.233344][ T5165] loop3: detected capacity change from 0 to 32768 [ 153.973698][ T5165] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.254 (5165) [ 154.080732][ T5165] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 154.143768][ T5165] BTRFS warning (device loop3): excessive commit interval 3581 [ 154.151389][ T5165] BTRFS info (device loop3): force zlib compression, level 3 [ 154.246725][ T5165] BTRFS info (device loop3): metadata ratio 107050 [ 154.313405][ T5165] BTRFS info (device loop3): turning on flush-on-commit [ 154.320431][ T5165] BTRFS info (device loop3): max_inline at 4096 [ 154.389388][ T5165] BTRFS info (device loop3): using free space tree [ 154.429229][ T5165] BTRFS info (device loop3): has skinny extents [ 154.518046][ T5211] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 154.523933][ T5149] syz.2.250 (5149) used greatest stack depth: 18304 bytes left [ 154.527006][ T5211] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 155.077227][ T4192] ocfs2: Unmounting device (7,2) on (node local) [ 155.129737][ T5165] BTRFS info (device loop3): enabling ssd optimizations [ 155.681521][ T5240] loop2: detected capacity change from 0 to 4096 [ 156.152407][ T5248] binder: 5245:5248 ioctl c0306201 0 returned -14 [ 156.245085][ T5240] EXT4-fs (loop2): Test dummy encryption mode enabled [ 156.252096][ T5240] EXT4-fs (loop2): Ignoring removed orlov option [ 156.277229][ T4196] Bluetooth: hci4: link tx timeout [ 156.282409][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 156.292859][ T4196] Bluetooth: hci4: link tx timeout [ 156.298101][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 156.310756][ T4196] Bluetooth: hci4: link tx timeout [ 156.316074][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 156.368537][ T5240] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 156.599115][ T4178] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop3 scanned by udevd (4178) [ 157.784779][ T5240] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 158.905945][ T5296] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 158.915932][ T5296] overlayfs: upper fs does not support tmpfile. [ 158.924044][ T5296] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 159.204640][ T5295] loop3: detected capacity change from 0 to 2048 [ 159.307172][ T5295] loop3: p1 < > p4 [ 159.307172][ T5295] p4: [ 159.380219][ T5295] loop3: p4 size 722688 extends beyond EOD, truncated [ 159.473149][ T3559] loop3: p1 < > p4 [ 159.473149][ T3559] p4: [ 159.521645][ T3559] loop3: p4 size 722688 extends beyond EOD, truncated [ 159.663150][ T4228] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 160.323424][ T4228] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 160.529438][ T4228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.543126][ T4228] usb 3-1: Product: syz [ 160.553313][ T4228] usb 3-1: Manufacturer: syz [ 160.558938][ T4228] usb 3-1: SerialNumber: syz [ 160.743509][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 160.763147][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 160.848733][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 160.850346][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 160.943171][ T4228] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 161.044124][ T4228] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 161.058580][ T5331] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 161.928297][ T5342] device syzkaller0 entered promiscuous mode [ 162.026377][ T4228] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -71 [ 162.078473][ T4228] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 163.185219][ T4228] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 163.194953][ T4228] lan78xx: probe of 3-1:1.0 failed with error -71 [ 163.212558][ T4228] usb 3-1: USB disconnect, device number 4 [ 164.533103][ T5253] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 164.933137][ T5253] usb 3-1: unable to get BOS descriptor or descriptor too short [ 165.003199][ T5368] chnl_net:caif_netlink_parms(): no params data found [ 165.023364][ T5253] usb 3-1: config 3 has an invalid interface number: 73 but max is 1 [ 165.031473][ T5253] usb 3-1: config 3 has no interface number 1 [ 165.043032][ T5253] usb 3-1: config 3 interface 73 altsetting 14 endpoint 0x2 has invalid wMaxPacketSize 0 [ 165.063016][ T5253] usb 3-1: config 3 interface 0 has no altsetting 0 [ 165.069661][ T5253] usb 3-1: config 3 interface 73 has no altsetting 0 [ 165.233113][ T5253] usb 3-1: New USB device found, idVendor=07ca, idProduct=2835, bcdDevice=ea.e7 [ 165.259360][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.280210][ T5253] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.293321][ T5253] usb 3-1: Product: syz [ 165.297519][ T5253] usb 3-1: Manufacturer: syz [ 165.323034][ T5253] usb 3-1: SerialNumber: syz [ 165.400957][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.467786][ T5368] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.513401][ T5368] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.544431][ T5368] device bridge_slave_0 entered promiscuous mode [ 165.604185][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.635417][ T5368] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.652872][ T5368] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.683687][ T5368] device bridge_slave_1 entered promiscuous mode [ 165.700391][ T5253] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-8 [ 165.711985][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.720276][ T5253] dvb_usb_af9035: probe of 3-1:3.0 failed with error -8 [ 165.812216][ T5368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.836501][ T5253] usb 3-1: USB disconnect, device number 5 [ 165.898645][ T5368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.041991][ T5368] team0: Port device team_slave_0 added [ 166.105839][ T5368] team0: Port device team_slave_1 added [ 166.212293][ T5368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.239828][ T5368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.343765][ T5368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.477268][ T5368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.484633][ T5368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.592141][ T5368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.653051][ T4228] Bluetooth: hci5: command 0x0409 tx timeout [ 166.834743][ T5368] device hsr_slave_0 entered promiscuous mode [ 167.600495][ T5368] device hsr_slave_1 entered promiscuous mode [ 167.682685][ T5408] netlink: 'syz.0.301': attribute type 7 has an invalid length. [ 167.703693][ T5368] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.711289][ T5368] Cannot create hsr debugfs directory [ 168.447561][ T5368] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 168.521800][ T5368] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 168.684605][ T5368] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 168.705952][ T5368] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 168.744016][ T21] Bluetooth: hci5: command 0x041b tx timeout [ 168.989422][ T9] device hsr_slave_0 left promiscuous mode [ 169.021483][ T9] device hsr_slave_1 left promiscuous mode [ 169.046400][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.079043][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.133211][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.172155][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.212297][ T9] device bridge_slave_1 left promiscuous mode [ 169.249850][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.324444][ T9] device bridge_slave_0 left promiscuous mode [ 169.366852][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.514015][ T9] device veth1_macvtap left promiscuous mode [ 169.553632][ T9] device veth0_macvtap left promiscuous mode [ 169.559721][ T9] device veth1_vlan left promiscuous mode [ 169.584107][ T9] device veth0_vlan left promiscuous mode [ 169.841176][ T9] bond1 (unregistering): (slave dummy0): Releasing backup interface [ 169.880945][ T9] bond1 (unregistering): Released all slaves [ 170.117472][ T5457] netlink: 20 bytes leftover after parsing attributes in process `syz.2.313'. [ 170.199096][ T9] team0 (unregistering): Port device team_slave_1 removed [ 170.253591][ T9] team0 (unregistering): Port device team_slave_0 removed [ 