last executing test programs: 3m59.130048103s ago: executing program 1 (id=153): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04015b0c"], 0x7) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) symlink(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x28, 0x7ffffffd, 0x810000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffec}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x90, 0x0, 0x2, {0x0, 0x3, 0xbd16, 0x5, 0x7, 0x106, {0x4, 0x5, 0x7, 0x6, 0x8003, 0xf, 0xa734, 0x200, 0x7, 0xc890c63e415ce913, 0x101, 0x0, r2, 0xffff0000, 0x10}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./file0/../file0/file0/file0\x00', 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) 3m58.027702722s ago: executing program 1 (id=159): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newtfilter={0x74, 0x2c, 0xf3f, 0x70bd28, 0x25dddbbd, {0x0, 0x0, 0x0, r4, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x1}, {0x9, 0xfffffff9, 0x0, 0x3}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xc50, 0x7, 0x2}, {{0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r4, 0x3e}, 0x80, &(0x7f0000000840)=[{&(0x7f00000005c0)='!', 0x1}], 0x1}, 0x20004014) 3m56.891284671s ago: executing program 1 (id=165): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xd, 0x9, 0x20000000, 0x6, 0x588}, 0x2}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x1fc16}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xd, 0x9, 0x0, 0x6, 0x588}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) 3m56.386557544s ago: executing program 1 (id=170): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setpgid(r0, r0) setpgid(0x0, r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) 3m55.915641446s ago: executing program 1 (id=173): socket$packet(0x11, 0x3, 0x300) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200400, &(0x7f0000000a00)={[{@user_xattr}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fsname={'fsname', 0x3d, '.'}}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x573, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000354000/0x2000)=nil, 0x2000, &(0x7f0000000680)='\xf3\x1d\xfa\xe5Gp\xa0(\xff\xaa\x1a^\x81\x01\x87\xb0\x82\x80\x9ci6N\x87s\xe5\x7f\x910JpO\xe2\xb2!\x8651\x9d\x92x\xdf,\x05\xc0\x00\x00\x00\x00\x17\x98Os\xb6\x84T\xb9\x99\xd4\x8f\x1e8 \xb9\x983Pf/F\x1e;w\xcf\x9f|86T\xb38\xa11=\xc7\xc4\x1d/\xc5\x1b\x92\xd8\xd9.\xdaf\a5\x85e}b\x04\a\x14\xfdf\xb7\x1fyK,\vd=\xf0_\xe6I\xdd\x83\xa7Cp \x10C\xe5\xaa\x15\xbd\xbd\v\xcf\r\xb3\xe1!\x8cVn4\x93\xd3\x1458\xa94\x122\x17\x0f\xe9\xe1BA?\xe2\xdd\xc2v\x85\x17\v\x83\xea?IFT\x11\x06\xb0\xee\x85:\bL\xf9\xae\x1e\xd8h\xf7\xcd\n\xaa9\xd5\xa4)\xf1H\xb2\x82D\x0f\x893\x01\xf1W\x99\xfah\vz\xb8M\xebZ\xe1\xab\xd8\xa72H\x15\xaeY\xfb\xb1\xe8\xffE\xc1WD\xc9\xb8\x15\xa6\x9eN7\x9d}(\xcb\xbd\x95\x10\x19\xd59\xef>d\xdbV\x80\xd0\xf6\xb4LI\xec\x89N\x88') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000354000/0x1000)=nil, 0x1036, &(0x7f0000000040)='smaps\x00') pwritev2(r0, &(0x7f0000000100), 0x0, 0x5412, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000380)=""/37, 0x25, 0x2) setreuid(0x0, 0xee01) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000140)={0x17c04, r0, 0x3052, 0x973f, 0x81, 0x1}) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000001c0)=[0x3ad, 0x2]) 3m54.17359667s ago: executing program 1 (id=181): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b"], 0x88) accept(r2, 0x0, 0x0) 3m53.838433859s ago: executing program 32 (id=181): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b"], 0x88) accept(r2, 0x0, 0x0) 2m37.728861299s ago: executing program 3 (id=471): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002c40)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x8000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x304, 0x38}, "b575c2c1c3a227b7", "7f9298c9413f0000fb5868d41337f3a2", "8df69b29", "ae7ebfdf4de38175"}, 0x28) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r1) 2m34.987677249s ago: executing program 3 (id=486): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xfb1585202ff31891}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r6, r5, 0x25, 0x0, @val=@target_btf_id=0xffffffffffffffff}, 0x14) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) 2m34.699021207s ago: executing program 3 (id=489): open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x200000003, 0x4100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2, 0xfffffffffffffffd], 0x0, 0x200306}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m34.289172947s ago: executing program 3 (id=490): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@init_itable_val={'init_itable', 0x3d, 0xff}}, {@resgid}]}, 0x0, 0x48f, &(0x7f00000006c0)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x1018ed8, &(0x7f00000001c0)={[], [{@context={'context', 0x3d, 'system_u'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@obj_user={'obj_user', 0x3d, '$,/\xec{'}}, {@obj_role={'obj_role', 0x3d, 'workdir'}}]}, 0x6, 0x659, &(0x7f00000013c0)="$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") mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x6, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat(r0, 0x0, 0x4c8c2bb75bdfc39a, 0x0) 2m33.39444519s ago: executing program 3 (id=493): r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)=@s={0x5, @generic=0xff}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000980), 0x1, 0x5a3, &(0x7f00000002c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sync() prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000140)={0xd, 0x6b9efdda}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) 2m30.847784785s ago: executing program 3 (id=498): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9) close(0xffffffffffffffff) r0 = socket(0x2, 0x1, 0x6) bind(r0, &(0x7f0000000200)=@in={0x2, 0x5000, @empty}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='4\n\x00', 0x2) write(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='-4\n\x00', 0x3) close(r2) 2m15.589729226s ago: executing program 33 (id=498): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9) close(0xffffffffffffffff) r0 = socket(0x2, 0x1, 0x6) bind(r0, &(0x7f0000000200)=@in={0x2, 0x5000, @empty}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='4\n\x00', 0x2) write(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='-4\n\x00', 0x3) close(r2) 58.119398731s ago: executing program 5 (id=869): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000908500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, 0x0, &(0x7f00000000c0)=0x700) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, &(0x7f0000000000)={0x3, 0x8849, 0x2, 0x3}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @mcast2, 0x4}, {0xa, 0x4e23, 0x9, @remote, 0xb}, r4, 0x4}}, 0x48) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xffffffff, 0x10, 0xfffffffffffffffe, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 57.019685759s ago: executing program 5 (id=878): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x2b, 0x7fffffff, 0x19401804, 0x2, 0xfffe, 0x6, 0xcccb, 0x0, 0x0, 0x1, 0x8001}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20842, 0x110) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000020, 0x11, r4, 0xa64c000) write$FUSE_STATX(r4, &(0x7f0000000280)={0x130, 0x0, r2, {0x6, 0x200000, 0x0, '\x00', {0x100, 0x35b, 0x16, 0x8, r3, 0x0, 0xc000, '\x00', 0x1, 0x40e, 0xac7, 0x46f71f04, {0x9, 0x1}, {0x4, 0xf}, {0x86e0, 0xffff}, {0x9, 0x7e}, 0xc0, 0xd8, 0x6, 0xfffffff9}}}, 0x130) 56.387696666s ago: executing program 5 (id=881): socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) getdents(0xffffffffffffffff, 0xfffffffffffffffd, 0x3b) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_bond\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 54.821565296s ago: executing program 5 (id=888): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303030303030312c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c696f636861727365743d64656661756c742c756e695f786c6174653d302c6e6f6e756d7461696c3d302c757466383d302c666c7573682c726f6469722c726f6469722c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c756e695f786c6174653d302c757466383d302c73686f72746e616d653d6d697865642c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c001762a07a915c8f6c3378b924fc250bdae45cd22bb33f29d72cf1c8410df88b83b9710b49374a748455718cc4af5f3ced9aa10632d595e9c8c3a89f41b650b9ebd4886ae65bf02b7c8ea4e76ef2cc241ac9f89f2753df98db0ba9558c753363f296424ec60e703fac2db7e9f31283852e115cf6acb8d77b3e5d68", @ANYBLOB="11ad0fa62a2978807a8e8dfa67c8067d98e603c58e7741eff6101f7dba3e990d3c0c48189cbc7d818e4f857a223c76a4e2cd58dd6af9d8e4a08a2b86421350c1a17d139ce9557b4349553f9bbebef80fbded8430b9772d31c61c03266f36811894ab79fec8ccbacca6f8a63a2ef607314056f14f2c1dc27d3e32385c9af9182d068d101ffbb44cfcb71f7af9565659eef91f11f9f7d5c25012450485453b96da2fa7", @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2c1, &(0x7f0000000a40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c80)={0xb0, 0x0, 0x0, [{{0x0, 0x1, 0x6, 0x8000000000000000, 0x82, 0x3, {0x0, 0x3, 0x8, 0xfffffffffffffffe, 0xbeef, 0x3, 0x4, 0xcd, 0x8, 0x6000, 0x0, 0x0, 0x0, 0x2, 0x7}}, {0x1, 0x0, 0x5, 0xce, 'wfdno'}}]}, 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) stat(&(0x7f00000010c0)='./file0\x00', 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x3, 0x0, &(0x7f0000000080)) 54.367751567s ago: executing program 5 (id=890): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r3, 0x25, 0x0, @void}, 0x10) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 53.679430855s ago: executing program 5 (id=896): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x4, 0xee}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0xd, 0x96, 0x0, 0x100, 0x10000, 0x1, '\x00', 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 53.10182989s ago: executing program 34 (id=896): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x4, 0xee}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0xd, 0x96, 0x0, 0x100, 0x10000, 0x1, '\x00', 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10.17071916s ago: executing program 0 (id=1064): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x9) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) syz_mount_image$vfat(&(0x7f0000000780), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xf5, 0x30e, &(0x7f00000003c0)="$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") syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) 8.799592745s ago: executing program 0 (id=1067): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) writev(r1, &(0x7f0000010b40)=[{&(0x7f0000000540)="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", 0xac1}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 6.28689275s ago: executing program 7 (id=1074): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f0000138000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r0, &(0x7f0000000300)=""/172, 0xdc) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0) getdents(r1, &(0x7f00000001c0)=""/218, 0xda) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r2, 0x541c, 0x0) 5.196454438s ago: executing program 4 (id=1079): write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) 5.064182701s ago: executing program 0 (id=1080): syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00') bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x1e, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)=""/156, 0x9c}], 0x1, &(0x7f0000000500)=""/31, 0x1f}, 0x8000}], 0x400000000000387, 0x2102, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) 4.047216207s ago: executing program 4 (id=1083): socket$alg(0x26, 0x5, 0x0) syz_open_dev$media(&(0x7f0000000380), 0x10, 0x101000) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x64}}, 0x20100) timer_create(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 3.92557373s ago: executing program 0 (id=1084): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, 0x0}) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x1}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000200)={{0x2, 0x4, 0xb, 0xd, 0x8, 0x9, 0x6, 0x1, 0x0, 0x7, 0x5, 0xeb}, {0xdddd0000, 0x8000000, 0xa, 0xe, 0x5, 0x7, 0x4, 0x14, 0x3, 0x5, 0x0, 0x2}, {0xf000, 0x8000000, 0xb, 0x8, 0x4, 0x9, 0x81, 0x3, 0x10, 0xfe, 0x1, 0x70}, {0x5000, 0x10000, 0x0, 0xfe, 0x6, 0xaa, 0x1, 0x0, 0x0, 0x4, 0x84, 0xe}, {0xf000, 0x3000, 0xc, 0xff, 0x1, 0xf8, 0x6, 0x7, 0x4, 0x6, 0x8, 0x7}, {0xd000, 0x3000, 0x9, 0xb9, 0x9, 0x5, 0x4, 0x4, 0x64, 0x1, 0x27, 0x1}, {0x8000000, 0x0, 0x0, 0x1, 0xc, 0x40, 0x4, 0x64, 0xe4, 0x1, 0x14, 0xe}, {0xffff1000, 0xdddcc004, 0xa, 0x21, 0x5, 0x8, 0x8, 0xc7, 0x7, 0x8, 0x43, 0x3}, {0xd000, 0x5}, {0x1, 0x7}, 0x40000000, 0x0, 0x6000, 0x40738, 0x8, 0xa801, 0xeeee0c00, [0x3, 0x5, 0x4, 0xc]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r6, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000b40)={"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"}) 3.92541221s ago: executing program 6 (id=1085): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x3ffffffd, 0x240) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000780)={r5, 0x2, 0x40000004, 0x0, 0x2, [], [0x0, 0x0, 0x400, 0x9], [0xfffffffc, 0x0, 0xfffffffc], [0x1, 0x0, 0x7, 0x401]}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000140)={r5, 0x0, 0xc, 0x1, 0x0, [], [0x8, 0x5, 0x7ff, 0xcb9], [0x3, 0x81, 0xfffffff8, 0x4], [0x1, 0x5, 0x9, 0xd802]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f00000004c0)={r7, 0x0, 0x4, 0x0, 0x2, [], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000200)={r5, 0x8, 0x6, 0x3, 0x2, [], [0x2, 0xb5, 0x3, 0x1], [0x4, 0x6, 0x5, 0x8], [0x0, 0x2, 0x3, 0x4]}) 3.779164104s ago: executing program 7 (id=1086): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 3.713434756s ago: executing program 6 (id=1088): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = gettid() tkill(r3, 0xb) 3.551752569s ago: executing program 0 (id=1099): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = timerfd_create(0x1, 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/8, 0x8}], 0x10000000000000dc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) personality(0xfe47fef9f5ff7379) r2 = memfd_secret(0x80000) mmap(&(0x7f00000c0000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x590a2000) 3.376228894s ago: executing program 7 (id=1090): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) 2.996279964s ago: executing program 2 (id=1092): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="1407"], 0xb4}, 0x1, 0x0, 0x0, 0x30000840}, 0x40) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x7, 0x2, 0xe9b, 0x100, 0xd, 0x7f, 0x44233, 0x200, 0x80, 0x941, 0x8001, 0x6, 0x4, 0x4, 0x20000, 0xb], 0x4, 0x84340}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.736943221s ago: executing program 7 (id=1093): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) shutdown(r0, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) close(0x4) 2.678737472s ago: executing program 6 (id=1094): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x18d6, &(0x7f00000000c0)={0x0, 0x5355, 0x1, 0x2001, 0x99}, &(0x7f0000000400), &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x2, &(0x7f0000000180), 0xfe) 2.668640792s ago: executing program 2 (id=1095): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x8, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1, 0x26c, &(0x7f0000000840)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000ac0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x884c0, 0xab) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) 2.610619364s ago: executing program 4 (id=1096): mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) ftruncate(r1, 0x8800000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) r4 = dup3(r3, r2, 0x0) sendfile(r4, r1, 0x0, 0x1000009) 2.235742263s ago: executing program 2 (id=1097): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) write$tun(r4, &(0x7f0000001840)=ANY=[@ANYBLOB="080008000400060000001400000046"], 0xfce) 1.524595762s ago: executing program 6 (id=1098): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x6fcd, 0x1, 0x200, 0x3, 0x95, 0x8, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 1.486270023s ago: executing program 7 (id=1100): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x11, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x3000, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1000000, 0x2e4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800000, 0x20, 0x0, 0x315}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x0) 1.181669961s ago: executing program 4 (id=1101): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) lstat(&(0x7f0000002d00)='./file0\x00', 0x0) getresgid(0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 937.999486ms ago: executing program 4 (id=1102): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 663.557194ms ago: executing program 2 (id=1103): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x5}}, 