last executing test programs: 20.859709941s ago: executing program 1 (id=268): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000480)='autofs\x00', 0x0) close(0x3) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000004c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) fchdir(r3) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000500)='./file0\x00', r0, &(0x7f0000000ac0)='./file0\x00') setpgid(r4, r4) setpgid(0x0, r4) statfs(&(0x7f0000000b00)='./file0\x00', 0x0) add_key$user(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), 0xc9, 0xfffffffffffffffd) mount(&(0x7f00000001c0), &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240)='ecryptfs\x00', 0x0, &(0x7f0000000280)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') llistxattr(&(0x7f0000000300)='./mnt\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, &(0x7f0000000780)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_fuse_handle_req(r5, &(0x7f0000004000)="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", 0x2000, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000060c0)={0x90, 0x0, 0x80000004, {0x1fffffffffffff9, 0x2, 0x5, 0x6, 0xa003, 0x1ff, {0x8, 0x2, 0x8, 0xffffffffffffffff, 0x2, 0x3f49, 0xc05, 0x2, 0x239, 0xc000, 0x0, 0x0, 0x0, 0x1000, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000800)={0xa, 0x4e22}, 0x1c) listen(r6, 0x10040) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000840)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000880)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) syz_emit_ethernet(0xe2, &(0x7f00000008c0)={@local, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0xd0, 0x64, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x4, 0x0, 0x0, 0x12, {[@timestamp={0x8, 0xa, 0xffffa888}]}}, {"589bd78d2b71fe4b714665685135bf21072faafe96ec294d6c6539d4a740dea160dc1ee679706182018004878d22ec3cb6480fb088206fd0f5ffbd92e72bad8d1bcb2b9b613a84ad03c81acb638d608181625bd00c12cfe1514eebec0d2d3cdadca2e3c308e8595d5269701e0491674a51e87405fd955e7e46116c8b97da1fc719a824a9fc394b98445011cdecca5b715a3eeb84bd168efd80ab8dd7"}}}}}}, 0x0) 19.410501306s ago: executing program 1 (id=276): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1802007ffd2f20b1dd156c00000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000011000000850000000700000095"], 0x0, 0x2a7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000075"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0xc, &(0x7f00000004c0)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x40, &(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0], 0x4, 0xf82, &(0x7f00000006c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000001680)='./bus\x00', 0x40942, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000016c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000001700), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000001780)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000001800), 0x651, 0x0) recvmmsg(r3, &(0x7f0000001840), 0x10106, 0x2, 0x0) copy_file_range(r2, &(0x7f00000018c0), r1, 0x0, 0xa003e458, 0x700000000000000) ftruncate(r1, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000002ac0)={0x3, &(0x7f0000000080)=[{0x15, 0x0, 0x1, 0x7}, {0x64, 0x1, 0x5}, {0x6, 0x1, 0x81, 0x2b}]}) 17.907810154s ago: executing program 1 (id=279): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x11fa, &(0x7f00000008c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./my_debugfs\x00', &(0x7f0000000340)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001c00)='./my_debugfs/usb/devices\x00', 0x0, 0x0) read(r3, &(0x7f0000001c40)=""/100, 0x7ffc) openat(0xffffffffffffff9c, &(0x7f0000001ac0)='./file1\x00', 0x48042, 0x8c) statfs(&(0x7f0000001b00)='./file1\x00', &(0x7f0000001b40)=""/186) 12.977789177s ago: executing program 1 (id=299): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x402) syz_emit_ethernet(0x5a, &(0x7f0000000080)=ANY=[], 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='dctcp', 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000180)=0x5) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x0, 0x0, 0xfffffffffffffec0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000940)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000019940), 0x13, 0x8041) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) ioctl$USBDEVFS_ALLOC_STREAMS(r5, 0x8008551c, &(0x7f0000019980)=ANY=[@ANYBLOB="d09400000100000081"]) 9.926032583s ago: executing program 1 (id=305): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) 9.784770336s ago: executing program 2 (id=306): syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000480)=ANY=[@ANYRES16=0x0], 0x1, 0x1f5, &(0x7f0000000600)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sg(0x0, 0x2, 0x200000) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f00000003c0)={0x0, 0x80000001}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000400)={0x0, 'erspan0\x00', {0x1}, 0x26}) r4 = openat$dsp1(0xffffff9c, 0x0, 0x80040, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000005, 0x4000010, 0xffffffffffffffff, 0xb9ddd000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mbind(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3, &(0x7f0000000440)=0x9, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYRES64=r4], 0x0, 0x38}, 0x28) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8890}, 0x40) ioprio_set$uid(0x3, 0x0, 0x2004) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f) 8.498591149s ago: executing program 4 (id=309): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00e789da34e04a1ffb124b2c2fb684c70b90bbb45efd97899a16f2df4fa2e8f06ac2c5352509e3c51d882eb3ec0dd3b1c96e980163890d2d0d1b8d3d62f6d77b0209e166e2ca4c35483d49316daf522556a16cab12d75a852bc680da7ea837480feb2060a1e20a59b7745235030000004ed0351cb5b416ba1c57217be5a338392f831617ee8c35bb61f0a9eeed3b1226b18c4b455ab222d7ae1b5258d5643d70000000000000000000ae468a387d9e63008000000000000063a454d1ab8760076a893752105f030c49caf2fdfe6bc9743a68593b576e2f2f6ab69e1b974ac90855ac250f8f73e16bc593730b88d7a3346b945e276875915040ce4901262cd8ce8191ee84e3ce5526a0a43b707cc711a3311f840cad641a013c6dd783aa895227b3d50a86e15a57e26666aaa296b7ddc4c8f421cf9d76d344bf6522f5d1138659d3de84ce13b085a2ed9d66c93767378423521cc4ea440e0ac3b953e1ca1675a716a97a5c3106aba648f119eeab4747b9b53000475e0a34514ccf397ea6f170e018122a98f135beac48d2ed195e20fdd226c7f5a20000ad1fcfbee59924e161280a8b78fe34b2fa3efa7c1d4268bf090000ecb4ece3234c232659fee3ff9e6d21e008a570bb490a65b84ea8b6d6507355cb1112fae6e3456bf8da53e1df20458e59456822dbb8dbd7ce0f928d5fbd6414fe8ab5277f3fd5ce6be044993f93e697a69484cc0e65ec742443c84e21a440998c8d69c12c2db7aee2872c6e0671d639e8f6bece219dcd0f69b9867dfc3187c882c035809c81832d7416f90c734be30c2faf0c22bfc8d95dfc7b9bac96b838c98ae5a75b9dc9e967ef5edf311bbebd7ca803cea8f5b9ec5b3edd6c44d633b71bde97a3c10a468432ff3d4e63ce3ecfa640d44b70b68744d26e72389e6c61767725d2c692443bc949c28b1a374e541bd352ca2f3bf64d883862dc24d8e27d86b6e38bc269f110c3d563f8e4ec9a98016b6b58157deeefa8fa022514bdc75f794094700cb8fa2b61310cbf9058bce5f2399055929e0fc732e0d5db926fe1b09a2993ff038d8099c229bda0801f8b81719d73b4abac97f704a0942051bae38b00b69d7fa69d738f99f73b19082ec0c99442d97ddbf68a4822aa2a2673478f81f14f67beee619b9d9882f7eabfb5000000000000000000003ff8795b5ec2de11479e781396117c84449647684239c9b9475b389a6a76d36c31f39539d928d2c58f188b4bf713d0915df4cc7de48a930935dbb01c9422d604467d209fd1421c7fc503cabde4bb193ff3654377c6e4fb72dcfc835f760bae7447068c2e43433e3d77c6805b559a04f3ebb741a9bbf57274b1da7800000000000000000000000000000000000000001c4f225672f3465b2638e921d80d58dca4ee4592d8cc0c06b2e390b7b1c713a46bc8ece9be25f055a59032576bc00a844c32b46040a607eaeb886ec0cb8e90c5a4075caa8a358ab81e78ad794a20f772b73466a43cd696401521793e54b1c4aa58d506b661f393e7233337473f36c2dbb15ae673afe82ebe45cc6f776162e43b74d9b9ca6f68d6bc8261600b27431e0f6f4f1e0947f69d2d812ebc9d2a8869b14a84dbdcdc5055b97a241e2f707740bb966b6c58408aceb9f6a943f61405a5093c60c0dfb511b02f191ef6fa6e5a1a86687a44ec6098439a2ef55a4ba07e2b0f62ae86e1458f63f6b8b2d2b9990495f17b6d1052b19472a97d41204a8be48e380be2e6885c7de0807f2c154ad4f25b16027bc4aeb85dc798e7eef25631bfd79c8e0aff725dcd4b91c61bf8d72f74e4dbae59bddcea722c5135791af1f0ab1d70de8b01"], 0x1, 0x11fa, &(0x7f00000008c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./my_debugfs\x00', &(0x7f0000000340)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001c00)='./my_debugfs/usb/devices\x00', 0x0, 0x0) read(r3, &(0x7f0000001c40)=""/100, 0x7ffc) openat(0xffffffffffffff9c, &(0x7f0000001ac0)='./file1\x00', 0x48042, 0x8c) statfs(&(0x7f0000001b00)='./file1\x00', &(0x7f0000001b40)=""/186) 8.44202387s ago: executing program 3 (id=310): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a28000000080a0101000000000000000007000003090001"], 0x1f8}}, 0x0) 8.379212521s ago: executing program 2 (id=311): socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f00000001c0)='./bus\x00', 0x8000, 0x7) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x60f83, 0x88) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x52, &(0x7f00000006c0)=0x80000000, 0x4) sendmsg$key(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="02128ed102"], 0x10}}, 0x0) 8.290603334s ago: executing program 3 (id=313): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./mnt\x00', 0x1ff) mount$nfs(0x0, &(0x7f0000000c80)='./mnt\x00', &(0x7f0000000cc0), 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,lock']) 7.21790535s ago: executing program 3 (id=314): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000200)=[@transaction={0x40046302, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) 6.918700157s ago: executing program 2 (id=316): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x402) syz_emit_ethernet(0x5a, &(0x7f0000000080)=ANY=[], 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='dctcp', 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000180)=0x5) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x0, 0x0, 0xfffffffffffffec0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000940)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000019940), 0x13, 0x8041) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) ioctl$USBDEVFS_ALLOC_STREAMS(r5, 0x8008551c, &(0x7f0000019980)=ANY=[@ANYBLOB="d09400000100000081"]) 6.779259921s ago: executing program 3 (id=317): r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7ff, 0x40080) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x1, 0x20, 0x201, 0x0, {{0xe, 0x4, 0x0, 0x6, 0x38, 0x66, 0x0, 0x2, 0x4, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x16}, {[@timestamp_addr={0x44, 0x24, 0x2c, 0x1, 0x0, [{@remote, 0x6226d48e}, {@private=0xa010101, 0x8}, {@rand_addr=0x64010100, 0xfffffffd}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}]}}}}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000004c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000600)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000680), 0x651, 0x0) recvmmsg(r3, &(0x7f00000006c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x6) landlock_restrict_self(0xffffffffffffffff, 0x1) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r5, 0x1, 0x3}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x40) r6 = syz_open_dev$dvb_demux(&(0x7f0000000300), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000340)={0xfff, 0x0, 0x3, 0x14, 0x4}) r7 = syz_open_dev$dvb_demux(&(0x7f0000000380), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f00000003c0)={0x1, 0x1, 0x3, 0x4, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, &(0x7f0000000400)=0x7) ioctl$DVB_DEMUX_DMX_START(r6, 0x6f29) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000200)={0x6, @remote, 0x5000, 0x0, 'rr\x00', 0x4, 0x0, 0xffffffff}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000240)={{0x6, @remote, 0x5000, 0x0, 'rr\x00', 0x0, 0x0, 0xffffffff}, {@rand_addr=0x64010100, 0x5000, 0x2000, 0x1}}, 0x44) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @remote}, {{0x1234, 0x5000, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, 0x1000}}}}}}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES16], 0x0) 5.907760573s ago: executing program 2 (id=318): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r2 = dup(r1) write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[], 0x32600) write$make_it_fail(r2, &(0x7f00000003c0)='N\x00', 0x2) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) syz_emit_ethernet(0x52, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 4.636650304s ago: executing program 4 (id=320): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet(0xa, 0x801, 0x84) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='common_pid', 0xa) 3.61031923s ago: executing program 0 (id=321): syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000480)=ANY=[@ANYRES16=0x0], 0x1, 0x1f5, &(0x7f0000000600)="$eJzs3cFqE1EUANCbmCYTcdGdIAgjLnRV1C+oSAUxIFSy0J2gK7NqN6mb9jP8Bf/LD5CuspEncSadmKYxBDKj7Tmb3pn7Xt+7M2SSTW5SFL7f/RpZ1or2fuzHpBW70Y6ZswAArpNJSvEjFZreCwBQjzXe/3/WvCUAYMvevnv/+vlgcHCY51nE+dl4OB4Wf4v8y1eDgyf5b7vVrPPxeHjrIv80X/zsMM3vxO0y/6yYn1+kuxEx7Mbjh0V+mnvxZpD/Ob8XH7dcOwAAAAAAAAAAAAAAAAAAAAAANOV+5DNL+/vs7S3m+2W+OJrrD7TQv6cT9zrlYdUeKJ3WURQAAAAAAAAAAAAAAAAAAAD8Z45Pvnz+MBp9OqqCXkTMn+ksGXN10Cr/8VqDmw/asdn0flnmBou2yku03QL7y2/uOkF0/pW7s2mQ17BWf+XlTWkaLH8VzNpiXDm9GxGrV390uOnmJyml0bcHR8cnkVYOrp4RvVqfSAAAAAAAAAAAAAAAAAAAcHPNfev7kqyJDQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAA6rf/58Gl8+sDE4j4k78dfBsrZ3IGq0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA6+tXAAAA//85ziI4") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sg(0x0, 0x2, 0x200000) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f00000003c0)={0x0, 0x80000001}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000400)={0x0, 'erspan0\x00', {0x1}, 0x26}) r4 = openat$dsp1(0xffffff9c, 0x0, 0x80040, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000005, 0x4000010, 0xffffffffffffffff, 0xb9ddd000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mbind(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3, &(0x7f0000000440)=0x9, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYRES64=r4], 0x0, 0x38}, 0x28) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8890}, 