170.282529][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.329859][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.617402][ T9] bond0 (unregistering): Released all slaves [ 170.845970][ T23] Bluetooth: hci5: command 0x040f tx timeout [ 170.999745][ T5368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.670974][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 171.707661][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.819696][ T5368] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.844376][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.908998][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.017924][ T1282] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.025133][ T1282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.208986][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 172.333919][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.445161][ T1282] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.452347][ T1282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.858724][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.893092][ T21] Bluetooth: hci5: command 0x0419 tx timeout [ 173.023863][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 173.097811][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 173.209311][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.270059][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.294314][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.317804][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.352019][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 173.389659][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 173.412082][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.481161][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 173.539623][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.564159][ T5368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 173.592592][ T5562] syz.0.327 uses obsolete (PF_INET,SOCK_PACKET) [ 174.176088][ T146] Bluetooth: hci4: link tx timeout [ 174.181398][ T146] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 174.348044][ T5521] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 174.370066][ T5521] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 174.397429][ T5368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.668449][ T5586] loop0: detected capacity change from 0 to 4096 [ 174.733391][ T5586] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 175.071668][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 175.137851][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 175.184724][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 175.213894][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 175.274588][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 175.303849][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 175.335171][ T5368] device veth0_vlan entered promiscuous mode [ 175.396456][ T5368] device veth1_vlan entered promiscuous mode [ 175.485116][ T5368] device veth0_macvtap entered promiscuous mode [ 175.522869][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 175.551613][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 175.580364][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 175.629774][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 175.664921][ T5368] device veth1_macvtap entered promiscuous mode [ 175.697791][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 175.730392][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 175.767687][ T5368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.824147][ T5368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.870342][ T5368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.901571][ T5368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.942187][ T5368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.988815][ T5368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.025121][ T5368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.066810][ T5368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.141742][ T5368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.151661][ T5582] loop1: detected capacity change from 0 to 65536 [ 176.167896][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 176.209816][ T5604] loop0: detected capacity change from 0 to 32768 [ 176.217647][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 176.232719][ T5582] XFS: noattr2 mount option is deprecated. [ 176.283749][ T5368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.325890][ T5368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.373634][ T5368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.413360][ T5368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.428842][ T5582] XFS (loop1): Cannot mount a V5 filesystem as noattr2. attr2 is always enabled for V5 filesystems. [ 176.463089][ T5368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.474365][ T5368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.484967][ T5368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.496065][ T5368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.507475][ T5368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.536208][ T5368] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.546795][ T5368] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.555891][ T5368] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.564894][ T5368] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.617085][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 176.648618][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 177.014799][ T5625] netlink: 'syz.0.335': attribute type 1 has an invalid length. [ 177.081286][ T5496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.143625][ T5496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.229485][ T5626] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 177.309897][ T5631] bond0: (slave gretap1): Enslaving as a backup interface with an up link [ 177.412088][ T5625] netlink: 28 bytes leftover after parsing attributes in process `syz.0.335'. [ 177.500116][ T1282] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 177.525538][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.595196][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 177.646321][ T1282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.680688][ T1282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.699201][ T5508] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 177.709970][ T5521] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 177.836663][ T5641] syz.0.337 invoked oom-killer: gfp_mask=0x100dc2(GFP_HIGHUSER|__GFP_ZERO), order=0, oom_score_adj=1000 [ 177.938705][ T5641] CPU: 0 PID: 5641 Comm: syz.0.337 Not tainted syzkaller #0 [ 177.946045][ T5641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 177.956279][ T5641] Call Trace: [ 177.959565][ T5641] [ 177.962507][ T5641] dump_stack_lvl+0x188/0x250 [ 177.967208][ T5641] ? show_regs_print_info+0x20/0x20 [ 177.972402][ T5641] ? load_image+0x410/0x410 [ 177.976913][ T5641] ? local_lock_release+0x170/0x170 [ 177.982135][ T5641] ? __rwlock_init+0x140/0x140 [ 177.987894][ T5641] dump_header+0xd9/0x780 [ 177.992260][ T5641] oom_kill_process+0x20e/0x3d0 [ 177.997128][ T5641] out_of_memory+0xdb2/0x1190 [ 178.001832][ T5641] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 178.007469][ T5641] ? mutex_lock_io_nested+0x60/0x60 [ 178.012673][ T5641] ? unregister_oom_notifier+0x20/0x20 [ 178.018134][ T5641] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 178.023676][ T5641] ? mem_cgroup_oom_trylock+0x210/0x210 [ 178.029224][ T5641] ? do_raw_spin_unlock+0x11d/0x230 [ 178.034417][ T5641] try_charge_memcg+0x1075/0x15b0 [ 178.039457][ T5641] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 178.045297][ T5641] ? rcu_lock_acquire+0x30/0x30 [ 178.050183][ T5641] charge_memcg+0x100/0x300 [ 178.054713][ T5641] ? __mem_cgroup_charge+0x80/0x80 [ 178.059828][ T5641] __mem_cgroup_charge+0x21/0x80 [ 178.064769][ T5641] __add_to_page_cache_locked+0x937/0xec0 [ 178.070495][ T5641] ? put_page+0x200/0x200 [ 178.074820][ T5641] ? workingset_activation+0x750/0x750 [ 178.080275][ T5641] ? __page_cache_alloc+0xce/0x440 [ 178.085386][ T5641] ? add_to_page_cache_lru+0x4a0/0x4a0 [ 178.090841][ T5641] add_to_page_cache_lru+0x153/0x4a0 [ 