last executing test programs: 18.574080882s ago: executing program 3 (id=74): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000040)={0x29, 0x3, 0x0, {0x5, 0x8, 0x0, 'tracefs\x00'}}, 0x29) 18.319972018s ago: executing program 3 (id=77): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x200000000000000, 0x0, 0x1, 0xfcff, &(0x7f0000000180)=""/1}) 18.231863371s ago: executing program 3 (id=78): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x1, 0xa}}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, 0x2, @in=@empty}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_lifetime={0x4, 0x4}]}, 0x58}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x40}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fefdffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b70500002a0000006a0a00fe00000000850000001a000000b7000000592000009500000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) socketpair$unix(0x1, 0x2, 0x0, 0x0) mlockall(0x7) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 10.600217429s ago: executing program 3 (id=117): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x400, 0x80000001) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) linkat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400) chdir(&(0x7f00000003c0)='./bus\x00') read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) fchown(r0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x8000, 0x0) 9.697758121s ago: executing program 3 (id=118): syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0xa00300, &(0x7f00000023c0)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0xfff}}, {@resgid}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@barrier}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") chdir(&(0x7f0000000400)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x18db8, 0x10000000}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0x2, 0x7fff5ffe}]}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 8.019366102s ago: executing program 3 (id=126): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) r0 = socket(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000080), 0x90800) sendmsg$unix(r0, &(0x7f0000003780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0xc000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, 0x0, 0x0) listen(r1, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff), 0x0, 0xe0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x1ff, 0xf806, 0x5, 0x0, 0x1}, 0x14) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) r6 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x800010, &(0x7f00000002c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r7, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d4", 0xd4, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000000)='htcp', 0x4) recvfrom$inet(r7, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) shutdown(r7, 0x1) 7.441656627s ago: executing program 0 (id=135): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000100)={0x0, 'veth1_to_batadv\x00', {}, 0x26}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x44, r7, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0xfffffff1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}]}, 0x44}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) 7.400430598s ago: executing program 1 (id=136): syz_read_part_table(0x5c6, &(0x7f0000000bc0)="$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") 6.347594273s ago: executing program 1 (id=137): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000), &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/vkms/mydev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/vkms/mydev/crtcs/crtc0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/vkms/mydev/enabled\x00', 0x2, 0x0) 6.273710145s ago: executing program 0 (id=139): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x48}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000100)={0x0, 'veth1_to_batadv\x00', {}, 0x26}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x44, r5, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0xfffffff1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}]}, 0x44}}, 0x0) 6.001796982s ago: executing program 1 (id=141): keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000580)='\xf3\xcb\xd3\x1f\xd9AV?\xfe\x12\xc7\x14\x05o\xc4I7|\x1bB\x13\x812B\xb4\xad\xd4\xf8\x10\x01\xc1\xe0<.\xcd;\xce\xbf\xba\xd8\x85\xe0\xfe\t\b\xdfnP\xbf\xf1\x1a\x19\xff\x86@H\xa1\xed\xa3\x8d\x1b\xefU\xba\xc0[e\xdc\x15u\x03\xa8\x16\x0f\x9c{\xe0\xa8\x8d\x16?\x0f\xecYInt\xc3,\xf0\xee\xe1\xf9\xda\xb4\x0ey\xb3\xaa\xf1\x8fLN\x9f\xea\\\x01\'\xe4\x99\xed\x14\xb8o\xdet\x86\x1aX\xad\xc0\xa6F\xf0\xab8\xf0\xb4;=k\xa1>\n\x91\x11Qb[ch\x1fyb\'[\x89Z\x9d\x91\x01Z\x80\xbb\x972\xbf\xdb\x8d\b,\xd7\xa3\x112W\xf7\xd5LM\x94o\xf4?