last executing test programs: 33.528584961s ago: executing program 2 (id=341): r0 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r0, &(0x7f0000000980)={&(0x7f00000009c0)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000a40)=[{0x18, 0x110, 0x1, "01"}], 0x28}, 0x0) 32.824515438s ago: executing program 2 (id=348): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f0000000080)={0x2, 0xfffd, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)='.', 0x1}, {0x0}], 0x2}}], 0x1, 0x20044444) 32.824215568s ago: executing program 2 (id=349): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x1004000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = memfd_create(&(0x7f0000000280)='[\vx\'\xa5)\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x99\x83\xcd\b\xd1\x02R\xae\x80z8Z\xd2}\xf5\xe4\x9f5\x9b7\xaf\xb7o\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd', 0x1) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 32.492551456s ago: executing program 2 (id=352): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000011c0)='\x00', 0x9801) move_mount(r0, &(0x7f0000001200)='.\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0\x00', 0x0) 32.453375697s ago: executing program 2 (id=355): r0 = syz_clone(0x20804000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_read_part_table(0x407b, &(0x7f0000000180)="$eJzszz9K83AcBvCnafu+qRSKoJMgFgc3iZtTLuDcXbq6OjmomJs4igfwHt7B1SNUpDa2ijiIiPL5LMn3eZLfn/Cjis8+eFy8lG3USXI3vV1PsjNOU1XzsrfoB69/Vwfpr5VFhklO3y8+ufnq+QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgN/h3/zxfykqlvLkIklzf7Y3eJnLtp1upTmvczhMys1RctVNv97uZCMZ77/Z5uQo6SYP6bXRZPR9twIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/pLj1fFydSw+Kp5d76ap+207mz2xO8cEAIBADAM7gkBMYrJY4Pc7A0mb/ZldybnzWwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAxkAAAAAYf7WebQfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeCkAAP//oYMWnA==") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000140)='ns/mnt\x00') 32.064004906s ago: executing program 2 (id=358): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c00)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000c40)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000c80)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv4=@gre={{0x5, 0x4, 0x1, 0x5, 0x58, 0x65, 0x0, 0x8, 0x2f, 0x0, @loopback, @multicast1}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x9, 0x0, 0x1, 0x2, 0x2, 0xb}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0x6, 0x2, 0x6, 0x3, 0x1, 0x1, 0x4, 0x2e}, 0x2, {0x5, 0x5, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) 31.386327282s ago: executing program 32 (id=358): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c00)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000c40)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000c80)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv4=@gre={{0x5, 0x4, 0x1, 0x5, 0x58, 0x65, 0x0, 0x8, 0x2f, 0x0, @loopback, @multicast1}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x9, 0x0, 0x1, 0x2, 0x2, 0xb}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0x6, 0x2, 0x6, 0x3, 0x1, 0x1, 0x4, 0x2e}, 0x2, {0x5, 0x5, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) 9.786388927s ago: executing program 3 (id=470): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0xfffffff8, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000380)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000440)={0x0, 0x7a120, 0x7ff, {0xfffffff8, 0xffffffff}}) 9.64443127s ago: executing program 3 (id=472): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000280), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001340)={0x0, 0x0}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f00000013c0)={0x400a, 0x7, 0x80, 0x40e0, 0xc}) 5.01175127s ago: executing program 1 (id=494): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206010200000000000000000700000014000780080011400000000005001500040000000500010006000000050005000200000005000400000000000900020073797a310000000813000300686173683a6e65742c6966616365"], 0x60}, 0x1, 0x0, 0x0, 0x20004088}, 0x20004000) 4.850316754s ago: executing program 1 (id=496): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x1000000000000, 0x0, 0x10, r0, 0x0) 4.242692089s ago: executing program 1 (id=497): syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000880)='./file1\x00', 0x1800040, &(0x7f00000008c0)={[{@barrier}, {@nodioread_nolock}, {@nobarrier}, {@barrier}, {@block_validity}, {@nodioread_nolock}, {@nodelalloc}, {@resuid}, {@init_itable_val={'init_itable', 0x3d, 0x6}}]}, 0x1, 0x59c, &(0x7f0000000980)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file1\x00', 0x105042, 0x1c3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000f80), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0}, 0x28) 3.890565707s ago: executing program 3 (id=500): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000b80)={[{@grpid}, {@nobh}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@nojournal_checksum}, {@minixdf}, {@bh}]}, 0x7, 0xbaf, &(0x7f00000017c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, r0}, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r2, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_percpu\x00', 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.808369359s ago: executing program 5 (id=502): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) r3 = dup3(r1, r0, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000080)={&(0x7f00000001c0)={0x1d, r5, 0x3f420f00}, 0x10, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x2c004000) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="050000002308"], 0x80}}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 3.628219523s ago: executing program 4 (id=504): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000940)='s', 0x1}], 0x1}, 0x20008800) r0 = socket(0xa, 0x3, 0xff) pselect6(0x0, 0x0, 0x0, &(0x7f00000006c0)={0x1f, 0x67, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x6, 0xfffffffffffffffd}, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0) connect$inet6(r0, &(0x7f0000000800)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c) sendmsg$key(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x4000800) 3.577766724s ago: executing program 0 (id=505): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000002f000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x14, 0x0, 0x711, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24044894}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, r3) 3.404540369s ago: executing program 0 (id=506): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) recvmsg(0xffffffffffffffff, 0x0, 0x40) 3.35519656s ago: executing program 5 (id=507): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000080)={[{@noload}]}, 0x0, 0x5e5, &(0x7f00000000c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000800)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000840)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000008c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000009c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000a00), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) futex(0x0, 0x9, 0x1, 0x0, 0x0, 0x1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) 3.160266145s ago: executing program 1 (id=508): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f000000bc00)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x2004c884) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000300)={0x40000000, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000400)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r4, &(0x7f0000000540), 0x800001d, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000024d40)=0x100000001, 0x4) connect$inet6(r3, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000024dc0), 0x3) 2.031762232s ago: executing program 5 (id=509): r0 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x56}}], 0x2, 0x20008081) write$cgroup_pressure(r0, &(0x7f0000004200)={'full'}, 0xfffffdef) 1.976576683s ago: executing program 4 (id=510): set_mempolicy(0x8006, &(0x7f0000000080)=0xfff, 0x5) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="010000000000ffdbdf250100000004000480080002000100000008000100000000000400088058010c8054000b8008000a008fee"], 0x184}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 1.816122496s ago: executing program 4 (id=511): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x804818, &(0x7f00000000c0)={[{@map_off}, {@check_strict}, {@showassoc}, {@block={'block', 0x3d, 0x200}}, {@nojoliet}, {@hide}, {@overriderock}, {}, {@nojoliet}]}, 0x2, 0x571, &(0x7f0000000640)="$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") openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/devices.allow\x00', 0x189002, 0x40) 1.713929149s ago: executing program 4 (id=512): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x41) 1.552575053s ago: executing program 4 (id=513): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) mremap(&(0x7f000037a000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 1.513313094s ago: executing program 5 (id=514): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010426bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e000c0002800800", @ANYBLOB='\b\x00'], 0x4c}}, 0x200040cc) 1.062663034s ago: executing program 0 (id=515): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x6c, 0x2c, 0x601, 0x0, 0x200, {0x0, 0x0, 0x0, r3, {0xfff3}, {0xc, 0xffff}, {0x300, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x40, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0x0, 0xf, 0x2, 0x1, 0x200, 0x400, 0x1, 0x8, [{0x8, 0x8, 0x9108, 0xf}, {0x6, 0x2, 0x8, 0xfff}]}}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) close(0x3) 702.805753ms ago: executing program 3 (id=516): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000000301e1000000000000000000020000000c00198008000200bd01000024000280140001800800010064010102080002008c1414370c0002800500010001"], 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x10040080) 616.542925ms ago: executing program 0 (id=517): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1f, 0x6, 0x7ff, 0x2, 0x8002, 0xffffffffffffffff, 0x2, '\x00', r1, 0xffffffffffffffff, 0x2, 0x2, 0x0, 0x0, @value=r0}, 0x50) 556.885436ms ago: executing program 5 (id=518): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, 0x0, 0x0) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="000008050000010b007e"], 0x97) 537.820267ms ago: executing program 0 (id=519): syz_open_dev$sg(&(0x7f0000019280), 0x0, 0x401) r0 = syz_open_procfs(0x0, &(0x7f00000192c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000019300)) 482.115948ms ago: executing program 1 (id=520): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 465.005269ms ago: executing program 3 (id=521): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x9cgU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xbd\xc1: )Jh\xc7\xf1?\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3\xea$-s\x9d\xc7E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\x920\xdcrI\xfc\x92A\xf3{\x8e\xe24>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9d\x00\x00\x00\x00', 0x3) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[], 0x37) sendfile(r0, r1, &(0x7f0000000880), 0x4) fcntl$addseals(r1, 0x409, 0x8) fallocate(r1, 0x3, 0x7, 0x200) 406.19387ms ago: executing program 0 (id=522): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f000001b100)={0x0, 0x0, &(0x7f000001b140)={&(0x7f000001b180)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) 321.070212ms ago: executing program 1 (id=523): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000001740)=0x8a4, 0x4) connect$inet(r0, &(0x7f0000001780)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) sendto$inet(r0, &(0x7f00000017c0), 0xffffffffffffff94, 0x0, 0x0, 0x0) 296.694453ms ago: executing program 5 (id=524): r0 = syz_open_dev$loop(&(0x7f0000000000), 0xffffffff7ffffffd, 0x140962) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x8000, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f049e230130c50897d3bef409ff2176ff7bfe55b32a5d83cd4a524bd3ffe70c0000800b2f7b6aa54cc50a1fcaed1e701fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) pwritev2(r0, &(0x7f0000000600)=[{&(0x7f00000004c0)="8dce3806", 0x4}], 0x1, 0x40, 0x9, 0x6) 96.280427ms ago: executing program 3 (id=525): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) close(0x3) 0s ago: executing program 4 (id=526): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000040)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0c01032002ffffff00"], 0xf) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x7eb8}}, './file0\x00'}) setresuid(0x0, 0xee00, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10b) kernel console output (not intermixed with test programs): DRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.989211][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.036358][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.055014][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.069696][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.078417][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.084661][ T4278] Bluetooth: hci3: command 0x041b tx timeout [ 69.092431][ T4278] Bluetooth: hci0: command 0x041b tx timeout [ 69.101452][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.109350][ T4278] Bluetooth: hci2: command 0x041b tx timeout [ 69.124604][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.133781][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.141497][ T4278] Bluetooth: hci1: command 0x041b tx timeout [ 69.159636][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.167856][ T4278] Bluetooth: hci4: command 0x041b tx timeout [ 69.175749][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.184336][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.223609][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.232893][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.251009][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.258202][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.272641][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.281743][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.291407][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.298559][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.306459][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.316937][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.326066][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.335251][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.344390][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.351464][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.359546][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.368463][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.377330][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.384453][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.393750][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.402400][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.411985][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.419171][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.427874][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.436832][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.445480][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.452554][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.460510][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.470007][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.488415][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.496854][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.505609][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.514153][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.522266][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.549546][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.559580][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.572107][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.581098][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.590527][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.599178][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.607832][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.616841][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.632569][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.640547][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.654971][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.691320][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.723171][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.744373][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.763868][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.781996][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.804537][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.819914][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.828807][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.838431][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.848095][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.856871][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.867193][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.876444][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.885348][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.894148][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.908923][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.926068][ T4195] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.955896][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.975145][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.986056][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.004871][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.024306][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.044125][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.101815][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.152692][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.175786][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.197482][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.223225][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.230982][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.256586][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.272836][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.294235][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.310414][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.317573][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.333222][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.392732][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.402204][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.412105][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.419258][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.428360][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.438020][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.447239][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.456075][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.465587][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.475688][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.484536][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.491954][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.499550][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.508879][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.518010][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.528153][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.538394][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.567293][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.584177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.591708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.600389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.609295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.617896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.626998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.636212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.644541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.661426][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.686728][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.700320][ T4187] device veth0_vlan entered promiscuous mode [ 70.709200][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.718372][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.727142][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.736320][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.744934][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.752792][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.765000][ T4186] device veth0_vlan entered promiscuous mode [ 70.794966][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.804676][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.819827][ T4187] device veth1_vlan entered promiscuous mode [ 70.832708][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.842246][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.866209][ T4186] device veth1_vlan entered promiscuous mode [ 70.901850][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.910396][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.928805][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.939670][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.953482][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.978350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.987171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.997393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.007728][ T4193] device veth0_vlan entered promiscuous mode [ 71.029760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.038823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.064517][ T4187] device veth0_macvtap entered promiscuous mode [ 71.073288][ T4195] device veth0_vlan entered promiscuous mode [ 71.089366][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.104270][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.112982][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.123951][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.140744][ T4187] device veth1_macvtap entered promiscuous mode [ 71.151353][ T4186] device veth0_macvtap entered promiscuous mode [ 71.158403][ T4277] Bluetooth: hci2: command 0x040f tx timeout [ 71.165856][ T4277] Bluetooth: hci0: command 0x040f tx timeout [ 71.174893][ T4193] device veth1_vlan entered promiscuous mode [ 71.190425][ T4195] device veth1_vlan entered promiscuous mode [ 71.196574][ T4277] Bluetooth: hci3: command 0x040f tx timeout [ 71.207761][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.216953][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.225666][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.235002][ T4277] Bluetooth: hci4: command 0x040f tx timeout [ 71.241381][ T4277] Bluetooth: hci1: command 0x040f tx timeout [ 71.242810][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.251180][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.254044][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.267910][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.286716][ T4186] device veth1_macvtap entered promiscuous mode [ 71.323159][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.331137][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.340154][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.349171][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.358237][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.365980][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.373529][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.382331][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.409211][ T4195] device veth0_macvtap entered promiscuous mode [ 71.420896][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.428960][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.437832][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.448369][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.461226][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.472065][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.486788][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.498622][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.510072][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.521223][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.533226][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.541637][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.551070][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.561241][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.570097][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.580309][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.589600][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.600967][ T4195] device veth1_macvtap entered promiscuous mode [ 71.615296][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.625267][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.635160][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.646290][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.657795][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.666458][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.676647][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.711434][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.721596][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.732221][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.741332][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.753994][ T4193] device veth0_macvtap entered promiscuous mode [ 71.769123][ T4193] device veth1_macvtap entered promiscuous mode [ 71.787951][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.797435][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.808184][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.857236][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.869458][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.881309][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.892394][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.904866][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.917068][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.927898][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.937901][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.949598][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.961714][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.972544][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.985497][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.026378][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.037372][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.047681][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.056641][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.065938][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.076309][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.085235][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.093047][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.104802][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.117196][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.128108][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.139052][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.150609][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.159722][ T4188] device veth0_vlan entered promiscuous mode [ 72.185689][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.204469][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.215560][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.227459][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.238030][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.248896][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.260012][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.267982][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.278555][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.287471][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.296610][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.311137][ T4195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.325426][ T4195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.336098][ T4195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.345106][ T4195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.375239][ T4193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.389942][ T4193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.399067][ T4193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.408911][ T4193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.439773][ T4188] device veth1_vlan entered promiscuous mode [ 72.540295][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.549157][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.576315][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.585764][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.597087][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.601325][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.616016][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.626236][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.677491][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.686505][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.701485][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.704776][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.726554][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.737701][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.746872][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.756887][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.767969][ T4188] device veth0_macvtap entered promiscuous mode [ 72.782001][ T4294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.792735][ T4294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.819580][ T4188] device veth1_macvtap entered promiscuous mode [ 72.830122][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.839935][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.848526][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.916989][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.932781][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.944956][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.968837][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.979351][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.989963][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.001291][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.013400][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.026927][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.037824][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.053968][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.062976][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.070499][ T4294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.077886][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.089961][ T4294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.098365][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.136260][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.175057][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.191705][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.202271][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.218694][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.229671][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.248131][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.260996][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.298537][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.398745][ T4278] Bluetooth: hci3: command 0x0419 tx timeout [ 73.408486][ T4278] Bluetooth: hci0: command 0x0419 tx timeout [ 73.414665][ T4278] Bluetooth: hci2: command 0x0419 tx timeout [ 73.421758][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.432294][ T4278] Bluetooth: hci1: command 0x0419 tx timeout [ 73.438849][ T4278] Bluetooth: hci4: command 0x0419 tx timeout [ 73.446801][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.459685][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.501112][ T4294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.525221][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.617514][ T4294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.675836][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.776022][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.861366][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.133089][ T4325] loop1: detected capacity change from 0 to 2048 [ 74.225107][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.361525][ T4325] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 74.375887][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.415792][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.509621][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.577172][ T4338] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 74.586268][ T4338] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 75.220861][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.286584][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.314866][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.703315][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 75.723305][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 75.733306][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 75.743298][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 75.753303][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 75.763294][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 75.773296][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 75.783286][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 75.793290][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 75.803286][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 77.086793][ T4396] loop0: detected capacity change from 0 to 16 [ 77.519959][ T4396] erofs: (device loop0): EXPERIMENTAL big pcluster feature in use. Use at your own risk! [ 77.531941][ T4396] erofs: (device loop0): mounted with root inode @ nid 36. [ 77.619906][ T4412] loop2: detected capacity change from 0 to 2048 [ 77.891546][ T4412] EXT4-fs (loop2): Ignoring removed orlov option [ 78.345398][ T4412] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,orlov,i_version,init_itable,,errors=continue. Quota mode: none. [ 78.552212][ T4412] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.795450][ T4451] syz.2.15 (4451) used greatest stack depth: 21024 bytes left [ 80.043107][ T4279] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.109435][ T4460] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 81.118453][ T4460] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 83.339432][ T4522] loop2: detected capacity change from 0 to 16 [ 83.461778][ T4517] loop3: detected capacity change from 0 to 2048 [ 83.692149][ T4522] erofs: (device loop2): EXPERIMENTAL big pcluster feature in use. Use at your own risk! [ 83.811831][ T4517] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 83.823825][ T4522] erofs: (device loop2): mounted with root inode @ nid 36. [ 84.318377][ T4552] loop2: detected capacity change from 0 to 2048 [ 84.412273][ T4552] EXT4-fs (loop2): Ignoring removed orlov option [ 84.495108][ T4552] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,orlov,i_version,init_itable,,errors=continue. Quota mode: none. [ 84.523472][ T4552] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.215731][ T26] audit: type=1800 audit(1792065665.027:2): pid=4567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.34" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 85.838664][ T4587] loop3: detected capacity change from 0 to 512 [ 86.050918][ T4587] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,nombcache,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 86.088252][ T4591] netlink: 24 bytes leftover after parsing attributes in process `syz.0.40'. [ 86.568054][ T4587] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.864634][ T13] cfg80211: failed to load regulatory.db [ 86.966824][ T4587] device bridge_slave_0 left promiscuous mode [ 87.014613][ T4587] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.718598][ T4609] loop1: detected capacity change from 0 to 16 [ 89.647377][ T4609] erofs: (device loop1): EXPERIMENTAL big pcluster feature in use. Use at your own risk! [ 89.751210][ T4609] erofs: (device loop1): mounted with root inode @ nid 36. [ 90.242871][ T4721] loop1: detected capacity change from 0 to 2048 [ 90.393425][ T4721] EXT4-fs (loop1): Ignoring removed orlov option [ 90.504801][ T4721] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,orlov,i_version,init_itable,,errors=continue. Quota mode: none. [ 90.627545][ T4721] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.376810][ T4744] FAULT_INJECTION: forcing a failure. [ 92.376810][ T4744] name fail_futex, interval 1, probability 0, space 0, times 1 [ 92.453792][ T4744] CPU: 1 PID: 4744 Comm: syz.1.54 Not tainted syzkaller #0 [ 92.461088][ T4744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 92.471193][ T4744] Call Trace: [ 92.474514][ T4744] [ 92.477473][ T4744] dump_stack_lvl+0x188/0x250 [ 92.482205][ T4744] ? show_regs_print_info+0x20/0x20 [ 92.487438][ T4744] ? load_image+0x410/0x410 [ 92.491976][ T4744] ? release_pages+0x185f/0x1bd0 [ 92.496960][ T4744] ? lru_cache_disable+0x30/0x30 [ 92.501944][ T4744] should_fail+0x383/0x4b0 [ 92.506421][ T4744] get_futex_key+0x1a1/0x12d0 [ 92.511149][ T4744] ? __lock_acquire+0x13b3/0x7d40 [ 92.516358][ T4744] ? futex_wait_restart+0x250/0x250 [ 92.521624][ T4744] futex_wake+0x101/0x540 [ 92.526101][ T4744] ? futex_wait+0x680/0x680 [ 92.530643][ T4744] ? verify_lock_unused+0x140/0x140 [ 92.536126][ T4744] ? verify_lock_unused+0x140/0x140 [ 92.541370][ T4744] do_futex+0xd83/0x12b0 [ 92.545667][ T4744] ? futex_exit_release+0x1c0/0x1c0 [ 92.550903][ T4744] ? __context_tracking_exit+0x4c/0x80 [ 92.556404][ T4744] __se_sys_futex+0x389/0x420 [ 92.561117][ T4744] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 92.567140][ T4744] ? __x64_sys_futex+0xf0/0xf0 [ 92.571947][ T4744] ? __x64_sys_futex+0x1d/0xf0 [ 92.576746][ T4744] do_syscall_64+0x4c/0xa0 [ 92.581224][ T4744] ? clear_bhb_loop+0x30/0x80 [ 92.585934][ T4744] ? clear_bhb_loop+0x30/0x80 [ 92.590650][ T4744] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 92.596593][ T4744] RIP: 0033:0x7f2660c7a559 [ 92.601047][ T4744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.620683][ T4744] RSP: 002b:00007f265eed20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 92.629141][ T4744] RAX: ffffffffffffffda RBX: 00007f2660f01fa8 RCX: 00007f2660c7a559 [ 92.629338][ T4745] loop0: detected capacity change from 0 to 32768 [ 92.637136][ T4744] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2660f01fac [ 92.637153][ T4744] RBP: 00007f2660f01fa0 R08: 00137c255b5b344a R09: 0000000000000000 [ 92.637168][ T4744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.637181][ T4744] R13: 00007f2660f02038 R14: 00007ffcdbcb3010 R15: 00007ffcdbcb30f8 [ 92.675793][ T4744] [ 92.804987][ T4749] loop2: detected capacity change from 0 to 2048 [ 93.065214][ T4749] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 93.844674][ T4745] XFS (loop0): Mounting V5 Filesystem [ 94.755688][ T4745] XFS (loop0): Ending clean mount [ 94.769764][ T4745] XFS (loop0): Quotacheck needed: Please wait. [ 94.816477][ T4745] XFS (loop0): Quotacheck: Done. [ 95.150849][ T4818] loop1: detected capacity change from 0 to 16 [ 95.348979][ T4818] erofs: (device loop1): EXPERIMENTAL big pcluster feature in use. Use at your own risk! [ 95.461369][ T4188] XFS (loop0): Unmounting Filesystem [ 95.628348][ T4818] erofs: (device loop1): mounted with root inode @ nid 36. [ 97.243125][ T4830] loop1: detected capacity change from 0 to 2048 [ 97.260355][ T4830] EXT4-fs (loop1): Ignoring removed orlov option [ 97.572299][ T26] audit: type=1400 audit(1792065677.387:3): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=4831 comm="syz.0.59" name="p" offset=58 [ 97.604611][ T4830] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,orlov,i_version,init_itable,,errors=continue. Quota mode: none. [ 98.394788][ T4830] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.559763][ T4844] loop2: detected capacity change from 0 to 4096 [ 98.609972][ T4844] ======================================================= [ 98.609972][ T4844] WARNING: The mand mount option has been deprecated and [ 98.609972][ T4844] and is ignored by this kernel. Remove the mand [ 98.609972][ T4844] option from the mount to silence this warning. [ 98.609972][ T4844] ======================================================= [ 99.310920][ T26] audit: type=1800 audit(1792065679.087:4): pid=4851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.64" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 99.601508][ T4858] loop0: detected capacity change from 0 to 1024 [ 100.708435][ T4858] EXT4-fs (loop0): Ignoring removed bh option [ 100.985578][ T4858] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,dioread_lock,nodiscard,resgid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,lazytime,journal_ioprio=0x0000000000000005,stripe=0x0000000000000011,bh,acl,,errors=continue. Quota mode: none. [ 101.097230][ T4913] loop1: detected capacity change from 0 to 512 [ 101.432464][ T26] audit: type=1800 audit(1792065681.247:5): pid=4858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.69" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 101.716303][ T4913] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,nombcache,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 101.866128][ T4913] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.366030][ T4913] device bridge_slave_0 left promiscuous mode [ 102.372391][ T4913] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.430472][ T4926] loop0: detected capacity change from 0 to 2048 [ 102.564688][ T4926] EXT4-fs (loop0): Ignoring removed orlov option [ 102.824327][ T4926] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,orlov,i_version,init_itable,,errors=continue. Quota mode: none. [ 102.843554][ T26] audit: type=1400 audit(1792065682.657:6): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=4929 comm="syz.1.76" name="p" offset=58 [ 102.903984][ T4926] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.348742][ T4953] loop2: detected capacity change from 0 to 32768 [ 104.456231][ T4955] loop3: detected capacity change from 0 to 4096 [ 105.014287][ T4953] XFS (loop2): Mounting V5 Filesystem [ 105.323083][ T4966] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 105.343210][ T4953] XFS (loop2): Ending clean mount [ 105.352973][ T4953] XFS (loop2): Quotacheck needed: Please wait. [ 105.389492][ T4953] XFS (loop2): Quotacheck: Done. [ 105.688558][ T4195] XFS (loop2): Unmounting Filesystem [ 107.110349][ T4980] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 107.119929][ T4980] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 107.603368][ T4277] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 107.746058][ T5031] loop1: detected capacity change from 0 to 16 [ 107.981564][ T5031] erofs: (device loop1): EXPERIMENTAL big pcluster feature in use. Use at your own risk! [ 108.002683][ T5031] erofs: (device loop1): mounted with root inode @ nid 36. [ 108.064473][ T4277] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 108.081961][ T4277] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 108.103768][ T4277] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 108.121839][ T4277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.198645][ T4277] usb 4-1: probing VID:PID(0424:012C) [ 108.267967][ T4277] usb 4-1: vub300 testing BULK IN EndPoint(0) 81 [ 108.293763][ T4277] usb 4-1: vub300 testing BULK OUT EndPoint(1) 02 [ 108.300254][ T4277] usb 4-1: vub300 testing BULK IN EndPoint(2) 83 [ 108.333350][ T4277] usb 4-1: vub300 testing BULK OUT EndPoint(3) 04 [ 108.340910][ T4277] usb 4-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 108.487954][ T5035] loop1: detected capacity change from 0 to 2048 [ 108.536799][ T5037] loop2: detected capacity change from 0 to 512 [ 108.643674][ T4277] usb 4-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 108.656623][ T5035] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 108.816361][ T5037] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,nombcache,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 108.866183][ T5037] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.554123][ T5037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.87'. [ 109.564226][ T5037] device bridge_slave_0 left promiscuous mode [ 109.571024][ T5037] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.625071][ T4969] udc-core: couldn't find an available UDC or it's busy [ 109.652631][ T4969] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 109.702684][ T4277] vub300: probe of 4-1:1.0 failed with error -71 [ 109.875101][ T5054] loop2: detected capacity change from 0 to 2048 [ 109.895129][ T5055] batman_adv: batadv0: Adding interface: syzkaller0 [ 109.901780][ T5055] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.925601][ T4277] usb 4-1: USB disconnect, device number 2 [ 109.997141][ T5055] batman_adv: batadv0: Interface activated: syzkaller0 [ 110.020860][ T26] audit: type=1400 audit(1792065689.837:7): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=5050 comm="syz.0.89" name="p" offset=58 [ 110.073454][ T5054] EXT4-fs (loop2): Ignoring removed orlov option [ 110.128767][ T5052] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 110.163462][ T5054] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,orlov,i_version,init_itable,,errors=continue. Quota mode: none. [ 110.210174][ T5054] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.232864][ T5052] batman_adv: batadv0: Removing interface: syzkaller0 [ 111.360331][ T26] audit: type=1800 audit(1792065690.757:8): pid=5065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.93" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 113.849024][ T5098] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 113.858156][ T5098] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 114.274264][ T5129] loop2: detected capacity change from 0 to 32768 [ 114.813628][ T5129] XFS (loop2): Mounting V5 Filesystem [ 115.051866][ T5129] XFS (loop2): Ending clean mount [ 115.077145][ T5129] XFS (loop2): Quotacheck needed: Please wait. [ 115.125474][ T5129] XFS (loop2): Quotacheck: Done. [ 115.157314][ T5148] loop3: detected capacity change from 0 to 512 [ 115.408904][ T4195] XFS (loop2): Unmounting Filesystem [ 115.421827][ T5148] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,nombcache,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 115.473440][ T5148] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.570401][ T5148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.104'. [ 116.062966][ T5157] loop4: detected capacity change from 0 to 16 [ 116.085974][ T5157] erofs: (device loop4): EXPERIMENTAL big pcluster feature in use. Use at your own risk! [ 116.154032][ T26] audit: type=1400 audit(1792065695.967:9): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=5153 comm="syz.3.106" name="p" offset=58 [ 116.474927][ T5157] erofs: (device loop4): mounted with root inode @ nid 36. [ 117.469561][ T5167] loop3: detected capacity change from 0 to 2048 [ 117.509476][ T5165] loop4: detected capacity change from 0 to 2048 [ 117.717448][ T5165] EXT4-fs (loop4): Ignoring removed orlov option [ 118.675269][ T5165] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,orlov,i_version,init_itable,,errors=continue. Quota mode: none. [ 118.747139][ T5167] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.775019][ T5165] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.878841][ T5239] loop2: detected capacity change from 0 to 32768 [ 121.041695][ T5243] loop3: detected capacity change from 0 to 512 [ 121.088116][ T5239] XFS (loop2): Mounting V5 Filesystem [ 121.195295][ T5254] loop4: detected capacity change from 0 to 16 [ 121.226635][ T5243] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,nombcache,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 121.247258][ T5254] erofs: (device loop4): EXPERIMENTAL big pcluster feature in use. Use at your own risk! [ 121.257305][ T5254] erofs: (device loop4): mounted with root inode @ nid 36. [ 121.301516][ T5243] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.322442][ T5239] XFS (loop2): Ending clean mount [ 121.339377][ T5239] XFS (loop2): Quotacheck needed: Please wait. [ 121.471011][ T5243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.116'. [ 121.490622][ T5239] XFS (loop2): Quotacheck: Done. [ 121.692096][ T26] audit: type=1400 audit(1792065701.507:10): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=5256 comm="syz.4.119" name="p" offset=58 [ 122.269327][ T5264] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 122.278493][ T5264] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 122.860925][ T4195] XFS (loop2): Unmounting Filesystem [ 123.264378][ T5277] loop3: detected capacity change from 0 to 2048 [ 123.328937][ T5277] EXT4-fs (loop3): Ignoring removed orlov option [ 123.335999][ T5275] event trace: Could not enable event p1 [ 123.420469][ T5277] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,orlov,i_version,init_itable,,errors=continue. Quota mode: none. [ 123.617262][ T5277] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.886264][ T5285] loop1: detected capacity change from 0 to 2048 [ 124.522790][ T5288] loop2: detected capacity change from 0 to 2048 [ 124.578899][ T5285] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 124.626906][ T5288] EXT4-fs (loop2): Ignoring removed orlov option [ 124.824921][ T5288] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,orlov,i_version,init_itable,,errors=continue. Quota mode: none. [ 125.002410][ T26] audit: type=1800 audit(1792065704.817:11): pid=5294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.125" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 125.043731][ T5288] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.497035][ T5304] loop4: detected capacity change from 0 to 32768 [ 126.624669][ T5307] loop3: detected capacity change from 0 to 512 [ 126.742128][ T5304] XFS (loop4): Mounting V5 Filesystem [ 126.750247][ T5307] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,nombcache,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 126.824246][ T5307] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.873517][ T5304] XFS (loop4): Ending clean mount [ 126.884171][ T5304] XFS (loop4): Quotacheck needed: Please wait. [ 126.938277][ T5307] netlink: 12 bytes leftover after parsing attributes in process `syz.3.131'. [ 127.053802][ T5304] XFS (loop4): Quotacheck: Done. [ 127.190759][ T26] audit: type=1400 audit(1792065706.917:12): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=5319 comm="syz.0.133" name="p" offset=58 [ 127.266053][ T5321] loop2: detected capacity change from 0 to 4096 [ 127.667562][ T5334] loop2: detected capacity change from 0 to 2048 [ 127.751050][ T5334] EXT4-fs (loop2): Ignoring removed orlov option [ 127.822369][ T5337] netlink: 'syz.0.140': attribute type 1 has an invalid length. [ 127.888679][ T5334] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,orlov,i_version,init_itable,,errors=continue. Quota mode: none. [ 128.164116][ T5334] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.545689][ T5337] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.725499][ T5343] bond1: (slave geneve2): making interface the new active one [ 128.760596][ T5343] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 128.800918][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 129.390085][ T5343] syz.0.140 (5343) used greatest stack depth: 20224 bytes left [ 130.126558][ T5352] loop0: detected capacity change from 0 to 2048 [ 130.209583][ T5358] loop2: detected capacity change from 0 to 512 [ 130.233814][ T5352] EXT4-fs (loop0): Ignoring removed orlov option [ 130.399484][ T5352] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,orlov,i_version,init_itable,,errors=continue. Quota mode: none. [ 130.417320][ T5358] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,nombcache,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 130.482524][ T5352] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.513851][ T5358] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.588790][ T5358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.144'. [ 131.352885][ T26] audit: type=1800 audit(1792065711.157:13): pid=5415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.142" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 131.566841][ T5411] loop1: detected capacity change from 0 to 4096 [ 131.784388][ T5418] loop2: detected capacity change from 0 to 2048 [ 131.830035][ T5418] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 131.924214][ T4186] XFS (loop4): Unmounting Filesystem [ 132.069882][ T5424] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 132.078996][ T5424] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 132.680978][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.688239][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.182711][ T5432] loop0: detected capacity change from 0 to 512 [ 133.559585][ T5432] EXT4-fs (loop0): orphan cleanup on readonly fs [ 133.597655][ T5432] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 133.657167][ T5432] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 133.684346][ T5432] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #13: comm syz.0.152: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 133.781735][ T5432] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.152: couldn't read orphan inode 13 (err -117) [ 133.830352][ T5432] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 134.278422][ T5440] loop4: detected capacity change from 0 to 2048 [ 134.874693][ T5440] EXT4-fs (loop4): Ignoring removed orlov option [ 134.942064][ T5440] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,orlov,i_version,init_itable,,errors=continue. Quota mode: none. [ 135.083525][ T5440] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.319229][ T5499] loop1: detected capacity change from 0 to 512 [ 135.711330][ T5499] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,nombcache,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 136.166967][ T5499] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 136.221755][ T5499] netlink: 12 bytes leftover after parsing attributes in process `syz.1.157'. [ 136.546344][ T5516] loop1: detected capacity change from 0 to 4096 [ 136.639505][ T5522] loop3: detected capacity change from 0 to 2048 [ 136.672463][ T4358] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 136.749486][ T4358] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 136.763972][ T5522] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 137.589954][ T5532] fido_id[5532]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 138.568000][ T5544] ecryptfs_parse_options: eCryptfs: unrecognized option [(] [ 138.575676][ T5544] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 138.583364][ T5544] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 138.597597][ T5544] Error parsing options; rc = [-22] [ 138.732506][ T5543] loop4: detected capacity change from 0 to 512 [ 138.870977][ T5543] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,nombcache,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 138.913461][ T5543] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 138.992238][ T5543] bridge: RTM_NEWNEIGH with invalid ether address [ 139.010022][ T5543] device bridge_slave_0 left promiscuous mode [ 139.016472][ T5543] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.966159][ T5603] syz.3.171 uses obsolete (PF_INET,SOCK_PACKET) [ 140.335324][ T5609] loop2: detected capacity change from 0 to 2048 [ 140.379726][ T5609] EXT4-fs (loop2): Ignoring removed orlov option [ 140.430161][ T5611] loop4: detected capacity change from 0 to 4096 [ 140.464379][ T5609] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,orlov,i_version,init_itable,,errors=continue. Quota mode: none. [ 140.498516][ T5609] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.668358][ T5622] loop3: detected capacity change from 0 to 512 [ 141.333776][ T5622] Quota error (device loop3): v2_read_file_info: Block with free entry too big (2592931845 >= 6). [ 141.627823][ T5622] EXT4-fs warning (device loop3): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 141.685532][ T5622] EXT4-fs (loop3): mount failed [ 141.924155][ T5629] loop4: detected capacity change from 0 to 2048 [ 142.242383][ T5629] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 142.298196][ T5642] ecryptfs_parse_options: eCryptfs: unrecognized option [(] [ 142.305764][ T5642] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 142.313387][ T5642] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 142.326660][ T5642] Error parsing options; rc = [-22] [ 144.282234][ T5659] loop2: detected capacity change from 0 to 4096 [ 144.310444][ T5662] loop1: detected capacity change from 0 to 512 [ 144.472210][ T5662] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 144.523524][ T5662] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.923299][ T5682] loop2: detected capacity change from 0 to 16 [ 145.098344][ T5682] erofs: (device loop2): EXPERIMENTAL big pcluster feature in use. Use at your own risk! [ 145.109085][ T5682] erofs: (device loop2): mounted with root inode @ nid 36. [ 145.181730][ T5684] ecryptfs_parse_options: eCryptfs: unrecognized option [(] [ 145.189436][ T5684] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 145.197077][ T5684] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 145.210990][ T5684] Error parsing options; rc = [-22] [ 147.264546][ C0] vcan0: j1939_tp_rxtimer: 0xffff888061f15400: rx timeout, send abort [ 147.275012][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888061f15400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 147.291229][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888061f14c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 147.652903][ T5741] loop1: detected capacity change from 0 to 4096 [ 147.752470][ T5748] batman_adv: batadv0: Adding interface: syzkaller0 [ 147.819082][ T5748] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.940987][ T5748] batman_adv: batadv0: Interface activated: syzkaller0 [ 148.031739][ T5747] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 148.142093][ T5747] batman_adv: batadv0: Removing interface: syzkaller0 [ 148.158118][ T5753] loop1: detected capacity change from 0 to 2048 [ 148.324852][ T5753] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 149.052304][ T5767] loop2: detected capacity change from 0 to 16 [ 149.098081][ T5767] erofs: (device loop2): EXPERIMENTAL big pcluster feature in use. Use at your own risk! [ 149.108162][ T5767] erofs: (device loop2): mounted with root inode @ nid 36. [ 150.215942][ T5778] ecryptfs_parse_options: eCryptfs: unrecognized option [(] [ 150.224174][ T5778] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 150.231727][ T5778] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 150.245179][ T5778] Error parsing options; rc = [-22] [ 151.122531][ T5782] loop0: detected capacity change from 0 to 4096 [ 152.763443][ T4275] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 152.795779][ T5848] loop0: detected capacity change from 0 to 16 [ 152.864981][ T5848] erofs: (device loop0): EXPERIMENTAL big pcluster feature in use. Use at your own risk! [ 152.875190][ T5848] erofs: (device loop0): mounted with root inode @ nid 36. [ 152.983379][ T4275] usb 5-1: device descriptor read/64, error -71 [ 153.045872][ T5852] loop2: detected capacity change from 0 to 512 [ 153.141865][ T5852] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 153.227783][ T5852] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.225: corrupted in-inode xattr [ 153.248938][ T5852] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.225: couldn't read orphan inode 15 (err -117) [ 153.283399][ T4275] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 153.302068][ T5852] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,quota,noload,user_xattr,mblk_io_submit,noinit_itable,grpquota,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback. [ 153.348003][ T5856] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 153.523377][ T4275] usb 5-1: device descriptor read/64, error -71 [ 153.660131][ T4275] usb usb5-port1: attempt power cycle [ 153.691204][ T5862] process 'syz.1.223' launched './file0' with NULL argv: empty string added [ 153.787010][ T5864] ecryptfs_parse_options: eCryptfs: unrecognized option [(] [ 153.794615][ T5864] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 153.802158][ T5864] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 153.816003][ T5864] Error parsing options; rc = [-22] [ 154.133545][ T4275] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 154.274285][ T4275] usb 5-1: device descriptor read/8, error -71 [ 154.519354][ T5867] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 154.633421][ T4275] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 154.662075][ T5875] loop2: detected capacity change from 0 to 4096 [ 155.593576][ T4275] usb 5-1: device descriptor read/8, error -71 [ 155.734054][ T4275] usb usb5-port1: unable to enumerate USB device [ 156.210039][ T5938] loop2: detected capacity change from 0 to 512 [ 156.350431][ T5938] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 156.377342][ T5938] ext4 filesystem being mounted at /60/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.708792][ T5946] ecryptfs_parse_options: eCryptfs: unrecognized option [(] [ 156.716333][ T5946] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 156.723964][ T5946] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 156.737343][ T5946] Error parsing options; rc = [-22] [ 157.102553][ T5949] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 157.466179][ T5954] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 157.675524][ T5959] loop3: detected capacity change from 0 to 4096 [ 158.169531][ T5550] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 158.664178][ T5550] usb 3-1: device descriptor read/64, error -71 [ 158.933457][ T5550] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 159.021941][ T5995] ecryptfs_parse_options: eCryptfs: unrecognized option [(] [ 159.029921][ T5995] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 159.037663][ T5995] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 159.050913][ T5995] Error parsing options; rc = [-22] [ 159.134135][ T5550] usb 3-1: device descriptor read/64, error -71 [ 159.873800][ T5550] usb usb3-port1: attempt power cycle [ 159.900385][ T6001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.260'. [ 160.102380][ T6006] loop3: detected capacity change from 0 to 2048 [ 160.273639][ T6006] EXT4-fs (loop3): Ignoring removed orlov option [ 160.283357][ T5550] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 160.403832][ T5550] usb 3-1: device descriptor read/8, error -71 [ 160.500090][ T6006] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,orlov,i_version,init_itable,,errors=continue. Quota mode: none. [ 160.583477][ T6006] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.000878][ T6061] ecryptfs_parse_options: eCryptfs: unrecognized option [(] [ 162.008414][ T6061] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 162.016085][ T6061] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 162.029492][ T6061] Error parsing options; rc = [-22] [ 163.214448][ T6081] ip_tables: iptables: counters copy to user failed while replacing table [ 163.603769][ T4311] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 163.913303][ T4311] usb 5-1: device descriptor read/64, error -71 [ 164.213377][ T4311] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 164.468483][ T4311] usb 5-1: device descriptor read/64, error -71 [ 164.604928][ T4311] usb usb5-port1: attempt power cycle [ 165.023397][ T4311] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 165.133577][ T4311] usb 5-1: device descriptor