178.096122][ T5641] pagecache_get_page+0xb00/0xf20 [ 178.101239][ T5641] ? page_cache_prev_miss+0x380/0x380 [ 178.106619][ T5641] aio_setup_ring+0x3c9/0xda0 [ 178.111302][ T5641] ? free_ioctx_reqs+0x180/0x180 [ 178.116235][ T5641] ? percpu_ref_init+0x210/0x340 [ 178.121169][ T5641] ? free_ioctx_users+0x1c0/0x1c0 [ 178.126185][ T5641] ioctx_alloc+0x316/0x770 [ 178.130607][ T5641] __se_sys_io_setup+0x7b/0x190 [ 178.135454][ T5641] do_syscall_64+0x4c/0xa0 [ 178.139864][ T5641] ? clear_bhb_loop+0x30/0x80 [ 178.144531][ T5641] ? clear_bhb_loop+0x30/0x80 [ 178.149204][ T5641] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 178.155084][ T5641] RIP: 0033:0x7f884da0e0d9 [ 178.159491][ T5641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.179107][ T5641] RSP: 002b:00007f884bc66028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 178.187539][ T5641] RAX: ffffffffffffffda RBX: 00007f884dc95fa0 RCX: 00007f884da0e0d9 [ 178.195507][ T5641] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000482 [ 178.203475][ T5641] RBP: 00007f884daa5024 R08: 0000000000000000 R09: 0000000000000000 [ 178.211440][ T5641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.219408][ T5641] R13: 00007f884dc96038 R14: 00007f884dc95fa0 R15: 00007ffd2048f0b8 [ 178.227382][ T5641] [ 178.253135][ T5641] memory: usage 8kB, limit 8kB, failcnt 59 [ 178.263120][ T5641] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 178.291434][ T5641] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 178.303066][ T5641] Memory cgroup stats for /syz0/test: [ 178.309614][ T5641] anon 0 [ 178.309614][ T5641] file 0 [ 178.309614][ T5641] kernel_stack 0 [ 178.309614][ T5641] pagetables 0 [ 178.309614][ T5641] percpu 0 [ 178.309614][ T5641] sock 0 [ 178.309614][ T5641] shmem 0 [ 178.309614][ T5641] file_mapped 0 [ 178.309614][ T5641] file_dirty 0 [ 178.309614][ T5641] file_writeback 0 [ 178.309614][ T5641] swapcached 0 [ 178.309614][ T5641] anon_thp 0 [ 178.309614][ T5641] file_thp 0 [ 178.309614][ T5641] shmem_thp 0 [ 178.309614][ T5641] inactive_anon 0 [ 178.309614][ T5641] active_anon 0 [ 178.309614][ T5641] inactive_file 0 [ 178.309614][ T5641] active_file 0 [ 178.309614][ T5641] unevictable 0 [ 178.309614][ T5641] slab_reclaimable 3616 [ 178.309614][ T5641] slab_unreclaimable 1296 [ 178.309614][ T5641] slab 4912 [ 178.309614][ T5641] workingset_refault_anon 0 [ 178.309614][ T5641] workingset_refault_file 0 [ 178.309614][ T5641] workingset_activate_anon 0 [ 178.309614][ T5641] workingset_activate_file 0 [ 178.411501][ T5641] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.337,pid=5640,uid=0 [ 178.431704][ T5641] Memory cgroup out of memory: Killed process 5640 (syz.0.337) total-vm:102244kB, anon-rss:1396kB, file-rss:21832kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 178.713896][ T5657] loop5: detected capacity change from 0 to 7 [ 178.770412][ T4179] Dev loop5: unable to read RDB block 7 [ 178.783043][ T4179] loop5: unable to read partition table [ 178.799806][ T4179] loop5: partition table beyond EOD, truncated [ 178.840384][ T5657] Dev loop5: unable to read RDB block 7 [ 178.860747][ T5657] loop5: unable to read partition table [ 178.890906][ T5657] loop5: partition table beyond EOD, truncated [ 178.908389][ T5657] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 178.923323][ T1111] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 179.080635][ T5666] loop0: detected capacity change from 0 to 256 [ 179.148016][ T5666] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 179.183033][ T1111] usb 2-1: Using ep0 maxpacket: 32 [ 180.179576][ T5528] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 180.653175][ T1111] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 180.679409][ T5257] libceph: connect (1)[c::]:6789 error -101 [ 180.689464][ T1111] usb 2-1: config 0 interface 0 has no altsetting 0 [ 180.703002][ T1111] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 180.722308][ T1111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.738523][ T5257] libceph: mon0 (1)[c::]:6789 connect error [ 180.740762][ T1111] usb 2-1: config 0 descriptor?? [ 180.751069][ T5666] ceph: No mds server is up or the cluster is laggy [ 181.048531][ T5680] loop5: detected capacity change from 0 to 2048 [ 181.056165][ T1108] libceph: connect (1)[c::]:6789 error -101 [ 181.062143][ T1108] libceph: mon0 (1)[c::]:6789 connect error [ 181.188579][ T5680] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 181.209399][ T4178] udevd[4178]: incorrect nilfs2 checksum on /dev/loop5 [ 181.213312][ T5680] NILFS (loop5): mounting unchecked fs [ 181.284985][ T5685] capability: warning: `syz.2.345' uses 32-bit capabilities (legacy support in use) [ 181.773228][ T1111] corsair-psu 0003:1B1C:1C09.0002: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.1-1/input0 [ 181.988768][ T5686] udc-core: couldn't find an available UDC or it's busy [ 182.003179][ T5686] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 182.042616][ T5686] udc-core: couldn't find an available UDC or it's busy [ 182.055739][ T5680] NILFS (loop5): recovery complete [ 182.089645][ T5686] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 182.100063][ T5690] syz.0.346 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 182.168803][ T5692] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 182.292996][ T1111] corsair-psu 0003:1B1C:1C09.0002: unable to initialize device (-110) [ 182.309657][ T5690] CPU: 1 PID: 5690 Comm: syz.0.346 Not tainted syzkaller #0 [ 182.316996][ T5690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 182.327060][ T5690] Call Trace: [ 182.330348][ T5690] [ 182.333279][ T5690] dump_stack_lvl+0x188/0x250 [ 182.337973][ T5690] ? show_regs_print_info+0x20/0x20 [ 182.343195][ T5690] ? load_image+0x410/0x410 [ 182.347728][ T5690] ? local_lock_release+0x170/0x170 [ 182.352941][ T5690] ? __rwlock_init+0x140/0x140 [ 182.357721][ T5690] dump_header+0xd9/0x780 [ 182.362070][ T5690] oom_kill_process+0x20e/0x3d0 [ 182.366944][ T5690] out_of_memory+0xdb2/0x1190 [ 182.371653][ T5690] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 182.377300][ T5690] ? mutex_lock_io_nested+0x60/0x60 [ 182.382518][ T5690] ? unregister_oom_notifier+0x20/0x20 [ 182.388033][ T5690] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 182.393597][ T5690] ? mem_cgroup_oom_trylock+0x210/0x210 [ 182.399158][ T5690] ? do_raw_spin_unlock+0x11d/0x230 [ 182.404381][ T5690] try_charge_memcg+0x1075/0x15b0 [ 182.409432][ T5690] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 182.415254][ T5690] ? rcu_lock_acquire+0x30/0x30 [ 182.420121][ T5690] ? __lock_acquire+0x13dc/0x7b50 [ 182.425174][ T5690] obj_cgroup_charge_pages+0x87/0x190 [ 182.430553][ T5690] ? __memcg_kmem_charge_page+0x380/0x380 [ 182.436287][ T5690] ? rcu_lock_acquire+0x30/0x30 [ 182.441165][ T5690] obj_cgroup_charge+0x19f/0x320 [ 182.446116][ T5690] ? mod_objcg_mlstate+0x2e0/0x2e0 [ 182.451252][ T5690] slab_pre_alloc_hook+0x9d/0xc0 [ 182.456195][ T5690] ? __d_alloc+0x27/0x6d0 [ 182.460534][ T5690] kmem_cache_alloc+0x3d/0x280 [ 182.465314][ T5690] __d_alloc+0x27/0x6d0 [ 182.469488][ T5690] d_alloc+0x46/0x250 [ 182.473574][ T5690] lookup_one_qstr_excl+0xc6/0x240 [ 182.478694][ T5690] filename_create+0x242/0x450 [ 182.483471][ T5690] ? kern_path_create+0x190/0x190 [ 182.488546][ T5690] do_mkdirat+0xa5/0x5c0 [ 182.492800][ T5690] ? vfs_mkdir+0x570/0x570 [ 182.497240][ T5690] __x64_sys_mkdirat+0x85/0x90 [ 182.502008][ T5690] do_syscall_64+0x4c/0xa0 [ 182.506427][ T5690] ? clear_bhb_loop+0x30/0x80 [ 182.511113][ T5690] ? clear_bhb_loop+0x30/0x80 [ 182.515797][ T5690] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 182.521696][ T5690] RIP: 0033:0x7f884da0e0d9 [ 182.526115][ T5690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.545725][ T5690] RSP: 002b:00007f884bc66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 182.554149][ T5690] RAX: ffffffffffffffda RBX: 00007f884dc95fa0 RCX: 00007f884da0e0d9 [ 182.562108][ T5690] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 182.570105][ T5690] RBP: 00007f884daa5024 R08: 0000000000000000 R09: 0000000000000000 [ 182.578085][ T5690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.586038][ T5690] R13: 00007f884dc96038 R14: 00007f884dc95fa0 R15: 00007ffd2048f0b8 [ 182.594004][ T5690] [ 182.656641][ T1111] corsair-psu: probe of 0003:1B1C:1C09.0002 failed with