0x10) bind$tipc(r0, 0x0, 0x0) 448.496239ms ago: executing program 4 (id=1104): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x4007, 0xffffffff, 0x8003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c8f0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc93f6d78040000ea0756", 0xe, 0x24044041, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 419.31876ms ago: executing program 6 (id=1105): mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(0x0, 0x1ff) open(&(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x241, 0x1ff) mkdir(&(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', 0x1ff) mkdir(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p\x00', 0x1ff) r0 = open(&(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/wWidth\x00', 0x241, 0x1ff) write(r0, &(0x7f0000000540)='12', 0x2) 397.51987ms ago: executing program 2 (id=1106): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000000, &(0x7f0000000040)='\x00', &(0x7f0000000080)='\x00', 0x1, 0x1}) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000140)=[@code={0xa, 0x21, {"b81f000000bf090000000f01d90f01c1"}}, @uexit={0x0, 0x18, 0x1234}], 0x39}) ioctl(r3, 0x4048aecb, &(0x7f0000000400)="070000000000000001000000ffffffff00"/72) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 102.958038ms ago: executing program 0 (id=1107): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) 102.786078ms ago: executing program 2 (id=1108): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000027000103"], 0x18}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e"], 0x88) 19.1141ms ago: executing program 6 (id=1109): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x68, 0x24, 0x713, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000011, 0x6, 0xa, 0x4, 0xd99d}}]}]}}}]}, 0x68}}, 0x0) pipe2$watch_queue(0x0, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x12, 0x830, &(0x7f0000000440)={0x11, 0x8100, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 0s ago: executing program 7 (id=1110): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x59}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) kernel console output (not intermixed with test programs): 1: link becomes ready [ 83.704078][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.711323][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.724725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.735210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.749414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.760156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.818363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.827399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.839826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.852411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.863167][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.872183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.899842][ T4285] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 83.911264][ T4285] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.932757][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.943008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.958674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.969791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.987315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.997562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.012133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.028175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.037154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.051291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.059448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.067349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.076590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.085828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.095468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.176617][ T4282] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.189655][ T4282] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.213127][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.226746][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.237573][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.253189][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.266381][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.275170][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.284160][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.295170][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.304337][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.315922][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.325274][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.336938][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.368179][ T4271] device veth0_vlan entered promiscuous mode [ 84.388732][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.407169][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.439965][ T4273] device veth0_vlan entered promiscuous mode [ 84.485286][ T4271] device veth1_vlan entered promiscuous mode [ 84.509742][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.521247][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.540743][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.561216][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.576078][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.633263][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.647500][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.655967][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.666015][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.685063][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.694804][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.706445][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.719391][ T4273] device veth1_vlan entered promiscuous mode [ 84.751015][ T4272] device veth0_vlan entered promiscuous mode [ 84.769645][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.779828][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.803894][ T4271] device veth0_macvtap entered promiscuous mode [ 84.822584][ T4272] device veth1_vlan entered promiscuous mode [ 84.864354][ T4271] device veth1_macvtap entered promiscuous mode [ 84.911665][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.926664][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.936650][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.950971][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.965820][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.993883][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.015571][ T4285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.038039][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.045949][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.060048][ T4272] device veth0_macvtap entered promiscuous mode [ 85.066507][ T4281] Bluetooth: hci3: command 0x040f tx timeout [ 85.080447][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.088722][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.117131][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.133685][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.141775][ T4281] Bluetooth: hci2: command 0x040f tx timeout [ 85.147891][ T4281] Bluetooth: hci1: command 0x040f tx timeout [ 85.154183][ T49] Bluetooth: hci4: command 0x040f tx timeout [ 85.160464][ T4280] Bluetooth: hci0: command 0x040f tx timeout [ 85.196424][ T4282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.207602][ T4273] device veth0_macvtap entered promiscuous mode [ 85.239282][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.248223][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.265793][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.285152][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.310734][ T4272] device veth1_macvtap entered promiscuous mode [ 85.318853][ T4273] device veth1_macvtap entered promiscuous mode [ 85.327670][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.345220][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.354861][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.365709][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.377852][ T4271] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.388691][ T4271] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.397833][ T4271] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.406922][ T4271] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.448788][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.468493][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.481721][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.515911][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.532347][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.552361][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.568292][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.580454][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.594100][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.605795][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.638161][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.663273][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.677038][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.691987][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.713920][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.725345][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.737689][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.747367][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.756836][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.770803][ T4272] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.779568][ T4272] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.791108][ T4272] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.800045][ T4272] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.815018][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.825079][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.845857][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.883962][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.897480][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.913830][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.932302][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.944726][ T4273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.954206][ T4273] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.963716][ T4273] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.972798][ T4273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.985874][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.995211][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.004003][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.013300][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.040096][ T4282] device veth0_vlan entered promiscuous mode [ 86.095135][ T4282] device veth1_vlan entered promiscuous mode [ 86.151110][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.159179][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.209355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.223734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.232520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.287746][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.299230][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.353052][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.361390][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.369261][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.395698][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.432408][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.440166][ T4303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.453882][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.461265][ T4303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.469918][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.479222][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.488299][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.497610][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.507711][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.516875][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.526016][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.538912][ T4285] device veth0_vlan entered promiscuous mode [ 86.562099][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.569999][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.593340][ T4282] device veth0_macvtap entered promiscuous mode [ 86.627113][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.628958][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.650146][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.656957][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.674611][ T4282] device veth1_macvtap entered promiscuous mode [ 86.693508][ T4285] device veth1_vlan entered promiscuous mode [ 86.706263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.723790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.757864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.798836][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.816664][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.827016][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.838114][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.853527][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.865583][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.887125][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.915351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.924889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.943805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.031420][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.123618][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.141044][ T4280] Bluetooth: hci3: command 0x0419 tx timeout [ 87.221496][ T4281] Bluetooth: hci2: command 0x0419 tx timeout [ 87.221799][ T4289] Bluetooth: hci1: command 0x0419 tx timeout [ 87.234177][ T49] Bluetooth: hci0: command 0x0419 tx timeout [ 87.244074][ T4280] Bluetooth: hci4: command 0x0419 tx timeout [ 87.262733][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.418167][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.562156][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.678647][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.811166][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.829902][ T4285] device veth0_macvtap entered promiscuous mode [ 87.888405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.067797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.216691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.325192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.147800][ T4285] device veth1_macvtap entered promiscuous mode [ 90.255441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.280292][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 90.291651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.320277][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 90.361336][ T4282] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.370130][ T4282] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.450299][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 90.458724][ T4282] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.487755][ T4282] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.542960][ T4385] loop2: detected capacity change from 0 to 512 [ 90.590834][ T4382] process 'syz.0.1' launched './file0' with NULL argv: empty string added [ 90.640180][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.663453][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.675019][ T4385] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 90.714093][ T4385] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.744583][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.788107][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.829172][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.895569][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.930136][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.964267][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.999053][ T4385] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 91.013433][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.078086][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.112005][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.138514][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.187624][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.219830][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.251375][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.350687][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.388162][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.400427][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.412263][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.425860][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 