0x40) ioprio_set$uid(0x3, 0x0, 0x2004) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f) 3.596230361s ago: executing program 3 (id=322): r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7ff, 0x40080) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'tunl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_newaddr={0x2c, 0x14, 0x100, 0x70bd2c, 0x25dfdbff, {0xa, 0x20, 0x0, 0xc8}, [@IFA_ADDRESS={0x14, 0x1, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000004c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000600)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000680), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000006c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x6) landlock_restrict_self(0xffffffffffffffff, 0x1) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r2, 0x1, 0x3}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x40) r3 = syz_open_dev$dvb_demux(&(0x7f0000000300), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f0000000340)={0xfff, 0x0, 0x3, 0x14, 0x4}) r4 = syz_open_dev$dvb_demux(&(0x7f0000000380), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000003c0)={0x1, 0x1, 0x3, 0x4, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r3, 0x40026f33, &(0x7f0000000400)=0x7) ioctl$DVB_DEMUX_DMX_START(r3, 0x6f29) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)={0x6, @remote, 0x5000, 0x0, 'rr\x00', 0x4, 0x0, 0xffffffff}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000240)={{0x6, @remote, 0x5000, 0x0, 'rr\x00', 0x0, 0x0, 0xffffffff}, {@rand_addr=0x64010100, 0x5000, 0x2000, 0x1}}, 0x44) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @remote}, {{0x1234, 0x5000, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, 0x1000}}}}}}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES16], 0x0) 3.574323381s ago: executing program 4 (id=323): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='27', 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x121301, 0x0) 3.237879849s ago: executing program 4 (id=324): ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000300)=@multiplanar_userptr={0x3, 0x2, 0x4, 0x1, 0x0, {}, {0x2, 0xc, 0x81, 0x1, 0x2, 0x2, "1b436a41"}, 0x1, 0x2, {0x0}, 0x7}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) r4 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x40045731, 0x0) 2.02049889s ago: executing program 4 (id=325): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000002180)={'pimreg\x00', {0x2, 0x0, @multicast1}}) 1.808510885s ago: executing program 1 (id=326): waitid(0x0, 0x0, 0x0, 0x1, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x9, 0xa0, 0x3, "", [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x2, 0x6, 0x0, 0x5, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xf2, 0x200, 0x5, 0x86}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x2, 0x7, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x8, 0x2, 0x14}}}}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x2e, &(0x7f0000000580)={0x5, 0xf, 0x2e, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0xd1, 0xc, 0x33, 0x3, 0x1}, @ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x1, 0xf0f, 0x7, [0x30, 0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x7, 0xfa, 0x5}]}}) 1.60189512s ago: executing program 0 (id=327): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x24008818, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) splice(r1, 0x0, r2, 0x0, 0x7ffff000, 0x0) writev(r1, &(0x7f0000001700)=[{&(0x7f0000000440)="830a5864", 0x4}], 0x1) 1.380554386s ago: executing program 0 (id=328): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000500)=[@acquire]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001700)={0x44, 0x0, &(0x7f0000000a00)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000900)={0x30, 0x30, 0x30}}}], 0xbca, 0x0, &(0x7f0000000b00)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000780)={0x30, 0x30, 0x30}}, 0x1000}]}) 1.256980498s ago: executing program 0 (id=329): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[], 0x18) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='0.0.0.0:0:/\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x800000000000000) 1.22368707s ago: executing program 2 (id=330): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00'}) close(r0) 779.947581ms ago: executing program 0 (id=331): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000010c0)={0x24, 0x0, 0x0, &(0x7f0000001100)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x8, "01"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x1, 0x1, 0x1, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0x9, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_4={0x3, 0x0, 0x9, "1a9f653b"}, @global=@item_012={0x1, 0x1, 0x7, '\b'}, @global=@item_012={0x2, 0x1, 0x2, "c5bd"}, @local=@item_012={0x1, 0x2, 0x0, '0'}]}}, 0x0}, 0x0) 529.770517ms ago: executing program 4 (id=332): r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7ff, 0x40080) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x1, 0x20, 0x201, 0x0, {{0x10, 0x4, 0x0, 0x6, 0x40, 0x66, 0x0, 0x2, 0x4, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x16}, {[@timestamp_addr={0x44, 0x2c, 0x2c, 0x1, 0x0, [{@multicast2, 0x6}, {@remote, 0x6226d48e}, {@private=0xa010101, 0x8}, {@rand_addr=0x64010100, 0xfffffffd}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}]}}}}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000004c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000600)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000680), 0x651, 0x0) recvmmsg(r3, &(0x7f00000006c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x6) landlock_restrict_self(0xffffffffffffffff, 0x1) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r5, 0x1, 0x3}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x40) r6 = syz_open_dev$dvb_demux(&(0x7f0000000300), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000340)={0xfff, 0x0, 0x3, 0x14, 0x4}) r7 = syz_open_dev$dvb_demux(&(0x7f0000000380), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f00000003c0)={0x1, 0x1, 0x3, 0x4, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, &(0x7f0000000400)=0x7) ioctl$DVB_DEMUX_DMX_START(r6, 0x6f29) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000200)={0x6, @remote, 0x5000, 0x0, 'rr\x00', 0x4, 0x0, 0xffffffff}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000240)={{0x6, @remote, 0x5000, 0x0, 'rr\x00', 0x0, 0x0, 0xffffffff}, {@rand_addr=0x64010100, 0x5000, 0x2000, 0x1}}, 0x44) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @remote}, {{0x1234, 0x5000, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, 0x1000}}}}}}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES16], 0x0) 185.291356ms ago: executing program 3 (id=333): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000440), 0x0, 0x40002) ioctl$FE_DISEQC_SEND_MASTER_CMD(r0, 0x40076f3f, &(0x7f0000000480)={"a97ea8b02359", 0x6}) 55.287579ms ago: executing program 0 (id=334): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1802007ffd2f20b1dd156c00000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000011000000850000000700000095"], 0x0, 0x2a7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000075"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0xc, &(0x7f00000004c0)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x40, &(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0], 0x4, 0xf82, &(0x7f00000006c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000001680)='./bus\x00', 0x40942, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000016c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000001700), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000001780)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000001800), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001880)=0x6) copy_file_range(r3, &(0x7f00000018c0), r2, 0x0, 0xa003e458, 0x700000000000000) ftruncate(r2, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x2000000, 0xe, 0x0, &(0x7f00000005c0)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000002ac0)={0x3, &(0x7f0000000080)=[{0x15, 0x0, 0x1, 0x7}, {0x64, 0x1, 0x5}, {0x6, 0x1, 0x81, 0x2b}]}) 0s ago: executing program 2 (id=335): socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x2, 0xc9}}}, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./dir0/file0\x00', 0xe80, 0x1) ioctl$CEC_G_MODE(0xffffffffffffffff, 0x80046108, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x2004a080}, 0x80) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) r1 = syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000700)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000740), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x1c, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xb5) write$nci(r2, &(0x7f0000000840)=ANY=[], 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500)) mount$bind(0x0, &(0x7f00000008c0)='./file0\x00', 0x0, 0x100000, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.28' (ED25519) to the list of known hosts. [ 61.442440][ T4172] cgroup: Unknown subsys name 'net' [ 61.589792][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.135750][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.269601][ T4186] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.282839][ T4186] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.304324][ T4198] rdma_rxe: rxe_register_device failed with error -23 [ 65.310406][ T4195] rdma_rxe: rxe_register_device failed with error -23 [ 65.312723][ T4198] rdma_rxe: failed to add rxe_eth0 [ 65.328281][ T4196] rdma_rxe: rxe_register_device failed with error -23 [ 65.338393][ T4186] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.341283][ T4185] rdma_rxe: rxe_register_device failed with error -23 [ 65.355100][ T4195] rdma_rxe: failed to add rxe_eth0 [ 65.360821][ T4196] rdma_rxe: failed to add rxe_eth0 [ 65.373091][ T4185] rdma_rxe: failed to add rxe_eth0 [ 65.576953][ T3573] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.575894][ T4186] infiniband rxe0: set active [ 65.593222][ T4186] infiniband rxe0: added rxe_eth0 [ 65.662089][ T4186] RDS/IB: rxe0: added [ 65.666920][ T4186] smc: adding ib device rxe0 with port count 1 [ 65.674275][ T4186] smc: ib device rxe0 port 1 has pnetid [ 65.690954][ T3573] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.721821][ T4186] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.831797][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 65.873968][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 65.894608][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 65.984895][ T4186] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.985431][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 66.169118][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.179992][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.189066][ T4198] device bridge_slave_0 entered promiscuous mode [ 66.220195][ T4186] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.247038][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.259118][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.278890][ T4198] device bridge_slave_1 entered promiscuous mode [ 66.287168][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.298582][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.307073][ T4185] device bridge_slave_0 entered promiscuous mode [ 66.319543][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.326925][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.335463][ T4196] device bridge_slave_0 entered promiscuous mode [ 66.360133][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.367766][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.376579][ T4185] device bridge_slave_1 entered promiscuous mode [ 66.383900][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.391005][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.399857][ T4196] device bridge_slave_1 entered promiscuous mode [ 66.428938][ T4186] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.486276][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.504686][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.523006][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.530129][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.541051][ T4195] device bridge_slave_0 entered promiscuous mode [ 66.550860][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.563161][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.574633][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.588996][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.597442][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.610454][ T4195] device bridge_slave_1 entered promiscuous mode [ 66.640163][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.712738][ T4198] team0: Port device team_slave_0 added [ 66.726869][ T4185] team0: Port device team_slave_0 added [ 66.749887][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.763529][ T4198] team0: Port device team_slave_1 added [ 66.769543][ T4186] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.779668][ T4185] team0: Port device team_slave_1 added [ 66.801148][ T4196] team0: Port device team_slave_0 added [ 66.820312][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.853762][ T4196] team0: Port device team_slave_1 added [ 66.888580][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.896901][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.923665][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.936423][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.944455][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.971081][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.005011][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.012126][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.042343][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.063587][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.070620][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.097551][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.120669][ T4195] team0: Port device team_slave_0 added [ 