error -110 [ 182.754192][ T1111] usb 2-1: USB disconnect, device number 4 [ 183.039989][ T5701] fido_id[5701]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 183.263120][ T5690] memory: usage 8kB, limit 8kB, failcnt 114 [ 183.269096][ T5690] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 183.373391][ T5690] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 183.380305][ T5690] Memory cgroup stats for /syz0/test: [ 183.381171][ T5690] anon 0 [ 183.381171][ T5690] file 0 [ 183.381171][ T5690] kernel_stack 0 [ 183.381171][ T5690] pagetables 0 [ 183.381171][ T5690] percpu 0 [ 183.381171][ T5690] sock 0 [ 183.381171][ T5690] shmem 0 [ 183.381171][ T5690] file_mapped 0 [ 183.381171][ T5690] file_dirty 0 [ 183.381171][ T5690] file_writeback 0 [ 183.381171][ T5690] swapcached 0 [ 183.381171][ T5690] anon_thp 0 [ 183.381171][ T5690] file_thp 0 [ 183.381171][ T5690] shmem_thp 0 [ 183.381171][ T5690] inactive_anon 0 [ 183.381171][ T5690] active_anon 0 [ 183.381171][ T5690] inactive_file 0 [ 183.381171][ T5690] active_file 0 [ 183.381171][ T5690] unevictable 0 [ 183.381171][ T5690] slab_reclaimable 3616 [ 183.381171][ T5690] slab_unreclaimable 1296 [ 183.381171][ T5690] slab 4912 [ 183.381171][ T5690] workingset_refault_anon 0 [ 183.381171][ T5690] workingset_refault_file 0 [ 183.381171][ T5690] workingset_activate_anon 0 [ 183.381171][ T5690] workingset_activate_file 0 [ 183.763119][ T1108] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 184.033192][ T1108] usb 6-1: Using ep0 maxpacket: 32 [ 184.105521][ T5690] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.346,pid=5688,uid=0 [ 184.153269][ T1108] usb 6-1: config 0 has an invalid interface number: 239 but max is 0 [ 184.161483][ T1108] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.167236][ T5690] Memory cgroup out of memory: Killed process 5688 (syz.0.346) total-vm:102376kB, anon-rss:1396kB, file-rss:21832kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 184.232613][ T1108] usb 6-1: config 0 has no interface number 0 [ 184.273448][ T1108] usb 6-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 184.317380][ T1108] usb 6-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid wMaxPacketSize 0 [ 184.361586][ T1108] usb 6-1: config 0 interface 239 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 184.446082][ T1108] usb 6-1: config 0 interface 239 has no altsetting 0 [ 184.643285][ T1108] usb 6-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 185.389283][ T1108] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.543014][ T1108] usb 6-1: Product: syz [ 185.547243][ T1108] usb 6-1: Manufacturer: syz [ 185.551841][ T1108] usb 6-1: SerialNumber: syz [ 185.674127][ T1108] usb 6-1: config 0 descriptor?? [ 185.733357][ T5715] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 185.969318][ T1108] usb 6-1: USB disconnect, device number 2 [ 186.013061][ T4232] Bluetooth: hci3: command 0x0406 tx timeout [ 186.013237][ T4228] Bluetooth: hci0: command 0x0406 tx timeout [ 186.079177][ T4228] Bluetooth: hci1: command 0x0406 tx timeout [ 187.209998][ T4191] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 187.220336][ T4191] CPU: 0 PID: 4191 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 187.227896][ T4191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 187.237938][ T4191] Workqueue: hci5 hci_rx_work [ 187.242604][ T4191] Call Trace: [ 187.245865][ T4191] [ 187.248775][ T4191] dump_stack_lvl+0x188/0x250 [ 187.253436][ T4191] ? show_regs_print_info+0x20/0x20 [ 187.258611][ T4191] ? load_image+0x410/0x410 [ 187.263103][ T4191] sysfs_create_dir_ns+0x26a/0x290 [ 187.268197][ T4191] ? sysfs_warn_dup+0xa0/0xa0 [ 187.272848][ T4191] ? kthread+0x42e/0x520 [ 187.277070][ T4191] ? do_raw_spin_unlock+0x11d/0x230 [ 187.282249][ T4191] kobject_add_internal+0x5ba/0xcd0 [ 187.287432][ T4191] kobject_add+0x160/0x230 [ 187.291832][ T4191] ? kobject_init+0x1c0/0x1c0 [ 187.296492][ T4191] ? __raw_spin_lock_init+0x41/0x100 [ 187.301767][ T4191] ? klist_children_get+0x50/0x50 [ 187.306770][ T4191] ? get_device_parent+0x121/0x3e0 [ 187.311877][ T4191] device_add+0x470/0x1050 [ 187.316303][ T4191] ? device_initialize+0x2a5/0x4d0 [ 187.321436][ T4191] hci_conn_add_sysfs+0xd1/0x1e0 [ 187.326359][ T4191] le_conn_complete_evt+0xc2e/0x14d0 [ 187.331632][ T4191] ? cs_le_create_conn+0x5e0/0x5e0 [ 187.336725][ T4191] ? __mutex_trylock_common+0x15c/0x260 [ 187.342253][ T4191] hci_le_meta_evt+0xd36/0x3ca0 [ 187.347105][ T4191] ? hci_event_packet+0x363/0x1310 [ 187.352197][ T4191] ? __lock_acquire+0x7b50/0x7b50 [ 187.357204][ T4191] ? hci_remote_host_features_evt+0x240/0x240 [ 187.363252][ T4191] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 187.368869][ T4191] ? mark_lock+0x94/0x320 [ 187.373173][ T4191] ? mutex_unlock+0x10/0x10 [ 187.377653][ T4191] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 187.383626][ T4191] ? lock_chain_count+0x20/0x20 [ 187.388461][ T4191] ? __rwlock_init+0x140/0x140 [ 187.393206][ T4191] hci_event_packet+0xe0b/0x1310 [ 187.398144][ T4191] ? _raw_spin_unlock+0x40/0x40 [ 187.402989][ T4191] ? rcu_lock_release+0x20/0x20 [ 187.407851][ T4191] ? hci_send_to_monitor+0x9c/0x4a0 [ 187.413030][ T4191] hci_rx_work+0x255/0xa10 [ 187.417446][ T4191] process_one_work+0x867/0xff0 [ 187.422300][ T4191] ? worker_detach_from_pool+0x240/0x240 [ 187.427925][ T4191] ? lockdep_hardirqs_off+0x70/0x100 [ 187.433197][ T4191] ? _raw_spin_lock_irq+0xb7/0xf0 [ 187.438196][ T4191] ? _raw_spin_lock_irqsave+0x100/0x100 [ 187.443724][ T4191] ? wq_worker_running+0x97/0x170 [ 187.448750][ T4191] worker_thread+0xad7/0x12a0 [ 187.453461][ T4191] kthread+0x42e/0x520 [ 187.457537][ T4191] ? rcu_lock_release+0x20/0x20 [ 187.462386][ T4191] ? kthread_blkcg+0xd0/0xd0 [ 187.466983][ T4191] ret_from_fork+0x1f/0x30 [ 187.471423][ T4191] [ 187.478249][ T4191] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 187.493352][ T4191] Bluetooth: hci5: failed to register connection device [ 189.658929][ T5780] loop5: detected capacity change from 0 to 32768 [ 189.762882][ T5780] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 190.034726][ T5368] ocfs2: Unmounting device (7,5) on (node local) [ 192.949327][ T5834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.382'. [ 193.001461][ T5834] netlink: 24 bytes leftover after parsing attributes in process `syz.1.382'. [ 193.134891][ T5834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.382'. [ 193.153175][ T5834] netlink: 24 bytes leftover after parsing attributes in process `syz.1.382'. [ 194.177366][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.183729][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.324035][ T5859] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 196.254493][ T5257] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 196.523165][ T5257] usb 4-1: Using ep0 maxpacket: 8 [ 196.853937][ T5257] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 197.083582][ T5257] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.109291][ T5257] usb 4-1: Product: syz [ 197.118711][ T5257] usb 4-1: Manufacturer: syz [ 197.142979][ T5257] usb 4-1: SerialNumber: syz [ 197.172027][ T5257] usb 4-1: config 0 descriptor?? [ 197.236120][ T5257] gspca_main: sq930x-2.14.0 probing 2770:930c [ 197.478411][ T5884] loop3: detected capacity change from 0 to 512 [ 197.581766][ T5884] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,nombcache,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 197.658526][ T5884] ext4 filesystem being mounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 197.790112][ T5257] gspca_sq930x: reg_r 001f failed -110 [ 197.805190][ T5257] sq930x: probe of 4-1:0.0 failed with error -110 [ 197.849721][ T5257] usb 4-1: USB disconnect, device number 5 [ 199.125293][ T5955] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 201.250078][ T5990] netlink: 'syz.3.415': attribute type 1 has an invalid length. [ 201.434652][ T5992] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 203.857802][ T5990] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 203.935290][ T4228] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 203.953100][ T4228] Bluetooth: hci4: Injecting HCI hardware error event [ 203.963660][ T5992] netlink: 28 bytes leftover after parsing attributes in process `syz.3.415'. [ 203.985081][ T4191] Bluetooth: hci4: hardware error 0x00 [ 203.998852][ T5992] 8021q: adding VLAN 0 to HW filter on device bond1 [ 204.012978][ T4235] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 204.066349][ T5521] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 204.287354][ T1282] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 205.767168][ T6038] loop3: detected capacity change from 0 to 4096 [ 205.979237][ T6038] EXT4-fs (loop3): Test dummy encryption mode enabled [ 205.986292][ T6038] EXT4-fs (loop3): Ignoring removed orlov option [ 206.159393][ T6038] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 207.335072][ T6053] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 207.335192][ T6053] overlayfs: upper fs does not support tmpfile. [ 207.336333][ T6053] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 207.823121][ T1108] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 208.073158][ T1108] usb 6-1: Using ep0 maxpacket: 32 [ 208.194243][ T1108] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 208.220418][ T1108] usb 6-1: config 0 interface 0 has no altsetting 0 [ 208.223057][ T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 208.250826][ T1108] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 208.276433][ T1108] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.333348][ T1108] usb 6-1: config 0 descriptor?? [ 208.653849][ T23] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9 [ 208.675230][ T23] usb 4-1: config 1 interface 0 has no altsetting 0 [ 209.547598][ T23] usb 4-1: string descriptor 0 read error: -22 [ 209.559956][ T23] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 209.573705][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.691362][ T1108] corsair-psu 0003:1B1C:1C09.0003: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.5-1/input0 [ 209.983394][ T4197] hid-generic 0F98:0004:0009.0004: unknown main item tag 0x0 [ 210.006485][ T4197] hid-generic 0F98:0004:0009.0004: unknown main item tag 0x0 [ 210.026320][ T4197] hid-generic 0F98:0004:0009.0004: unknown main item tag 0x0 [ 210.034137][ T4197] hid-generic 0F98:0004:0009.0004: unknown main item tag 0x0 [ 210.047503][ T4197] hid-generic 0F98:0004:0009.0004: unknown main item tag 0x0 [ 210.069226][ T4197] hid-generic 0F98:0004:0009.0004: unknown main item tag 0x0 [ 210.085745][ T6067] udc-core: couldn't find an available UDC or it's busy [ 210.095223][ T4197] hid-generic 0F98:0004:0009.0004: unknown main item tag 0x0 [ 210.102787][ T6067] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 210.117430][ T4197] hid-generic 0F98:0004:0009.0004: unknown main item tag 0x0 [ 210.128306][ T6067] udc-core: couldn't find an available UDC or it's busy [ 210.140028][ T4197] hid-generic 0F98:0004:0009.0004: unknown main item tag 0x0 [ 210.150125][ T6067] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 210.162329][ T4197] hid-generic 0F98:0004:0009.0004: unknown main item tag 0x0 [ 210.173198][ T4197] hid-generic 0F98:0004:0009.0004: unknown main item tag 0x0 [ 210.183116][ T1108] corsair-psu 0003:1B1C:1C09.0003: unable to query firmware (-71) [ 210.190965][ T4197] hid-generic 0F98:0004:0009.0004: unknown main item tag 0x0 [ 210.199732][ T1108] corsair-psu: probe of 0003:1B1C:1C09.0003 failed with error -71 [ 210.201478][ T4197] hid-generic 0F98:0004:0009.0004: unknown main item tag 0x0 [ 210.223188][ T23] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 210.232350][ T1108] usb 6-1: USB disconnect, device number 3 [ 210.237305][ T4197] hid-generic 0F98:0004:0009.0004: unknown main item tag 0x0 [ 210.255465][ T23] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:0926:3333.0005/input/input5 [ 210.272474][ T4197] hid-generic 0F98:0004:0009.0004: unknown main item tag 0x0 [ 210.290678][ T4197] hid-generic 0F98:0004:0009.0004: unknown main item tag 0x0 [ 210.316545][ T4197] hid-generic 0F98:0004:0009.0004: unknown main item tag 0x0 [ 210.331583][ T4197] hid-generic 0F98:0004:0009.0004: hidraw0: HID v0.04 Device [syz1] on syz0 [ 210.401043][ T23] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 210.477451][ T6137] fido_id[6137]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 210.489089][ T23] usb 4-1: USB disconnect, device number 6 [ 211.272648][ T6142] fido_id[6142]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 211.474734][ T6158] loop0: detected capacity change from 0 to 764 [ 212.192242][ T6163] fido_id[6163]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 213.116230][ T6179] loop1: detected capacity change from 0 to 4096 [ 213.223364][ T6179] EXT4-fs (loop1): Test dummy encryption mode enabled [ 213.230190][ T6179] EXT4-fs (loop1): Ignoring removed orlov option [ 213.283954][ T6179] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 214.308312][ T6186] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 214.317933][ T6186] overlayfs: upper fs does not support tmpfile. [ 214.325631][ T6186] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 215.973049][ T23] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 216.463050][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 217.295909][ T23] usb 4-1: config 0 has no interfaces? [ 217.573128][ T23] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 217.582468][ T23] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 217.699959][ T23] usb 4-1: config 0 descriptor?? [ 217.763416][ T23] usb 4-1: can't set config #0, error -71 [ 217.814328][ T23] usb 4-1: USB disconnect, device number 7 [ 218.861416][ T6247] netlink: 12 bytes leftover after parsing attributes in process `syz.5.460'. [ 219.261559][ T6247] netlink: 'syz.5.460': attribute type 10 has an invalid length. [ 219.940114][ T6247] netlink: 40 bytes leftover after parsing attributes in process `syz.5.460'. [ 220.043908][ T6247] device dummy0 entered promiscuous mode [ 220.436779][ T6267] loop0: detected capacity change from 0 to 16 [ 220.499832][ T6267] erofs: (device loop0): mounted with root inode @ nid 36. [ 220.513752][ T6267] attempt to access beyond end of device [ 220.513752][ T6267] loop0: rw=524288, want=32, limit=16 [ 220.531745][ T6267] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[4096] [ 220.545425][ T26] audit: type=1800 audit(1786308318.151:4): pid=6267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.465" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 220.579628][ T6267] erofs: (device loop0): z_erofs_readahead: readahead error at page 7 @ nid 89 [ 220.589184][ T6267] erofs: (device loop0): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 220.598182][ T6267] erofs: (device loop0): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 220.607868][ T6267] attempt to access beyond end of device [ 220.607868][ T6267] loop0: rw=524288, want=56, limit=16 [ 220.618878][ T6267] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[4096] [ 220.637953][ T6267] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[8192] [ 220.658622][ T6267] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[8192] [ 220.679029][ T6267] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[8192] [ 220.698647][ T6267] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[8192] [ 221.113188][ T4228] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 222.263115][ T4228] usb 6-1: Using ep0 maxpacket: 32 [ 222.433408][ T4228] usb 6-1: config 0 has no interfaces? [ 222.693181][ T4228] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 222.702244][ T4228] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 222.774102][ T6279] netlink: 44 bytes leftover after parsing attributes in process `syz.1.469'. [ 222.841414][ T4228] usb 6-1: Product: syz [ 222.871385][ T4228] usb 6-1: Manufacturer: syz [ 222.898493][ T4228] usb 6-1: SerialNumber: syz [ 222.957034][ T4228] usb 6-1: config 0 descriptor?? [ 224.037663][ T5254] usb 6-1: USB disconnect, device number 4 [ 224.192343][ T6300] netlink: 'syz.0.472': attribute type 10 has an invalid length. [ 224.616576][ T6300] team0: Port device dummy0 added [ 224.829185][ T6306] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 224.947125][ T6306] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 225.337672][ T6294] device syzkaller0 entered promiscuous mode [ 225.351694][ T6320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.478'. [ 225.710276][ T6331] loop3: detected capacity change from 0 to 4096 [ 225.828788][ T6331] EXT4-fs (loop3): Test dummy encryption mode