read/8, error -71 [ 165.215416][ T26] audit: type=1326 audit(1792065745.037:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6089 comm="syz.1.282" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2660c7a559 code=0x7ffc0000 [ 165.299197][ T26] audit: type=1326 audit(1792065745.037:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6089 comm="syz.1.282" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2660c7a559 code=0x7ffc0000 [ 165.371219][ T6098] FAULT_INJECTION: forcing a failure. [ 165.371219][ T6098] name failslab, interval 1, probability 0, space 0, times 1 [ 165.393304][ T26] audit: type=1326 audit(1792065745.057:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6089 comm="syz.1.282" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2660c7a559 code=0x7ffc0000 [ 165.403576][ T6098] CPU: 0 PID: 6098 Comm: syz.3.284 Not tainted syzkaller #0 [ 165.424617][ T6098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 165.434711][ T6098] Call Trace: [ 165.436698][ T26] audit: type=1326 audit(1792065745.057:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6089 comm="syz.1.282" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2660c7a559 code=0x7ffc0000 [ 165.438018][ T6098] [ 165.438030][ T6098] dump_stack_lvl+0x188/0x250 [ 165.438063][ T6098] ? show_regs_print_info+0x20/0x20 [ 165.474887][ T6098] ? load_image+0x410/0x410 [ 165.479428][ T6098] ? __might_sleep+0xf0/0xf0 [ 165.484054][ T6098] ? __lock_acquire+0x7d40/0x7d40 [ 165.489105][ T6098] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 165.495203][ T6098] should_fail+0x383/0x4b0 [ 165.499667][ T6098] should_failslab+0x5/0x20 [ 165.504191][ T6098] slab_pre_alloc_hook+0x51/0xc0 [ 165.509153][ T6098] kmem_cache_alloc_trace+0x47/0x290 [ 165.514464][ T6098] ? memory_bm_create+0x157/0x950 [ 165.519633][ T6098] memory_bm_create+0x157/0x950 [ 165.524576][ T6098] create_basic_memory_bitmaps+0x95/0x370 [ 165.530338][ T6098] snapshot_open+0x19b/0x260 [ 165.534955][ T6098] ? snapshot_compat_ioctl+0x90/0x90 [ 165.540269][ T6098] misc_open+0x31f/0x390 [ 165.544557][ T6098] chrdev_open+0x585/0x5f0 [ 165.549003][ T6098] ? cd_forget+0x160/0x160 [ 165.553464][ T6098] ? fsnotify_perm+0x3a7/0x560 [ 165.558259][ T6098] ? cd_forget+0x160/0x160 [ 165.562700][ T6098] do_dentry_open+0x7f7/0xf90 [ 165.567398][ T6098] ? vfs_open+0x2b/0x80 [ 165.571582][ T6098] path_openat+0x2718/0x2fb0 [ 165.576236][ T6098] ? __kasan_slab_alloc+0xa9/0xc0 [ 165.581288][ T6098] ? do_filp_open+0x400/0x400 [ 165.586079][ T6098] do_filp_open+0x1df/0x400 [ 165.590605][ T6098] ? vfs_tmpfile+0x300/0x300 [ 165.595234][ T6098] ? _raw_spin_unlock+0x24/0x40 [ 165.600104][ T6098] ? alloc_fd+0x59e/0x650 [ 165.604452][ T6098] do_sys_openat2+0x14b/0x500 [ 165.609148][ T6098] ? __lock_acquire+0x7d40/0x7d40 [ 165.614196][ T6098] ? do_sys_open+0xe0/0xe0 [ 165.618651][ T6098] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 165.624656][ T6098] ? lock_chain_count+0x20/0x20 [ 165.629532][ T6098] __x64_sys_openat+0x135/0x160 [ 165.634407][ T6098] do_syscall_64+0x4c/0xa0 [ 165.638845][ T6098] ? clear_bhb_loop+0x30/0x80 [ 165.643552][ T6098] ? clear_bhb_loop+0x30/0x80 [ 165.648261][ T6098] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 165.654177][ T6098] RIP: 0033:0x7fb9ca715559 [ 165.658614][ T6098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.678263][ T6098] RSP: 002b:00007fb9c896d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 165.686703][ T6098] RAX: ffffffffffffffda RBX: 00007fb9ca99cfa0 RCX: 00007fb9ca715559 [ 165.694693][ T6098] RDX: 0000000000121001 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 165.702685][ T6098] RBP: 00007fb9ca7ac8b0 R08: 0000000000000000 R09: 0000000000000000 [ 165.710670][ T6098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.718664][ T6098] R13: 00007fb9ca99d038 R14: 00007fb9ca99cfa0 R15: 00007fff74fcb5c8 [ 165.726698][ T6098] [ 165.730593][ T4311] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 165.821687][ T6102] loop0: detected capacity change from 0 to 128 [ 165.833422][ T4311] usb 5-1: device descriptor read/8, error -71 [ 165.890155][ C0] unchecked MSR access error: WRMSR to 0x404 (tried to write 0x0000000000000003) at rIP: 0xffffffff812efd22 (__mcheck_cpu_init_clear_banks+0x112/0x1f0) [ 165.905602][ C0] Call Trace: [ 165.908917][ C0] [ 165.911794][ C0] mce_cpu_restart+0xc7/0x1a0 [ 165.916513][ C0] ? mce_restart+0x1c0/0x1c0 [ 165.921134][ C0] flush_smp_call_function_queue+0x2a9/0x760 [ 165.927175][ C0] __sysvec_call_function_single+0x98/0x240 [ 165.933107][ C0] sysvec_call_function_single+0x98/0xc0 [ 165.938772][ C0] [ 165.941720][ C0] [ 165.944674][ C0] asm_sysvec_call_function_single+0x16/0x20 [ 165.950689][ C0] RIP: 0010:lock_acquire+0x209/0x400 [ 165.956003][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 165.975633][ C0] RSP: 0018:ffffc90003f4f2a0 EFLAGS: 00000206 [ 165.981814][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 1b4381e359d5da00 [ 165.989858][ C0] RDX: 0000000000000000 RSI: ffffffff8a2b3e80 RDI: ffffffff8a7a4c00 [ 165.997871][ C0] RBP: ffffc90003f4f3c0 R08: dffffc0000000000 R09: 1ffffffff2202a18 [ 166.005872][ C0] R10: dffffc0000000000 R11: fffffbfff2202a19 R12: 1ffff920007e9e60 [ 166.013906][ C0] R13: ffffffff8d11efa0 R14: 0000000000000246 R15: dffffc0000000000 [ 166.021936][ C0] ? uncharge_page+0x490/0x490 [ 166.026734][ C0] ? read_lock_is_recursive+0x10/0x10 [ 166.032152][ C0] rcu_lock_acquire+0x20/0x30 [ 166.036857][ C0] ? __page_memcg+0x140/0x140 [ 166.041558][ C0] lock_page_memcg+0xa5/0x440 [ 166.046263][ C0] ? mem_cgroup_get_oom_group+0x350/0x350 [ 166.052027][ C0] ? rcu_lock_acquire+0x30/0x30 [ 166.056948][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 166.062011][ C0] page_remove_rmap+0x2a/0x10f0 [ 166.066928][ C0] ? __tlb_remove_page_size+0x19b/0x3f0 [ 166.072516][ C0] ? vm_normal_page+0x95/0x1e0 [ 166.077337][ C0] unmap_page_range+0xee4/0x2410 [ 166.082326][ C0] unmap_vmas+0x131/0x250 [ 166.086682][ C0] ? unmap_page_range+0x2410/0x2410 [ 166.091901][ C0] ? __mutex_lock_common+0x435/0x2400 [ 166.097313][ C0] ? exit_mm_release+0x16/0x30 [ 166.102121][ C0] exit_mmap+0x3b9/0x640 [ 166.106399][ C0] ? vm_brk+0x20/0x20 [ 166.110428][ C0] ? uprobe_clear_state+0x2f6/0x460 [ 166.115660][ C0] __mmput+0x115/0x390 [ 166.119756][ C0] exit_mm+0x632/0x7b0 [ 166.123849][ C0] ? perf_pmu_migrate_context+0xb70/0xb70 [ 166.129599][ C0] ? do_exit+0x2110/0x2110 [ 166.134037][ C0] ? __ia32_sys_timer_delete+0x40/0x40 [ 166.139752][ C0] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 166.145271][ C0] ? tty_audit_exit+0x149/0x1f0 [ 166.150168][ C0] do_exit+0x5b8/0x2110 [ 166.154403][ C0] ? put_task_struct+0x80/0x80 [ 166.159200][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 166.165224][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 166.170284][ C0] do_group_exit+0x12c/0x2f0 [ 166.174905][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 166.180153][ C0] get_signal+0x7eb/0x12e0 [ 166.184605][ C0] arch_do_signal_or_restart+0xe6/0x12a0 [ 166.190274][ C0] ? get_sigframe_size+0x10/0x10 [ 166.195232][ C0] ? trace_event_raw_event_preemptirq_template+0x1e6/0x290 [ 166.202449][ C0] ? trace_event_raw_event_preemptirq_template+0x1e6/0x290 [ 166.209776][ C0] ? exit_to_user_mode_loop+0x3b/0x130 [ 166.215256][ C0] exit_to_user_mode_loop+0x9e/0x130 [ 166.220574][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 166.226137][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 166.231621][ C0] do_syscall_64+0x58/0xa0 [ 166.236056][ C0] ? clear_bhb_loop+0x30/0x80 [ 166.240752][ C0] ? clear_bhb_loop+0x30/0x80 [ 166.245472][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 166.251390][ C0] RIP: 0033:0x7fd2a030cad0 [ 166.255818][ C0] Code: Unable to access opcode bytes at RIP 0x7fd2a030caa6. [ 166.263197][ C0] RSP: 002b:00007ffecd0f7178 EFLAGS: 00000206 [ 166.269287][ C0] RAX: 0000000000000000 RBX: ffffffff817f4906 RCX: ffffffff817f4906 [ 166.277272][ C0] RDX: 00007ffecd0f7180 RSI: 00007ffecd0f72b0 RDI: 0000000000000021 [ 166.285268][ C0] RBP: 0000000000000000 R08: 00007fd2a055f000 R09: 00007fd2a0561000 [ 166.293344][ C0] R10: 00000000817f490a R11: 0000000000000003 R12: 00007fd2a0575038 [ 166.301332][ C0] R13: 0000000000028746 R14: ffffffff817f4fc3 R15: 00007fd2a10a4720 [ 166.309321][ C0] ? trace_irq_enable_rcuidle+0x13/0x180 [ 166.314973][ C0] ? trace_event_raw_event_preemptirq_template+0x1e6/0x290 [ 166.322188][ C0] ? trace_event_raw_event_preemptirq_template+0x1e6/0x290 [ 166.329406][ C0] [ 166.344436][ T4311] usb usb5-port1: unable to enumerate USB device [ 166.623363][ T6109] loop0: detected capacity change from 0 to 1024 [ 166.941228][ T6109] EXT4-fs (loop0): Ignoring removed orlov option [ 167.602722][ T6109] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 168.023717][ T4275] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 168.254552][ T4275] usb 5-1: device descriptor read/64, error -71 [ 168.313699][ T6144] FAULT_INJECTION: forcing a failure. [ 168.313699][ T6144] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 168.560227][ T6144] CPU: 0 PID: 6144 Comm: syz.1.301 Not tainted syzkaller #0 [ 168.567587][ T6144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 168.577682][ T6144] Call Trace: [ 168.580991][ T6144] [ 168.583951][ T6144] dump_stack_lvl+0x188/0x250 [ 168.588668][ T6144] ? show_regs_print_info+0x20/0x20 [ 168.593906][ T6144] ? load_image+0x410/0x410 [ 168.598463][ T6144] ? __lock_acquire+0x7d40/0x7d40 [ 168.603522][ T6144] should_fail+0x383/0x4b0 [ 168.607974][ T6144] prepare_alloc_pages+0x1e3/0x5b0 [ 168.613210][ T6144] __alloc_pages+0x11b/0x480 [ 168.614856][ T4275] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 168.617836][ T6144] ? zone_statistics+0x170/0x170 [ 168.630451][ T6144] alloc_pages_vma+0x2bc/0x790 [ 168.635276][ T6144] ? mpol_shared_policy_lookup+0x147/0x1e0 [ 168.641156][ T6144] shmem_alloc_and_acct_page+0x47f/0xbe0 [ 168.646841][ T6144] ? shmem_swapin_page+0x22f0/0x22f0 [ 168.652191][ T6144] ? __lock_acquire+0x7d40/0x7d40 [ 168.657296][ T6144] ? xas_descend+0x210/0x3b0 [ 168.661968][ T6144] ? xas_load+0x127/0x140 [ 168.666350][ T6144] ? pagecache_get_page+0xc32/0xf20 [ 168.671592][ T6144] ? page_cache_prev_miss+0x380/0x380 [ 168.677004][ T6144] ? mark_lock+0x94/0x320 [ 168.681375][ T6144] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 168.687395][ T6144] ? lock_chain_count+0x20/0x20 [ 168.692280][ T6144] ? do_user_addr_fault+0x69f/0xc90 [ 168.697525][ T6144] shmem_getpage_gfp+0x14be/0x2c10 [ 168.702706][ T6144] shmem_write_begin+0xcd/0x1a0 [ 168.707597][ T6144] generic_perform_write+0x2b6/0x550 [ 168.712937][ T6144] ? grab_cache_page_write_begin+0xa0/0xa0 [ 168.718872][ T6144] ? file_remove_privs+0x5d0/0x5d0 [ 168.724032][ T6144] ? rwsem_write_trylock+0x135/0x1c0 [ 168.729357][ T6144] ? clear_nonspinnable+0x60/0x60 [ 168.734424][ T6144] __generic_file_write_iter+0x261/0x4e0 [ 168.740107][ T6144] ? generic_write_checks+0x3be/0x460 [ 168.745526][ T6144] generic_file_write_iter+0xa6/0x1b0 [ 168.750954][ T6144] vfs_write+0x748/0xd70 [ 168.755249][ T6144] ? file_end_write+0x250/0x250 [ 168.760162][ T6144] ? mutex_lock_nested+0x17/0x20 [ 168.765143][ T6144] ? __fdget_pos+0x2bf/0x370 [ 168.769765][ T6144] ? ksys_write+0x70/0x260 [ 168.774239][ T6144] ksys_write+0x153/0x260 [ 168.778607][ T6144] ? __ia32_sys_read+0x80/0x80 [ 168.783426][ T6144] ? lockdep_hardirqs_on+0x94/0x140 [ 168.788801][ T6144] do_syscall_64+0x4c/0xa0 [ 168.793273][ T6144] ? clear_bhb_loop+0x30/0x80 [ 168.797997][ T6144] ? clear_bhb_loop+0x30/0x80 [ 168.802722][ T6144] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 168.808676][ T6144] RIP: 0033:0x7f2660c7a559 [ 168.813140][ T6144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.832781][ T6144] RSP: 002b:00007f265eed2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 168.841256][ T6144] RAX: ffffffffffffffda RBX: 00007f2660f01fa0 RCX: 00007f2660c7a559 [ 168.849262][ T6144] RDX: 000000000000fea7 RSI: 0000200000000100 RDI: 0000000000000004 [ 168.857275][ T6144] RBP: 00007f2660d118b0 R08: 0000000000000000 R09: 0000000000000000 [ 168.865288][ T6144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.873298][ T6144] R13: 00007f2660f02038 R14: 00007f2660f01fa0 R15: 00007ffcdbcb30f8 [ 168.881315][ T6144] [ 168.904789][ T4275] usb 5-1: device descriptor read/64, error -71 [ 169.023701][ T4275] usb usb5-port1: attempt power cycle [ 169.429195][ T6161] FAULT_INJECTION: forcing a failure. [ 169.429195][ T6161] name failslab, interval 1, probability 0, space 0, times 0 [ 169.466349][ T4275] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 169.483471][ T6161] CPU: 0 PID: 6161 Comm: syz.0.310 Not tainted syzkaller #0 [ 169.490831][ T6161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 169.500932][ T6161] Call Trace: [ 169.504253][ T6161] [ 169.507220][ T6161] dump_stack_lvl+0x188/0x250 [ 169.512080][ T6161] ? show_regs_print_info+0x20/0x20 [ 169.517328][ T6161] ? load_image+0x410/0x410 [ 169.521915][ T6161] ? __might_sleep+0xf0/0xf0 [ 169.526670][ T6161] ? __lock_acquire+0x7d40/0x7d40 [ 169.531767][ T6161] should_fail+0x383/0x4b0 [ 169.536234][ T6161] should_failslab+0x5/0x20 [ 169.540870][ T6161] slab_pre_alloc_hook+0x51/0xc0 [ 169.545854][ T6161] kmem_cache_alloc_trace+0x47/0x290 [ 169.551168][ T6161] ? init_pseudo+0x52/0x140 [ 169.555807][ T6161] init_pseudo+0x52/0x140 [ 169.560218][ T6161] sockfs_init_fs_context+0x18/0xa0 [ 169.565457][ T6161] alloc_fs_context+0x628/0x7d0 [ 169.570339][ T6161] __se_sys_fsopen+0x111/0x320 [ 169.575153][ T6161] do_syscall_64+0x4c/0xa0 [ 169.579623][ T6161] ? clear_bhb_loop+0x30/0x80 [ 169.584326][ T6161] ? clear_bhb_loop+0x30/0x80 [ 169.589031][ T6161] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 169.595040][ T6161] RIP: 0033:0x7f5feada3559 [ 169.599479][ T6161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.619103][ T6161] RSP: 002b:00007f5fe8ffb028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 169.627632][ T6161] RAX: ffffffffffffffda RBX: 00007f5feb02afa0 RCX: 00007f5feada3559 [ 169.635639][ T6161] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000100 [ 169.643715][ T6161] RBP: 00007f5feae3a8b0 R08: 0000000000000000 R09: 0000000000000000 [ 169.651816][ T6161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.659809][ T6161] R13: 00007f5feb02b038 R14: 00007f5feb02afa0 R15: 00007fffe3e459a8 [ 169.667823][ T6161] [ 169.725087][ T4275] usb 5-1: device descriptor read/8, error -71 [ 170.003820][ T4275] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 170.113599][ T4275] usb 5-1: device descriptor read/8, error -71 [ 170.254442][ T4275] usb usb5-port1: unable to enumerate USB device [ 170.329130][ T6168] loop0: detected capacity change from 0 to 2048 [ 170.476045][ T6168] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,,errors=continue. Quota mode: none. [ 170.786952][ T6188] loop1: detected capacity change from 0 to 2048 [ 170.833663][ T6191] FAULT_INJECTION: forcing a failure. [ 170.833663][ T6191] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 170.869113][ T6191] CPU: 0 PID: 6191 Comm: syz.4.321 Not tainted syzkaller #0 [ 170.876476][ T6191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 170.886560][ T6191] Call Trace: [ 170.889857][ T6191] [ 170.892805][ T6191] dump_stack_lvl+0x188/0x250 [ 170.897537][ T6191] ? show_regs_print_info+0x20/0x20 [ 170.902760][ T6191] ? load_image+0x410/0x410 [ 170.907280][ T6191] ? __lock_acquire+0x13b3/0x7d40 [ 170.912330][ T6191] ? verify_lock_unused+0x140/0x140 [ 170.917559][ T6191] should_fail+0x383/0x4b0 [ 170.922033][ T6191] prepare_alloc_pages+0x1e3/0x5b0 [ 170.927200][ T6191] __alloc_pages+0x11b/0x480 [ 170.931822][ T6191] ? zone_statistics+0x170/0x170 [ 170.936812][ T6191] ? alloc_pages+0x452/0x560 [ 170.941433][ T6191] new_slab+0xc0/0x4b0 [ 170.945527][ T6191] ___slab_alloc+0x807/0xdd0 [ 170.950142][ T6191] ? ioctx_alloc+0x105/0x770 [ 170.954759][ T6191] ? ioctx_alloc+0x105/0x770 [ 170.959486][ T6191] kmem_cache_alloc+0xf0/0x280 [ 170.964270][ T6191] ioctx_alloc+0x105/0x770 [ 170.968710][ T6191] ? __might_fault+0xb3/0x110 [ 170.973500][ T6191] __se_sys_io_setup+0x7b/0x190 [ 170.978474][ T6191] do_syscall_64+0x4c/0xa0 [ 170.982946][ T6191] ? clear_bhb_loop+0x30/0x80 [ 170.987670][ T6191] ? clear_bhb_loop+0x30/0x80 [ 170.992373][ T6191] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 170.998285][ T6191] RIP: 0033:0x7f53c5645559 [ 171.002725][ T6191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.022363][ T6191] RSP: 002b:00007f53c389d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 171.030811][ T6191] RAX: ffffffffffffffda RBX: 00007f53c58ccfa0 RCX: 00007f53c5645559 [ 171.038818][ T6191] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 171.046829][ T6191] RBP: 00007f53c56dc8b0 R08: 0000000000000000 R09: 0000000000000000 [ 171.054826][ T6191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.062826][ T6191] R13: 00007f53c58cd038 R14: 00007f53c58ccfa0 R15: 00007ffce6367ee8 [ 171.070866][ T6191] [ 171.096892][ T26] audit: type=1326 audit(1792065750.917:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6182 comm="syz.3.317" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ca715559 code=0x7ffc0000 [ 171.168288][ T6188] EXT4-fs (loop1): Ignoring removed orlov option [ 171.223330][ T26] audit: type=1326 audit(1792065750.917:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6182 comm="syz.3.317" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ca715559 code=0x7ffc0000 [ 171.340856][ T6188] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,orlov,i_version,init_itable,,errors=continue. Quota mode: none. [ 171.357964][ T26] audit: type=1326 audit(1792065751.027:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6182 comm="syz.3.317" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ca715559 code=0x7ffc0000 [ 171.382390][ T26] audit: type=1326 audit(1792065751.027:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6182 comm="syz.3.317" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb9ca7152c2 code=0x7ffc0000 [ 171.393189][ T6188] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.408274][ T26] audit: type=1326 audit(1792065751.067:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6182 comm="syz.3.317" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb9ca715357 code=0x7ffc0000 [ 171.442408][ T26] audit: type=1326 audit(1792065751.097:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6182 comm="syz.3.317" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fb9ca6d2251 code=0x7ffc0000 [ 171.507349][ T26] audit: type=1326 audit(1792065751.097:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6182 comm="syz.3.317" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fb9ca716349 code=0x7ffc0000 [ 171.552006][ T26] audit: type=1326 audit(1792065751.097:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6182 comm="syz.3.317" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fb9ca6d22bb code=0x7ffc0000 [ 171.631788][ T26] audit: type=1326 audit(1792065751.097:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6182 comm="syz.3.317" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb9ca715559 code=0x7ffc0000 [ 171.671841][ T6202] FAULT_INJECTION: forcing a failure. [ 171.671841][ T6202] name failslab, interval 1, probability 0, space 0, times 0 [ 171.802966][ T6202] CPU: 0 PID: 6202 Comm: syz.3.324 Not tainted syzkaller #0 [ 171.810327][ T6202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 171.820421][ T6202] Call Trace: [ 171.823733][ T6202] [ 171.826695][ T6202] dump_stack_lvl+0x188/0x250 [ 171.831465][ T6202] ? show_regs_print_info+0x20/0x20 [ 171.836704][ T6202] ? load_image+0x410/0x410 [ 171.841269][ T6202] ? __might_sleep+0xf0/0xf0 [ 171.845895][ T6202] ? __lock_acquire+0x7d40/0x7d40 [ 171.850974][ T6202] should_fail+0x383/0x4b0 [ 171.855539][ T6202] should_failslab+0x5/0x20 [ 171.860089][ T6202] slab_pre_alloc_hook+0x51/0xc0 [ 171.865068][ T6202] __kmalloc+0x6b/0x340 [ 171.869252][ T6202] ? mpi_resize+0x75/0x1c0 [ 171.873713][ T6202] mpi_resize+0x75/0x1c0 [ 171.878004][ T6202] mpi_powm+0xb7b/0x2390 [ 171.882309][ T6202] ? mpihelp_release_karatsuba_ctx+0x160/0x160 [ 171.888629][ T6202] ? mpihelp_cmp+0xb6/0xd0 [ 171.893092][ T6202] ? mpi_cmp+0x1b4/0x290 [ 171.897373][ T6202] rsa_enc+0x28f/0x3c0 [ 171.901482][ T6202] ? rsa_exit+0x20/0x20 [ 171.905686][ T6202] pkcs1pad_verify+0x465/0x670 [ 171.910515][ T6202] public_key_verify_signature+0x87f/0xd40 [ 171.916383][ T6202] ? public_key_free+0x80/0x80 [ 171.921220][ T6202] ? asymmetric_key_id_same+0x63/0xe0 [ 171.926643][ T6202] x509_check_for_self_signed+0x317/0x420 [ 171.932413][ T6202] x509_cert_parse+0x59c/0x7a0 [ 171.937226][ T6202] x509_key_preparse+0x60/0x5d0 [ 171.942118][ T6202] ? down_read+0x1aa/0x2e0 [ 171.946580][ T6202] asymmetric_key_preparse+0xa5/0x140 [ 171.951993][ T6202] key_create_or_update+0x432/0xa40 [ 171.957234][ T6202] ? security_key_permission+0x7c/0xa0 [ 171.962748][ T6202] ? key_type_put+0x20/0x20 [ 171.967292][ T6202] ? lookup_user_key_possessed+0x40/0x40 [ 171.972978][ T6202] ? __might_fault+0xb3/0x110 [ 171.977730][ T6202] __se_sys_add_key+0x34b/0x410 [ 171.982622][ T6202] ? __x64_sys_add_key+0xc0/0xc0 [ 171.987637][ T6202] ? lockdep_hardirqs_on+0x94/0x140 [ 171.992877][ T6202] ? __x64_sys_add_key+0x1c/0xc0 [ 171.997970][ T6202] do_syscall_64+0x4c/0xa0 [ 172.002437][ T6202] ? clear_bhb_loop+0x30/0x80 [ 172.007156][ T6202] ? clear_bhb_loop+0x30/0x80 [ 172.011881][ T6202] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 172.017815][ T6202] RIP: 0033:0x7fb9ca715559 [ 172.022267][ T6202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.041919][ T6202] RSP: 002b:00007fb9c896d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 172.050374][ T6202] RAX: ffffffffffffffda RBX: 00007fb9ca99cfa0 RCX: 00007fb9ca715559 [ 172.058386][ T6202] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 172.066490][ T6202] RBP: 00007fb9ca7ac8b0 R08: 000000002a0e0c5b R09: 0000000000000000 [ 172.074510][ T6202] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 172.082527][ T6202] R13: 00007fb9ca99d038 R14: 00007fb9ca99cfa0 R15: 00007fff74fcb5c8 [ 172.090568][ T6202] [ 173.051735][ T6208] sched: RT throttling activated [ 174.532560][ T6227] FAULT_INJECTION: forcing a failure. [ 174.532560][ T6227] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 174.573951][ T6227] CPU: 0 PID: 6227 Comm: syz.2.333 Not tainted syzkaller #0 [ 174.581310][ T6227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 174.591410][ T6227] Call Trace: [ 174.594723][ T6227] [ 174.597685][ T6227] dump_stack_lvl+0x188/0x250 [ 174.602405][ T6227] ? show_regs_print_info+0x20/0x20 [ 174.607642][ T6227] ? load_image+0x410/0x410 [ 174.612184][ T6227] ? __lock_acquire+0x7d40/0x7d40 [ 174.617256][ T6227] should_fail+0x383/0x4b0 [ 174.621734][ T6227] prepare_alloc_pages+0x1e3/0x5b0 [ 174.626894][ T6227] __alloc_pages+0x11b/0x480 [ 174.631534][ T6227] ? zone_statistics+0x170/0x170 [ 174.636527][ T6227] ? alloc_pages+0x452/0x560 [ 174.641198][ T6227] __page_cache_alloc+0xce/0x440 [ 174.646275][ T6227] ? add_to_page_cache_lru+0x4a0/0x4a0 [ 174.651788][ T6227] ? xas_descend+0x210/0x3b0 [ 174.656421][ T6227] ? xas_load+0x127/0x140 [ 174.660802][ T6227] pagecache_get_page+0x9b8/0xf20 [ 174.665875][ T6227] ? page_cache_prev_miss+0x380/0x380 [ 174.671299][ T6227] ? unlock_page+0x17c/0x1f0 [ 174.675939][ T6227] aio_setup_ring+0x3c9/0xda0 [ 174.680684][ T6227] ? free_ioctx_reqs+0x180/0x180 [ 174.685665][ T6227] ? percpu_ref_init+0x210/0x340 [ 174.690645][ T6227] ? free_ioctx_users+0x1c0/0x1c0 [ 174.695713][ T6227] ioctx_alloc+0x316/0x770 [ 174.700176][ T6227] __se_sys_io_setup+0x7b/0x190 [ 174.705089][ T6227] do_syscall_64+0x4c/0xa0 [ 174.709577][ T6227] ? clear_bhb_loop+0x30/0x80 [ 174.714291][ T6227] ? clear_bhb_loop+0x30/0x80 [ 174.719038][ T6227] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 174.725010][ T6227] RIP: 0033:0x7fd2a02ed559 [ 174.729460][ T6227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.749186][ T6227] RSP: 002b:00007fd29e545028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 174.757651][ T6227] RAX: ffffffffffffffda RBX: 00007fd2a0574fa0 RCX: 00007fd2a02ed559 [ 174.761604][ T6234] tipc: Started in network mode [ 174.765694][ T6227] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 000000000000239f [ 174.765736][ T6227] RBP: 00007fd2a03848b0 R08: 0000000000000000 R09: 0000000000000000 [ 174.765751][ T6227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.765765][ T6227] R13: 00007fd2a0575038 R14: 00007fd2a0574fa0 R15: 00007ffecd0f76e8 [ 174.765794][ T6227] [ 174.771247][ T6234] tipc: Node identity 1000001, cluster identity 4711 [ 174.814586][ T6234] tipc: Node number set to 16777217 [ 174.836144][ T6234] tipc: Cannot configure node identity twice [ 174.865528][ T6239] loop1: detected capacity change from 0 to 2048 [ 174.907243][ T6239] EXT4-fs (loop1): Ignoring removed orlov option [ 174.943319][ T4256] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 174.967453][ T6244] loop2: detected capacity change from 0 to 512 [ 174.977347][ T6243] loop4: detected capacity change from 0 to 256 [ 174.994429][ T6239] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,orlov,i_version,init_itable,,errors=continue. Quota mode: none. [ 175.009684][ T6239] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.065779][ T6244] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 175.124504][ T26] audit: type=1800 audit(1792065754.947:27): pid=6243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.338" name="file1" dev="loop4" ino=1048625 res=0 errno=0 [ 175.259825][ T4256] usb 4-1: device descriptor read/64, error -71 [ 175.623328][ T4256] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 175.823319][ T4256] usb 4-1: device descriptor read/64, error -71 [ 175.943529][ T4256] usb usb4-port1: attempt power cycle [ 176.056175][ T6271] FAULT_INJECTION: forcing a failure. [ 176.056175][ T6271] name failslab, interval 1, probability 0, space 0, times 0 [ 176.080775][ T6271] CPU: 1 PID: 6271 Comm: syz.2.349 Not tainted syzkaller #0 [ 176.088122][ T6271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 176.098216][ T6271] Call Trace: [ 176.101531][ T6271] [ 176.104495][ T6271] dump_stack_lvl+0x188/0x250 [ 176.109251][ T6271] ? show_regs_print_info+0x20/0x20 [ 176.114492][ T6271] ? load_image+0x410/0x410 [ 176.119048][ T6271] ? __might_sleep+0xf0/0xf0 [ 176.123672][ T6271] ? __lock_acquire+0x7d40/0x7d40 [ 176.128842][ T6271] should_fail+0x383/0x4b0 [ 176.133318][ T6271] should_failslab+0x5/0x20 [ 176.137868][ T6271] slab_pre_alloc_hook+0x51/0xc0 [ 176.142839][ T6271] kmem_cache_alloc_trace+0x47/0x290 [ 176.148158][ T6271] ? tomoyo_find_next_domain+0x11e/0x1a50 [ 176.154010][ T6271] tomoyo_find_next_domain+0x11e/0x1a50 [ 176.159621][ T6271] ? read_lock_is_recursive+0x10/0x10 [ 176.165048][ T6271] ? tomoyo_assign_domain+0x810/0x810 [ 176.170477][ T6271] tomoyo_bprm_check_security+0xdd/0x120 [ 176.176155][ T6271] security_bprm_check+0x5e/0x90 [ 176.181148][ T6271] bprm_execve+0x9f2/0x1740 [ 176.185718][ T6271] ? alloc_bprm+0x690/0x690 [ 176.190264][ T6271] ? copy_string_kernel+0x26c/0x280 [ 176.195506][ T6271] do_execveat_common+0x504/0x6b0 [ 176.200585][ T6271] __x64_sys_execveat+0xc0/0xe0 [ 176.205478][ T6271] do_syscall_64+0x4c/0xa0 [ 176.209935][ T6271] ? clear_bhb_loop+0x30/0x80 [ 176.214696][ T6271] ? clear_bhb_loop+0x30/0x80 [ 176.219410][ T6271] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 176.225361][ T6271] RIP: 0033:0x7fd2a02ed559 [ 176.229816][ T6271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.249495][ T6271] RSP: 002b:00007fd29e545028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 176.258312][ T6271] RAX: ffffffffffffffda RBX: 00007fd2a0574fa0 RCX: 00007fd2a02ed559 [ 176.266324][ T6271] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 176.274335][ T6271] RBP: 00007fd2a03848b0 R08: 0000000000001000 R09: 0000000000000000 [ 176.282352][ T6271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.290360][ T6271] R13: 00007fd2a0575038 R14: 00007fd2a0574fa0 R15: 00007ffecd0f76e8 [ 176.298393][ T6271] [ 176.356617][ T4256] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 176.447848][ T6283] xt_CT: No such helper "snmp_trap" [ 176.464156][ T4256] usb 4-1: device descriptor read/8, error -71 [ 176.565925][ T6287] loop4: detected capacity change from 0 to 2048 [ 176.588277][ T6287] EXT4-fs (loop4): Ignoring removed orlov option [ 176.640506][ T6287] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,orlov,i_version,init_itable,,errors=continue. Quota mode: none. [ 176.661771][ T6287] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.755488][ T4256] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 176.811079][ T4423] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.863463][ T4256] usb 4-1: device descriptor read/8, error -71 [ 176.936511][ T4423] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.262719][ T4423] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.551158][ T4423] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.693540][ T4256] usb usb4-port1: unable to enumerate USB device [ 178.683136][ T6310] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 179.664759][ T6320] loop0: detected capacity change from 0 to 512 [ 179.753034][ T6320] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 179.797629][ T6324] loop4: detected capacity change from 0 to 2048 [ 179.874903][ T6324] EXT4-fs (loop4): Ignoring removed orlov option [ 179.942935][ T6335] tmpfs: Bad value for 'mpol' [ 179.970028][ T6320] EXT4-fs (loop0): 1 orphan inode deleted [ 179.988709][ T6324] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,orlov,i_version,init_itable,,errors=continue. Quota mode: none. [ 180.010183][ T6320] EXT4-fs (loop0): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 180.013565][ T5550] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 180.033687][ T6320] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.047519][ T6324] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.093628][ T6315] rxe_eth0 speed is unknown, defaulting to 1000 [ 180.227550][ T6345] loop3: detected capacity change from 0 to 2048 [ 180.274887][ T5550] usb 2-1: device descriptor read/64, error -71 [ 180.394410][ T6345] EXT4-fs (loop3): Ignoring removed orlov option [ 181.104439][ T6345] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,orlov,i_version,init_itable,,errors=continue. Quota mode: none. [ 181.199312][ T6345] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.422770][ T5550] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 182.650845][ T4275] Bluetooth: hci3: command 0x0409 tx timeout [ 182.931794][ T6315] chnl_net:caif_netlink_parms(): no params data found [ 183.842598][ T6382] loop0: detected capacity change from 0 to 512 [ 183.895870][ T6382] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000d4d,grpquota,,errors=continue. Quota mode: writeback. [ 183.926107][ T6382] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.122492][ T6394] loop3: detected capacity change from 0 to 1024 [ 184.148926][ T6315] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.216145][ T6315] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.249223][ T6315] device bridge_slave_0 entered promiscuous mode [ 184.306688][ T6394] loop3: detected capacity change from 0 to 2048 [ 184.308518][ T6315] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.322264][ T6399] loop0: detected capacity change from 0 to 1764 [ 184.353087][ T6315] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.372968][ T6315] device bridge_slave_1 entered promiscuous mode [ 184.392883][ T6394] EXT4-fs (loop3): Ignoring removed bh option [ 184.406176][ T6394] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 184.406176][ T6394] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 184.406176][ T6394] [ 184.520132][ T6394] EXT4-fs (loop3): Unrecognized mount option "euid>00000000000000000000" or missing value [ 184.571877][ T6315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.593661][ T6407] loop4: detected capacity change from 0 to 2048 [ 184.641127][ T6407] EXT4-fs (loop4): Ignoring removed orlov option [ 184.715464][ T6315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.816839][ T4277] Bluetooth: hci3: command 0x041b tx timeout [ 184.982709][ T6407] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,orlov,i_version,init_itable,,errors=continue. Quota