67.134754][ T4195] team0: Port device team_slave_1 added [ 67.163299][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.170322][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.201486][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.217509][ T23] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.248860][ T3573] Bluetooth: hci4: command 0x0409 tx timeout [ 67.251787][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.263082][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.274433][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 67.289219][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.306669][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 67.313125][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 67.327117][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 67.333375][ T3851] infiniband rxe0: set active [ 67.348196][ T4198] device hsr_slave_0 entered promiscuous mode [ 67.355646][ T4198] device hsr_slave_1 entered promiscuous mode [ 67.363391][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.370382][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.397520][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.417979][ T4185] device hsr_slave_0 entered promiscuous mode [ 67.426736][ T4185] device hsr_slave_1 entered promiscuous mode [ 67.434256][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.442034][ T4185] Cannot create hsr debugfs directory [ 67.452848][ T23] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.478680][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.485899][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.512364][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.549987][ T4195] device hsr_slave_0 entered promiscuous mode [ 67.557614][ T4195] device hsr_slave_1 entered promiscuous mode [ 67.565664][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.573555][ T4195] Cannot create hsr debugfs directory [ 67.582843][ T4196] device hsr_slave_0 entered promiscuous mode [ 67.590048][ T4196] device hsr_slave_1 entered promiscuous mode [ 67.596804][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.604496][ T4196] Cannot create hsr debugfs directory [ 67.964614][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 68.006654][ T4198] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.045367][ T4198] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.080706][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.088088][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.096828][ T4186] device bridge_slave_0 entered promiscuous mode [ 68.105553][ T4198] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.114931][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.122642][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.131112][ T4186] device bridge_slave_1 entered promiscuous mode [ 68.139029][ T4198] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.168942][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.198134][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.231789][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.257681][ T4186] team0: Port device team_slave_0 added [ 68.264013][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.278328][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.289222][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.300960][ T4186] team0: Port device team_slave_1 added [ 68.338260][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.345550][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.371842][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.395700][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.402706][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.430445][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.449752][ T4195] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.485646][ T4195] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.499132][ T4195] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.512792][ T4186] device hsr_slave_0 entered promiscuous mode [ 68.521191][ T4186] device hsr_slave_1 entered promiscuous mode [ 68.528919][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.536958][ T4186] Cannot create hsr debugfs directory [ 68.559411][ T4195] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.600233][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.680151][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.692687][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.718499][ T4196] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.729516][ T4196] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.742901][ T4196] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.758199][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.768001][ T4196] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.801265][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.811137][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.821665][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.829026][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.837830][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.851520][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.860341][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.867488][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.876696][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.891033][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.915575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.948191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.957535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.966814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.976329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.986428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.996031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.014587][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.050374][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.060464][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.069998][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.078660][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.089817][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.100151][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.111004][ T4186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.125558][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.135707][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.146515][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.153683][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.180829][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.193323][ T4186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.202355][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.211952][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.221208][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.230992][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.238227][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.266436][ T4186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.280826][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.298148][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.321054][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.323670][ T4262] Bluetooth: hci4: command 0x041b tx timeout [ 69.333715][ T4261] Bluetooth: hci0: command 0x041b tx timeout [ 69.333821][ T4261] Bluetooth: hci3: command 0x041b tx timeout [ 69.333987][ T4261] Bluetooth: hci1: command 0x041b tx timeout [ 69.358296][ T4186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.371073][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.388117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.398148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.413710][ T4266] Bluetooth: hci2: command 0x041b tx timeout [ 69.427406][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.439157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.448701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.467331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.495635][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.516742][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.527610][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.537496][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.547386][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.556142][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.565816][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.575238][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.584811][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.594075][ T4268] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.601179][ T4268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.609692][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.620686][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.629503][ T4268] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.636649][ T4268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.645268][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.658882][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.670553][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.703309][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.711698][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.732786][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.748757][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.761130][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.770156][ T4268] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.777343][ T4268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.786281][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.796192][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.805695][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.814827][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.822906][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.862638][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.874131][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.882757][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.889921][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.906569][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.920166][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.931873][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.945164][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.960322][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.972077][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.981303][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.990203][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.999196][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.007022][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.014698][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.024707][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.033947][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.059350][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.086591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.099259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.125319][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.137846][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.158022][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.168035][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.177064][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.191073][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.202754][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.227309][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.236300][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.245385][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.255411][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.316320][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.327728][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.346612][ T4198] device veth0_vlan entered promiscuous mode [ 70.368082][ T4185] device veth0_vlan entered promiscuous mode [ 70.381769][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.389812][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.399196][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.410742][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.420283][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.429900][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.438572][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.448627][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.457367][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.472508][ T4198] device veth1_vlan entered promiscuous mode [ 70.487225][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.502899][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.511324][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.539128][ T4185] device veth1_vlan entered promiscuous mode [ 70.564076][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.575457][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.584179][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.598645][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.616709][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.637449][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.646358][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.655318][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.662833][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.690687][ T4198] device veth0_macvtap entered promiscuous mode [ 70.704642][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.714159][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.722640][ T4282] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.729781][ T4282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.740662][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.750748][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.760221][ T4282] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.767404][ T4282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.777410][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.786613][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.795423][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.804680][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.816242][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.824740][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.832926][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.842692][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.858720][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.870532][ T4198] device veth1_macvtap entered promiscuous mode [ 70.895917][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.906736][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.916939][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.928527][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.938057][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.947358][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.956408][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.965937][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.976238][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.985244][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.008080][ T4185] device veth0_macvtap entered promiscuous mode [ 71.021334][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.034749][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.052507][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.061694][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.070668][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.080167][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.091310][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.111120][ T4185] device veth1_macvtap entered promiscuous mode [ 71.128934][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.139089][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.164932][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.179302][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.206436][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.219163][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.228469][ T4195] device veth0_vlan entered promiscuous mode [ 71.236026][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.248350][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.254992][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.262671][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.272515][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.281656][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.291060][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.300781][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.342505][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.358836][ T4195] device veth1_vlan entered promiscuous mode [ 71.379290][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.392289][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.404487][ T4262] Bluetooth: hci1: command 0x040f tx timeout [ 71.410685][ T4262] Bluetooth: hci4: command 0x040f tx timeout [ 71.413836][ T4265] Bluetooth: hci3: command 0x040f tx timeout [ 71.419358][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.423452][ T4265] Bluetooth: hci0: command 0x040f tx timeout [ 71.435987][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.438193][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.454797][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.463798][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.477031][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.485060][ T4262] Bluetooth: hci2: command 0x040f tx timeout [ 71.488734][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.501194][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.510583][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.530024][ T4198] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.539598][ T4198] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.549357][ T4198] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.558174][ T4198] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.572219][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.581512][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.590763][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.599112][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.609445][ T4196] device veth0_vlan entered promiscuous mode [ 71.708252][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.720360][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.730785][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.739194][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.749565][ T4195] device veth0_macvtap entered promiscuous mode [ 71.760143][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.785163][ T4196] device veth1_vlan entered promiscuous mode [ 71.807805][ T4195] device veth1_macvtap entered promiscuous mode [ 71.863319][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.871570][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.886062][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.895568][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.905446][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.915002][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.930856][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.942210][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.952348][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.964341][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.975964][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.994879][ T4196] device veth0_macvtap entered promiscuous mode [ 72.017702][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.032806][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.050161][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.062056][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.078738][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.089507][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.106124][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.117990][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.130142][ T4196] device veth1_macvtap entered promiscuous mode [ 72.137014][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.149548][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.168243][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.177041][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.186802][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.196285][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.224041][ T4195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.232821][ T4195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.249658][ T4195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.260798][ T4195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.279797][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.289543][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.312237][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.373099][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.384603][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.395275][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.405797][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.415827][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.426465][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.438937][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.464356][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.476337][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.485312][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.493589][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.510038][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.518585][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.529978][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.541210][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.552737][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.562924][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.575332][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.586925][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.600276][ T4196] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.620099][ T4196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.629028][ T4196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.637894][ T4196] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.673534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.682291][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.694948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.704747][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.716712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.731366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.740602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.844187][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.852211][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.861061][ T4282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.887398][ T4186] device veth0_vlan entered promiscuous mode [ 72.900042][ T4282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.919777][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.935930][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.946451][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.955195][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.963518][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.986093][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.072067][ T4303] SET target dimension over the limit! [ 73.085393][ T4303] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 73.131100][ T4303] sctp: [Deprecated]: syz.0.1 (pid 4303) Use of struct sctp_assoc_value in delayed_ack socket option. [ 73.131100][ T4303] Use struct sctp_sack_info instead [ 73.643010][ T4266] Bluetooth: hci0: command 0x0419 tx timeout [ 73.655590][ T4266] Bluetooth: hci4: command 0x0419 tx timeout [ 73.680694][ T4266] Bluetooth: hci3: command 0x0419 tx timeout [ 73.730924][ T4266] Bluetooth: hci2: command 0x0419 tx timeout [ 73.793435][ T4307] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 73.954096][ T4290] Bluetooth: hci1: command 0x0419 tx timeout [ 74.036714][ T4186] device veth1_vlan entered promiscuous mode [ 74.063503][ T4307] usb 2-1: Using ep0 maxpacket: 8 [ 74.214441][ T4307] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.302421][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.335437][ T4307] usb 2-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 74.362105][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.514588][ T4307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.564998][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.865317][ T4307] usb 2-1: config 0 descriptor?? [ 75.239186][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.377727][ T4307] usb 2-1: bad CDC descriptors [ 75.450152][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.514615][ T4307] usb 2-1: bad CDC descriptors [ 75.590536][ T4304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.614809][ T4304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.622695][ T4307] cdc_acm 2-1:0.0: Control and data interfaces are not separated! [ 75.680931][ T4307] cdc_acm 2-1:0.0: This needs exactly 3 endpoints [ 75.706199][ T4307] cdc_acm: probe of 2-1:0.0 failed with error -22 [ 75.795499][ T4186] device veth0_macvtap entered promiscuous mode [ 75.872576][ T4307] usb 2-1: USB disconnect, device number 2 [ 75.898825][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.918958][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.932288][ T4186] device veth1_macvtap entered promiscuous mode [ 75.999103][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.018684][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.050247][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.071912][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.082437][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.099490][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.110250][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.135035][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.151897][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.162316][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.179097][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.200901][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.240137][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.278671][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.311288][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.327487][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.339893][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.358585][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.388485][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.407248][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.434030][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.456419][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.487270][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.524640][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.547779][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.675812][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.082996][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 77.103019][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 77.113003][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 77.123004][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 77.713019][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 77.723002][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 77.732996][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 77.742995][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 