91.436676][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.467147][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.486241][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.610922][ T4285] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.628444][ T4285] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.665413][ T4285] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.708508][ T4285] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.799847][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.818979][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.942436][ T7] cfg80211: failed to load regulatory.db [ 92.505394][ T4402] loop0: detected capacity change from 0 to 131072 [ 92.565170][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.566874][ T4402] F2FS-fs (loop0): invalid crc value [ 92.590153][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.630583][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.685872][ T4402] F2FS-fs (loop0): Found nat_bits in checkpoint [ 92.733427][ T4402] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 92.755759][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.784490][ T4402] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 93.284532][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.296616][ T4303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.319133][ T4303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.347821][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.358194][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.399022][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 94.620286][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 94.630298][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 94.640275][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 94.650268][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 94.660265][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 94.670266][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 94.680266][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 95.055558][ T4419] loop4: detected capacity change from 0 to 128 [ 95.219509][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 95.239328][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 95.261782][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 95.278486][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 95.294925][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 95.309301][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 95.323947][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 96.522224][ T4419] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 96.564464][ T4419] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.101091][ T4285] EXT4-fs (loop4): unmounting filesystem. [ 98.298565][ T4448] loop4: detected capacity change from 0 to 512 [ 98.397871][ T4448] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 98.430542][ T4448] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.575319][ T4452] loop1: detected capacity change from 0 to 128 [ 98.683130][ T4452] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 98.752976][ T4452] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.773014][ T4448] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 98.970528][ T4285] EXT4-fs (loop4): unmounting filesystem. [ 99.182344][ T4468] loop4: detected capacity change from 0 to 1024 [ 99.249822][ T4468] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 99.372100][ T4468] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 99.599036][ T4468] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 99.677357][ T4468] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 99.775602][ T4468] EXT4-fs (loop4): This should not happen!! Data will be lost [ 99.775602][ T4468] [ 99.840475][ T4468] EXT4-fs (loop4): Total free blocks count 0 [ 99.890654][ T4468] EXT4-fs (loop4): Free/Dirty block details [ 99.909411][ T4468] EXT4-fs (loop4): free_blocks=20480 [ 99.931392][ T4468] EXT4-fs (loop4): dirty_blocks=80 [ 99.960358][ T4468] EXT4-fs (loop4): Block reservation details [ 99.968164][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 99.980357][ T4468] EXT4-fs (loop4): i_reserved_data_blocks=5 [ 101.029462][ T4285] EXT4-fs (loop4): unmounting filesystem. [ 104.998667][ T4513] loop0: detected capacity change from 0 to 128 [ 105.058786][ T4513] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 105.105211][ T4513] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.479092][ T4527] loop3: detected capacity change from 0 to 512 [ 105.550129][ T4527] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 105.568792][ T4527] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.631983][ T4527] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 105.799950][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 105.982703][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 112.346752][ T4565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.46'. [ 113.214245][ T26] audit: type=1326 audit(1787509824.263:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4581 comm="syz.3.55" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75d819e0d9 code=0x7ffc0000 [ 113.321935][ T26] audit: type=1326 audit(1787509824.313:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4581 comm="syz.3.55" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75d819e0d9 code=0x7ffc0000 [ 113.358920][ T4565] team0: Port device team_slave_0 removed [ 113.371635][ T26] audit: type=1326 audit(1787509824.313:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4581 comm="syz.3.55" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f75d819e0d9 code=0x7ffc0000 [ 113.397076][ T26] audit: type=1326 audit(1787509824.313:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4581 comm="syz.3.55" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75d819e0d9 code=0x7ffc0000 [ 113.481902][ T26] audit: type=1326 audit(1787509824.313:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4581 comm="syz.3.55" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75d819e0d9 code=0x7ffc0000 [ 114.197240][ T26] audit: type=1326 audit(1787509824.313:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4581 comm="syz.3.55" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f75d819e0d9 code=0x7ffc0000 [ 114.318385][ T26] audit: type=1326 audit(1787509824.313:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4581 comm="syz.3.55" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75d819e0d9 code=0x7ffc0000 [ 114.416097][ T26] audit: type=1326 audit(1787509824.313:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4581 comm="syz.3.55" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75d819e0d9 code=0x7ffc0000 [ 114.494992][ T26] audit: type=1326 audit(1787509824.313:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4581 comm="syz.3.55" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f75d819e0d9 code=0x7ffc0000 [ 114.550350][ T26] audit: type=1326 audit(1787509824.313:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4581 comm="syz.3.55" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75d819e0d9 code=0x7ffc0000 [ 114.697962][ T4592] loop1: detected capacity change from 0 to 512 [ 114.723480][ T4593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.63'. [ 114.724421][ T4592] ======================================================= [ 114.724421][ T4592] WARNING: The mand mount option has been deprecated and [ 114.724421][ T4592] and is ignored by this kernel. Remove the mand [ 114.724421][ T4592] option from the mount to silence this warning. [ 114.724421][ T4592] ======================================================= [ 114.776793][ T4592] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 116.224769][ T4592] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 118.869593][ T4630] Cannot find add_set index 0 as target [ 120.724725][ T4637] loop0: detected capacity change from 0 to 32768 [ 120.876664][ T4637] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 120.888707][ T4637] XFS (loop0): Mounting V5 Filesystem [ 121.468712][ T4637] XFS (loop0): Ending clean mount [ 121.491874][ T4637] XFS (loop0): Quotacheck needed: Please wait. [ 121.858749][ T4637] XFS (loop0): Quotacheck: Done. [ 122.310802][ T4272] XFS (loop0): Unmounting Filesystem [ 124.230356][ T4680] tipc: Failed to remove unknown binding: 66,0,0/0:1525450119/1525450121 [ 124.793098][ T4680] tipc: Failed to remove unknown binding: 66,0,0/0:1525450119/1525450120 [ 124.817576][ T4680] tipc: Failed to remove unknown binding: 66,0,0/0:1525450119/1525450121 [ 124.834307][ T4680] tipc: Failed to remove unknown binding: 66,0,0/0:1525450119/1525450120 [ 126.709763][ T4359] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 127.551633][ T4359] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 127.583279][ T4359] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.627904][ T4359] usb 4-1: config 0 descriptor?? [ 127.643505][ T4359] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 129.294497][ T4359] gspca_stv06xx: I2C: Read error writing address: -71 [ 130.102025][ T4359] usb 4-1: USB disconnect, device number 2 [ 130.238812][ T4738] binder: 4737:4738 ioctl c0306201 200000000080 returned -14 [ 130.289370][ T4738] binder: 4737:4738 ioctl c0306201 2000000003c0 returned -14 [ 130.877269][ T4750] netlink: 28 bytes leftover after parsing attributes in process `syz.4.108'. [ 130.941160][ T4750] netlink: 32 bytes leftover after parsing attributes in process `syz.4.108'. [ 130.991001][ T4750] netlink: 28 bytes leftover after parsing attributes in process `syz.4.108'. [ 131.071979][ T4750] netlink: 32 bytes leftover after parsing attributes in process `syz.4.108'. [ 132.232229][ T4760] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 132.539509][ T4771] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 132.553202][ T4769] loop4: detected capacity change from 0 to 8 [ 132.596743][ T4769] squashfs: Unknown parameter 'yzkaller' [ 132.903059][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.910421][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.649219][ T4783] syz.3.118 uses obsolete (PF_INET,SOCK_PACKET) [ 135.103413][ T4789] user requested TSC rate below hardware speed [ 135.214486][ T4795] netlink: 'syz.3.122': attribute type 1 has an invalid length. [ 135.419305][ T4798] bond1: (slave bridge1): making interface the new active one [ 135.428976][ T4798] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 135.443826][ T4799] netlink: 24 bytes leftover after parsing attributes in process `syz.1.124'. [ 135.562708][ T4795] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 136.528144][ T4822] Bluetooth: MGMT ver 1.22 [ 137.663633][ T4834] device syzkaller0 entered promiscuous mode [ 138.072137][ T4842] netlink: 12 bytes leftover after parsing attributes in process `syz.2.136'. [ 138.183480][ T4842] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.273186][ T4844] device macvlan2 entered promiscuous mode [ 138.320415][ T4844] device bond1 entered promiscuous mode [ 138.450845][ T4844] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 138.472267][ T4844] team0: Port device macvlan2 added [ 139.444115][ T4865] clocksource: Switched to clocksource acpi_pm [ 139.468045][ T4865] clocksource: Switched to clocksource kvm-clock [ 139.483876][ T4864] loop0: detected capacity change from 0 to 2048 [ 139.511231][ T4865] clocksource: Override clocksource jiffies is not currently HRT compatible - deferring [ 139.553324][ T4864] NILFS (loop0): invalid segment: Magic number mismatch [ 139.571219][ T4865] clocksource: Switched to clocksource tsc [ 139.579176][ T4864] NILFS (loop0): trying rollback from an earlier position [ 140.025135][ T4871] clocksource: Override clocksource jiffies is not currently HRT compatible - deferring [ 140.095216][ T4864] NILFS (loop0): recovery complete [ 140.260432][ T4875] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 140.273565][ T4871] clocksource: Switched to clocksource kvm-clock [ 140.361656][ T4874] clocksource: Override clocksource jiffies is not currently HRT compatible - deferring [ 140.451337][ T4874] clocksource: Switched to clocksource acpi_pm [ 140.520978][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 140.520995][ T26] audit: type=1800 audit(1787509851.561:28): pid=4864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.143" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 141.197196][ T4280] Bluetooth: hci2: command 0x2021 tx timeout [ 142.455715][ T4877] loop4: detected capacity change from 0 to 32768 [ 142.520875][ T4877] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.146 (4877) [ 142.650340][ T4877] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 142.741336][ T4877] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 142.766355][ T4877] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 142.820557][ T4877] BTRFS info (device loop4): use zstd compression, level 3 [ 142.828152][ T4877] BTRFS info (device loop4): using free space tree [ 143.168982][ T4877] BTRFS info (device loop4): enabling ssd optimizations [ 143.285967][ T4927] mmap: syz.2.156 (4927) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 143.720844][ T4932] Illegal XDP return value 4294967294 on prog (id 19) dev syz_tun, expect packet loss! [ 143.907973][ T4285] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 144.447435][ T4356] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop4 scanned by udevd (4356) [ 145.153681][ T4968] Zero length message leads to an empty skb [ 145.799690][ T4980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.171'. [ 145.909131][ T4980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.171'. [ 146.180466][ T4987] using random self ethernet address [ 146.194153][ T4987] using random host ethernet address [ 146.747326][ T4989] loop0: detected capacity change from 0 to 32768 [ 146.784701][ T4989] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.175 (4989) [ 147.646423][ T4989] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 147.657949][ T4989] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 147.666796][ T4989] BTRFS info (device loop0): using free space tree [ 148.070367][ T4989] BTRFS info (device loop0): enabling ssd optimizations [ 148.374334][ T4272] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 148.399693][ T4948] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 148.452618][ T5031] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 148.593248][ T4948] usb 5-1: config 0 has no interfaces? [ 148.602385][ T4948] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 148.633504][ T4948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.661382][ T4948] usb 5-1: Product: syz [ 148.665686][ T4948] usb 5-1: Manufacturer: syz [ 148.862059][ T4948] usb 5-1: SerialNumber: syz [ 148.872487][ T4948] usb 5-1: config 0 descriptor?? [ 148.911241][ T5031] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 148.999077][ T5042] syz.3.187 (5042): /proc/5034/oom_adj is deprecated, please use /proc/5034/oom_score_adj instead. [ 150.949729][ T4281] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 150.958979][ T4281] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 150.974327][ T4281] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 150.982644][ T4281] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 150.990714][ T4281] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 150.998303][ T4281] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 151.528821][ T5037] usb 5-1: USB disconnect, device number 2 [ 151.803439][ T5054] chnl_net:caif_netlink_parms(): no params data found [ 151.947793][ T5076] netlink: 4 bytes leftover after parsing attributes in process `syz.4.196'. [ 151.984302][ T5076] device bridge_slave_1 left promiscuous mode [ 151.994378][ T5076] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.065173][ T5076] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.475228][ T5090] loop2: detected capacity change from 0 to 512 [ 152.510310][ T5054] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.517551][ T5054] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.559327][ T5054] device bridge_slave_0 entered promiscuous mode [ 152.621485][ T5054] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.628984][ T5054] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.707835][ T5054] device bridge_slave_1 entered promiscuous mode [ 152.784965][ T5054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.844686][ T5054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.984494][ T5054] team0: Port device team_slave_0 added [ 153.033007][ T5054] team0: Port device team_slave_1 added [ 153.069505][ T49] Bluetooth: hci3: command 0x0409 tx timeout [ 153.214229][ T5054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.250119][ T5054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.400915][ T5054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.461055][ T5054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.522112][ T5054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.626329][ T5054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.899621][ T5111] device syzkaller0 entered promiscuous mode [ 153.938423][ T5054] device hsr_slave_0 entered promiscuous mode [ 153.962891][ T5054] device hsr_slave_1 entered promiscuous mode [ 153.988025][ T5054] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.043875][ T5054] Cannot create hsr debugfs directory [ 154.198081][ T5120] loop2: detected capacity change from 0 to 512 [ 154.253870][ T5120] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 155.148976][ T49] Bluetooth: hci3: command 0x041b tx timeout [ 157.228976][ T49] Bluetooth: hci3: command 0x040f tx timeout [ 157.505704][ T5139] device vlan2 entered promiscuous mode [ 159.299484][ T49] Bluetooth: hci3: command 0x0419 tx timeout [ 159.341655][ T5155] netlink: 'syz.3.214': attribute type 1 has an invalid length. [ 159.448756][ T5054] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 159.470679][ T5054] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 159.491555][ T5054] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 159.533095][ T5054] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 159.773442][ T5054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.820193][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 159.845494][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 159.906649][ T5054] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.959118][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 159.973365][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.000690][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.008107][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.049213][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 160.076529][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 160.101647][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 160.121064][ T4428] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.129586][ T4428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.147400][ T5173] loop0: detected capacity change from 0 to 1024 [ 160.197075][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 160.243929][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 160.289091][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 160.328177][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 160.352520][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 160.382425][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 160.405724][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 160.446384][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 160.484090][ T26] audit: type=1800 audit(1787509871.531:29): pid=5164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.218" name="file2" dev="loop0" ino=5 res=0 errno=0 [ 160.529027][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 160.537701][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 160.570337][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 160.590521][ T5054] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 161.357886][ T5185] loop0: detected capacity change from 0 to 512 [ 161.401160][ T5185] EXT4-fs: Ignoring removed i_version option [ 161.438013][ T5185] EXT4-fs: Ignoring removed oldalloc option [ 161.557062][ T5054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.582748][ T5185] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 161.602965][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 161.686279][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 162.129487][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 162.237181][ T26] audit: type=1326 audit(1787509873.281:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5208 comm="syz.4.229" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fffb4d45a88 code=0x7ffc0000 [ 162.298351][ T26] audit: type=1326 audit(1787509873.281:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5208 comm="syz.4.229" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebcd9e0d9 code=0x7ffc0000 [ 162.332229][ T5211] loop0: detected capacity change from 0 to 256 [ 162.395662][ T26] audit: type=1326 audit(1787509873.321:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5208 comm="syz.4.229" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebcd9e0d9 code=0x7ffc0000 [ 162.478552][ T5211] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 162.497234][ T26] audit: type=1326 audit(1787509873.321:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5208 comm="syz.4.229" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fffb4d45a88 code=0x7ffc0000 [ 162.549228][ T26] audit: type=1326 audit(1787509873.321:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5208 comm="syz.4.229" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebcd9e0d9 code=0x7ffc0000 [ 162.624529][ T26] audit: type=1326 audit(1787509873.321:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5208 comm="syz.4.229" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fffb4d45a88 code=0x7ffc0000 [ 162.659986][ T26] audit: type=1326 audit(1787509873.321:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5208 comm="syz.4.229" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdebcd9e0d9 code=0x7ffc0000 [ 162.694476][ T26] audit: type=1326 audit(1787509873.321:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5208 comm="syz.4.229" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fffb4d45a88 code=0x7ffc0000 [ 162.758376][ T26] audit: type=1326 audit(1787509873.321:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5208 comm="syz.4.229" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebcd9e0d9 code=0x7ffc0000 [ 162.873490][ T5222] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779264) [ 162.958185][ T5035] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 163.013089][ T5222] FAT-fs (loop0): Filesystem has been set read-only [ 163.078936][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 163.094516][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 163.162158][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 163.170431][ T5035] usb 3-1: Using ep0 maxpacket: 16 [ 163.182275][ T5035] usb 3-1: config 0 interface 0 has no altsetting 0 [ 163.195473][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 163.210550][ T5035] usb 3-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 163.236379][ T5054] device veth0_vlan entered promiscuous mode [ 163.250287][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 163.258727][ T5035] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.271685][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 163.294529][ T5035] usb 3-1: config 0 descriptor?? [ 163.313335][ T5054] device veth1_vlan entered promiscuous mode [ 163.344449][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 163.433900][ T5054] device veth0_macvtap entered promiscuous mode [ 163.469393][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 163.509625][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 163.559584][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 163.596859][ T5054] device veth1_macvtap entered promiscuous mode [ 163.657028][ T5054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.688118][ T5054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.709127][ T5054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.728717][ T5054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.749501][ T5054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.782825][ T5054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.804005][ T5054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.835901][ T5035] pantherlord 0003:0810:0002.0001: unknown main item tag 0x1 [ 163.844068][ T5054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.854692][ T5035] pantherlord 0003:0810:0002.0001: unknown main item tag 0x0 [ 163.868091][ T5035] pantherlord 0003:0810:0002.0001: unknown main item tag 0x0 [ 163.875812][ T5054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.889262][ T5035] pantherlord 0003:0810:0002.0001: unknown main item tag 0x0 [ 163.897160][ T5054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.908295][ T5035] pantherlord 0003:0810:0002.0001: unknown main item tag 0x0 [ 163.915880][ T5035] pantherlord 0003:0810:0002.0001: unknown main item tag 0x3 [ 163.925711][ T5054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.940782][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 163.954227][ T5035] pantherlord 0003:0810:0002.0001: hidraw0: USB HID v0.81 Device [HID 0810:0002] on usb-dummy_hcd.2-1/input0 [ 163.954297][ T5035] pantherlord 0003:0810:0002.0001: Force feedback for PantherLord/GreenAsia devices by Anssi Hannula [ 164.018354][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 164.055289][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 164.066846][ T14] usb 3-1: USB disconnect, device number 2 [ 164.082512][ T5054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.129400][ T5054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.158948][ T5054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.194918][ T5054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.206273][ T5054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.230679][ T5054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.253306][ T5054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.273130][ T5227] fido_id[5227]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 164.276595][ T5054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.305236][ T5054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.325063][ T5054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.359280][ T5054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.369932][ T5230] netlink: 'syz.3.234': attribute type 6 has an invalid length. [ 164.377771][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 164.400714][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 164.452336][ T5054] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.470773][ T5054] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.498126][ T5054] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.517469][ T5054] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.799005][ T4655] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.828387][ T4655] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.857533][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 164.906969][ T4479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.918089][ T4479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.926178][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 167.062735][ T5270] loop4: detected capacity change from 0 to 256 [ 167.124718][ T5270] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 167.592708][ T5279] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779264) [ 167.668743][ T5279] FAT-fs (loop4): Filesystem has been set read-only [ 168.627078][ T26] kauditd_printk_skb: 82 callbacks suppressed [ 168.627094][ T26] audit: type=1800 audit(1787509879.671:121): pid=5270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.242" name="file1" dev="loop4" ino=1048600 res=0 errno=0 [ 173.347362][ T5360] sch_tbf: burst 13 is lower than device lo mtu (82) ! [ 175.153083][ T5380] loop4: detected capacity change from 0 to 2048 [ 175.295118][ T5380] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 175.812426][ T5392] jffs2: notice: (5392) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 176.688959][ T5403] loop4: detected capacity change from 0 to 512 [ 176.732810][ T5403] EXT4-fs: inline encryption not supported [ 176.788055][ T5403] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 176.825751][ T5403] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 176.941129][ T5403] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 177.031558][ T5403] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.279: bg 0: block 248: padding at end of block bitmap is not set [ 177.067124][ T5403] Quota error (device loop4): write_blk: dquota write failed [ 177.075661][ T5403] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 177.101276][ T5403] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.279: Failed to acquire dquot type 1 [ 177.204684][ T5403] EXT4-fs (loop4): 1 truncate cleaned up [ 177.243937][ T5403] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 177.406875][ T5403] netlink: 48 bytes leftover after parsing attributes in process `syz.4.279'. [ 177.666103][ T4285] EXT4-fs (loop4): unmounting filesystem. [ 177.677137][ T4364] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-5 [ 177.694033][ T4364] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:7: Failed to release dquot type 1 [ 177.885610][ T5417] loop0: detected capacity change from 0 to 512 [ 177.928095][ T5419] netlink: 12 bytes leftover after parsing attributes in process `syz.4.283'. [ 177.961816][ T5417] EXT4-fs: inline encryption not supported [ 177.993477][ T5417] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 178.034482][ T5417] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 178.085915][ T5422] bridge0: port 1(dummy0) entered blocking state [ 178.112635][ T5417] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 178.143865][ T5417] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.292: bg 0: block 248: padding at end of block bitmap is not set [ 178.166793][ T5422] bridge0: port 1(dummy0) entered disabled state [ 178.174673][ T5422] device dummy0 entered promiscuous mode [ 178.178996][ T5417] Quota error (device loop0): write_blk: dquota write failed [ 178.188977][ T5419] netlink: 'syz.4.283': attribute type 10 has an invalid length. [ 178.222237][ T5417] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 178.233027][ T5419] netlink: 40 bytes leftover after parsing attributes in process `syz.4.283'. [ 178.289606][ T5417] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.292: Failed to acquire dquot type 1 [ 178.325829][ T5417] EXT4-fs (loop0): 1 truncate cleaned up [ 178.341894][ T5417] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 178.351697][ T5419] bridge0: port 1(dummy0) entered blocking state [ 178.358324][ T5419] bridge0: port 1(dummy0) entered forwarding state [ 178.432895][ T5419] bridge0: port 1(dummy0) entered disabled state [ 178.473474][ T5425] netlink: 48 bytes leftover after parsing attributes in process `syz.0.292'. [ 178.712402][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 178.728444][ T11] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-5 [ 178.754711][ T11] EXT4-fs error (device loop0): ext4_release_dquot:6877: comm kworker/u4:1: Failed to release dquot type 1 [ 179.995599][ T5434] loop5: detected capacity change from 0 to 2048 [ 180.169743][ T5434] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 181.268335][ T5453] netlink: 4 bytes leftover after parsing attributes in process `syz.5.290'. [ 183.148497][ T5489] loop4: detected capacity change from 0 to 256 [ 183.450360][ T5492] netlink: 12 bytes leftover after parsing attributes in process `syz.5.297'. [ 183.575618][ T5492] netlink: 'syz.5.297': attribute type 10 has an invalid length. [ 183.588351][ T5492] netlink: 40 bytes leftover after parsing attributes in process `syz.5.297'. [ 183.615458][ T5492] device dummy0 entered promiscuous mode [ 186.482373][ T5519] netlink: 64 bytes leftover after parsing attributes in process `syz.4.315'. [ 187.557508][ T5534] loop2: detected capacity change from 0 to 256 [ 187.571698][ T5534] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 188.083469][ T5537] netlink: 36 bytes leftover after parsing attributes in process `syz.5.310'. [ 190.437797][ T5575] loop5: detected capacity change from 0 to 128 [ 190.475718][ T5575] EXT4-fs: Ignoring removed orlov option [ 190.546145][ T5577] netlink: 16 bytes leftover after parsing attributes in process `syz.0.330'. [ 190.576558][ T5575] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 190.578560][ T5577] device ip6erspan0 entered promiscuous mode [ 190.602946][ T5575] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 190.685632][ T5584] netlink: 16 bytes leftover after parsing attributes in process `syz.0.330'. [ 190.774274][ T5575] Cannot find add_set index 0 as target [ 191.254737][ T5054] EXT4-fs (loop5): unmounting filesystem. [ 191.910450][ T5594] netlink: 'syz.5.322': attribute type 1 has an invalid length. [ 192.407193][ T5609] netlink: 64 bytes leftover after parsing attributes in process `syz.3.325'. [ 192.858425][ T5615] device syzkaller0 entered promiscuous mode [ 192.960147][ T5618] fuse: Bad value for 'fd' [ 193.652275][ T5629] netlink: 64 bytes leftover after parsing attributes in process `syz.0.345'. [ 193.897251][ T5633] loop3: detected capacity change from 0 to 1024 [ 194.338683][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.348251][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.670532][ T5648] xt_CT: You must specify a L4 protocol and not use inversions on it [ 196.610295][ T5673] jffs2: notice: (5673) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 197.204128][ T5689] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.354'. [ 197.226674][ T5689] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.354'. [ 197.270151][ T5691] netlink: 64 bytes leftover after parsing attributes in process `syz.2.353'. [ 197.535027][ T4281] Bluetooth: hci5: command 0x1003 tx timeout [ 197.535063][ T49] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 197.913704][ T5694] syz.0.355 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 197.944643][ T5694] CPU: 0 PID: 5694 Comm: syz.0.355 Not tainted syzkaller #0 [ 197.952008][ T5694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 197.962144][ T5694] Call Trace: [ 197.965480][ T5694] [ 197.968463][ T5694] dump_stack_lvl+0x188/0x24e [ 197.973242][ T5694] ? ___ratelimit+0x14e/0x610 [ 197.977995][ T5694] ? show_regs_print_info+0x12/0x12 [ 197.983297][ T5694] ? load_image+0x410/0x410 [ 197.987869][ T5694] ? ___ratelimit+0x474/0x610 [ 197.992604][ T5694] ? radix_tree_cpu_dead+0x160/0x160 [ 197.997962][ T5694] dump_header+0xd8/0x820 [ 198.002344][ T5694] oom_kill_process+0x361/0x550 [ 198.007253][ T5694] out_of_memory+0xe25/0x1220 [ 198.011985][ T5694] ? mutex_lock_nested+0x10/0x10 [ 198.016970][ T5694] ? unregister_oom_notifier+0x20/0x20 [ 198.022556][ T5694] mem_cgroup_out_of_memory+0x2c0/0x390 [ 198.028145][ T5694] ? mem_cgroup_oom_trylock+0x210/0x210 [ 198.033779][ T5694] ? do_raw_spin_unlock+0x11d/0x230 [ 198.039022][ T5694] try_charge_memcg+0xc9d/0x17c0 [ 198.044027][ T5694] ? percpu_ref_put+0x180/0x180 [ 198.048941][ T5694] ? get_mem_cgroup_from_mm+0x34/0x290 [ 198.054453][ T5694] charge_memcg+0x117/0x3b0 [ 198.059012][ T5694] ? __mem_cgroup_charge+0x80/0x80 [ 198.064159][ T5694] ? get_mem_cgroup_from_mm+0x34/0x290 [ 198.069681][ T5694] ? get_mem_cgroup_from_mm+0x34/0x290 [ 198.075180][ T5694] ? get_mem_cgroup_from_mm+0x1ae/0x290 [ 198.080765][ T5694] __mem_cgroup_charge+0x21/0x80 [ 198.085747][ T5694] handle_mm_fault+0x207c/0x3d40 [ 198.090731][ T5694] ? numa_migrate_prep+0x250/0x250 [ 198.095889][ T5694] __get_user_pages+0x40d/0xec0 [ 198.100784][ T5694] ? populate_vma_page_range+0x2b0/0x2b0 [ 198.106460][ T5694] ? __might_sleep+0xd0/0xd0 [ 198.111078][ T5694] ? __up_read+0x2b4/0x6b0 [ 198.115531][ T5694] ? read_lock_is_recursive+0x10/0x10 [ 198.120949][ T5694] __get_user_pages_remote+0x1c2/0x730 [ 198.126471][ T5694] ? pin_user_pages_remote+0x3d/0x90 [ 198.131807][ T5694] process_vm_rw+0x668/0xc00 [ 198.136464][ T5694] ? __ia32_sys_process_vm_writev+0xf0/0xf0 [ 198.142421][ T5694] ? __might_fault+0xa6/0x120 [ 198.147185][ T5694] ? lock_chain_count+0x20/0x20 [ 198.152083][ T5694] __x64_sys_process_vm_writev+0xdc/0xf0 [ 198.157770][ T5694] do_syscall_64+0x4c/0xa0 [ 198.162325][ T5694] ? clear_bhb_loop+0x60/0xb0 [ 198.167047][ T5694] ? clear_bhb_loop+0x60/0xb0 [ 198.171761][ T5694] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 198.177719][ T5694] RIP: 0033:0x7fc15399e0d9 [ 198.182195][ T5694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.201836][ T5694] RSP: 002b:00007fc15488f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 198.210304][ T5694] RAX: ffffffffffffffda RBX: 00007fc153c26090 RCX: 00007fc15399e0d9 [ 198.218323][ T5694] RDX: 0000000000000001 RSI: 0000200000001c80 RDI: 00000000000000c7 [ 198.226332][ T5694] RBP: 00007fc153a35024 R08: 0000000000000001 R09: 0000000000000000 [ 198.234338][ T5694] R10: 0000200000001d80 R11: 0000000000000246 R12: 0000000000000000 [ 198.242361][ T5694] R13: 00007fc153c26128 R14: 00007fc153c26090 R15: 00007ffebf920df8 [ 198.250381][ T5694] [ 198.890239][ T5694] memory: usage 96kB, limit 96kB, failcnt 45 [ 198.911697][ T5694] memory+swap: usage 100kB, limit 9007199254740988kB, failcnt 0 [ 199.449613][ T5694] kmem: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 199.604598][ T5694] Memory cgroup stats for /syz0/test: [ 199.605424][ T5694] anon 94208 [ 199.605424][ T5694] file 0 [ 199.605424][ T5694] kernel 4096 [ 199.605424][ T5694] kernel_stack 0 [ 199.605424][ T5694] pagetables 0 [ 199.605424][ T5694] sec_pagetables 0 [ 199.605424][ T5694] percpu 0 [ 199.605424][ T5694] sock 0 [ 199.605424][ T5694] vmalloc 0 [ 199.605424][ T5694] shmem 0 [ 199.605424][ T5694] zswap 0 [ 199.605424][ T5694] zswapped 0 [ 199.605424][ T5694] file_mapped 0 [ 199.605424][ T5694] file_dirty 0 [ 199.605424][ T5694] file_writeback 0 [ 199.605424][ T5694] swapcached 4096 [ 199.605424][ T5694] anon_thp 0 [ 199.605424][ T5694] file_thp 0 [ 199.605424][ T5694] shmem_thp 0 [ 199.605424][ T5694] inactive_anon 0 [ 199.605424][ T5694] active_anon 94208 [ 199.605424][ T5694] inactive_file 0 [ 199.605424][ T5694] active_file 0 [ 199.605424][ T5694] unevictable 0 [ 199.605424][ T5694] slab_reclaimable 384 [ 199.605424][ T5694] slab_unreclaimable 2640 [ 199.605424][ T5694] slab 3024 [ 199.774435][ T5694] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.355,pid=5692,uid=0 [ 199.836500][ T5694] Memory cgroup out of memory: Killed process 5694 (syz.0.355) total-vm:102376kB, anon-rss:1460kB, file-rss:22860kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 200.949534][ T5695] syz.0.355 (5695) used greatest stack depth: 19840 bytes left [ 201.484563][ T26] audit: type=1326 audit(1787509912.540:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5734 comm="syz.4.367" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=228 compat=0 ip=0x7fffb4d45a88 code=0x0 [ 201.614592][ T4280] Bluetooth: hci0: command 0x0406 tx timeout [ 201.620743][ T4280] Bluetooth: hci1: command 0x0406 tx timeout [ 201.633573][ T49] Bluetooth: hci2: command 0x0406 tx timeout [ 201.639847][ T4281] Bluetooth: hci4: command 0x0406 tx timeout [ 201.931452][ T5750] tipc: Enabling of bearer rejected, failed to enable media [ 202.517472][ T5756] loop2: detected capacity change from 0 to 4096 [ 203.624542][ T5756] EXT4-fs: Ignoring removed orlov option [ 203.656542][ T5756] EXT4-fs (loop2): Test dummy encryption mode enabled [ 203.785765][ T5770] netlink: 'syz.4.375': attribute type 4 has an invalid length. [ 203.827110][ T5756] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 203.930307][ T5779] netlink: 'syz.4.375': attribute type 4 has an invalid length. [ 204.595899][ T5784] netlink: 64 bytes leftover after parsing attributes in process `syz.5.373'. [ 204.754929][ T5785] overlayfs: failed to resolve './bus': -2 [ 205.124683][ T5756] fscrypt (loop2): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 205.193826][ T5786] fscrypt (loop2): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 205.496970][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 207.653435][ C0] sched: RT throttling activated [ 208.153574][ T5848] netlink: 64 bytes leftover after parsing attributes in process `syz.4.394'. [ 208.195652][ T14] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 208.405853][ T14] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 208.435220][ T14] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.453882][ T14] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 208.476374][ T14] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.506554][ T14] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 208.526325][ T14] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 208.543918][ T14] usb 4-1: Product: syz [ 208.553669][ T14] usb 4-1: Manufacturer: syz [ 208.595940][ T14] cdc_wdm 4-1:1.0: skipping garbage [ 208.613196][ T14] cdc_wdm 4-1:1.0: skipping garbage [ 208.657155][ T14] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 208.663158][ T14] cdc_wdm 4-1:1.0: Unknown control protocol [ 208.686593][ T5855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.853636][ T5038] usb 4-1: USB disconnect, device number 3 [ 209.375384][ T5869] device batadv_slave_0 entered promiscuous mode [ 209.387886][ T5871] jffs2: notice: (5871) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 209.412160][ T5869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.401'. [ 209.461630][ T5871] overlayfs: upper fs does not support tmpfile. [ 209.490176][ T5871] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 209.623549][ T5867] device batadv_slave_0 left promiscuous mode [ 209.663710][ T5560] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 210.064402][ T5886] binder: BINDER_SET_CONTEXT_MGR already set [ 210.165593][ T5886] binder: 5885:5886 ioctl 4018620d 200000000040 returned -16 [ 211.157619][ T5899] netlink: 64 bytes leftover after parsing attributes in process `syz.5.412'. [ 211.225859][ T5902] netlink: 'syz.2.414': attribute type 1 has an invalid length. [ 211.408430][ T5902] 8021q: adding VLAN 0 to HW filter on device bond2 [ 211.507400][ T5904] bond2: (slave geneve2): making interface the new active one [ 211.551451][ T5904] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 211.588057][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 212.356325][ T5904] syz.2.414 (5904) used greatest stack depth: 18352 bytes left [ 213.097026][ T5923] kvm: pic: non byte write [ 213.441057][ T5937] overlayfs: failed to clone upperpath [ 215.112868][ T5967] netlink: 64 bytes leftover after parsing attributes in process `syz.3.430'. [ 217.824068][ T5038] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 217.903417][ T26] audit: type=1326 audit(1787509928.970:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6002 comm="syz.4.440" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=228 compat=0 ip=0x7fffb4d45a88 code=0x0 [ 217.910065][ T5038] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 218.254228][ T6015] capability: warning: `syz.2.443' uses deprecated v2 capabilities in a way that may be insecure [ 218.357687][ T6017] tipc: Failed to remove unknown binding: 66,0,0/0:1574644250/1574644252 [ 218.400884][ T6017] tipc: Failed to remove unknown binding: 66,0,0/0:1574644250/1574644251 [ 218.437707][ T6020] tipc: Failed to remove unknown binding: 66,0,0/0:1574644250/1574644252 [ 218.501082][ T6020] tipc: Failed to remove unknown binding: 66,0,0/0:1574644250/1574644251 [ 219.123799][ T6040] netlink: 64 bytes leftover after parsing attributes in process `syz.4.447'. [ 222.666712][ T6117] loop5: detected capacity change from 0 to 64 [ 223.381186][ T6133] netlink: 64 bytes leftover after parsing attributes in process `syz.0.469'. [ 223.390540][ T26] audit: type=1326 audit(1787509934.450:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.3.465" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffedd567a88 code=0x7fc00000 [ 225.119387][ T6175] binder: 6174:6175 unknown command 0 [ 225.156629][ T6175] binder: 6174:6175 ioctl c0306201 2000000001c0 returned -22 [ 227.599043][ T6220] loop3: detected capacity change from 0 to 512 [ 227.829001][ T6220] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #15: comm syz.3.490: corrupted inode contents [ 227.956659][ T6220] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 227.971876][ T6220] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #15: comm syz.3.490: corrupted inode contents [ 228.010932][ T6220] EXT4-fs error (device loop3): ext4_evict_inode:329: inode #15: comm syz.3.490: mark_inode_dirty error [ 228.042710][ T6220] EXT4-fs (loop3): 1 orphan inode deleted [ 228.054996][ T6220] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 228.361713][ T6227] netlink: 64 bytes leftover after parsing attributes in process `syz.4.491'. [ 228.419687][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 228.606397][ T6231] loop3: detected capacity change from 0 to 1024 [ 228.698246][ T6231] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 228.766323][ T6231] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.873361][ T6231] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: block 3: comm syz.3.493: lblock 3 mapped to illegal pblock 3 (length 3) [ 228.971523][ T6231] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 229.006463][ T6231] EXT4-fs (loop3): This should not happen!! Data will be lost [ 229.006463][ T6231] [ 229.135533][ T6240] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: block 3: comm syz.3.493: lblock 3 mapped to illegal pblock 3 (length 1) [ 229.266217][ T6230] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: block 3: comm syz.3.493: lblock 3 mapped to illegal pblock 3 (length 1) [ 229.266743][ T4364] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:7: lblock 8 mapped to illegal pblock 8 (length 4) [ 229.359883][ T4364] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 4 with error 117 [ 229.407514][ T6230] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: block 3: comm syz.3.493: lblock 3 mapped to illegal pblock 3 (length 1) [ 229.407526][ T4364] EXT4-fs (loop3): This should not happen!! Data will be lost [ 229.407526][ T4364] [ 229.585434][ T6240] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: block 3: comm syz.3.493: lblock 3 mapped to illegal pblock 3 (length 1) [ 229.632047][ T6240] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: block 3: comm syz.3.493: lblock 3 mapped to illegal pblock 3 (length 1) [ 229.944537][ T6240] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: block 3: comm syz.3.493: lblock 3 mapped to illegal pblock 3 (length 1) [ 230.353782][ T6230] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: block 3: comm syz.3.493: lblock 3 mapped to illegal pblock 3 (length 1) [ 230.599242][ T6240] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: block 3: comm syz.3.493: lblock 3 mapped to illegal pblock 3 (length 1) [ 230.954901][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 235.237169][ T6296] netlink: 64 bytes leftover after parsing attributes in process `syz.4.510'. [ 238.073264][ T6329] loop0: detected capacity change from 0 to 1024 [ 238.147571][ T6329] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 238.267760][ T6329] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 238.302445][ T6329] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 238.320793][ T6329] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 238.333694][ T6329] EXT4-fs (loop0): This should not happen!! Data will be lost [ 238.333694][ T6329] [ 238.344233][ T6329] EXT4-fs (loop0): Total free blocks count 0 [ 238.353200][ T6329] EXT4-fs (loop0): Free/Dirty block details [ 238.359400][ T6329] EXT4-fs (loop0): free_blocks=20480 [ 238.365162][ T6329] EXT4-fs (loop0): dirty_blocks=80 [ 238.371358][ T6329] EXT4-fs (loop0): Block reservation details [ 238.377400][ T6329] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 238.557298][ T6329] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 238.973560][ T26] audit: type=1326 audit(1787509950.040:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6349 comm="syz.2.528" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffdb7390a88 code=0x7ffc0000 [ 239.037766][ T26] audit: type=1326 audit(1787509950.040:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6349 comm="syz.2.528" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85b79e0d9 code=0x7ffc0000 [ 239.094755][ T6353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.527'. [ 239.110384][ T26] audit: type=1326 audit(1787509950.040:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6349 comm="syz.2.528" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85b79e0d9 code=0x7ffc0000 [ 239.182750][ T26] audit: type=1326 audit(1787509950.090:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6349 comm="syz.2.528" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffdb7390a88 code=0x7ffc0000 [ 239.235225][ T26] audit: type=1326 audit(1787509950.090:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6349 comm="syz.2.528" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fb85b79e0d9 code=0x7ffc0000 [ 239.272653][ T26] audit: type=1326 audit(1787509950.090:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6349 comm="syz.2.528" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffdb7390a88 code=0x7ffc0000 [ 239.300298][ T26] audit: type=1326 audit(1787509950.090:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6349 comm="syz.2.528" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85b79e0d9 code=0x7ffc0000 [ 239.420337][ T26] audit: type=1326 audit(1787509950.090:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6349 comm="syz.2.528" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85b79e0d9 