enabled [ 225.835937][ T6331] EXT4-fs (loop3): Ignoring removed orlov option [ 225.884506][ T6331] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 226.824547][ T6321] team0: Port device dummy0 removed [ 226.834041][ T6321] bridge1: port 1(dummy0) entered blocking state [ 226.883118][ T6321] bridge1: port 1(dummy0) entered disabled state [ 226.906571][ T6321] device dummy0 entered promiscuous mode [ 226.970264][ T6325] netlink: 'syz.0.478': attribute type 10 has an invalid length. [ 226.998373][ T6325] netlink: 40 bytes leftover after parsing attributes in process `syz.0.478'. [ 227.101217][ T6325] bridge1: port 1(dummy0) entered blocking state [ 227.109608][ T6325] bridge1: port 1(dummy0) entered forwarding state [ 227.171943][ T6325] bridge1: port 1(dummy0) entered disabled state [ 227.627123][ T6355] loop5: detected capacity change from 0 to 4096 [ 227.859184][ T6368] netlink: 'syz.3.488': attribute type 10 has an invalid length. [ 228.206727][ T6368] team0: Port device dummy0 added [ 228.276849][ T26] audit: type=1800 audit(1786308325.881:5): pid=6370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.486" name="file1" dev="loop5" ino=30 res=0 errno=0 [ 228.390640][ T6376] CIFS: Attempting to mount \\127.0.0.1\share [ 228.489972][ T6381] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 229.336680][ T6399] fuse: Bad value for 'fd' [ 229.414787][ T6376] CIFS: VFS: cifs_mount failed w/return code = -112 [ 229.477546][ T6388] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 229.532415][ T6388] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 229.855590][ T6347] loop1: detected capacity change from 0 to 32768 [ 229.980255][ T6347] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.484 (6347) [ 230.125941][ T6347] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 230.223764][ T6347] BTRFS info (device loop1): setting nodatacow, compression disabled [ 230.284220][ T6347] BTRFS info (device loop1): setting datasum, datacow enabled [ 230.338095][ T6347] BTRFS info (device loop1): force clearing of disk cache [ 230.439962][ T6347] BTRFS info (device loop1): enabling ssd optimizations [ 230.498450][ T6405] loop3: detected capacity change from 0 to 32768 [ 230.505273][ T6410] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.513980][ T6410] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.523138][ T6347] BTRFS info (device loop1): using spread ssd allocation scheme [ 230.573284][ T6347] BTRFS info (device loop1): turning on sync discard [ 230.577222][ T6405] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.496 (6405) [ 230.580047][ T6347] BTRFS info (device loop1): turning on flush-on-commit [ 230.966944][ T6347] BTRFS info (device loop1): not using ssd optimizations [ 231.016928][ T6430] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 231.534395][ T6405] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 231.544953][ T6347] BTRFS info (device loop1): not using spread ssd allocation scheme [ 231.553299][ T6405] BTRFS info (device loop3): using free space tree [ 231.560399][ T6405] BTRFS info (device loop3): has skinny extents [ 231.597447][ T6347] BTRFS info (device loop1): using free space tree [ 231.773137][ T6347] BTRFS info (device loop1): has skinny extents [ 232.119463][ T6405] BTRFS info (device loop3): enabling ssd optimizations [ 232.224785][ T4179] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by udevd (4179) [ 232.231780][ T6347] BTRFS error (device loop1): open_ctree failed: -12 [ 235.006263][ T6504] Restarting kernel threads ... done. [ 235.105252][ T6410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.188716][ T6410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.908536][ T6410] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.939836][ T6410] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.975952][ T6410] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.985205][ T6410] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.928200][ T6527] xt_hashlimit: size too large, truncated to 1048576 [ 239.664674][ T6586] capability: warning: `syz.2.520' uses deprecated v2 capabilities in a way that may be insecure [ 240.470446][ T6594] netlink: 'syz.2.522': attribute type 2 has an invalid length. [ 240.907425][ T6600] loop3: detected capacity change from 0 to 764 [ 241.637731][ T6607] loop0: detected capacity change from 0 to 40427 [ 241.754952][ T6614] netlink: 16 bytes leftover after parsing attributes in process `syz.2.527'. [ 241.774653][ T6607] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 241.782594][ T6607] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 241.868090][ T6607] F2FS-fs (loop0): Found nat_bits in checkpoint [ 242.538439][ T6607] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 242.546055][ T6607] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 242.611038][ T26] audit: type=1804 audit(1786308340.211:6): pid=6607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.524" name="/newroot/105/bus/bus" dev="loop0" ino=10 res=1 errno=0 [ 242.704107][ T6626] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 243.185707][ T6637] ip_tables: iptables: counters copy to user failed while replacing table [ 243.526597][ T6642] loop5: detected capacity change from 0 to 512 [ 244.089904][ T6642] EXT4-fs warning (device loop5): dx_probe:833: inode #2: comm syz.5.536: Unrecognised inode hash code 255 [ 244.156942][ T6642] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.536: Corrupt directory, running e2fsck is recommended [ 244.184595][ T6642] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 244.194034][ T6642] EXT4-fs error (device loop5): ext4_iget_extra_inode:4573: inode #15: comm syz.5.536: corrupted in-inode xattr [ 244.219423][ T6642] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.536: couldn't read orphan inode 15 (err -117) [ 244.263034][ T6642] EXT4-fs (loop5): mounted filesystem without journal. Opts: minixdf,noblock_validity,abort,dioread_lock,stripe=0x00000000000000e3,grpjquota=.nouser_xattr,nolazytime,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 244.369033][ T6642] EXT4-fs error (device loop5): ext4_remount:6062: comm syz.5.536: Abort forced by user [ 244.408909][ T6642] EXT4-fs (loop5): Remounting filesystem read-only [ 244.425780][ T6642] EXT4-fs (loop5): re-mounted. Opts: minixdf,noblock_validity,abort,dioread_lock,stripe=0x00000000000000e3,grpjquota=.nouser_xattr,nolazytime,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 244.510324][ T6642] EXT4-fs error (device loop5): ext4_remount:6062: comm syz.5.536: Abort forced by user [ 244.570786][ T6642] EXT4-fs (loop5): Remounting filesystem read-only [ 244.667359][ T6642] EXT4-fs (loop5): re-mounted. Opts: minixdf,noblock_validity,abort,dioread_lock,stripe=0x00000000000000e3,grpjquota=.nouser_xattr,nolazytime,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 251.664863][ T6495] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 251.933136][ T6495] usb 4-1: Using ep0 maxpacket: 32 [ 252.213335][ T6495] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 252.222620][ T6495] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.237529][ T6495] usb 4-1: Product: syz [ 252.242856][ T6495] usb 4-1: Manufacturer: syz [ 252.248094][ T6495] usb 4-1: SerialNumber: syz [ 252.265221][ T6495] usb 4-1: config 0 descriptor?? [ 252.451817][ T6495] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 255.615706][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.622485][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.629872][ T6495] gspca_ov534_9: reg_w failed -71 [ 256.927416][ T6756] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 256.946821][ T6756] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 257.083015][ T6495] gspca_ov534_9: Unknown sensor 0000 [ 257.083077][ T6495] ov534_9: probe of 4-1:0.0 failed with error -22 [ 257.106910][ T6495] usb 4-1: USB disconnect, device number 8 [ 259.156368][ T6777] loop0: detected capacity change from 0 to 512 [ 259.273416][ T6777] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.577: iget: bad i_size value: 38620345925642 [ 259.287983][ T6777] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.577: couldn't read orphan inode 15 (err -117) [ 259.308802][ T6777] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 259.381808][ T6785] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.577: bg 0: block 5: invalid block bitmap [ 259.422333][ T6784] loop3: detected capacity change from 0 to 4096 [ 259.462083][ T6784] EXT4-fs (loop3): Test dummy encryption mode enabled [ 259.469460][ T6784] EXT4-fs (loop3): Ignoring removed orlov option [ 259.475891][ T6785] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1060 with error 28 [ 259.475994][ T6785] EXT4-fs (loop0): This should not happen!! Data will be lost [ 259.475994][ T6785] [ 259.476010][ T6785] EXT4-fs (loop0): Total free blocks count 0 [ 259.476023][ T6785] EXT4-fs (loop0): Free/Dirty block details [ 259.476078][ T6785] EXT4-fs (loop0): free_blocks=0 [ 259.476125][ T6785] EXT4-fs (loop0): dirty_blocks=1064 [ 259.476139][ T6785] EXT4-fs (loop0): Block reservation details [ 259.476152][ T6785] EXT4-fs (loop0): i_reserved_data_blocks=1064 [ 259.576446][ T6777] EXT4-fs (loop0): shut down requested (0) [ 259.626671][ T6784] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 259.633377][ T5508] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 1060 with max blocks 4 with error 28 [ 260.629483][ T6787] overlayfs: failed to resolve './file1': -2 [ 260.950596][ T6794] loop0: detected capacity change from 0 to 256 [ 261.020198][ T6794] exfat: Deprecated parameter 'namecase' [ 261.048395][ T6794] exfat: Unknown parameter 'keep_last_dots' [ 261.412133][ T6807] loop1: detected capacity change from 0 to 40427 [ 261.447268][ T6807] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 261.455171][ T6807] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 261.538501][ T6807] F2FS-fs (loop1): Found nat_bits in checkpoint [ 261.624062][ T6807] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 261.631441][ T6807] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 261.711386][ T26] audit: type=1804 audit(1786308359.311:7): pid=6802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.582" name="/newroot/118/bus/bus" dev="loop1" ino=10 res=1 errno=0 [ 261.806489][ T6807] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 264.371200][ T6849] loop0: detected capacity change from 0 to 4096 [ 264.422745][ T6849] EXT4-fs (loop0): Test dummy encryption mode enabled [ 264.429982][ T6849] EXT4-fs (loop0): Ignoring removed orlov option [ 264.449396][ T6851] overlayfs: failed to clone upperpath [ 264.544607][ T6849] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 264.785755][ T6855] loop3: detected capacity change from 0 to 4096 [ 265.446470][ T6855] EXT4-fs (loop3): Test dummy encryption mode enabled [ 265.454272][ T6855] EXT4-fs (loop3): Ignoring removed orlov option [ 265.516924][ T6855] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 266.048639][ T6872] overlayfs: failed to resolve './file1': -2 [ 266.868875][ T6884] loop3: detected capacity change from 0 to 256 [ 267.120046][ T6884] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 267.183270][ T6884] FAT-fs (loop3): Filesystem has been set read-only [ 267.212595][ T6884] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001) [ 267.243535][ T6884] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001) [ 267.290839][ T26] audit: type=1800 audit(1786308364.891:8): pid=6884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.601" name="file1" dev="loop3" ino=1048595 res=0 errno=0 [ 267.317458][ T6883] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 268.780975][ T6897] device syzkaller0 entered promiscuous mode [ 269.026046][ T6902] loop1: detected capacity change from 0 to 4096 [ 269.059787][ T6902] EXT4-fs (loop1): Test dummy encryption mode enabled [ 269.066751][ T6902] EXT4-fs (loop1): Ignoring removed orlov option [ 269.101504][ T6902] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 271.524312][ T6925] loop5: detected capacity change from 0 to 4096 [ 272.158283][ T6925] EXT4-fs (loop5): Test dummy encryption mode enabled [ 272.165158][ T6925] EXT4-fs (loop5): Ignoring removed orlov option [ 272.921188][ T6936] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 272.939671][ T6925] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 273.190365][ T6939] overlayfs: failed to resolve './file1': -2 [ 273.756373][ T6943] device syzkaller0 entered promiscuous mode [ 274.535118][ T6953] loop3: detected capacity change from 0 to 4096 [ 274.577106][ T6953] EXT4-fs (loop3): Test dummy encryption mode enabled [ 274.584006][ T6953] EXT4-fs (loop3): Ignoring removed orlov option [ 274.771386][ T6953] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 277.780441][ T6981] loop1: detected capacity change from 0 to 4096 [ 278.480926][ T6981] EXT4-fs (loop1): Test dummy encryption mode enabled [ 278.487944][ T6981] EXT4-fs (loop1): Ignoring removed orlov option [ 278.508117][ T6981] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 278.573715][ T6978] input: syz1 as /devices/virtual/input/input6 [ 279.094292][ T6991] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 279.103904][ T6991] overlayfs: upper fs does not support tmpfile. [ 279.111894][ T6991] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 279.557761][ T7009] loop1: detected capacity change from 0 to 512 [ 279.601431][ T7009] EXT4-fs (loop1): Ignoring removed bh option [ 279.799393][ T7009] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.635: corrupted in-inode xattr [ 279.817786][ T7009] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.635: couldn't read orphan inode 15 (err -117) [ 279.831723][ T7009] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000005,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 279.921096][ T7015] device syzkaller0 entered promiscuous mode [ 281.212698][ T7023] loop0: detected capacity change from 0 to 4096 [ 282.848606][ T7023] EXT4-fs (loop0): Test dummy encryption mode enabled [ 282.855482][ T7023] EXT4-fs (loop0): Ignoring removed orlov option [ 282.955982][ T7023] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 283.105593][ T7043] [ 283.107961][ T7043] ============================= [ 283.112808][ T7043] WARNING: suspicious RCU usage [ 284.272559][ T7043] syzkaller #0 Not tainted [ 284.277372][ T7039] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 284.298430][ T7043] ----------------------------- [ 284.303397][ T26] audit: type=1326 audit(1786308381.901:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7038 comm="syz.5.645" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f99e035d0d9 code=0x0 [ 284.373432][ T7043] include/linux/rhashtable.h:594 suspicious rcu_dereference_check() usage! [ 284.397210][ T7043] [ 284.397210][ T7043] other info that might help us debug this: [ 284.397210][ T7043] [ 284.434533][ T7043] [ 284.434533][ T7043] rcu_scheduler_active = 2, debug_locks = 1 [ 284.457930][ T7043] 1 lock held by syz.2.644/7043: [ 284.495291][ T7043] #0: ffffffff8d44d488 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x139/0x1230 [ 284.533900][ T7043] [ 284.533900][ T7043] stack backtrace: [ 284.539838][ T7043] CPU: 0 PID: 7043 Comm: syz.2.644 Not tainted syzkaller #0 [ 284.547152][ T7043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 284.557228][ T7043] Call Trace: [ 284.560515][ T7043] [ 284.563457][ T7043] dump_stack_lvl+0x188/0x250 [ 284.568151][ T7043] ? load_image+0x410/0x410 [ 284.572682][ T7043] ? show_regs_print_info+0x20/0x20 [ 284.577912][ T7043] ? lockdep_rcu_suspicious+0x110/0x180 [ 284.583475][ T7043] ? local_bh_enable+0x20/0x20 [ 284.588256][ T7043] rhltable_lookup+0x787/0x7a0 [ 284.593040][ T7043] ? mark_lock+0x94/0x320 [ 284.597378][ T7043] ? mr_mfc_find_parent+0x190/0x190 [ 284.602598][ T7043] ? local_bh_enable+0x20/0x20 [ 284.607393][ T7043] ? preempt_schedule_common+0xa5/0xd0 [ 284.612873][ T7043] ? schedule_preempt_disabled+0x20/0x20 [ 284.618526][ T7043] ? lock_chain_count+0x20/0x20 [ 284.623405][ T7043] mr_mfc_find_any_parent+0xb7/0x1d0 [ 284.628713][ T7043] ? local_bh_enable+0x20/0x20 [ 284.633495][ T7043] ip_mr_forward+0x247/0xf60 [ 284.638117][ T7043] ipmr_mfc_add+0x2273/0x2bd0 [ 284.642828][ T7043] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 284.647787][ T7043] ? __lock_acquire+0x7b50/0x7b50 [ 284.652935][ T7043] ip_mroute_setsockopt+0xecd/0x1230 [ 284.658300][ T7043] ? ipmr_rule_default+0x70/0x70 [ 284.663271][ T7043] ? __might_sleep+0xf0/0xf0 [ 284.667936][ T7043] ip_setsockopt+0x568/0x31e0 [ 284.672660][ T7043] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 284.678046][ T7043] ? aa_sk_perm+0x7dc/0x910 [ 284.682583][ T7043] ? aa_af_perm+0x340/0x340 [ 284.687217][ T7043] ? __fget_files+0x402/0x470 [ 284.692020][ T7043] ? aa_sock_opt_perm+0x74/0x100 [ 284.697060][ T7043] ? sock_common_setsockopt+0x32/0xb0 [ 284.702446][ T7043] ? raw_setsockopt+0xc2/0x170 [ 284.707499][ T7043] ? sock_common_recvmsg+0x1c0/0x1c0 [ 284.712893][ T7043] __sys_setsockopt+0x2bf/0x3d0 [ 284.717767][ T7043] __x64_sys_setsockopt+0xb1/0xc0 [ 284.722905][ T7043] do_syscall_64+0x4c/0xa0 [ 284.727370][ T7043] ? clear_bhb_loop+0x30/0x80 [ 284.732062][ T7043] ? clear_bhb_loop+0x30/0x80 [ 284.736763][ T7043] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 284.742673][ T7043] RIP: 0033:0x7f341d5ea0d9 [ 284.747081][ T7043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.766679][ T7043] RSP: 002b:00007f341b800028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 284.775113][ T7043] RAX: ffffffffffffffda RBX: 00007f341d872180 RCX: 00007f341d5ea0d9 [ 284.783113][ T7043] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000006 [ 284.791102][ T7043] RBP: 00007f341d681024 R08: 000000000000003c R09: 0000000000000000 [ 284.799097][ T7043] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 284.807090][ T7043] R13: 00007f341d872218 R14: 00007f341d872180 R15: 00007fff04cd8a58 [ 284.815088][ T7043] [ 284.820781][ T7043] [ 284.823233][ T7043] ============================= [ 284.828091][ T7043] WARNING: suspicious RCU usage [ 284.833428][ T7043] syzkaller #0 Not tainted [ 284.837876][ T7043] ----------------------------- [ 284.842726][ T7043] include/linux/rhashtable.h:369 suspicious rcu_dereference_check() usage! [ 284.851397][ T7043] [ 284.851397][ T7043] other info that might help us debug this: [ 284.851397][ T7043] [ 284.861690][ T7043] [ 284.861690][ T7043] rcu_scheduler_active = 2, debug_locks = 1 [ 284.869905][ T7043] 1 lock held by syz.2.644/7043: [ 284.874929][ T7043] #0: ffffffff8d44d488 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x139/0x1230 [ 284.884764][ T7043] [ 284.884764][ T7043] stack backtrace: [ 284.890663][ T7043] CPU: 0 PID: 7043 Comm: syz.2.644 Not tainted syzkaller #0 [ 284.897950][ T7043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 284.907996][ T7043] Call Trace: [ 284.911266][ T7043] [ 284.914195][ T7043] dump_stack_lvl+0x188/0x250 [ 284.918870][ T7043] ? load_image+0x410/0x410 [ 284.923376][ T7043] ? show_regs_print_info+0x20/0x20 [ 284.928571][ T7043] ? lockdep_rcu_suspicious+0x110/0x180 [ 284.934202][ T7043] ? local_bh_enable+0x20/0x20 [ 284.938963][ T7043] rhltable_lookup+0x512/0x7a0 [ 284.943736][ T7043] ? local_bh_enable+0x20/0x20 [ 284.948519][ T7043] ? mr_mfc_find_parent+0x190/0x190 [ 284.953779][ T7043] ? local_bh_enable+0x20/0x20 [ 284.958537][ T7043] ? preempt_schedule_common+0xa5/0xd0 [ 284.963989][ T7043] ? schedule_preempt_disabled+0x20/0x20 [ 284.969706][ T7043] ? lock_chain_count+0x20/0x20 [ 284.974591][ T7043] mr_mfc_find_any_parent+0xb7/0x1d0 [ 284.979983][ T7043] ? local_bh_enable+0x20/0x20 [ 284.984829][ T7043] ip_mr_forward+0x247/0xf60 [ 284.989418][ T7043] ipmr_mfc_add+0x2273/0x2bd0 [ 284.994193][ T7043] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 284.999141][ T7043] ? __lock_acquire+0x7b50/0x7b50 [ 285.004165][ T7043] ip_mroute_setsockopt+0xecd/0x1230 [ 285.009453][ T7043] ? ipmr_rule_default+0x70/0x70 [ 285.014403][ T7043] ? __might_sleep+0xf0/0xf0 [ 285.018993][ T7043] ip_setsockopt+0x568/0x31e0 [ 285.023665][ T7043] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 285.029027][ T7043] ? aa_sk_perm+0x7dc/0x910 [ 285.033542][ T7043] ? aa_af_perm+0x340/0x340 [ 285.038033][ T7043] ? __fget_files+0x402/0x470 [ 285.042714][ T7043] ? aa_sock_opt_perm+0x74/0x100 [ 285.047741][ T7043] ? sock_common_setsockopt+0x32/0xb0 [ 285.053131][ T7043] ? raw_setsockopt+0xc2/0x170 [ 285.057892][ T7043] ? sock_common_recvmsg+0x1c0/0x1c0 [ 285.063175][ T7043] __sys_setsockopt+0x2bf/0x3d0 [ 285.068026][ T7043] __x64_sys_setsockopt+0xb1/0xc0 [ 285.073046][ T7043] do_syscall_64+0x4c/0xa0 [ 285.077613][ T7043] ? clear_bhb_loop+0x30/0x80 [ 285.082337][ T7043] ? clear_bhb_loop+0x30/0x80 [ 285.087042][ T7043] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 285.093290][ T7043] RIP: 0033:0x7f341d5ea0d9 [ 285.097722][ T7043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.117537][ T7043] RSP: 002b:00007f341b800028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 285.126001][ T7043] RAX: ffffffffffffffda RBX: 00007f341d872180 RCX: 00007f341d5ea0d9 [ 285.133986][ T7043] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000006 [ 285.141967][ T7043] RBP: 00007f341d681024 R08: 000000000000003c R09: 0000000000000000 [ 285.149930][ T7043] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 285.158001][ T7043] R13: 00007f341d872218 R14: 00007f341d872180 R15: 00007fff04cd8a58 [ 285.166418][ T7043] [ 285.172112][ T7043] [ 285.174742][ T7043] ============================= [ 285.179739][ T7043] WARNING: suspicious RCU usage [ 285.184659][ T7043] syzkaller #0 Not tainted [ 285.189087][ T7043] ----------------------------- [ 285.194190][ T7043] include/linux/rhashtable.h:614 suspicious rcu_dereference_check() usage! [ 285.202790][ T7043] [ 285.202790][ T7043] other info that might help us debug this: [ 285.202790][ T7043] [ 285.213682][ T7043] [ 285.213682][ T7043] rcu_scheduler_active = 2, debug_locks = 1 [ 285.222049][ T7043] 1 lock held by syz.2.644/7043: [ 285.227495][ T7043] #0: ffffffff8d44d488 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x139/0x1230 [ 285.238089][ T7043] [ 285.238089][ T7043] stack backtrace: [ 285.244185][ T7043] CPU: 0 PID: 7043 Comm: syz.2.644 Not tainted syzkaller #0 [ 285.251494][ T7043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 285.261560][ T7043] Call Trace: [ 285.264859][ T7043] [ 285.267792][ T7043] dump_stack_lvl+0x188/0x250 [ 285.272925][ T7043] ? load_image+0x410/0x410 [ 285.277740][ T7043] ? show_regs_print_info+0x20/0x20 [ 285.283179][ T7043] ? lockdep_rcu_suspicious+0x110/0x180 [ 285.288867][ T7043] ? local_bh_enable+0x20/0x20 [ 285.293809][ T7043] rhltable_lookup+0x5fc/0x7a0 [ 285.298630][ T7043] ? local_bh_enable+0x20/0x20 [ 285.303523][ T7043] ? mr_mfc_find_parent+0x190/0x190 [ 285.308927][ T7043] ? local_bh_enable+0x20/0x20 [ 285.313718][ T7043] ? preempt_schedule_common+0xa5/0xd0 [ 285.319189][ T7043] ? schedule_preempt_disabled+0x20/0x20 [ 285.324950][ T7043] ? lock_chain_count+0x20/0x20 [ 285.329877][ T7043] mr_mfc_find_any_parent+0xb7/0x1d0 [ 285.335193][ T7043] ? local_bh_enable+0x20/0x20 [ 285.340052][ T7043] ip_mr_forward+0x247/0xf60 [ 285.344671][ T7043] ipmr_mfc_add+0x2273/0x2bd0 [ 285.349631][ T7043] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 285.354661][ T7043] ? __lock_acquire+0x7b50/0x7b50 [ 285.359730][ T7043] ip_mroute_setsockopt+0xecd/0x1230 [ 285.365036][ T7043] ? ipmr_rule_default+0x70/0x70 [ 285.369992][ T7043] ? __might_sleep+0xf0/0xf0 [ 285.374876][ T7043] ip_setsockopt+0x568/0x31e0 [ 285.379605][ T7043] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 285.385084][ T7043] ? aa_sk_perm+0x7dc/0x910 [ 285.389657][ T7043] ? aa_af_perm+0x340/0x340 [ 285.394177][ T7043] ? __fget_files+0x402/0x470 [ 285.398883][ T7043] ? aa_sock_opt_perm+0x74/0x100 [ 285.403855][ T7043] ? sock_common_setsockopt+0x32/0xb0 [ 285.409625][ T7043] ? raw_setsockopt+0xc2/0x170 [ 285.414396][ T7043] ? sock_common_recvmsg+0x1c0/0x1c0 [ 285.419783][ T7043] __sys_setsockopt+0x2bf/0x3d0 [ 285.424638][ T7043] __x64_sys_setsockopt+0xb1/0xc0 [ 285.429659][ T7043] do_syscall_64+0x4c/0xa0 [ 285.434069][ T7043] ? clear_bhb_loop+0x30/0x80 [ 285.438842][ T7043] ? clear_bhb_loop+0x30/0x80 [ 285.443525][ T7043] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 285.449413][ T7043] RIP: 0033:0x7f341d5ea0d9 [ 285.453903][ T7043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.477291][ T7043] RSP: 002b:00007f341b800028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 285.485820][ T7043] RAX: ffffffffffffffda RBX: 00007f341d872180 RCX: 00007f341d5ea0d9 [ 285.493814][ T7043] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000006 [ 285.501777][ T7043] RBP: 00007f341d681024 R08: 000000000000003c R09: 0000000000000000 [ 285.509742][ T7043] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 285.517707][ T7043] R13: 00007f341d872218 R14: 00007f341d872180 R15: 00007fff04cd8a58 [ 285.525846][ T7043]