77.773003][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 77.783018][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 78.528947][ T4260] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.613358][ T4336] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.686392][ T4338] FAULT_INJECTION: forcing a failure. [ 78.686392][ T4338] name failslab, interval 1, probability 0, space 0, times 1 [ 78.686467][ T4338] CPU: 1 PID: 4338 Comm: syz.0.10 Not tainted syzkaller #0 [ 78.686490][ T4338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 78.686512][ T4338] Call Trace: [ 78.686521][ T4338] [ 78.686530][ T4338] dump_stack_lvl+0x188/0x250 [ 78.686570][ T4338] ? show_regs_print_info+0x20/0x20 [ 78.686593][ T4338] ? load_image+0x410/0x410 [ 78.686620][ T4338] ? __might_sleep+0xf0/0xf0 [ 78.686643][ T4338] ? __lock_acquire+0x7d40/0x7d40 [ 78.686676][ T4338] should_fail+0x383/0x4b0 [ 78.686707][ T4338] should_failslab+0x5/0x20 [ 78.686728][ T4338] slab_pre_alloc_hook+0x51/0xc0 [ 78.686748][ T4338] ? __kernfs_new_node+0xa8/0x6b0 [ 78.686775][ T4338] __kmalloc_track_caller+0x69/0x330 [ 78.686797][ T4338] ? __kernfs_new_node+0xa8/0x6b0 [ 78.686828][ T4338] kstrdup_const+0x51/0x90 [ 78.686850][ T4338] __kernfs_new_node+0xa8/0x6b0 [ 78.686881][ T4338] ? kernfs_new_node+0x250/0x250 [ 78.686917][ T4338] ? sysfs_do_create_link_sd+0x75/0x110 [ 78.686944][ T4338] ? __lock_acquire+0x7d40/0x7d40 [ 78.686973][ T4338] kernfs_new_node+0x148/0x250 [ 78.687004][ T4338] kernfs_create_link+0xa3/0x200 [ 78.687029][ T4338] sysfs_do_create_link_sd+0x83/0x110 [ 78.687054][ T4338] device_add+0x83b/0x1050 [ 78.687083][ T4338] device_create+0x266/0x300 [ 78.687111][ T4338] ? lockdep_hardirqs_on+0x94/0x140 [ 78.687139][ T4338] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 78.687173][ T4338] ? root_device_unregister+0xf0/0xf0 [ 78.687201][ T4338] ? memcpy+0x3c/0x60 [ 78.687223][ T4338] ? is_console_locked+0x5/0x10 [ 78.687243][ T4338] ? csi_J+0x8d6/0xdb0 [ 78.687270][ T4338] vcs_make_sysfs+0x2e/0x80 [ 78.687291][ T4338] vc_allocate+0x5e4/0x700 [ 78.687322][ T4338] ? vc_cons_allocated+0x70/0x70 [ 78.687357][ T4338] con_install+0x9c/0x720 [ 78.687388][ T4338] ? show_tty_active+0x30/0x30 [ 78.687424][ T4338] tty_init_dev+0xbb/0x470 [ 78.687452][ T4338] tty_open+0x7e8/0xcd0 [ 78.687483][ T4338] ? __lock_acquire+0x7d40/0x7d40 [ 78.687513][ T4338] ? tty_compat_ioctl+0x570/0x570 [ 78.687542][ T4338] ? do_raw_spin_unlock+0x11d/0x230 [ 78.687570][ T4338] chrdev_open+0x585/0x5f0 [ 78.687599][ T4338] ? cd_forget+0x160/0x160 [ 78.687627][ T4338] ? fsnotify_perm+0x3a7/0x560 [ 78.687653][ T4338] ? cd_forget+0x160/0x160 [ 78.687677][ T4338] do_dentry_open+0x7f7/0xf90 [ 78.687701][ T4338] ? vfs_open+0x2b/0x80 [ 78.687725][ T4338] path_openat+0x2718/0x2fb0 [ 78.687769][ T4338] ? __kasan_slab_alloc+0xa9/0xc0 [ 78.687796][ T4338] ? do_filp_open+0x400/0x400 [ 78.687831][ T4338] do_filp_open+0x1df/0x400 [ 78.687857][ T4338] ? vfs_tmpfile+0x300/0x300 [ 78.687900][ T4338] ? _raw_spin_unlock+0x24/0x40 [ 78.687922][ T4338] ? alloc_fd+0x59e/0x650 [ 78.687952][ T4338] do_sys_openat2+0x14b/0x500 [ 78.687973][ T4338] ? __lock_acquire+0x7d40/0x7d40 [ 78.687999][ T4338] ? do_sys_open+0xe0/0xe0 [ 78.688021][ T4338] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 78.688051][ T4338] ? lock_chain_count+0x20/0x20 [ 78.688082][ T4338] __x64_sys_openat+0x135/0x160 [ 78.688119][ T4338] do_syscall_64+0x4c/0xa0 [ 78.688141][ T4338] ? clear_bhb_loop+0x30/0x80 [ 78.688165][ T4338] ? clear_bhb_loop+0x30/0x80 [ 78.688191][ T4338] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.688237][ T4338] RIP: 0033:0x7fd75f323d8e [ 78.688264][ T4338] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 78.688283][ T4338] RSP: 002b:00007fd75d5bab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 78.688308][ T4338] RAX: ffffffffffffffda RBX: 00007fd75d5bb6c0 RCX: 00007fd75f323d8e [ 78.688325][ T4338] RDX: 0000000000000002 RSI: 00007fd75d5bac00 RDI: ffffffffffffff9c [ 78.688340][ T4338] RBP: 00007fd75f3fa8b0 R08: 0000000000000000 R09: 0000000000000000 [ 78.688354][ T4338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.688367][ T4338] R13: 00007fd75f5eb038 R14: 00007fd75f5eafa0 R15: 00007ffdcda9ad98 [ 78.688400][ T4338] [ 78.771107][ T4317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.771130][ T4317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.771395][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.853631][ T4317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.853654][ T4317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.853914][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.985051][ T4348] loop1: detected capacity change from 0 to 64 [ 79.448953][ T4353] loop2: detected capacity change from 0 to 1024 [ 79.716364][ T4353] EXT4-fs (loop2): orphan cleanup on readonly fs [ 79.793795][ T4353] EXT4-fs error (device loop2): ext4_quota_enable:6444: inode #4: comm syz.2.12: iget: immutable or append flags not allowed on symlinks [ 80.168869][ T4353] EXT4-fs error (device loop2): ext4_quota_enable:6447: comm syz.2.12: Bad quota inode: 4, type: 1 [ 80.322486][ T4353] EXT4-fs warning (device loop2): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 80.478705][ T4353] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 80.543682][ T4353] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 80.693768][ T13] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 80.799651][ T4379] loop3: detected capacity change from 0 to 4096 [ 80.904482][ T4379] ======================================================= [ 80.904482][ T4379] WARNING: The mand mount option has been deprecated and [ 80.904482][ T4379] and is ignored by this kernel. Remove the mand [ 80.904482][ T4379] option from the mount to silence this warning. [ 80.904482][ T4379] ======================================================= [ 82.073139][ T26] audit: type=1326 audit(1792185050.664:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4376 comm="syz.3.9" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67502d7559 code=0x0 [ 82.117001][ T4385] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 82.130089][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 82.253996][ T13] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.302263][ T13] usb 5-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 82.353559][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.394663][ T13] usb 5-1: config 0 descriptor?? [ 83.338286][ T13] usb 5-1: bad CDC descriptors [ 83.355549][ T13] usb 5-1: bad CDC descriptors [ 83.422029][ T13] cdc_acm 5-1:0.0: Control and data interfaces are not separated! [ 83.483374][ T13] cdc_acm 5-1:0.0: This needs exactly 3 endpoints [ 83.490021][ T13] cdc_acm: probe of 5-1:0.0 failed with error -22 [ 84.241591][ T4410] loop0: detected capacity change from 0 to 512 [ 84.267672][ T13] usb 5-1: USB disconnect, device number 2 [ 84.432165][ T4421] FAULT_INJECTION: forcing a failure. [ 84.432165][ T4421] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 84.446164][ T4421] CPU: 0 PID: 4421 Comm: syz.1.24 Not tainted syzkaller #0 [ 84.453416][ T4421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 84.463504][ T4421] Call Trace: [ 84.466819][ T4421] [ 84.469782][ T4421] dump_stack_lvl+0x188/0x250 [ 84.474492][ T4421] ? show_regs_print_info+0x20/0x20 [ 84.479717][ T4421] ? load_image+0x410/0x410 [ 84.484267][ T4421] ? uncharge_page+0x490/0x490 [ 84.489077][ T4421] should_fail+0x383/0x4b0 [ 84.493567][ T4421] prepare_alloc_pages+0x1e3/0x5b0 [ 84.498725][ T4421] __alloc_pages+0x11b/0x480 [ 84.503366][ T4421] ? zone_statistics+0x170/0x170 [ 84.508375][ T4421] ? rcu_lock_acquire+0x30/0x30 [ 84.513260][ T4421] ? alloc_pages+0x452/0x560 [ 84.517891][ T4421] __get_free_pages+0x8/0x30 [ 84.522541][ T4421] __tlb_remove_page_size+0x1f2/0x3f0 [ 84.527955][ T4421] unmap_page_range+0xfcf/0x2410 [ 84.532957][ T4421] unmap_vmas+0x131/0x250 [ 84.537332][ T4421] ? unmap_page_range+0x2410/0x2410 [ 84.542568][ T4421] ? __mutex_lock_common+0x435/0x2400 [ 84.547980][ T4421] ? exit_mm_release+0x16/0x30 [ 84.552790][ T4421] exit_mmap+0x3b9/0x640 [ 84.557121][ T4421] ? vm_brk+0x20/0x20 [ 84.561175][ T4421] ? uprobe_clear_state+0x2f6/0x460 [ 84.566420][ T4421] __mmput+0x115/0x390 [ 84.570557][ T4421] exit_mm+0x632/0x7b0 [ 84.574659][ T4421] ? perf_pmu_migrate_context+0xb70/0xb70 [ 84.580419][ T4421] ? do_exit+0x2110/0x2110 [ 84.584864][ T4421] ? __ia32_sys_timer_delete+0x40/0x40 [ 84.590355][ T4421] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 84.595860][ T4421] ? tty_audit_exit+0x149/0x1f0 [ 84.600746][ T4421] do_exit+0x5b8/0x2110 [ 84.604949][ T4421] ? put_task_struct+0x80/0x80 [ 84.609755][ T4421] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 84.615783][ T4421] ? _raw_spin_lock_irq+0xb7/0xf0 [ 84.620859][ T4421] do_group_exit+0x12c/0x2f0 [ 84.625495][ T4421] ? lockdep_hardirqs_on+0x94/0x140 [ 84.630737][ T4421] get_signal+0x7eb/0x12e0 [ 84.635202][ T4421] arch_do_signal_or_restart+0xe6/0x12a0 [ 84.640887][ T4421] ? futex_exit_release+0x1c0/0x1c0 [ 84.646130][ T4421] ? get_sigframe_size+0x10/0x10 [ 84.651108][ T4421] ? __context_tracking_exit+0x4c/0x80 [ 84.656624][ T4421] ? exit_to_user_mode_loop+0x3b/0x130 [ 84.662139][ T4421] exit_to_user_mode_loop+0x9e/0x130 [ 84.667467][ T4421] exit_to_user_mode_prepare+0xee/0x180 [ 84.673049][ T4421] syscall_exit_to_user_mode+0x16/0x40 [ 84.678544][ T4421] do_syscall_64+0x58/0xa0 [ 84.683006][ T4421] ? clear_bhb_loop+0x30/0x80 [ 84.687740][ T4421] ? clear_bhb_loop+0x30/0x80 [ 84.692462][ T4421] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.698400][ T4421] RIP: 0033:0x7f92c4d76559 [ 84.702858][ T4421] Code: Unable to access opcode bytes at RIP 0x7f92c4d7652f. [ 84.710250][ T4421] RSP: 002b:00007f92c2fce0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 84.718715][ T4421] RAX: 0000000000000001 RBX: 00007f92c4ffdfa8 RCX: 00007f92c4d76559 [ 84.726732][ T4421] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f92c4ffdfac [ 84.734743][ T4421] RBP: 00007f92c4ffdfa0 R08: 0016811fa18f23f4 R09: 0000000000000000 [ 84.742763][ T4421] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 84.750776][ T4421] R13: 00007f92c4ffe038 R14: 00007ffc2208c8b0 R15: 00007ffc2208c998 [ 84.758803][ T4421] [ 84.825128][ T4410] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 84.882548][ T4410] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 84.913560][ T4410] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #13: comm syz.0.22: iget: bad i_size value: 12154757448730 [ 84.943812][ T4410] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.22: couldn't read orphan inode 13 (err -117) [ 84.969264][ T4410] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,noload,noinit_itable,usrjquota=,grpjquota=.subj_type=á[]*:[,,errors=continue. Quota mode: writeback. [ 85.502031][ T4439] loop2: detected capacity change from 0 to 128 [ 86.039008][ T4439] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 86.049982][ T4439] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 86.149782][ T4451] loop3: detected capacity change from 0 to 1024 [ 86.157665][ T4452] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 86.186403][ T4451] EXT4-fs (loop3): orphan cleanup on readonly fs [ 86.205669][ T4451] EXT4-fs error (device loop3): ext4_quota_enable:6444: inode #4: comm syz.3.28: iget: immutable or append flags not allowed on symlinks [ 86.234260][ T4451] EXT4-fs error (device loop3): ext4_quota_enable:6447: comm syz.3.28: Bad quota inode: 4, type: 1 [ 86.247250][ T4451] EXT4-fs warning (device loop3): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 86.262425][ T4451] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 86.269341][ T4451] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 86.293058][ T13] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 86.402779][ T4457] loop1: detected capacity change from 0 to 256 [ 86.462083][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 86.607182][ T7] cfg80211: failed to load regulatory.db [ 86.673319][ T13] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 86.683474][ T13] usb 5-1: config 0 has no interface number 0 [ 86.693399][ T13] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 86.710767][ T13] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 86.721148][ T13] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 86.736475][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.768920][ T13] usb 5-1: config 0 descriptor?? [ 86.840096][ T13] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 87.180393][ T4444] iowarrior 5-1:0.1: Error -90 while submitting URB [ 87.222697][ T7] usb 5-1: USB disconnect, device number 3 [ 87.683209][ T4263] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.842346][ T4475] loop1: detected capacity change from 0 to 8192 [ 87.911048][ T26] audit: type=1326 audit(1792185056.534:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4476 comm="syz.4.40" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101321a559 code=0x7ffc0000 [ 87.935483][ T4263] usb 1-1: Using ep0 maxpacket: 8 [ 87.979568][ T26] audit: type=1326 audit(1792185056.534:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4476 comm="syz.4.40" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101321a559 code=0x7ffc0000 [ 88.063358][ T4263] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.085102][ T4263] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 88.107339][ T26] audit: type=1326 audit(1792185056.564:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4476 comm="syz.4.40" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101321a559 code=0x7ffc0000 [ 88.141172][ T4263] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.181110][ T4263] usb 1-1: config 0 descriptor?? [ 88.297965][ T4263] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 88.361491][ T26] audit: type=1326 audit(1792185056.564:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4476 comm="syz.4.40" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101321a559 code=0x7ffc0000 [ 88.885412][ T26] audit: type=1326 