mode: none. [ 185.018789][ T6315] team0: Port device team_slave_0 added [ 185.038152][ T6407] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.074220][ T6315] team0: Port device team_slave_1 added [ 185.313350][ T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 185.583501][ T13] usb 1-1: device descriptor read/64, error -71 [ 186.306573][ T13] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 186.881261][ T4277] Bluetooth: hci3: command 0x040f tx timeout [ 187.074893][ T6315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.081924][ T6315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.118213][ T6315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.158237][ T4423] device hsr_slave_0 left promiscuous mode [ 187.198450][ T4423] device hsr_slave_1 left promiscuous mode [ 187.213429][ T13] usb 1-1: device descriptor read/64, error -71 [ 187.238961][ T4423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.248923][ T4423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.270670][ T4423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.287485][ T4423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.315476][ T4423] device bridge_slave_1 left promiscuous mode [ 187.323824][ T4423] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.341492][ T13] usb usb1-port1: attempt power cycle [ 187.371376][ T4423] device veth1_macvtap left promiscuous mode [ 187.403123][ T4423] device veth0_macvtap left promiscuous mode [ 187.418469][ T4423] device veth1_vlan left promiscuous mode [ 187.427208][ T4423] device veth0_vlan left promiscuous mode [ 187.755559][ T13] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 187.853421][ T13] usb 1-1: device descriptor read/8, error -71 [ 188.042295][ T4423] team0 (unregistering): Port device team_slave_1 removed [ 188.101939][ T4423] team0 (unregistering): Port device team_slave_0 removed [ 188.158156][ T4423] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.196026][ T4423] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.379257][ T4423] bond0 (unregistering): Released all slaves [ 188.455830][ T6315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.474062][ T6315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.518772][ T6451] loop3: detected capacity change from 0 to 1024 [ 188.556984][ T6315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.606740][ T6446] device batadv_slave_0 entered promiscuous mode [ 188.640350][ T6451] loop3: detected capacity change from 0 to 2048 [ 188.665439][ T6451] EXT4-fs (loop3): Ignoring removed bh option [ 188.694815][ T6451] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 188.694815][ T6451] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 188.694815][ T6451] [ 188.755139][ T6446] device batadv_slave_0 left promiscuous mode [ 188.792454][ T6451] EXT4-fs (loop3): Unrecognized mount option "euid>00000000000000000000" or missing value [ 188.832547][ T6315] device hsr_slave_0 entered promiscuous mode [ 188.882428][ T6315] device hsr_slave_1 entered promiscuous mode [ 188.900615][ T6315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.916935][ T6315] Cannot create hsr debugfs directory [ 188.924559][ T4275] Bluetooth: hci3: command 0x0419 tx timeout [ 190.900605][ T6315] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 190.957933][ T6315] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 190.987759][ T6315] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 191.073538][ T4358] Bluetooth: hci4: command 0x0406 tx timeout [ 191.079967][ T4358] Bluetooth: hci0: command 0x0406 tx timeout [ 191.103353][ T13] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 191.114557][ T6315] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 191.179419][ T4358] Bluetooth: hci1: command 0x0406 tx timeout [ 191.343662][ T13] usb 4-1: device descriptor read/64, error -71 [ 191.362802][ T6499] loop1: detected capacity change from 0 to 128 [ 191.370941][ T6315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.412847][ T6501] FAULT_INJECTION: forcing a failure. [ 191.412847][ T6501] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 191.431252][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 191.458264][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.474830][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 191.474847][ T26] audit: type=1804 audit(1792065771.297:29): pid=6499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.412" name="/newroot/80/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop1" ino=1048627 res=1 errno=0 [ 191.531134][ T6315] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.568188][ T6500] loop4: detected capacity change from 0 to 4096 [ 191.569798][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 191.585183][ T6501] CPU: 0 PID: 6501 Comm: syz.0.413 Not tainted syzkaller #0 [ 191.592532][ T6501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 191.602633][ T6501] Call Trace: [ 191.605974][ T6501] [ 191.608958][ T6501] dump_stack_lvl+0x188/0x250 [ 191.613705][ T6501] ? show_regs_print_info+0x20/0x20 [ 191.618949][ T6501] ? load_image+0x410/0x410 [ 191.623495][ T6501] ? __lock_acquire+0x7d40/0x7d40 [ 191.628569][ T6501] should_fail+0x383/0x4b0 [ 191.633027][ T6501] _copy_from_user+0x2e/0x170 [ 191.637744][ T6501] __se_sys_io_uring_setup+0xea/0x2900 [ 191.643259][ T6501] ? __context_tracking_exit+0x4c/0x80 [ 191.648843][ T6501] ? __x64_sys_io_uring_setup+0x60/0x60 [ 191.654474][ T6501] ? lockdep_hardirqs_on+0x94/0x140 [ 191.659722][ T6501] do_syscall_64+0x4c/0xa0 [ 191.664190][ T6501] ? clear_bhb_loop+0x30/0x80 [ 191.668928][ T6501] ? clear_bhb_loop+0x30/0x80 [ 191.673642][ T6501] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 191.679571][ T6501] RIP: 0033:0x7f5feada3559 [ 191.684022][ T6501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.703659][ T6501] RSP: 002b:00007f5fe8ffafb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 191.712124][ T6501] RAX: ffffffffffffffda RBX: 0000200000000000 RCX: 00007f5feada3559 [ 191.720137][ T6501] RDX: 0000200000000100 RSI: 0000200000000000 RDI: 00000000000048ba [ 191.728145][ T6501] RBP: 00007f5feae3a8b0 R08: 0000000000000000 R09: 0000000000000000 [ 191.736189][ T6501] R10: 0000200000000180 R11: 0000000000000206 R12: 0000200000000100 [ 191.744204][ T6501] R13: 0000200000000180 R14: 00002000000000c0 R15: 00007fffe3e459a8 [ 191.752230][ T6501] [ 191.757124][ T13] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 191.801020][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 191.810902][ T4294] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.818167][ T4294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.833815][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 191.853439][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 191.865958][ T6500] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 191.912139][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 191.933964][ T4294] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.941104][ T4294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.949238][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 191.973421][ T13] usb 4-1: device descriptor read/64, error -71 [ 192.002777][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 192.031844][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 192.090885][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 192.094951][ T13] usb usb4-port1: attempt power cycle [ 192.123946][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 192.183993][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 192.206846][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 192.249937][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 192.304053][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 192.343702][ T6315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.397598][ T6315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 192.450695][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 192.471170][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.533447][ T13] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 192.637500][ T13] usb 4-1: device descriptor read/8, error -71 [ 192.889979][ T6534] ecryptfs_parse_options: eCryptfs: unrecognized option [(] [ 192.897548][ T6534] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 192.905150][ T6534] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 192.918402][ T6534] Error parsing options; rc = [-22] [ 193.073627][ T13] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 193.204286][ T13] usb 4-1: device descriptor read/8, error -71 [ 193.396933][ T13] usb usb4-port1: unable to enumerate USB device [ 193.851538][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 193.864625][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 193.907418][ T6315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.120486][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.130692][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.536114][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 194.564756][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 194.633932][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 194.674045][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 194.705324][ T6315] device veth0_vlan entered promiscuous mode [ 194.723072][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 194.743698][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 194.778091][ T6315] device veth1_vlan entered promiscuous mode [ 194.837067][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 194.856265][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 194.904110][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 194.949802][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 194.996405][ T6315] device veth0_macvtap entered promiscuous mode [ 195.041160][ T6315] device veth1_macvtap entered promiscuous mode [ 195.137265][ T6315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.161008][ T6315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.191779][ T6315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.226900][ T6315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.255019][ T6315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.287748][ T6315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.320342][ T6315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.375408][ T6315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.413034][ T6315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.440465][ T6577] loop3: detected capacity change from 0 to 512 [ 195.449297][ T6315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.478518][ T6315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.494251][ T6315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.510003][ T6315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.521396][ T6315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.546894][ T6315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.561744][ T6315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.601859][ T6315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.614671][ T6315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.623386][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 195.639090][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 195.676966][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 195.690945][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 195.757974][ T6577] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 195.773990][ T6577] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 195.791659][ T6577] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.428: Failed to acquire dquot type 1 [ 195.815871][ T6577] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 195.830752][ T6577] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 195.852820][ T6577] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.428: Failed to acquire dquot type 1 [ 195.874432][ T6315] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.886954][ T6577] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.428: bg 0: block 248: padding at end of block bitmap is not set [ 195.903854][ T6315] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.912619][ T6315] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.921775][ T6315] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.936638][ T6577] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 195.964102][ T6577] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 196.045189][ T6577] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 196.086488][ T6577] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.428: Failed to acquire dquot type 1 [ 196.131950][ T4294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.163580][ T4294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.182300][ T6577] EXT4-fs (loop3): 1 orphan inode deleted [ 196.202162][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 196.218338][ T6577] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 196.237615][ T4660] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.253668][ T4660] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.261821][ T6577] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.284187][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 196.299188][ T6577] netlink: 52 bytes leftover after parsing attributes in process `syz.3.428'. [ 196.379357][ T6592] EXT4-fs error (device loop3): ext4_lookup:1864: inode #2: comm syz.3.428: deleted inode referenced: 12 [ 196.462399][ T6620] EXT4-fs error (device loop3): ext4_lookup:1864: inode #2: comm syz.3.428: deleted inode referenced: 12 [ 197.591628][ T26] audit: type=1326 audit(1792065777.407:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6665 comm="syz.3.451" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9ca715559 code=0x0 [ 198.569149][ T6706] loop5: detected capacity change from 0 to 512 [ 198.635265][ T6706] EXT4-fs (loop5): Test dummy encryption mode enabled [ 198.669251][ T6706] EXT4-fs (loop5): inline encryption not supported [ 198.698472][ T6706] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 198.857037][ T6706] EXT4-fs error (device loop5): ext4_orphan_get:1436: comm syz.5.460: bad orphan inode 131072 [ 198.888699][ T6706] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,inlinecrypt,sysvgroups,,errors=continue. Quota mode: none. [ 199.073594][ T4275] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 199.428891][ T6746] Zero length message leads to an empty skb [ 199.503683][ T4275] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.586734][ T4275] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 199.924412][ T4275] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0014, bcdDevice= 0.40 [ 199.995402][ T4275] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.332523][ T4275] usb 2-1: Product: syz [ 200.342284][ T4275] usb 2-1: Manufacturer: syz [ 200.363360][ T4275] usb 2-1: SerialNumber: syz [ 200.598862][ T6766] loop0: detected capacity change from 0 to 2048 [ 200.780729][ T6766] EXT4-fs (loop0): Ignoring removed orlov option [ 201.252146][ T6766] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,orlov,i_version,init_itable,,errors=continue. Quota mode: none. [ 201.613096][ T6766] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.641723][ T6779] netlink: 'syz.5.484': attribute type 4 has an invalid length. [ 201.927061][ T6782] netlink: 'syz.5.484': attribute type 4 has an invalid length. [ 202.790090][ T6796] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 202.799255][ T6796] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 203.493517][ T4275] usb 2-1: 0:1 : does not exist [ 203.498963][ T4275] usb 2-1: unit 2 not found! [ 203.513244][ T4275] usb 2-1: unit 80 not found! [ 203.555954][ T4275] usb 2-1: USB disconnect, device number 4 [ 203.723791][ T6811] loop5: detected capacity change from 0 to 1024 [ 203.815981][ T4312] udevd[4312]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 203.910121][ T6811] Quota error (device loop5): find_tree_dqentry: Getting block too big (64 >= 6) [ 203.925596][ T6811] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 