code=0x7ffc0000 [ 239.539751][ T26] audit: type=1326 audit(1787509950.090:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6349 comm="syz.2.528" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffdb7390a88 code=0x7ffc0000 [ 239.581954][ T6353] team0: Port device team_slave_0 removed [ 239.630233][ T26] audit: type=1326 audit(1787509950.090:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6349 comm="syz.2.528" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb85b79e0d9 code=0x7ffc0000 [ 239.667149][ T6360] netlink: 8 bytes leftover after parsing attributes in process `syz.5.531'. [ 240.092079][ T6370] Cannot find add_set index 0 as target [ 240.590573][ T6376] loop5: detected capacity change from 0 to 32768 [ 240.615810][ T6376] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 240.625543][ T6376] XFS (loop5): Mounting V5 Filesystem [ 240.697803][ T6376] XFS (loop5): Ending clean mount [ 240.729937][ T6376] XFS (loop5): Quotacheck needed: Please wait. [ 240.788050][ T6390] fuse: Bad value for 'fd' [ 240.881152][ T6376] XFS (loop5): Quotacheck: Done. [ 241.324898][ T5054] XFS (loop5): Unmounting Filesystem [ 241.747777][ T6395] binder: 6394:6395 ioctl c0306201 200000000080 returned -14 [ 241.774650][ T6395] binder: 6394:6395 ioctl c0306201 2000000003c0 returned -14 [ 242.172858][ T4280] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 242.181988][ T4280] Bluetooth: hci4: Injecting HCI hardware error event [ 242.193732][ T49] Bluetooth: hci4: hardware error 0x00 [ 243.876828][ T6422] tipc: Failed to remove unknown binding: 66,0,0/0:547153322/547153324 [ 243.887016][ T6422] tipc: Failed to remove unknown binding: 66,0,0/0:547153322/547153323 [ 243.906286][ T6422] tipc: Failed to remove unknown binding: 66,0,0/0:547153322/547153324 [ 243.918872][ T6422] tipc: Failed to remove unknown binding: 66,0,0/0:547153322/547153323 [ 244.079829][ T6428] netlink: 64 bytes leftover after parsing attributes in process `syz.5.554'. [ 244.264015][ T49] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 247.893991][ T4280] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 247.904400][ T4280] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 247.913291][ T4280] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 247.930222][ T4280] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 247.938617][ T4280] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 247.946299][ T4280] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 248.175326][ T6476] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 248.196939][ T6476] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 248.785774][ T6471] chnl_net:caif_netlink_parms(): no params data found [ 248.962158][ T6496] netlink: 64 bytes leftover after parsing attributes in process `syz.2.572'. [ 249.093027][ T6471] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.121396][ T6471] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.148984][ T6471] device bridge_slave_0 entered promiscuous mode [ 249.242035][ T6471] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.269538][ T6471] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.310627][ T6471] device bridge_slave_1 entered promiscuous mode [ 249.904417][ T6471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.069972][ T6471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.089456][ T49] Bluetooth: hci5: command 0x0409 tx timeout [ 250.282975][ T6471] team0: Port device team_slave_0 added [ 250.316755][ T6471] team0: Port device team_slave_1 added [ 251.228382][ T6471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.517619][ T6471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.601968][ T6520] loop0: detected capacity change from 0 to 512 [ 252.158648][ T6520] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 252.167547][ T6471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.180193][ T49] Bluetooth: hci5: command 0x041b tx timeout [ 252.193864][ T6471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.219284][ T6471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.342678][ T6471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.369334][ T6520] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 252.381438][ T6520] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.419003][ T6471] device hsr_slave_0 entered promiscuous mode [ 252.426171][ T6471] device hsr_slave_1 entered promiscuous mode [ 252.435480][ T6471] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.444675][ T6471] Cannot create hsr debugfs directory [ 252.660093][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 252.887961][ T6535] loop0: detected capacity change from 0 to 128 [ 252.977633][ T6535] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 253.025400][ T6535] ext4 filesystem being mounted at /111/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 253.051575][ T6471] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 253.137189][ T6471] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 253.247905][ T6471] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 253.284413][ T6471] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 253.301054][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 253.657797][ T6543] loop0: detected capacity change from 0 to 1024 [ 253.813162][ T6471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.911003][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 253.926328][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 253.959260][ T6542] overlayfs: failed to resolve './file0': -2 [ 253.992723][ T6471] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.029856][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 254.053839][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 254.089421][ T4428] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.096692][ T4428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.136368][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 254.188773][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 254.204232][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 254.224964][ T4428] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.232225][ T4428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.258824][ T49] Bluetooth: hci5: command 0x040f tx timeout [ 254.283396][ T4364] hfsplus: request for non-existent node 33554434 in B*Tree [ 254.294286][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 254.308155][ T4364] hfsplus: request for non-existent node 33554434 in B*Tree [ 254.321379][ T4364] hfsplus: b-tree write err: -5, ino 3 [ 254.356274][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 254.370291][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 254.373073][ T6553] xt_CT: You must specify a L4 protocol and not use inversions on it [ 254.392778][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 254.406198][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 254.407404][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 254.418772][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 254.432836][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 254.433493][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 254.437192][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 254.437856][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 254.474679][ T6471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 254.607806][ T6559] netlink: 64 bytes leftover after parsing attributes in process `syz.0.591'. [ 255.030697][ T49] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 255.350084][ T6575] capability: warning: `syz.2.598' uses 32-bit capabilities (legacy support in use) [ 255.597123][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 255.605603][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 255.626198][ T6471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.771479][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.778707][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.331596][ T49] Bluetooth: hci5: command 0x0419 tx timeout [ 256.634180][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 256.660285][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 256.706451][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 256.734833][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 256.759305][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 256.777937][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 256.801649][ T6471] device veth0_vlan entered promiscuous mode [ 256.864589][ T6471] device veth1_vlan entered promiscuous mode [ 256.907756][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 256.916958][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 256.926218][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 256.936444][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 256.949220][ T6471] device veth0_macvtap entered promiscuous mode [ 256.969420][ T6471] device veth1_macvtap entered promiscuous mode [ 257.012435][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.023433][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.034004][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.045104][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.055640][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.066477][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.076601][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.087431][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.097724][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.109432][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.119409][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.129955][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.141596][ T6471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.154860][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 257.163341][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 257.172040][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 257.181166][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 257.191076][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.202477][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.214306][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.225803][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.235993][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.246738][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.256807][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.267650][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.282858][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.293419][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.303588][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.315193][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.331591][ T6471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.343467][ T6471] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.352950][ T6471] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.362151][ T6471] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.371425][ T6471] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.385847][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 257.395182][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 257.475849][ T4493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.484522][ T4493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.500569][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 257.525497][ T6598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.537676][ T6598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.549438][ T6598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 259.186030][ T6629] xt_CT: You must specify a L4 protocol and not use inversions on it [ 261.257353][ T6662] loop6: detected capacity change from 0 to 1024 [ 261.498236][ T6661] loop0: detected capacity change from 0 to 32768 [ 261.510926][ T6661] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.621 (6661) [ 261.527381][ T6661] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 261.537932][ T6661] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 261.546640][ T6661] BTRFS info (device loop0): using free space tree [ 261.731841][ T6661] BTRFS info (device loop0): enabling ssd optimizations [ 263.808904][ T6705] xt_bpf: check failed: parse error [ 264.576606][ T4272] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 265.815183][ T6746] netlink: 68 bytes leftover after parsing attributes in process `syz.0.632'. [ 266.279608][ T6748] netlink: 4 bytes leftover after parsing attributes in process `syz.5.640'. [ 266.413150][ T6748] device bridge_slave_1 left promiscuous mode [ 266.540234][ T6748] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.677614][ T6748] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.621553][ T6766] device syzkaller0 entered promiscuous mode [ 271.705588][ T6810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.659'. [ 271.714731][ T6810] device bridge_slave_1 left promiscuous mode [ 271.729088][ T6810] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.744621][ T6810] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.792452][ T6833] event trace: Could not enable event p [ 273.321970][ T6849] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 277.554878][ T26] kauditd_printk_skb: 37 callbacks suppressed [ 277.554893][ T26] audit: type=1326 audit(1787509988.619:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.4.681" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fffb4d45a88 code=0x7ffc0000 [ 277.686639][ T26] audit: type=1326 audit(1787509988.619:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.4.681" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebcd9e0d9 code=0x7ffc0000 [ 277.866926][ T26] audit: type=1326 audit(1787509988.619:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.4.681" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebcd9e0d9 code=0x7ffc0000 [ 277.972123][ T6904] netlink: 8 bytes leftover after parsing attributes in process `syz.6.686'. [ 277.982911][ T6904] netlink: 4 bytes leftover after parsing attributes in process `syz.6.686'. [ 277.992521][ T26] audit: type=1326 audit(1787509988.629:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.4.681" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fffb4d45a88 code=0x7ffc0000 [ 278.028870][ T26] audit: type=1326 audit(1787509988.629:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.4.681" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7fdebcd9e0d9 code=0x7ffc0000 [ 278.082654][ T6907] loop5: detected capacity change from 0 to 8 [ 278.127165][ T26] audit: type=1326 audit(1787509988.629:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.4.681" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fffb4d45a88 code=0x7ffc0000 [ 278.246312][ T26] audit: type=1326 audit(1787509988.629:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.4.681" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebcd9e0d9 code=0x7ffc0000 [ 278.305935][ T6907] SQUASHFS error: Unable to read inode 0x11f [ 278.366628][ T26] audit: type=1326 audit(1787509988.629:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.4.681" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebcd9e0d9 code=0x7ffc0000 [ 278.864943][ T6919] syzkaller0: create flow: hash 3786247241 index 2 [ 279.671057][ T4358] syzkaller0: tun_net_xmit 76 [ 279.694350][ T4358] syzkaller0: tun_net_xmit 48 [ 279.732445][ T4359] syzkaller0: tun_net_xmit 76 [ 280.136353][ T5035] syzkaller0: tun_net_xmit 76 [ 280.761066][ T6914] syzkaller0: delete flow: hash 3786247241 index 2 [ 280.776456][ T4947] syzkaller0: tun_net_xmit 76 [ 282.027437][ T6951] Cannot find add_set index 0 as target [ 283.797168][ T6960] Cannot find add_set index 0 as target [ 287.611802][ T4358] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 287.808015][ T4358] usb 6-1: Using ep0 maxpacket: 8 [ 287.851871][ T4358] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 287.863177][ T4358] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 287.873649][ T4358] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.893213][ T4358] usb 6-1: config 0 descriptor?? [ 288.156417][ T4358] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 288.616619][ T4359] usb 6-1: USB disconnect, device number 2 [ 288.622560][ C1] iowarrior 6-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 289.076332][ T6925] netlink: 'syz.0.693': attribute type 1 has an invalid length. [ 289.181384][ T6953] netlink: 'syz.2.700': attribute type 1 has an invalid length. [ 292.535067][ T7031] netlink: 'syz.5.722': attribute type 4 has an invalid length. [ 292.785476][ T7032] netlink: 'syz.5.722': attribute type 4 has an invalid length. [ 292.929332][ T7038] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 292.939443][ T7038] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 294.098713][ T7051] netlink: 