audit(1792185056.564:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4476 comm="syz.4.40" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f101321a559 code=0x7ffc0000 [ 88.978769][ T4483] loop2: detected capacity change from 0 to 4096 [ 89.073016][ T4486] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 89.133053][ T26] audit: type=1326 audit(1792185056.564:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4476 comm="syz.4.40" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101321a559 code=0x7ffc0000 [ 89.248643][ T26] audit: type=1326 audit(1792185056.564:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4476 comm="syz.4.40" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101321a559 code=0x7ffc0000 [ 89.313215][ T26] audit: type=1326 audit(1792185056.574:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4476 comm="syz.4.40" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f101321a559 code=0x7ffc0000 [ 89.338002][ T26] audit: type=1326 audit(1792185056.574:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4476 comm="syz.4.40" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f101321a559 code=0x7ffc0000 [ 89.783123][ T26] audit: type=1326 audit(1792185058.134:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4482 comm="syz.2.42" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3d038f1559 code=0x0 [ 91.210609][ T4263] gspca_vc032x: reg_w err -71 [ 91.216070][ T4263] vc032x: probe of 1-1:0.0 failed with error -71 [ 91.226077][ T4263] usb 1-1: USB disconnect, device number 2 [ 91.306737][ T4499] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 91.481973][ T4512] loop3: detected capacity change from 0 to 512 [ 91.585918][ T4512] EXT4-fs (loop3): 1 orphan inode deleted [ 91.601073][ T4512] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.604012][ T4263] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 92.004994][ T4527] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 92.983099][ T4260] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 93.503899][ T4260] usb 3-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping [ 93.523734][ T4260] usb 3-1: config 0 interface 0 has no altsetting 0 [ 93.580809][ T4263] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 93.733977][ T4260] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 93.896816][ T4260] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 93.943236][ T4263] usb 1-1: config 0 has no interface number 0 [ 93.949409][ T4263] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 93.963320][ T4263] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 93.973679][ T4263] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 93.982771][ T4263] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.992849][ T4263] usb 1-1: config 0 descriptor?? [ 94.014609][ T4260] usb 3-1: Product: syz [ 94.024329][ T4260] usb 3-1: Manufacturer: syz [ 94.037616][ T4260] usb 3-1: SerialNumber: syz [ 94.046399][ T4263] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 94.083962][ T4260] usb 3-1: config 0 descriptor?? [ 94.248888][ T4261] usb 1-1: USB disconnect, device number 3 [ 94.308681][ T4260] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 95.101007][ T4552] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 95.156696][ T4369] udevd[4369]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.407980][ T4263] usb 3-1: USB disconnect, device number 2 [ 95.535062][ T4558] FAULT_INJECTION: forcing a failure. [ 95.535062][ T4558] name failslab, interval 1, probability 0, space 0, times 0 [ 95.583577][ T4558] CPU: 1 PID: 4558 Comm: syz.3.62 Not tainted syzkaller #0 [ 95.590866][ T4558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 95.601056][ T4558] Call Trace: [ 95.604370][ T4558] [ 95.607327][ T4558] dump_stack_lvl+0x188/0x250 [ 95.612051][ T4558] ? show_regs_print_info+0x20/0x20 [ 95.617307][ T4558] ? load_image+0x410/0x410 [ 95.621856][ T4558] ? __lock_acquire+0x7d40/0x7d40 [ 95.626953][ T4558] should_fail+0x383/0x4b0 [ 95.631423][ T4558] should_failslab+0x5/0x20 [ 95.635952][ T4558] slab_pre_alloc_hook+0x51/0xc0 [ 95.640914][ T4558] ? key_alloc+0x346/0x1030 [ 95.645452][ T4558] __kmalloc_track_caller+0x69/0x330 [ 95.650768][ T4558] ? key_alloc+0x346/0x1030 [ 95.655314][ T4558] kmemdup+0x22/0x50 [ 95.659251][ T4558] key_alloc+0x346/0x1030 [ 95.663625][ T4558] keyring_alloc+0x41/0xa0 [ 95.668091][ T4558] look_up_user_keyrings+0x459/0x670 [ 95.673441][ T4558] ? key_validate+0xf0/0xf0 [ 95.677992][ T4558] ? __schedule+0x11cb/0x4350 [ 95.682707][ T4558] ? preempt_schedule+0xbc/0xd0 [ 95.687651][ T4558] ? lookup_user_key+0xd1/0x1160 [ 95.692658][ T4558] lookup_user_key+0x37c/0x1160 [ 95.697582][ T4558] ? lookup_user_key_possessed+0x40/0x40 [ 95.703265][ T4558] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 95.709300][ T4558] ? preempt_schedule_irq+0xe6/0x160 [ 95.714632][ T4558] ? lockdep_hardirqs_off+0x70/0x100 [ 95.719971][ T4558] keyctl_get_persistent+0x24b/0x780 [ 95.725309][ T4558] ? lock_chain_count+0x20/0x20 [ 95.730245][ T4558] ? proc_key_users_show+0x310/0x310 [ 95.735587][ T4558] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 95.741278][ T4558] ? lockdep_hardirqs_on+0x94/0x140 [ 95.746527][ T4558] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 95.752223][ T4558] ? __se_sys_keyctl+0x610/0xa20 [ 95.757224][ T4558] __se_sys_keyctl+0x61e/0xa20 [ 95.762040][ T4558] ? __x64_sys_keyctl+0xc0/0xc0 [ 95.766958][ T4558] ? __context_tracking_exit+0x4c/0x80 [ 95.772460][ T4558] ? __lock_acquire+0x7d40/0x7d40 [ 95.777538][ T4558] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 95.783569][ T4558] ? lock_chain_count+0x20/0x20 [ 95.788476][ T4558] ? lockdep_hardirqs_on+0x94/0x140 [ 95.793726][ T4558] ? __x64_sys_keyctl+0x1c/0xc0 [ 95.798637][ T4558] do_syscall_64+0x4c/0xa0 [ 95.803106][ T4558] ? clear_bhb_loop+0x30/0x80 [ 95.807826][ T4558] ? clear_bhb_loop+0x30/0x80 [ 95.812550][ T4558] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 95.818489][ T4558] RIP: 0033:0x7f67502d7559 [ 95.822947][ T4558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.842597][ T4558] RSP: 002b:00007f674e52f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 95.851058][ T4558] RAX: ffffffffffffffda RBX: 00007f675055efa0 RCX: 00007f67502d7559 [ 95.859083][ T4558] RDX: fffffffffffffffd RSI: ffffffffffffffff RDI: 0000000000000016 [ 95.867104][ T4558] RBP: 00007f675036e8b0 R08: 0000000000000000 R09: 0000000000000000 [ 95.875120][ T4558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.883134][ T4558] R13: 00007f675055f038 R14: 00007f675055efa0 R15: 00007ffde9719058 [ 95.891160][ T4558] [ 96.674977][ T4582] loop2: detected capacity change from 0 to 256 [ 96.758285][ T4585] loop0: detected capacity change from 0 to 4096 [ 97.342747][ T4588] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 97.386194][ T4588] loop3: detected capacity change from 0 to 512 [ 97.952955][ C0] sched: RT throttling activated [ 97.980774][ T4588] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 97.998115][ T4588] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 98.207555][ T4588] EXT4-fs error (device loop3): ext4_init_orphan_info:623: comm syz.3.65: orphan file block 0: bad magic [ 98.209664][ T4599] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.230661][ T4588] EXT4-fs (loop3): mount failed [ 99.553090][ T4266] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 99.654125][ T4620] capability: warning: `syz.2.79' uses deprecated v2 capabilities in a way that may be insecure [ 99.780313][ T4627] loop2: detected capacity change from 0 to 256 [ 100.103495][ T4266] usb 2-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping [ 100.125190][ T4266] usb 2-1: config 0 interface 0 has no altsetting 0 [ 100.334450][ T4266] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 100.495951][ T4266] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 100.801705][ T4266] usb 2-1: Product: syz [ 100.878090][ T4266] usb 2-1: Manufacturer: syz [ 100.893131][ T4266] usb 2-1: SerialNumber: syz [ 100.909750][ T4266] usb 2-1: config 0 descriptor?? [ 101.061305][ T4266] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 101.119059][ T4187] udevd[4187]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.254712][ T3573] usb 2-1: USB disconnect, device number 3 [ 101.424300][ T4644] netlink: 'syz.0.87': attribute type 23 has an invalid length. [ 101.597210][ T4307] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 101.822688][ T26] audit: type=1800 audit(1792185070.444:13): pid=4652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.88" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 103.423689][ T4307] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 103.534311][ T4307] usb 4-1: config 0 has no interface number 0 [ 103.906170][ T4307] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 103.973105][ T4307] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 104.193743][ T4307] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 104.703151][ T3573] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 104.793326][ T4307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.804763][ T4307] usb 4-1: config 0 descriptor?? [ 104.833327][ T4307] usb 4-1: can't set config #0, error -71 [ 104.846145][ T4307] usb 4-1: USB disconnect, device number 2 [ 104.892078][ T4679] loop0: detected capacity change from 0 to 512 [ 105.103187][ T4679] EXT4-fs (loop0): Unrecognized mount option "context=system_u" or missing value [ 105.223424][ T3573] usb 3-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping [ 105.250999][ T3573] usb 3-1: config 0 interface 0 has no altsetting 0 [ 105.604028][ T3573] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 105.637434][ T3573] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 105.700281][ T3573] usb 3-1: Product: syz [ 105.792754][ T3573] usb 3-1: Manufacturer: syz [ 105.799612][ T3573] usb 3-1: SerialNumber: syz [ 105.839543][ T3573] usb 3-1: config 0 descriptor?? [ 105.909112][ T3573] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 106.012603][ T4187] udevd[4187]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.473416][ T4307] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 106.481519][ T4266] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 106.903700][ T4266] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 106.948369][ T4266] usb 4-1: config 0 has no interface number 0 [ 106.987341][ T4266] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 107.142671][ T4260] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 107.150385][ T4266] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 107.161612][ T4266] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 107.171188][ T4266] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.219800][ T4266] usb 4-1: config 0 descriptor?? [ 107.261591][ T3573] usb 3-1: USB disconnect, device number 3 [ 107.275165][ T4708] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 107.408020][ T4307] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 107.421369][ T4307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.431812][ T4266] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 107.463025][ T4307] usb 1-1: Product: syz [ 107.467269][ T4307] usb 1-1: Manufacturer: syz [ 107.471894][ T4307] usb 1-1: SerialNumber: syz [ 107.535332][ T4307] usb 1-1: config 0 descriptor?? [ 107.676470][ T4265] usb 4-1: USB disconnect, device number 3 [ 107.713347][ T4260] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 107.735526][ T4260] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 107.756837][ T4260] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 107.775996][ T4260] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.801449][ T4260] usb 2-1: config 0 descriptor?? [ 107.807815][ T4307] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 109.213166][ T26] audit: type=1326 audit(1792185077.814:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4709 comm="syz.1.110" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c4d76559 code=0x7fc00000 [ 109.561691][ T4260] usb 2-1: USB disconnect, device number 4 [ 109.745101][ T4752] loop2: detected capacity change from 0 to 512 [ 109.853655][ T4752] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 109.883245][ T4307] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 109.920625][ T4307] usb 1-1: USB disconnect, device number 4 [ 110.143305][ T4752] EXT4-fs error (device loop2): ext4_init_orphan_info:623: comm syz.2.122: orphan file block 0: bad magic [ 110.177934][ T4752] EXT4-fs (loop2): mount failed [ 110.535056][ T4756] binder: 4755:4756 ioctl c0306201 2000000005c0 returned -14 [ 110.589694][ T4759] binder: BINDER_SET_CONTEXT_MGR already set [ 110.643267][ T4759] binder: 4755:4759 ioctl 4018620d 200000000680 returned -16 [ 110.887935][ T4744] loop3: detected capacity change from 0 to 32768 [ 110.925560][ T4744] BTRFS: device fsid ed4422de-dbc1-4dc1-8d60-3583f36c24cc devid 1 transid 8 /dev/loop3 scanned by syz.3.121 (4744) [ 111.011695][ T4744] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 111.033031][ T4307] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 111.041984][ T4744] BTRFS info (device loop3): using free space tree [ 111.062185][ T4744] BTRFS info (device loop3): has skinny extents [ 111.446222][ T4744] BTRFS info (device loop3): enabling ssd optimizations [ 111.623548][ T4307] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 111.657144][ T4307] usb 1-1: config 0 has no interface number 0 [ 111.696758][ T4307] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 111.754210][ T4307] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 111.765588][ T4307] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 111.776546][ T4307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.342740][ T4307] usb 1-1: config 0 descriptor?? [ 112.382696][ T4758] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 112.415869][ T4307] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 112.501081][ T4801] futex_wake_op: syz.1.134 tries to shift op by 144; fix this program [ 112.845754][ T4265] usb 1-1: USB disconnect, device