203.955688][ T6811] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.491: Failed to acquire dquot type 0 [ 203.982983][ T6811] EXT4-fs error (device loop5): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 204.009009][ T6811] EXT4-fs (loop5): 1 truncate cleaned up [ 204.026038][ T6811] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,auto_da_alloc,noblock_validity,nouid32,,errors=continue. Quota mode: writeback. [ 204.294222][ T26] audit: type=1804 audit(1792065783.937:31): pid=6825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.495" name="/newroot/91/trace/events/dwc3/dwc3_ctrl_req/inject" dev="tracefs" ino=17617 res=1 errno=0 [ 204.895127][ T6811] Quota error (device loop5): find_tree_dqentry: Getting block too big (64 >= 6) [ 204.927914][ T6811] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 204.943494][ T6811] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.491: Failed to acquire dquot type 0 [ 204.988535][ T6830] loop1: detected capacity change from 0 to 1024 [ 205.142459][ T6830] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,nobarrier,barrier,block_validity,nodioread_nolock,nodelalloc,resuid=0x0000000000000000,init_itable=0x0000000000000006,,errors=continue. Quota mode: none. [ 205.169687][ T6830] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.186241][ T26] audit: type=1800 audit(1792065785.007:32): pid=6830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.497" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 205.210350][ T6828] EXT4-fs error (device loop1): ext4_map_blocks:741: inode #15: comm syz.1.497: lblock 0 mapped to illegal pblock 0 (length 1) [ 205.229429][ T6830] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: comm syz.1.497: lblock 0 mapped to illegal pblock 0 (length 1) [ 205.267819][ T26] audit: type=1800 audit(1792065785.027:33): pid=6830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.497" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 205.288786][ T6835] loop3: detected capacity change from 0 to 4096 [ 205.297988][ T6830] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: comm syz.1.497: lblock 0 mapped to illegal pblock 0 (length 1) [ 205.333516][ T6828] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: comm syz.1.497: lblock 0 mapped to illegal pblock 0 (length 1) [ 205.349847][ T6828] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: comm syz.1.497: lblock 0 mapped to illegal pblock 0 (length 1) [ 205.376609][ T6835] EXT4-fs (loop3): Ignoring removed nobh option [ 205.405939][ T6828] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: comm syz.1.497: lblock 0 mapped to illegal pblock 0 (length 1) [ 205.436974][ T6835] EXT4-fs (loop3): Test dummy encryption mode enabled [ 205.449870][ T6835] EXT4-fs (loop3): Ignoring removed bh option [ 205.456193][ T6828] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: comm syz.1.497: lblock 0 mapped to illegal pblock 0 (length 1) [ 205.472617][ T6828] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: comm syz.1.497: lblock 0 mapped to illegal pblock 0 (length 1) [ 205.498409][ T6828] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: comm syz.1.497: lblock 0 mapped to illegal pblock 0 (length 1) [ 205.525647][ T6835] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,nobh,nodioread_nolock,test_dummy_encryption,lazytime,nojournal_checksum,minixdf,bh,,errors=continue. Quota mode: writeback. [ 205.552936][ T6828] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: comm syz.1.497: lblock 0 mapped to illegal pblock 0 (length 1) [ 205.581848][ T6856] loop5: detected capacity change from 0 to 1024 [ 205.606939][ T6856] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 205.663590][ T6856] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 205.683661][ T6856] EXT4-fs (loop5): invalid journal inode [ 205.689515][ T6856] EXT4-fs (loop5): can't get journal size [ 205.734022][ T6856] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,,errors=continue. Quota mode: writeback. [ 205.975295][ T6861] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 37: comm syz.5.507: path /17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 206.000501][ T6861] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 3: comm syz.5.507: path /17/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=511, rec_len=65535, size=1024 fake=0 [ 207.331110][ T6835] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 207.501405][ T6891] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 207.536518][ T6891] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 207.615754][ T6891] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 207.685549][ T6891] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 207.886418][ T6891] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 207.987882][ T6891] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 208.040794][ T6891] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 208.089330][ T6894] netlink: 16 bytes leftover after parsing attributes in process `syz.5.514'. [ 208.653586][ T6946] loop5: detected capacity change from 0 to 7 [ 208.695462][ T4312] Dev loop5: unable to read RDB block 7 [ 208.701706][ T4312] loop5: unable to read partition table [ 208.715470][ T4540] loop: Write error at byte offset 4, length 3584. [ 208.729214][ T4312] loop5: partition table beyond EOD, truncated [ 208.750708][ C0] blk_update_request: I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 208.762197][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 208.813402][ T6946] Dev loop5: unable to read RDB block 7 [ 208.819044][ T6946] loop5: unable to read partition table [ 208.829197][ T6946] loop5: partition table beyond EOD, truncated [ 208.868879][ T6946] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 208.852038][ T6940] infiniband syz0: set active [ 208.896875][ T6940] infiniband syz0: added bond0 [ 209.090164][ T6940] RDS/IB: syz0: added [ 209.101809][ T6940] smc: adding ib device syz0 with port count 1 [ 209.105329][ T6945] [ 209.110389][ T6945] ====================================================== [ 209.115816][ T6940] smc: ib device syz0 port 1 has pnetid [ 209.117425][ T6945] WARNING: possible circular locking dependency detected [ 209.117451][ T6945] syzkaller #0 Not tainted [ 209.134815][ T6945] ------------------------------------------------------ [ 209.141846][ T6945] syz.5.524/6945 is trying to acquire lock: [ 209.147756][ T6945] ffff88807476e138 ((wq_completion)loop5){+.+.}-{0:0}, at: flush_workqueue+0x14e/0x1390 [ 209.157560][ T6945] [ 209.157560][ T6945] but task is already holding lock: [ 209.164952][ T6945] ffff88802126f468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xa9/0xb50 [ 209.173790][ T6945] [ 209.173790][ T6945] which lock already depends on the new lock. [ 209.173790][ T6945] [ 209.184217][ T6945] [ 209.184217][ T6945] the existing dependency chain (in reverse order) is: [ 209.193259][ T6945] [ 209.193259][ T6945] -> #7 (&lo->lo_mutex){+.+.}-{3:3}: [ 209.200778][ T6945] __mutex_lock_common+0x1e5/0x2400 [ 209.206534][ T6945] mutex_lock_killable_nested+0x17/0x20 [ 209.212642][ T6945] lo_open+0x6a/0x100 [ 209.217176][ T6945] blkdev_get_whole+0x90/0x390 [ 209.222491][ T6945] blkdev_get_by_dev+0x2da/0xa50 [ 209.227999][ T6945] blkdev_open+0x128/0x2c0 [ 209.232985][ T6945] do_dentry_open+0x7f7/0xf90 [ 209.238203][ T6945] path_openat+0x2718/0x2fb0 [ 209.243340][ T6945] do_filp_open+0x1df/0x400 [ 209.248399][ T6945] do_sys_openat2+0x14b/0x500 [ 209.253627][ T6945] __x64_sys_openat+0x135/0x160 [ 209.259045][ T6945] do_syscall_64+0x4c/0xa0 [ 209.264026][ T6945] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 209.270472][ T6945] [ 209.270472][ T6945] -> #6 (&disk->open_mutex){+.+.}-{3:3}: [ 209.278322][ T6945] __mutex_lock_common+0x1e5/0x2400 [ 209.284131][ T6945] mutex_lock_nested+0x17/0x20 [ 209.289476][ T6945] bd_register_pending_holders+0x33/0x310 [ 209.295803][ T6945] device_add_disk+0x5ee/0xde0 [ 209.301105][ T6945] md_alloc+0x80e/0xc10 [ 209.305818][ T6945] add_named_array+0x1bd/0x290 [ 209.311136][ T6945] param_attr_store+0x20a/0x300 [ 209.316540][ T6945] module_attr_store+0x5b/0x80 [ 209.321859][ T6945] kernfs_fop_write_iter+0x3a8/0x500 [ 209.327795][ T6945] vfs_write+0x748/0xd70 [ 209.332589][ T6945] ksys_write+0x153/0x260 [ 209.337467][ T6945] do_syscall_64+0x4c/0xa0 [ 209.342439][ T6945] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 209.348893][ T6945] [ 209.348893][ T6945] -> #5 (disks_mutex){+.+.}-{3:3}: [ 209.356224][ T6945] __mutex_lock_common+0x1e5/0x2400 [ 209.361987][ T6945] mutex_lock_nested+0x17/0x20 [ 209.367325][ T6945] md_alloc+0x48/0xc10 [ 209.371951][ T6945] add_named_array+0x1bd/0x290 [ 209.377258][ T6945] param_attr_store+0x20a/0x300 [ 209.382666][ T6945] module_attr_store+0x5b/0x80 [ 209.387983][ T6945] kernfs_fop_write_iter+0x3a8/0x500 [ 209.393846][ T6945] vfs_write+0x748/0xd70 [ 209.398636][ T6945] ksys_write+0x153/0x260 [ 209.403517][ T6945] do_syscall_64+0x4c/0xa0 [ 209.408507][ T6945] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 209.414966][ T6945] [ 209.414966][ T6945] -> #4 (param_lock){+.+.}-{3:3}: [ 209.422204][ T6945] __mutex_lock_common+0x1e5/0x2400 [ 209.428080][ T6945] mutex_lock_nested+0x17/0x20 [ 209.433408][ T6945] param_attr_show+0xc6/0x170 [ 209.438640][ T6945] module_attr_show+0x52/0x70 [ 209.443876][ T6945] sysfs_kf_seq_show+0x316/0x4c0 [ 209.449369][ T6945] seq_read_iter+0x460/0xc50 [ 209.454566][ T6945] vfs_read+0x75e/0xd50 [ 209.459299][ T6945] ksys_read+0x153/0x260 [ 209.464117][ T6945] do_syscall_64+0x4c/0xa0 [ 209.469094][ T6945] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 209.475550][ T6945] [ 209.475550][ T6945] -> #3 (&of->mutex){+.+.}-{3:3}: [ 209.482809][ T6945] __mutex_lock_common+0x1e5/0x2400 [ 209.488571][ T6945] mutex_lock_nested+0x17/0x20 [ 209.493895][ T6945] kernfs_seq_start+0x55/0x3c0 [ 209.499245][ T6945] seq_read_iter+0x387/0xc50 [ 209.504429][ T6945] vfs_read+0x75e/0xd50 [ 209.509340][ T6945] ksys_read+0x153/0x260 [ 209.514145][ T6945] do_syscall_64+0x4c/0xa0 [ 209.519122][ T6945] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 209.525582][ T6945] [ 209.525582][ T6945] -> #2 (&p->lock){+.+.}-{3:3}: [ 209.532704][ T6945] __mutex_lock_common+0x1e5/0x2400 [ 209.538467][ T6945] mutex_lock_nested+0x17/0x20 [ 209.543813][ T6945] seq_read_iter+0x9d/0xc50 [ 209.548886][ T6945] do_iter_readv_writev+0x47d/0x5f0 [ 209.554646][ T6945] do_iter_read+0x201/0x7c0 [ 209.559716][ T6945] loop_process_work+0x16fd/0x24c0 [ 209.565416][ T6945] process_one_work+0x867/0xff0 [ 209.570840][ T6945] worker_thread+0xad7/0x12a0 [ 209.576096][ T6945] kthread+0x42e/0x520 [ 209.580724][ T6945] ret_from_fork+0x1f/0x30 [ 209.585704][ T6945] [ 209.585704][ T6945] -> #1 ((work_completion)(&lo->rootcg_work)){+.+.}-{0:0}: [ 209.595129][ T6945] process_one_work+0x7ba/0xff0 [ 209.600544][ T6945] worker_thread+0xad7/0x12a0 [ 209.605785][ T6945] kthread+0x42e/0x520 [ 209.610497][ T6945] ret_from_fork+0x1f/0x30 [ 209.615472][ T6945] [ 209.615472][ T6945] -> #0 ((wq_completion)loop5){+.+.}-{0:0}: [ 209.623590][ T6945] __lock_acquire+0x38f7/0x7d40 [ 209.629039][ T6945] lock_acquire+0x19f/0x400 [ 209.634108][ T6945] flush_workqueue+0x16a/0x1390 [ 209.639530][ T6945] drain_workqueue+0xca/0x370 [ 209.644775][ T6945] destroy_workqueue+0x7b/0xb20 [ 209.650185][ T6945] __loop_clr_fd+0x22f/0xb50 [ 209.655335][ T6945] blkdev_put+0x52b/0x780 [ 209.660222][ T6945] blkdev_close+0x76/0xa0 [ 209.665115][ T6945] __fput+0x212/0x8c0 [ 209.669652][ T6945] task_work_run+0x125/0x1a0 [ 209.674795][ T6945] exit_to_user_mode_loop+0x10f/0x130 [ 209.680716][ T6945] exit_to_user_mode_prepare+0xee/0x180 [ 209.686814][ T6945] syscall_exit_to_user_mode+0x16/0x40 [ 209.692824][ T6945] do_syscall_64+0x58/0xa0 [ 209.697796][ T6945] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 209.704242][ T6945] [ 209.704242][ T6945] other info that might help us debug this: [ 209.704242][ T6945] [ 209.714492][ T6945] Chain exists of: [ 209.714492][ T6945] (wq_completion)loop5 --> &disk->open_mutex --> &lo->lo_mutex [ 209.714492][ T6945] [ 209.727989][ T6945] Possible unsafe locking scenario: [ 209.727989][ T6945] [ 209.735465][ T6945] CPU0 CPU1 [ 209.740853][ T6945] ---- ---- [ 209.746322][ T6945] lock(&lo->lo_mutex); [ 209.750598][ T6945] lock(&disk->open_mutex); [ 209.757761][ T6945] lock(&lo->lo_mutex); [ 209.764550][ T6945] lock((wq_completion)loop5); [ 209.769433][ T6945] [ 209.769433][ T6945] *** DEADLOCK *** [ 209.769433][ T6945] [ 209.777597][ T6945] 2 locks held by syz.5.524/6945: [ 209.782645][ T6945] #0: ffff88802107b518 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf1/0x780 [ 209.792023][ T6945] #1: ffff88802126f468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xa9/0xb50 [ 209.801280][ T6945] [ 209.801280][ T6945] stack backtrace: [ 209.807186][ T6945] CPU: 1 PID: 6945 Comm: syz.5.524 Not tainted syzkaller #0 [ 209.814495][ T6945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 209.824578][ T6945] Call Trace: [ 209.827883][ T6945] [ 209.830835][ T6945] dump_stack_lvl+0x188/0x250 [ 209.835541][ T6945] ? load_image+0x410/0x410 [ 209.840070][ T6945] ? show_regs_print_info+0x20/0x20 [ 209.845298][ T6945] ? print_circular_bug+0x12b/0x1a0 [ 209.850525][ T6945] check_noncircular+0x2f8/0x400 [ 209.855505][ T6945] ? print_deadlock_bug+0x5d0/0x5d0 [ 209.860742][ T6945] ? lockdep_lock+0xf1/0x1f0 [ 209.865391][ T6945] ? mark_lock+0x94/0x320 [ 209.869752][ T6945] ? _find_first_zero_bit+0xd1/0xf0 [ 209.874981][ T6945] __lock_acquire+0x38f7/0x7d40 [ 209.879874][ T6945] ? verify_lock_unused+0x140/0x140 [ 209.885103][ T6945] ? verify_lock_unused+0x140/0x140 [ 209.890334][ T6945] ? verify_lock_unused+0x140/0x140 [ 209.895557][ T6945] ? verify_lock_unused+0x140/0x140 [ 209.900816][ T6945] ? verify_lock_unused+0x140/0x140 [ 209.906045][ T6945] lock_acquire+0x19f/0x400 [ 209.910585][ T6945] ? flush_workqueue+0x14e/0x1390 [ 209.915639][ T6945] ? __mutex_trylock_common+0x15c/0x260 [ 209.921225][ T6945] ? read_lock_is_recursive+0x10/0x10 [ 209.926642][ T6945] ? __init_swait_queue_head+0xa4/0x140 [ 209.932238][ T6945] flush_workqueue+0x16a/0x1390 [ 209.937131][ T6945] ? flush_workqueue+0x14e/0x1390 [ 209.942204][ T6945] ? lock_chain_count+0x20/0x20 [ 209.947083][ T6945] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 209.952571][ T6945] ? lockdep_hardirqs_off+0x70/0x100 [ 209.957892][ T6945] ? drain_workqueue+0x2f/0x370 [ 209.962780][ T6945] ? rcu_work_rcufn+0x120/0x120 [ 209.967665][ T6945] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 209.973331][ T6945] ? finish_wait+0xc3/0x1c0 [ 209.977868][ T6945] drain_workqueue+0xca/0x370 [ 209.982574][ T6945] destroy_workqueue+0x7b/0xb20 [ 209.987461][ T6945] __loop_clr_fd+0x22f/0xb50 [ 209.992089][ T6945] ? lo_release+0x15e/0x1f0 [ 209.996623][ T6945] ? lo_open+0x100/0x100 [ 210.000905][ T6945] blkdev_put+0x52b/0x780 [ 210.005273][ T6945] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 210.011296][ T6945] blkdev_close+0x76/0xa0 [ 210.015661][ T6945] ? blkdev_open+0x2c0/0x2c0 [ 210.020292][ T6945] __fput+0x212/0x8c0 [ 210.024306][ T6945] task_work_run+0x125/0x1a0 [ 210.028930][ T6945] exit_to_user_mode_loop+0x10f/0x130 [ 210.034339][ T6945] exit_to_user_mode_prepare+0xee/0x180 [ 210.039908][ T6945] syscall_exit_to_user_mode+0x16/0x40 [ 210.045396][ T6945] do_syscall_64+0x58/0xa0 [ 210.049846][ T6945] ? clear_bhb_loop+0x30/0x80 [ 210.054568][ T6945] ? clear_bhb_loop+0x30/0x80 [ 210.059271][ T6945] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 210.065196][ T6945] RIP: 0033:0x7f44b51b5559 [ 210.069669][ T6945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.089303][ T6945] RSP: 002b:00007ffe4ab617b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 210.097777][ T6945] RAX: 0000000000000000 RBX: 00007f44b543eda0 RCX: 00007f44b51b5559 [ 210.105780][ T6945] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 210.113798][ T6945] RBP: 00007f44b543eda0 R08: 00007f44b543d038 R09: 0000000000000000 [ 210.121796][ T6945] R10: 00000000003ffd8c R11: 0000000000000246 R12: 0000000000033205 [ 210.129796][ T6945] R13: 00007f44b543d09c R14: 0000000000032f48 R15: 00007ffe4ab618c0 [ 210.137831][ T6945]