'syz.2.729': attribute type 12 has an invalid length. [ 295.855991][ T7089] netlink: 'syz.6.741': attribute type 4 has an invalid length. [ 295.964503][ T7091] netlink: 'syz.6.741': attribute type 4 has an invalid length. [ 296.282232][ T7097] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 296.319360][ T7097] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 298.204345][ T7121] device syzkaller0 entered promiscuous mode [ 302.586520][ T7176] device syzkaller0 entered promiscuous mode [ 303.412768][ T7194] netlink: 'syz.0.770': attribute type 1 has an invalid length. [ 303.532766][ T7198] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 303.622609][ T7194] netlink: 28 bytes leftover after parsing attributes in process `syz.0.770'. [ 303.649110][ T6600] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 303.672782][ T7194] 8021q: adding VLAN 0 to HW filter on device bond1 [ 303.740646][ T7196] loop6: detected capacity change from 0 to 32768 [ 303.852361][ T7196] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 303.876669][ T30] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 304.336611][ T7214] netlink: 'syz.4.778': attribute type 1 has an invalid length. [ 304.916177][ T6471] ocfs2: Unmounting device (7,6) on (node local) [ 304.981697][ T7218] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.781'. [ 305.249958][ T26] audit: type=1326 audit(1787510016.319:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7232 comm="syz.0.784" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffebf97ea88 code=0x7ffc0000 [ 305.323759][ T26] audit: type=1326 audit(1787510016.349:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7232 comm="syz.0.784" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15399e0d9 code=0x7ffc0000 [ 305.432958][ T26] audit: type=1326 audit(1787510016.349:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7232 comm="syz.0.784" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15399e0d9 code=0x7ffc0000 [ 305.490667][ T26] audit: type=1326 audit(1787510016.349:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7232 comm="syz.0.784" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15399e0d9 code=0x7ffc0000 [ 305.526827][ T26] audit: type=1326 audit(1787510016.349:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7232 comm="syz.0.784" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffebf97ea88 code=0x7ffc0000 [ 305.561108][ T26] audit: type=1326 audit(1787510016.349:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7232 comm="syz.0.784" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15399e0d9 code=0x7ffc0000 [ 305.616747][ T26] audit: type=1326 audit(1787510016.349:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7232 comm="syz.0.784" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffebf97ea88 code=0x7ffc0000 [ 305.686469][ T26] audit: type=1326 audit(1787510016.349:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7232 comm="syz.0.784" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fc15399e0d9 code=0x7ffc0000 [ 305.787737][ T26] audit: type=1326 audit(1787510016.349:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7232 comm="syz.0.784" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffebf97ea88 code=0x7ffc0000 [ 305.827514][ T26] audit: type=1326 audit(1787510016.349:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7232 comm="syz.0.784" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15399e0d9 code=0x7ffc0000 [ 308.838867][ T7283] netlink: 12 bytes leftover after parsing attributes in process `syz.6.799'. [ 309.294203][ T4274] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 309.505723][ T4274] usb 7-1: config 0 has no interfaces? [ 309.511577][ T4274] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 309.561044][ T4274] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.607781][ T4274] usb 7-1: config 0 descriptor?? [ 309.868957][ T4274] usb 7-1: USB disconnect, device number 2 [ 311.877102][ T7349] loop5: detected capacity change from 0 to 1024 [ 311.917272][ T7349] EXT4-fs: Ignoring removed orlov option [ 312.010581][ T7349] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 312.925168][ T5054] EXT4-fs (loop5): unmounting filesystem. [ 317.212774][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.219154][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.298182][ T7417] device syzkaller0 entered promiscuous mode [ 317.342371][ T7417] tipc: Started in network mode [ 317.363592][ T7417] tipc: Node identity 32b530a44c71, cluster identity 4711 [ 317.400033][ T7417] tipc: Enabled bearer , priority 0 [ 317.445550][ T7416] tipc: Resetting bearer [ 317.669867][ T7416] tipc: Disabling bearer [ 317.830380][ T7429] netlink: 20 bytes leftover after parsing attributes in process `syz.6.835'. [ 317.924065][ T7429] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.931671][ T7429] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.665062][ T7474] device syzkaller0 entered promiscuous mode [ 320.695529][ T7476] netlink: 'syz.2.850': attribute type 1 has an invalid length. [ 321.694061][ T7476] 8021q: adding VLAN 0 to HW filter on device bond3 [ 321.750921][ T7474] tipc: Started in network mode [ 321.759445][ T7474] tipc: Node identity 0ef874e353b2, cluster identity 4711 [ 321.802279][ T7474] tipc: Enabled bearer , priority 0 [ 321.855266][ T7473] tipc: Resetting bearer [ 322.017925][ T7473] tipc: Disabling bearer [ 322.049440][ T7490] netlink: 'syz.5.853': attribute type 4 has an invalid length. [ 322.127068][ T7499] netlink: 'syz.5.853': attribute type 4 has an invalid length. [ 322.424512][ T7503] loop6: detected capacity change from 0 to 256 [ 322.512242][ T7503] exfat: Bad value for 'uid' [ 322.770157][ T7521] tipc: Enabling of bearer rejected, failed to enable media [ 324.430587][ T26] kauditd_printk_skb: 72 callbacks suppressed [ 324.430608][ T26] audit: type=1326 audit(1787510035.429:262): auid=4294967295 uid=1982771711 gid=0 ses=4294967295 subj=unconfined pid=7552 comm="syz.4.871" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=228 compat=0 ip=0x7fffb4d45a88 code=0x0 [ 324.784193][ T7564] file system registered [ 325.123515][ T6471] ffs_data_put(): freeing [ 326.601754][ T7586] netlink: 'syz.4.884': attribute type 49 has an invalid length. [ 326.943035][ T7586] device veth0_to_bond entered promiscuous mode [ 327.146887][ T7599] loop5: detected capacity change from 0 to 256 [ 327.465422][ T5054] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 327.486871][ T5054] FAT-fs (loop5): Filesystem has been set read-only [ 327.553110][ T5054] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 328.358692][ T7620] tipc: Enabling of bearer rejected, failed to enable media [ 331.026640][ T4358] libceph: connect (1)[c::]:6789 error -101 [ 331.187910][ T4358] libceph: mon0 (1)[c::]:6789 connect error [ 331.446969][ T5037] libceph: connect (1)[c::]:6789 error -101 [ 331.486796][ T5037] libceph: mon0 (1)[c::]:6789 connect error [ 331.781502][ T7660] ceph: No mds server is up or the cluster is laggy [ 331.823522][ T4280] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 331.837124][ T4280] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 331.847293][ T4280] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 331.859299][ T4280] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 331.867175][ T4280] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 331.874696][ T4280] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 332.015940][ T22] libceph: connect (1)[c::]:6789 error -101 [ 332.023478][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 332.243358][ T7663] chnl_net:caif_netlink_parms(): no params data found [ 332.308933][ T7663] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.316599][ T7663] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.326099][ T7663] device bridge_slave_0 entered promiscuous mode [ 332.337678][ T7663] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.345051][ T7663] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.359197][ T7663] device bridge_slave_1 entered promiscuous mode [ 332.386791][ T7663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.404027][ T7663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.515484][ T7663] team0: Port device team_slave_0 added [ 332.544907][ T7663] team0: Port device team_slave_1 added [ 332.617545][ T7663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.660741][ T7663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.720661][ T7663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.742772][ T7663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.749780][ T7663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.820576][ T7663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.934657][ T7663] device hsr_slave_0 entered promiscuous mode [ 333.001009][ T7663] device hsr_slave_1 entered promiscuous mode [ 333.034449][ T7663] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 333.051772][ T7663] Cannot create hsr debugfs directory [ 333.920677][ T49] Bluetooth: hci3: command 0x0409 tx timeout [ 334.221792][ T7695] device syzkaller0 entered promiscuous mode [ 334.440052][ T7705] tipc: Enabling of bearer rejected, failed to enable media [ 334.654229][ T7711] loop6: detected capacity change from 0 to 64 [ 334.771867][ T7663] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 334.813879][ T7663] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 334.859163][ T7663] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 334.895821][ T7663] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 335.219670][ T7663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.000372][ T4280] Bluetooth: hci3: command 0x041b tx timeout [ 336.080697][ T4280] Bluetooth: hci2: command 0x2016 tx timeout [ 336.386117][ T7663] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.409835][ T5560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 336.433506][ T5560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 336.475707][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 336.512253][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 336.532730][ T4364] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.539901][ T4364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.559245][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 336.597577][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 336.623874][ T4364] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.631138][ T4364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.661996][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 336.828760][ T6599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 336.838119][ T6599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 337.624250][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 337.668635][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 337.757653][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 337.773715][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 337.811249][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 337.868150][ T7663] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 337.909555][ T7663] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 337.966670][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 337.975849][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 337.995596][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 338.014717][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 338.029660][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 338.080368][ T4280] Bluetooth: hci3: command 0x040f tx timeout [ 338.291244][ T7741] netlink: 20 bytes leftover after parsing attributes in process `syz.4.924'. [ 339.485969][ T7748] netlink: 'syz.0.926': attribute type 4 has an invalid length. [ 339.688589][ T7748] netlink: 'syz.0.926': attribute type 4 has an invalid length. [ 340.102301][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 340.122117][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 340.160432][ T4280] Bluetooth: hci3: command 0x0419 tx timeout [ 340.168435][ T7663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.330323][ T7769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.352737][ T7771] tipc: Enabling of bearer rejected, failed to enable media [ 340.382385][ T22] wlan1: authenticate with 08:02:11:00:00:00 [ 340.433436][ T22] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 340.670768][ T76] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 340.812224][ T11] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 340.929986][ T11] wlan1: authentication with 08:02:11:00:00:00 timed out [ 343.024101][ T5560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 343.043421][ T5560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 343.168808][ T7663] device veth0_vlan entered promiscuous mode [ 343.191144][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 343.210789][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 343.256369][ T7663] device veth1_vlan entered promiscuous mode [ 343.352957][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 343.441839][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 343.455932][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 343.558059][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 343.651511][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 343.676591][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 343.794282][ T7663] device veth0_macvtap entered promiscuous mode [ 343.847779][ T7663] device veth1_macvtap entered promiscuous mode [ 343.954081][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.017451][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.079616][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.115106][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.145065][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.167708][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.194808][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.231445][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.266389][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.297827][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.331307][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.365795][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.393140][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.428180][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.468552][ T7663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.493706][ T5560] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 344.507026][ T5560] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 344.536497][ T5560] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 344.570089][ T5560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 344.602372][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.639750][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.679381][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.716442][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.764497][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.800821][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.839829][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.879760][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.899684][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.919696][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.959643][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.982333][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.009400][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.039542][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.062066][ T7663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.103329][ T5560] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 345.140461][ T5560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 345.196468][ T7663] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.219568][ T7663] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.228354][ T7663] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.284298][ T7663] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.516310][ T5560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.540122][ T5560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.579472][ T5560] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 345.685620][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.709750][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.801767][ T7836] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.955'. [ 345.908910][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 346.730147][ T4280] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 346.739443][ T4280] Bluetooth: hci5: Injecting HCI hardware error event [ 346.755197][ T49] Bluetooth: hci5: hardware error 0x00 [ 347.157951][ T7857] overlayfs: failed to clone upperpath [ 347.291211][ T7864] tipc: Failed to remove unknown binding: 66,0,0/0:1387114446/1387114448 [ 347.329927][ T7864] tipc: Failed to remove unknown binding: 66,0,0/0:1387114446/1387114447 [ 347.368112][ T7864] tipc: Failed to remove unknown binding: 66,0,0/0:1387114446/1387114448 [ 347.440658][ T7864] tipc: Failed to remove unknown binding: 66,0,0/0:1387114446/1387114447 [ 348.318636][ T7880] ffs_data_put(): freeing [ 348.879155][ T49] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 349.581214][ T7895] netlink: 'syz.4.959': attribute type 1 has an invalid length. [ 349.674006][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880372a2800: rx timeout, send abort [ 349.715320][ T7895] 8021q: adding VLAN 0 to HW filter on device bond1 [ 349.843650][ T7899] bond1: (slave geneve2): making interface the new active one [ 349.889271][ T7899] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 349.920609][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 350.177216][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880372a3400: rx timeout, send abort [ 350.186288][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880372a2800: abort rx timeout. Force session deactivation [ 350.685744][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880372a3400: abort rx timeout. Force session deactivation [ 353.089429][ T7938] netlink: 'syz.6.976': attribute type 1 has an invalid length. [ 353.948666][ T7938] 8021q: adding VLAN 0 to HW filter on device bond1 [ 354.024502][ T7941] bond1: (slave geneve2): making interface the new active one [ 354.055544][ T7941] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 354.068841][ T6600] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 357.845560][ T7994] CIFS: Attempting to mount \\127.0.0.1\share [ 357.909041][ T7998] CIFS: VFS: \\127.0.0.1 SMB response too long (16777216 bytes) [ 358.173806][ T49] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 358.454390][ T7994] CIFS: VFS: cifs_mount failed w/return code = -112 [ 358.685392][ T8017] 9pnet_fd: Insufficient options for proto=fd [ 359.700289][ T8038] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 360.902540][ T8073] 9pnet_fd: p9_fd_create_unix (8073): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 364.041431][ T8104] binder_alloc: 8102: binder_alloc_buf size 1024 failed, no address space [ 364.208454][ T8104] binder_alloc: allocated: 12288 (num: 2 largest: 12280), free: 0 (num: 0 largest: 0) [ 364.731416][ T8119] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer. [ 365.343705][ T8136] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1037'. [ 365.424893][ T8138] device syzkaller0 entered promiscuous mode [ 365.735560][ T8144] loop7: detected capacity change from 0 to 256 [ 366.041399][ T8148] loop6: detected capacity change from 0 to 512 [ 366.140866][ T8148] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 366.196562][ T8148] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 366.227493][ T8148] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 366.248417][ T8148] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 1 not in group (block 0)! [ 366.281489][ T8148] EXT4-fs (loop6): group descriptors corrupted! [ 366.513469][ T8160] tipc: Enabling of bearer rejected, failed to enable media [ 367.594302][ T8171] tipc: Enabling of bearer rejected, failed to enable media [ 367.637687][ T8176] binder: 8175:8176 ioctl c0306201 200000000080 returned -14 [ 367.691520][ T8176] loop6: detected capacity change from 0 to 256 [ 367.881157][ T8176] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d) [ 375.535525][ T8233] loop6: detected capacity change from 0 to 32768 [ 375.924285][ T8271] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1076'. [ 376.067652][ T8271] 8021q: adding VLAN 0 to HW filter on device bond2 [ 376.138402][ T8277] device macvlan2 entered promiscuous mode [ 376.249535][ T8277] device bond2 entered promiscuous mode [ 376.293589][ T8277] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 376.330423][ T8277] team0: Port device macvlan2 added [ 376.331650][ T7306] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 10 [ 378.536928][ T8323] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1090'. [ 378.613740][ T8323] 8021q: adding VLAN 0 to HW filter on device bond1 [ 378.638608][ T8325] device macvlan2 entered promiscuous mode [ 378.646010][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.652493][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.763718][ T8325] device bond1 entered promiscuous mode [ 378.806809][ T8325] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 378.837958][ T8325] team0: Port device macvlan2 added [ 381.864861][ T8381] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1107'. [ 381.992214][ T8381] 8021q: adding VLAN 0 to HW filter on device bond2 [ 382.000962][ T8385] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1109'. [ 382.320153][ T8381] device macvlan2 entered promiscuous mode [ 382.518238][ T28] INFO: task syz.3.498:6258 blocked for more than 143 seconds. [ 382.554836][ T8381] device bond2 entered promiscuous mode [ 382.629094][ T28] Not tainted syzkaller #0 [ 382.800482][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 382.936618][ T8381] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 382.955988][ T28] task:syz.3.498 state:D stack:27920 pid:6258 ppid:4271 flags:0x00004004 [ 383.017512][ T28] Call Trace: [ 383.024863][ T8381] team0: Port device macvlan2 added [ 383.037581][ T28] [ 383.047638][ T28] __schedule+0x107f/0x4030 [ 383.064411][ T28] ? release_firmware_map_entry+0x187/0x187 [ 383.070796][ T28] ? __mutex_trylock_common+0x86/0x260 [ 383.076537][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 383.082793][ T28] schedule+0xb9/0x180 [ 383.087023][ T28] schedule_preempt_disabled+0xf/0x20 [ 383.092464][ T28] __mutex_lock+0x548/0xae0 [ 383.097159][ T28] ? __mutex_lock+0x3ba/0xae0 [ 383.101894][ T28] ? write_ports+0xb3/0xb80 [ 383.106727][ T28] ? mutex_lock_nested+0x10/0x10 [ 383.111764][ T28] write_ports+0xb3/0xb80 [ 383.116262][ T28] ? write_versions+0xbb0/0xbb0 [ 383.121182][ T28] ? __lock_acquire+0x7c40/0x7c40 [ 383.126353][ T28] ? __virt_addr_valid+0x188/0x540 [ 383.131628][ T28] ? __might_fault+0xc2/0x120 [ 383.136541][ T28] ? __might_fault+0xa6/0x120 [ 383.141276][ T28] ? _copy_from_user+0x10b/0x170 [ 383.165400][ T28] ? simple_transaction_get+0x119/0x140 [ 383.171126][ T28] nfsctl_transaction_write+0x105/0x150 [ 383.185393][ T28] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 383.191113][ T28] vfs_write+0x2dc/0x9a0 [ 383.205395][ T28] ? file_end_write+0x250/0x250 [ 383.210345][ T28] ? __fget_files+0x28/0x460 [ 383.215105][ T28] ? __fget_files+0x3fc/0x460 [ 383.235443][ T28] ? __fdget_pos+0x2ae/0x360 [ 383.241937][ T28] ? ksys_write+0x70/0x260 [ 383.265427][ T28] ksys_write+0x14d/0x260 [ 383.269847][ T28] ? __ia32_sys_read+0x80/0x80 [ 383.274672][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 383.295419][ T28] do_syscall_64+0x4c/0xa0 [ 383.299962][ T28] ? clear_bhb_loop+0x60/0xb0 [ 383.304773][ T28] ? clear_bhb_loop+0x60/0xb0 [ 383.310233][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 383.325385][ T28] RIP: 0033:0x7f75d819e0d9 [ 383.329874][ T28] RSP: 002b:00007f75d9041028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 383.341635][ T28] RAX: ffffffffffffffda RBX: 00007f75d8426090 RCX: 00007f75d819e0d9 [ 383.350220][ T28] RDX: 0000000000000003 RSI: 0000200000000380 RDI: 0000000000000005 [ 383.360132][ T28] RBP: 00007f75d8235024 R08: 0000000000000000 R09: 0000000000000000 [ 383.369146][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.377614][ T28] R13: 00007f75d8426128 R14: 00007f75d8426090 R15: 00007ffedd48dd28 [ 383.385981][ T28] [ 383.389331][ T28] [ 383.389331][ T28] Showing all locks held in the system: [ 383.397481][ T28] 1 lock held by rcu_tasks_kthre/12: [ 383.403239][ T28] #0: ffffffff8cb2e4f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 383.414426][ T28] 1 lock held by rcu_tasks_trace/13: [ 383.420083][ T28] #0: ffffffff8cb2ed10 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 383.431649][ T28] 3 locks held by kworker/1:1/27: [ 383.442864][ T28] #0: ffff88814ce87538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 383.475365][ T28] #1: ffffc90000a3fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 383.494163][ T28] #2: ffffffff8dd5c4a8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xc4/0x1500 [ 383.504320][ T28] 1 lock held by khungtaskd/28: [ 383.518085][ T28] #0: ffffffff8cb2db60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 383.533465][ T28] 2 locks held by getty/4027: [ 383.542010][ T28] #0: ffff88814dad9098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 383.563770][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360 [ 383.575207][ T28] 3 locks held by kworker/u4:12/4435: [ 383.581056][ T28] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 383.592492][ T28] #1: ffffc90004bdfd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 383.603306][ T28] #2: ffffffff8dd5c4a8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 383.612934][ T28] 3 locks held by syz.3.498/6256: [ 383.618241][ T28] #0: ffff88807c74d268 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 383.627814][ T28] #1: ffff88804c908460 (sb_writers#32){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 383.637114][ T28] #2: ffffffff8cdccfe8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb3/0xb80 [ 383.646311][ T28] 3 locks held by syz.3.498/6258: [ 383.651377][ T28] #0: ffff888018a5e368 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 383.661944][ T28] #1: ffff88804c908460 (sb_writers#32){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 383.672221][ T28] #2: ffffffff8cdccfe8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb3/0xb80 [ 383.682636][ T28] 2 locks held by syz.6.1109/8385: [ 383.693635][ T28] #0: ffffffff8dd5c4a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0 [ 383.703264][ T28] #1: ffffffff8cb33838 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2ec/0x890 [ 383.720774][ T28] [ 383.723158][ T28] ============================================= [ 383.723158][ T28] [ 383.731830][ T28] NMI backtrace for cpu 0 [ 383.736197][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 383.743469][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 383.753577][ T28] Call Trace: [ 383.756896][ T28] [ 383.759862][ T28] dump_stack_lvl+0x188/0x24e [ 383.764612][ T28] ? show_regs_print_info+0x12/0x12 [ 383.769870][ T28] ? load_image+0x410/0x410 [ 383.774404][ T28] ? vprintk_emit+0x59f/0x6a0 [ 383.779178][ T28] ? printk_sprint+0x460/0x460 [ 383.784063][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 383.789065][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 383.795348][ T28] ? _printk+0xda/0x130 [ 383.799543][ T28] ? load_image+0x410/0x410 [ 383.804081][ T28] ? load_image+0x410/0x410 [ 383.808614][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 383.814721][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 383.820886][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 383.826906][ T28] watchdog+0xf0e/0xf50 [ 383.831141][ T28] ? watchdog+0x1ed/0xf50 [ 383.835593][ T28] kthread+0x29d/0x330 [ 383.839690][ T28] ? hungtask_pm_notify+0x40/0x40 [ 383.844756][ T28] ? kthread_blkcg+0xd0/0xd0 [ 383.849379][ T28] ret_from_fork+0x1f/0x30 [ 383.853863][ T28] [ 383.859572][ T28] Sending NMI from CPU 0 to CPUs 1: [ 383.865494][ C1] NMI backtrace for cpu 1 [ 383.865507][ C1] CPU: 1 PID: 22 Comm: kworker/1:0 Not tainted syzkaller #0 [ 383.865525][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 383.865536][ C1] Workqueue: events drain_vmap_area_work [ 383.865635][ C1] RIP: 0010:__hrtimer_run_queues+0x66d/0xc90 [ 383.865681][ C1] Code: 10 00 4c 8b 64 24 30 eb 0a e8 df 0f 10 00 48 8b 5c 24 10 48 8b 74 24 20 42 0f b6 04 3e 84 c0 48 8b 54 24 08 0f 85 63 01 00 00 02 42 0f b6 04 3e 84 c0 0f 85 7d 01 00 00 ff 02 48 8b 44 24 40 [ 383.865697][ C1] RSP: 0018:ffffc900001e0c80 EFLAGS: 00000046 [ 383.865711][ C1] RAX: 0000000000000000 RBX: ffff8880b8f2a888 RCX: ffff8880176d3c00 [ 383.865723][ C1] RDX: ffff8880b8f2a850 RSI: 1ffff110171e550a RDI: ffff88807c7771a0 [ 383.865736][ C1] RBP: ffffc900001e0dc8 R08: ffff88807c7771b7 R09: ffff88807c7771a8 [ 383.865749][ C1] R10: dffffc0000000000 R11: ffffed100f8eee37 R12: ffff8880b8f2a840 [ 383.865762][ C1] R13: ffff88807c7771a0 R14: ffff8880b8f2a898 R15: dffffc0000000000 [ 383.865776][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 383.865790][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 383.865802][ C1] CR2: 0000001b30706ff8 CR3: 0000000031e27000 CR4: 00000000003506e0 [ 383.865818][ C1] DR0: 0000000000000008 DR1: 0000000000000007 DR2: 0000000000000004 [ 383.865828][ C1] DR3: 0000000000000008 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 383.865839][ C1] Call Trace: [ 383.865844][ C1] [ 383.865853][ C1] ? hw_scan_work+0xf00/0xf00 [ 383.865932][ C1] ? hrtimer_interrupt+0x980/0x980 [ 383.865950][ C1] ? acpi_pm_read+0x5/0x20 [ 383.866007][ C1] hrtimer_run_softirq+0x173/0x290 [ 383.866029][ C1] handle_softirqs+0x291/0x910 [ 383.866054][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 383.866072][ C1] ? do_softirq+0x210/0x210 [ 383.866087][ C1] ? hrtimer_interrupt+0x775/0x980 [ 383.866108][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 383.866126][ C1] __irq_exit_rcu+0x13b/0x230 [ 383.866142][ C1] ? irq_exit_rcu+0x20/0x20 [ 383.866163][ C1] irq_exit_rcu+0x5/0x20 [ 383.866177][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 383.866197][ C1] [ 383.866202][ C1] [ 383.866207][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 383.866233][ C1] RIP: 0010:smp_call_function_many_cond+0x1148/0x1250 [ 383.866294][ C1] Code: 41 8b 1f 89 de 83 e6 01 31 ff e8 23 02 0b 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 0a e8 af fe 0a 00 e9 34 ff ff ff f3 90 <41> 0f b6 04 1c 84 c0 75 14 41 f7 07 01 00 00 00 0f 84 17 ff ff ff [ 383.866308][ C1] RSP: 0018:ffffc900001c7920 EFLAGS: 00000293 [ 383.866321][ C1] RAX: ffffffff81773303 RBX: dffffc0000000000 RCX: ffff8880176d3c00 [ 383.866334][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 383.866344][ C1] RBP: ffffc900001c7a70 R08: ffffffff90b1224f R09: 1ffffffff2162449 [ 383.866358][ C1] R10: dffffc0000000000 R11: fffffbfff216244a R12: 1ffff110171c8641 [ 383.866371][ C1] R13: ffff8880b8f3bdc0 R14: 0000000000000000 R15: ffff8880b8e43208 [ 383.866387][ C1] ? smp_call_function_many_cond+0x1163/0x1250 [ 383.866415][ C1] ? flush_tlb_kernel_range+0x260/0x260 [ 383.866443][ C1] ? smp_call_function_many+0x30/0x30 [ 383.866461][ C1] ? kasan_depopulate_vmalloc_pte+0x73/0x80 [ 383.866523][ C1] ? __apply_to_page_range+0xc40/0xd10 [ 383.866544][ C1] ? flush_tlb_kernel_range+0x260/0x260 [ 383.866568][ C1] on_each_cpu_cond_mask+0x3b/0x80 [ 383.866589][ C1] flush_tlb_kernel_range+0x1b5/0x260 [ 383.866615][ C1] __purge_vmap_area_lazy+0xf72/0x1920 [ 383.866645][ C1] ? purge_fragmented_blocks_allcpus+0x930/0x930 [ 383.866667][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 383.866689][ C1] ? _raw_spin_unlock+0x40/0x40 [ 383.866710][ C1] ? process_one_work+0x7b4/0x1160 [ 383.866730][ C1] drain_vmap_area_work+0x3c/0xd0 [ 383.866753][ C1] process_one_work+0x8ab/0x1160 [ 383.866779][ C1] ? worker_detach_from_pool+0x240/0x240 [ 383.866802][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 383.866822][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 383.866844][ C1] ? wq_worker_running+0x97/0x190 [ 383.866892][ C1] worker_thread+0xaf5/0x12a0 [ 383.866924][ C1] kthread+0x29d/0x330 [ 383.866939][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 383.866958][ C1] ? kthread_blkcg+0xd0/0xd0 [ 383.866974][ C1] ret_from_fork+0x1f/0x30 [ 383.867010][ C1] [ 384.315789][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 384.322715][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 384.329954][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 384.340173][ T28] Call Trace: [ 384.343515][ T28] [ 384.346682][ T28] dump_stack_lvl+0x188/0x24e [ 384.351440][ T28] ? memcpy+0x3c/0x60 [ 384.355478][ T28] ? show_regs_print_info+0x12/0x12 [ 384.360737][ T28] ? load_image+0x410/0x410 [ 384.365309][ T28] panic+0x2d3/0x710 [ 384.369252][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 384.374956][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 384.379522][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 384.385254][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 384.391464][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 384.397694][ T28] watchdog+0xf4d/0xf50 [ 384.401911][ T28] ? watchdog+0x1ed/0xf50 [ 384.406306][ T28] kthread+0x29d/0x330 [ 384.410399][ T28] ? hungtask_pm_notify+0x40/0x40 [ 384.415955][ T28] ? kthread_blkcg+0xd0/0xd0 [ 384.420600][ T28] ret_from_fork+0x1f/0x30 [ 384.425094][ T28] [ 384.428330][ T28] Kernel Offset: disabled [ 384.432754][ T28] Rebooting in 86400 seconds..