number 5 [ 115.749194][ T4825] loop0: detected capacity change from 0 to 512 [ 116.674922][ T4825] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 116.699195][ T4820] loop1: detected capacity change from 0 to 8192 [ 116.723697][ T4825] EXT4-fs error (device loop0): ext4_init_orphan_info:623: comm syz.0.138: orphan file block 0: bad magic [ 116.759342][ T4825] EXT4-fs (loop0): mount failed [ 118.188564][ T4847] loop2: detected capacity change from 0 to 8192 [ 118.219283][ T4858] loop0: detected capacity change from 0 to 4096 [ 118.298327][ T4857] futex_wake_op: syz.3.150 tries to shift op by 144; fix this program [ 118.727411][ T4861] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.549971][ T4871] ptp ptp0: new virtual clock ptp1 [ 120.573218][ T4871] ptp ptp0: guarantee physical clock free running [ 122.903637][ T26] audit: type=1800 audit(1792185091.374:15): pid=4899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.156" name=08 dev="sda1" ino=2048 res=0 errno=0 [ 124.183865][ T4913] FAULT_INJECTION: forcing a failure. [ 124.183865][ T4913] name fail_futex, interval 1, probability 0, space 0, times 1 [ 124.197364][ T4913] CPU: 1 PID: 4913 Comm: syz.2.166 Not tainted syzkaller #0 [ 124.204811][ T4913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 124.214903][ T4913] Call Trace: [ 124.218211][ T4913] [ 124.221168][ T4913] dump_stack_lvl+0x188/0x250 [ 124.226700][ T4913] ? show_regs_print_info+0x20/0x20 [ 124.231932][ T4913] ? load_image+0x410/0x410 [ 124.236475][ T4913] ? verify_lock_unused+0x140/0x140 [ 124.241834][ T4913] should_fail+0x383/0x4b0 [ 124.246289][ T4913] get_futex_key+0x1a1/0x12d0 [ 124.251007][ T4913] ? __lock_acquire+0x13b3/0x7d40 [ 124.256073][ T4913] ? futex_wait_restart+0x250/0x250 [ 124.261320][ T4913] futex_wake+0x101/0x540 [ 124.265696][ T4913] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 124.271827][ T4913] ? futex_wait+0x680/0x680 [ 124.276376][ T4913] ? verify_lock_unused+0x140/0x140 [ 124.281620][ T4913] ? finish_lock_switch+0x12d/0x290 [ 124.286858][ T4913] ? lockdep_hardirqs_on+0x94/0x140 [ 124.292113][ T4913] do_futex+0xd83/0x12b0 [ 124.296405][ T4913] ? finish_task_switch+0x12f/0x650 [ 124.301656][ T4913] ? __schedule+0x11cb/0x4350 [ 124.306381][ T4913] ? futex_exit_release+0x1c0/0x1c0 [ 124.311627][ T4913] ? __context_tracking_exit+0x4c/0x80 [ 124.317137][ T4913] __se_sys_futex+0x389/0x420 [ 124.322340][ T4913] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 124.329279][ T4913] ? __x64_sys_futex+0xf0/0xf0 [ 124.334355][ T4913] ? __x64_sys_futex+0x1d/0xf0 [ 124.339159][ T4913] do_syscall_64+0x4c/0xa0 [ 124.344512][ T4913] ? clear_bhb_loop+0x30/0x80 [ 124.349412][ T4913] ? clear_bhb_loop+0x30/0x80 [ 124.354226][ T4913] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 124.360814][ T4913] RIP: 0033:0x7f3d038f1559 [ 124.365723][ T4913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.385398][ T4913] RSP: 002b:00007f3d01b280e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 124.393915][ T4913] RAX: ffffffffffffffda RBX: 00007f3d03b79098 RCX: 00007f3d038f1559 [ 124.401926][ T4913] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3d03b7909c [ 124.409927][ T4913] RBP: 00007f3d03b79090 R08: 000833068194bf24 R09: 0000000000000000 [ 124.418027][ T4913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.426052][ T4913] R13: 00007f3d03b79128 R14: 00007ffd179e0e60 R15: 00007ffd179e0f48 [ 124.434100][ T4913] [ 124.773246][ T4919] futex_wake_op: syz.0.168 tries to shift op by 144; fix this program [ 124.857409][ T4920] ptp ptp0: guarantee physical clock free running [ 129.431210][ T4964] futex_wake_op: syz.2.184 tries to shift op by 144; fix this program [ 132.390620][ T5002] loop3: detected capacity change from 0 to 8192 [ 132.703766][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.711703][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.485828][ T5013] futex_wake_op: syz.0.200 tries to shift op by 144; fix this program [ 135.285769][ T5016] nvme_fc: nvme_fc_create_ctrl: nn-0x1000000044001122:pn-0x2000000044001122 - nn-0x1000000044001123:pn-0x2000000044001123 combination not found [ 135.352871][ T5021] autofs4:pid:5021:autofs_fill_super: called with bogus options [ 135.646502][ T5031] loop0: detected capacity change from 0 to 256 [ 135.706169][ T5021] Error parsing options; rc = [-22] [ 138.514612][ T5059] TCP: tcp_parse_options: Illegal window scaling value 81 > 14 received [ 138.730870][ T5061] futex_wake_op: syz.1.215 tries to shift op by 144; fix this program [ 138.865986][ T5067] overlayfs: failed to clone upperpath [ 139.143128][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 139.973323][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 140.113706][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.165821][ T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 140.463044][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.525827][ T23] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 140.551362][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.810412][ T23] hub 4-1:1.0: bad descriptor, ignoring hub [ 140.961018][ T23] hub: probe of 4-1:1.0 failed with error -5 [ 141.127209][ T23] cdc_wdm 4-1:1.0: skipping garbage [ 141.371447][ T5080] ceph: No mds server is up or the cluster is laggy [ 141.393259][ T23] cdc_wdm 4-1:1.0: skipping garbage [ 141.402693][ T23] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 141.409494][ T23] cdc_wdm 4-1:1.0: Unknown control protocol [ 141.456088][ T4265] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 141.474527][ T23] usb 4-1: USB disconnect, device number 4 [ 142.214563][ T5096] loop0: detected capacity change from 0 to 256 [ 146.729802][ T5119] futex_wake_op: syz.3.231 tries to shift op by 144; fix this program [ 146.775882][ T5120] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 146.820607][ T5120] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 147.096814][ T5124] fuse: Bad value for 'fd' [ 148.580023][ T5138] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 148.597066][ T5138] loop2: detected capacity change from 0 to 512 [ 149.262968][ T5138] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 149.522308][ T5149] binder: 5148:5149 ioctl c0306201 200000000640 returned -14 [ 150.216537][ T26] audit: type=1326 audit(2000000017.430:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5142 comm="syz.4.237" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f101321a559 code=0x0 [ 150.251671][ T5138] EXT4-fs: failed to create workqueue [ 150.257509][ T5138] EXT4-fs (loop2): mount failed [ 150.326319][ T5152] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 150.832042][ T5162] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 151.041148][ T5166] loop3: detected capacity change from 0 to 256 [ 155.269766][ T26] audit: type=1326 audit(2000000023.110:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5186 comm="syz.4.251" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f101321a559 code=0x0 [ 155.611941][ T5199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.255'. [ 155.784197][ T5199] device bond0 entered promiscuous mode [ 155.817541][ T5199] device bond_slave_0 entered promiscuous mode [ 155.824279][ T5199] device bond_slave_1 entered promiscuous mode [ 155.850430][ T5196] loop3: detected capacity change from 0 to 8192 [ 155.875433][ T5199] device gretap0 entered promiscuous mode [ 156.834483][ T5199] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 156.875863][ T5199] device hsr1 entered promiscuous mode [ 156.922875][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 157.718818][ T5210] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 158.158097][ T5218] loop1: detected capacity change from 0 to 4096 [ 158.939265][ T26] audit: type=1326 audit(2000000026.780:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5217 comm="syz.1.262" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f92c4d76559 code=0x0 [ 158.962813][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.004916][ T5223] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 159.985980][ T26] audit: type=1800 audit(2000000027.830:19): pid=5230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.265" name="idVendor" dev="configfs" ino=34692 res=0 errno=0 [ 160.078990][ T26] audit: type=1800 audit(2000000027.860:20): pid=5230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.265" name="idProduct" dev="configfs" ino=34693 res=0 errno=0 [ 160.143639][ T26] audit: type=1800 audit(2000000027.860:21): pid=5230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.265" name="serialnumber" dev="configfs" ino=34695 res=0 errno=0 [ 160.346475][ T26] audit: type=1800 audit(2000000027.870:22): pid=5230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.265" name="report_length" dev="configfs" ino=34699 res=0 errno=0 [ 160.367821][ T26] audit: type=1800 audit(2000000027.870:23): pid=5230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.265" name="report_desc" dev="configfs" ino=34700 res=0 errno=0 [ 161.008370][ T26] audit: type=1800 audit(2000000027.870:24): pid=5230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.265" name="UDC" dev="configfs" ino=34702 res=0 errno=0 [ 161.028784][ C1] vkms_vblank_simulate: vblank timer overrun [ 161.223021][ T13] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 161.290676][ T5241] ecryptfs_verify_version: Minor version number mismatch. Expected [4]; got [0] [ 161.321414][ T5241] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 161.431396][ T5241] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 161.443445][ T5241] One or more global auth toks could not properly register; rc = [-22] [ 161.453567][ T5241] Error parsing options; rc = [-22] [ 161.576243][ T5260] udc-core: couldn't find an available UDC or it's busy [ 161.583406][ T5260] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 162.054258][ T5262] loop1: detected capacity change from 0 to 4096 [ 162.324392][ T5268] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 162.442248][ T5267] loop3: detected capacity change from 0 to 4096 [ 162.503121][ T13] usb 1-1: Dual-Role OTG device on HNP port [ 162.523243][ T13] usb 1-1: New USB device found, idVendor=0012, idProduct=0000, bcdDevice= 5.15 [ 162.605587][ T26] audit: type=1326 audit(2000000030.450:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5261 comm="syz.1.276" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f92c4d76559 code=0x0 [ 162.638710][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.722608][ T5273] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 162.734518][ T13] usb 1-1: SerialNumber: 1234 [ 162.853815][ T13] usbhid 1-1:1.0: can't add hid device: -22 [ 162.884463][ T13] usbhid: probe of 1-1:1.0 failed with error -22 [ 163.086933][ T26] audit: type=1800 audit(2000000030.920:26): pid=5276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.278" name="idVendor" dev="configfs" ino=35568 res=0 errno=0 [ 163.189226][ T26] audit: type=1800 audit(2000000030.940:27): pid=5276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.278" name="idProduct" dev="configfs" ino=35569 res=0 errno=0 [ 163.315785][ T26] audit: type=1800 audit(2000000030.940:28): pid=5276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.278" name="serialnumber" dev="configfs" ino=35570 res=0 errno=0 [ 163.348751][ T26] audit: type=1800 audit(2000000030.940:29): pid=5276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.278" name="report_length" dev="configfs" ino=35571 res=0 errno=0 [ 163.371460][ T26] audit: type=1800 audit(2000000030.960:30): pid=5276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.278" name="report_desc" dev="configfs" ino=35572 res=0 errno=0 [ 163.393000][ T26] audit: type=1800 audit(2000000030.960:31): pid=5276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.278" name="UDC" dev="configfs" ino=35573 res=0 errno=0 [ 163.828074][ T5289] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 164.348942][ T5283] loop1: detected capacity change from 0 to 8192 [ 164.713341][ T4805] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 165.093459][ T4805] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 165.126385][ T4805] usb 4-1: config 0 has no interface number 0 [ 165.192342][ T4805] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 165.423655][ T4805] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 165.438257][ T4805] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 165.489741][ T4805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.507985][ T5311] loop0: detected capacity change from 0 to 4096 [ 165.534839][ T4805] usb 4-1: config 0 descriptor?? [ 165.573492][ T5298] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 165.608742][ T4805] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 165.637540][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 165.637555][ T26] audit: type=1800 audit(2000000033.480:33): pid=5315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.291" name="idVendor" dev="configfs" ino=34793 res=0 errno=0 [ 165.673870][ T5317] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 165.834753][ T4805] usb 4-1: USB disconnect, device number 5 [ 165.910773][ T26] audit: type=1800 audit(2000000033.530:34): pid=5315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.291" name="idProduct" dev="configfs" ino=34795 res=0 errno=0 [ 165.942090][ T26] audit: type=1800 audit(2000000033.530:35): pid=5315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.291" name="serialnumber" dev="configfs" ino=34796 res=0 errno=0 [ 166.014776][ T5323] bonding: unable to delete non-existent b [ 166.043600][ T26] audit: type=1800 audit(2000000033.530:36): pid=5315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.291" name="report_length" dev="configfs" ino=34797 res=0 errno=0 [ 166.068963][ T26] audit: type=1800 audit(2000000033.560:37): pid=5315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.291" name="report_desc" dev="configfs" ino=34800 res=0 errno=0 [ 166.090126][ T26] audit: type=1800 audit(2000000033.560:38): pid=5315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.291" name="UDC" dev="configfs" ino=34801 res=0 errno=0 [ 166.143296][ T26] audit: type=1326 audit(2000000033.820:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5310 comm="syz.0.289" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd75f363559 code=0x0 [ 167.114181][ T5338] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 167.153635][ T5338] loop2: detected capacity change from 0 to 512 [ 167.283371][ T5338] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 167.474837][ T5338] EXT4-fs error (device loop2): ext4_init_orphan_info:623: comm syz.2.294: orphan file block 0: bad magic [ 167.503107][ T5338] EXT4-fs (loop2): mount failed [ 170.783247][ T5363] usb usb9: usbfs: process 5363 (syz.1.299) did not claim interface 0 before use [ 171.206290][ T5378] loop2: detected capacity change from 0 to 256 [ 172.498312][ T5395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.310'. [ 172.700836][ T5400] binder: 5399:5400 ioctl c0306201 0 returned -14 [ 173.969710][ T1109] Process accounting resumed [ 174.073859][ T5408] binder: BC_ACQUIRE_RESULT not supported [ 174.104217][ T5408] binder: 5407:5408 ioctl c0306201 2000000001c0 returned -22 [ 174.959094][ T5412] usb usb9: usbfs: process 5412 (syz.2.316) did not claim interface 0 before use [ 175.643017][ T4265] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 176.024533][ T4265] usb 4-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping [ 176.211925][ T4265] usb 4-1: config 0 interface 0 has no altsetting 0 [ 176.373424][ T4265] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 176.392972][ T4265] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 176.597714][ T5427] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 176.890474][ T4265] usb 4-1: Product: syz [ 177.374377][ T4265] usb 4-1: Manufacturer: syz [ 177.379159][ T4265] usb 4-1: SerialNumber: syz [ 177.409856][ T4265] usb 4-1: config 0 descriptor?? [ 177.446698][ T5433] loop0: detected capacity change from 0 to 256 [ 177.483124][ T4265] usb 4-1: can't set config #0, error -71 [ 177.501809][ T4265] usb 4-1: USB disconnect, device number 6 [ 179.083245][ T4265] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 179.454407][ T4265] usb 4-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping [ 179.487832][ T4265] usb 4-1: config 0 interface 0 has no altsetting 0 [ 179.495715][ T4325] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 179.673342][ T4265] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 179.693224][ T4265] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 179.711884][ T4265] usb 4-1: Product: syz [ 179.722041][ T4265] usb 4-1: Manufacturer: syz [ 179.726962][ T4265] usb 4-1: SerialNumber: syz [ 179.743094][ T4325] usb 2-1: Using ep0 maxpacket: 8 [ 179.763594][ T4265] usb 4-1: config 0 descriptor?? [ 179.790970][ T5456] FAULT_INJECTION: forcing a failure. [ 179.790970][ T5456] name failslab, interval 1, probability 0, space 0, times 0 [ 179.807330][ T5456] CPU: 0 PID: 5456 Comm: syz.0.329 Not tainted syzkaller #0 [ 179.814693][ T5456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 179.825012][ T5456] Call Trace: [ 179.828417][ T5456] [ 179.831397][ T5456] dump_stack_lvl+0x188/0x250 [ 179.836743][ T5456] ? show_regs_print_info+0x20/0x20 [ 179.842177][ T5456] ? load_image+0x410/0x410 [ 179.846905][ T5456] ? __might_sleep+0xf0/0xf0 [ 179.851810][ T5456] ? __lock_acquire+0x7d40/0x7d40 [ 179.857001][ T5456] should_fail+0x383/0x4b0 [ 179.861793][ T5456] should_failslab+0x5/0x20 [ 179.866704][ T5456] slab_pre_alloc_hook+0x51/0xc0 [ 179.871885][ T5456] ? ceph_msg_new2+0x3c/0x4a0 [ 179.876817][ T5456] kmem_cache_alloc+0x3d/0x280 [ 179.881820][ T5456] ceph_msg_new2+0x3c/0x4a0 [ 179.886564][ T5456] msgpool_alloc+0x7c/0x1b0 [ 179.891201][ T5456] ? ceph_msgpool_init+0x180/0x180 [ 179.896365][ T5456] mempool_init_node+0x1e5/0x480 [ 179.901357][ T5456] ? msgpool_alloc+0x1b0/0x1b0 [ 179.906431][ T5456] ? ceph_msgpool_init+0x180/0x180 [ 179.911703][ T5456] mempool_create+0x7d/0xc0 [ 179.916258][ T5456] ceph_msgpool_init+0xa3/0x180 [ 179.921169][ T5456] ceph_osdc_init+0x52c/0x8a0 [ 179.926003][ T5456] ceph_create_client+0x242/0x300 [ 179.931181][ T5456] ceph_get_tree+0xf6/0x1290 [ 179.935808][ T5456] ? bpf_lsm_capable+0x5/0x10 [ 179.940525][ T5456] ? security_capable+0x85/0xb0 [ 179.945648][ T5456] vfs_get_tree+0x88/0x270 [ 179.950110][ T5456] vfs_fsconfig_locked+0x22f/0x400 [ 179.954427][ T4325] usb 2-1: config 1 interface 0 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 1023 [ 179.955254][ T5456] __se_sys_fsconfig+0x69e/0x7e0 [ 179.970234][ T5456] ? __x64_sys_fsconfig+0xc0/0xc0 [ 179.973304][ T4325] usb 2-1: config 1 interface 0 altsetting 9 bulk endpoint 0x3 has invalid maxpacket 16 [ 179.975392][ T5456] ? lockdep_hardirqs_on+0x94/0x140 [ 179.990711][ T5456] ? __x64_sys_fsconfig+0x1c/0xc0 [ 179.995802][ T5456] do_syscall_64+0x4c/0xa0 [ 180.000445][ T5456] ? clear_bhb_loop+0x30/0x80 [ 180.005253][ T5456] ? clear_bhb_loop+0x30/0x80 [ 180.009987][ T5456] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 180.016633][ T5456] RIP: 0033:0x7fd75f363559 [ 180.021272][ T5456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.033308][ T4325] usb 2-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.041923][ T5456] RSP: 002b:00007fd75d5bb028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 180.041953][ T5456] RAX: ffffffffffffffda RBX: 00007fd75f5eafa0 RCX: 00007fd75f363559 [ 180.041969][ T5456] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 180.041983][ T5456] RBP: 00007fd75f3fa8b0 R08: 0800000000000000 R09: 0000000000000000 [ 180.041998][ T5456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.096513][ T5456] R13: 00007fd75f5eb038 R14: 00007fd75f5eafa0 R15: 00007ffdcda9ad98 [ 180.104642][ T5456] [ 180.108117][ T4325] usb 2-1: config 1 interface 0 has no altsetting 0 [ 180.221737][ T5460] udc-core: couldn't find an available UDC or it's busy [ 180.246987][ T5460] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 180.305409][ T4265] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 180.314461][ T4265] usb 4-1: USB disconnect, device number 7 [ 180.988271][ T4200] [ 180.990670][ T4200] ====================================================== [ 180.997820][ T4200] WARNING: possible circular locking dependency detected [ 181.005026][ T4200] syzkaller #0 Not tainted [ 181.009670][ T4200] ------------------------------------------------------ [ 181.016737][ T4200] kworker/u5:5/4200 is trying to acquire lock: [ 181.023017][ T4200] ffffffff8e3b4048 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_security_cfm+0x95/0x780 [ 181.029114][ T5473] loop0: detected capacity change from 0 to 4096 [ 181.032459][ T4200] [ 181.032459][ T4200] but task is already holding lock: [ 181.032467][ T4200] ffffffff8e3946c8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_auth_complete_evt+0x308/0xbb0 [ 181.056542][ T4200] [ 181.056542][ T4200] which lock already depends on the new lock. [ 181.056542][ T4200] [ 181.067185][ T4200] [ 181.067185][ T4200] the existing dependency chain (in reverse order) is: [ 181.076229][ T4200] [ 181.076229][ T4200] -> #2 (hci_cb_list_lock){+.+.}-{3:3}: [ 181.084019][ T4200] __mutex_lock_common+0x1e5/0x2400 [ 181.089804][ T4200] mutex_lock_nested+0x17/0x20 [ 181.095244][ T4200] hci_remote_features_evt+0x5d9/0xa10 [ 181.101259][ T4200] hci_event_packet+0x600/0x1310 [ 181.107186][ T4200] hci_rx_work+0x255/0xa10 [ 181.112190][ T4200] process_one_work+0x867/0xff0 [ 181.117611][ T4200] worker_thread+0xad7/0x12a0 [ 181.122952][ T4200] kthread+0x42e/0x520 [ 181.127578][ T4200] ret_from_fork+0x1f/0x30 [ 181.132553][ T4200] [ 181.132553][ T4200] -> #1 (&hdev->lock){+.+.}-{3:3}: [ 181.140066][ T4200] __mutex_lock_common+0x1e5/0x2400 [ 181.145821][ T4200] mutex_lock_nested+0x17/0x20 [ 181.151143][ T4200] l2cap_chan_connect+0xfb/0xe20 [ 181.156661][ T4200] l2cap_sock_connect+0x5a3/0x770 [ 181.162315][ T4200] kernel_connect+0x11c/0x180 [ 181.167549][ T4200] rfcomm_dlc_open+0x600/0x10c0 [ 181.172962][ T4200] rfcomm_sock_connect+0x2e9/0x600 [ 181.178631][ T4200] __sys_connect+0x3cb/0x450 [ 181.183788][ T4200] __x64_sys_connect+0x76/0x80 [ 181.189105][ T4200] do_syscall_64+0x4c/0xa0 [ 181.194072][ T4200] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 181.200543][ T4200] [ 181.200543][ T4200] -> #0 (rfcomm_mutex){+.+.}-{3:3}: [ 181.207955][ T4200] __lock_acquire+0x38f7/0x7d40 [ 181.213363][ T4200] lock_acquire+0x19f/0x400 [ 181.218451][ T4200] __mutex_lock_common+0x1e5/0x2400 [ 181.224202][ T4200] mutex_lock_nested+0x17/0x20 [ 181.229522][ T4200] rfcomm_security_cfm+0x95/0x780 [ 181.235184][ T4200] hci_auth_complete_evt+0x388/0xbb0 [ 181.241118][ T4200] hci_event_packet+0x701/0x1310 [ 181.246614][ T4200] hci_rx_work+0x255/0xa10 [ 181.251758][ T4200] process_one_work+0x867/0xff0 [ 181.257167][ T4200] worker_thread+0xad7/0x12a0 [ 181.262500][ T4200] kthread+0x42e/0x520 [ 181.267127][ T4200] ret_from_fork+0x1f/0x30 [ 181.272096][ T4200] [ 181.272096][ T4200] other info that might help us debug this: [ 181.272096][ T4200] [ 181.282345][ T4200] Chain exists of: [ 181.282345][ T4200] rfcomm_mutex --> &hdev->lock --> hci_cb_list_lock [ 181.282345][ T4200] [ 181.294910][ T4200] Possible unsafe locking scenario: [ 181.294910][ T4200] [ 181.302384][ T4200] CPU0 CPU1 [ 181.307780][ T4200] ---- ---- [ 181.313167][ T4200] lock(hci_cb_list_lock); [ 181.318311][ T4200] lock(&hdev->lock); [ 181.324928][ T4200] lock(hci_cb_list_lock); [ 181.331981][ T4200] lock(rfcomm_mutex); [ 181.336168][ T4200] [ 181.336168][ T4200] *** DEADLOCK *** [ 181.336168][ T4200] [ 181.344330][ T4200] 4 locks held by kworker/u5:5/4200: [ 181.349988][ T4200] #0: ffff88807a6aa138 ((wq_completion)hci2#2){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 181.360311][ T4200] #1: ffffc90002f8fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 181.371710][ T4200] #2: ffff888078d40478 (&hdev->lock){+.+.}-{3:3}, at: hci_auth_complete_evt+0xbc/0xbb0 [ 181.381509][ T4200] #3: ffffffff8e3946c8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_auth_complete_evt+0x308/0xbb0 [ 181.391920][ T4200] [ 181.391920][ T4200] stack backtrace: [ 181.397833][ T4200] CPU: 1 PID: 4200 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 181.405502][ T4200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 181.415610][ T4200] Workqueue: hci2 hci_rx_work [ 181.420335][ T4200] Call Trace: [ 181.423640][ T4200] [ 181.426597][ T4200] dump_stack_lvl+0x188/0x250 [ 181.431303][ T4200] ? load_image+0x410/0x410 [ 181.435953][ T4200] ? show_regs_print_info+0x20/0x20 [ 181.441187][ T4200] ? print_circular_bug+0x12b/0x1a0 [ 181.446416][ T4200] check_noncircular+0x2f8/0x400 [ 181.451390][ T4200] ? print_deadlock_bug+0x5d0/0x5d0 [ 181.456647][ T4200] ? lockdep_lock+0xf1/0x1f0 [ 181.461311][ T4200] ? mark_lock+0x94/0x320 [ 181.465665][ T4200] ? _find_first_zero_bit+0xd1/0xf0 [ 181.470924][ T4200] __lock_acquire+0x38f7/0x7d40 [ 181.478251][ T4200] ? verify_lock_unused+0x140/0x140 [ 181.483526][ T4200] lock_acquire+0x19f/0x400 [ 181.488152][ T4200] ? rfcomm_security_cfm+0x95/0x780 [ 181.493419][ T4200] ? __might_sleep+0xf0/0xf0 [ 181.498044][ T4200] ? read_lock_is_recursive+0x10/0x10 [ 181.503460][ T4200] __mutex_lock_common+0x1e5/0x2400 [ 181.508780][ T4200] ? rfcomm_security_cfm+0x95/0x780 [ 181.514105][ T4200] ? rcu_lock_release+0x20/0x20 [ 181.519083][ T4200] ? lockdep_hardirqs_on+0x94/0x140 [ 181.524316][ T4200] ? rfcomm_security_cfm+0x95/0x780 [ 181.529556][ T4200] ? mutex_lock_io_nested+0x60/0x60 [ 181.534909][ T4200] ? l2cap_security_cfm+0x12b4/0x1340 [ 181.540397][ T4200] ? kmem_cache_free+0x14c/0x210 [ 181.545380][ T4200] ? l2cap_disconn_cfm+0xc0/0xc0 [ 181.550960][ T4200] mutex_lock_nested+0x17/0x20 [ 181.555760][ T4200] rfcomm_security_cfm+0x95/0x780 [ 181.560945][ T4200] ? rfcomm_send_msc+0x340/0x340 [ 181.566036][ T4200] ? rfcomm_send_msc+0x340/0x340 [ 181.571792][ T4200] hci_auth_complete_evt+0x388/0xbb0 [ 181.577256][ T4200] ? hci_disconn_complete_evt+0xae0/0xae0 [ 181.583245][ T4200] ? lock_chain_count+0x20/0x20 [ 181.588225][ T4200] ? __rwlock_init+0x140/0x140 [ 181.593116][ T4200] hci_event_packet+0x701/0x1310 [ 181.598285][ T4200] ? _raw_spin_unlock+0x40/0x40 [ 181.603270][ T4200] ? rcu_lock_release+0x20/0x20 [ 181.608157][ T4200] ? hci_send_to_monitor+0x9c/0x4a0 [ 181.613490][ T4200] hci_rx_work+0x255/0xa10 [ 181.618216][ T4200] process_one_work+0x867/0xff0 [ 181.623116][ T4200] ? worker_detach_from_pool+0x240/0x240 [ 181.628793][ T4200] ? lockdep_hardirqs_off+0x70/0x100 [ 181.634224][ T4200] ? _raw_spin_lock_irq+0xb7/0xf0 [ 181.639424][ T4200] ? _raw_spin_lock_irqsave+0x100/0x100 [ 181.645286][ T4200] ? wq_worker_running+0x97/0x170 [ 181.650373][ T4200] worker_thread+0xad7/0x12a0 [ 181.655094][ T4200] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 181.661320][ T4200] kthread+0x42e/0x520 [ 181.665433][ T4200] ? rcu_lock_release+0x20/0x20 [ 181.670315][ T4200] ? kthread_blkcg+0xd0/0xd0 [ 181.675022][ T4200] ret_from_fork+0x1f/0x30 [ 181.679482][ T4200] [ 181.684070][ T4325] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 181.693974][ T4325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.702235][ T4325] usb 2-1: Product: syz [ 181.706566][ T4325] usb 2-1: Manufacturer: syz [ 181.711302][ T4325] usb 2-1: SerialNumber: syz [ 181.743126][ T5483] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 181.754009][ T5446] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 181.793892][ T5005] udevd[5005]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 181.843537][ T5446] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 181.959193][ T26] audit: type=1326 audit(2000000049.800:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5470 comm="syz.0.334" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd75f363559 code=0x0 [ 182.193158][ T4325] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 182.202202][ T4325] usb 2-1: USB disconnect, device number 5 [ 183.981763][ T5475] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 187.803111][ T4265] Bluetooth: hci2: command 0x0406 tx timeout