\x12\xc3\xae\x92\x9ed\x94\xf9]\xc8\xfa\xf2$\xa8\xca\xb7`\xf0\xd7\x04qudz\xfa\x14\xdf\xc1\"[l\xee\x98\x87\xf4\xe8%z\xc3\xa2\x13\xe4S\xbbD]zO\x13\a\x1dq\xea\xec_\xd2(\xb6\x93_\x9dP\xbbT\x8f\xe6\x13C \aX\xbb\xfb\x98T\xc0\xb8\xae\xaf5q\x97\xf1\xcb=\x11\x99\x8br\x9b\x19\xdf\x9a\xe26 I`\xad\x86gNaK\xab\a\xde\xce\x86\xf2\xe2\xb3\x9f\xf7\xa6\xaf\x8c\xfax\x80\xdb\x17AT3Q\xb0h\xbe\xd5\xf4\xe3\xad\xc5\xbb\xfdf\xe4_NL \xe3\xd5\x8d\x03\r\xaa\x89\xbfs\xbc\x92_$\xb6\xd9\x9e/\xf0\xfb\xbe\'\xe3\x10\xa5\x7fA\xd1\x99\n\x80\xdb\x0e\xbc(\xc6\xd2\x8d\x1c\x1b\xfaW\xa7\xcd\xa5\x8e\r\x19v\xdb\xa4\xfb\xe9K\xdc%\xf7\xed\x17\x1a\xeb\x12M\xda\xd3\x7fD\x80\xf7X\x9c8\xc2%!J\xf8\x03/\"\xdd\xf1X:(\xd1\xc8?!::,\xa8_\x1fl\\>\xea\x17~%\x8a(]U\xee\xdb\xf12\xc9\xfc\xa9\x1e\xe0s>\x16\x7f\xed\x15\x1bS\xf7\x99\xceO\xcb\xc5\x98\v\xab\xb8\xf8#\x9b\xf2\x97\xad\xb0\xb2Y\xf6\x85\xca\xb6g7\xb9c=T\x16\xc1\xbc\xfer\xb7\\\xd4[Y\x80N[`\x93\xf3\x10\xdaz\xdf\x85A\xa9\x98\xb6\x9f\x1c~\xb3\x80\xb6)\xfdEu\xde\xe8\xf4:2\x13\xec\x8cC\xe1\xb1\t\xb3<\xb60\x87\x80\x93<\xb8aI;\x03\xfe\x95\bn\xd7\xbf/\x89\xd3\xda\xf5\xfa\xcf\xdb\xfe\x12\x1b`\xab)F\x9e\xef27\xab\x9b\xadjc+\xd6\xa9V\x02F\xee\xf3]\xb3R\x19\xf4c\'x\xbb\x04\x83\xcc\x94\xec\x8d\x15\a2,r\x80\xef\x82\xc4\x86q\xcc\xee\xa7\x16>\xb9\xc6\xd9\x9e\x82Y\x88\xfb@\xf6^(`\xde]BA\x1c\xca\x8e\x86^%\xa2\x8b\xfb\xe18\xbc\x944hL1\x88\x80`q\x1a6\x8b\xd0$\xea\x9b\x82\x15\xbcBD\x9b\x87gw\xb7\xef\xad\xe4H-\xbb\x14\xd5\x97\xdd~GcI\xe6\x05\xa4\xc2\xcd\xa7\x9f\xf2\xa8v\x17\xec\x03\xb7^\x0f_\xf0@SJ\xfa\v\v\xd4{?\x87\xb6m\xd2&\xbb\xc1\xbe/E\xd615|\xb1c\xe6\xf44\xb7l\r\xc3\xfb\x9d}b\xf2\x1a\x17 !\x92(\x02\x94)\n\f-Wz?m\xea\xf3\xfa\xfe\x945\xba\xbe4E\xadL8\x8c\x86\x95\x90n\xea\xd4Z', 0x0) 5.113731194s ago: executing program 1 (id=144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x80}}, 0x24060000) listen(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x8000000010, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000500000a0900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a310000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d300000000000000800054000000000140000"], 0xac}}, 0x24004000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r3 = socket(0x2, 0x3, 0x6) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000140)={0x84, @dev={0xac, 0x14, 0x14, 0x3a}, 0x4e21, 0x3, 'ovf\x00', 0x1d, 0x80002, 0x64}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x5, 0x15}, {@dev={0xac, 0x14, 0x14, 0x50}, 0x4e21, 0x1, 0xcd, 0x4}}, 0x44) sendmsg$sock(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 5.057054005s ago: executing program 0 (id=145): setns(0xc9, 0x0) socket$netlink(0x10, 0x3, 0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x61) socket$kcm(0x23, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000180)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1cc) mount$bpf(0x0, 0x0, 0x0, 0x5805040, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x24004854) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x6, &(0x7f0000000240)=0x7) 4.652120495s ago: executing program 2 (id=146): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1000}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000440)=""/1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xf0de, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x440}], 0x0, 0x0, 0x0}) 4.605747916s ago: executing program 1 (id=147): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/syzkaller0/gro_flush_timeout\x00', 0x1, 0x0) write(r4, &(0x7f0000000180)='2', 0x1) 3.405754516s ago: executing program 2 (id=150): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x2808080, &(0x7f0000000580)=ANY=[@ANYBLOB="757466383d302c6e6f6e756d7461696c3d302c756e695f786c6174653d302c756e695f786c6174653d312c756d61736b3d30303030303030303030303030303030303030303030372c636f6465706167653d3836352c756e695f786c6174653d302c726f6469722c696f636861727365743d61736369692c636865636b3d72656c617865642c646f733178666c6f7070792c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c00b2cd88bf8db1b105da66c242197e71c9caed98b493e44775920a8f05eb85bd842ac2988dab1f82bf2fab4e5337aec7dda99d590305e9eeae915eea8e91b35b69d551fe44d86b2ba6e61d9addd32ea494ad5cba0079c8202d9a5025f2240e29757046265d04c09dd5daccbb48"], 0x81, 0x2b4, &(0x7f00000002c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) utimensat(r0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x3ffffffe}}, 0x0) 3.405433706s ago: executing program 1 (id=151): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x3}, 0x6) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x11, {{}, {0x0, 0x0, 0xff}}}, 0x14) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x83}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) 3.169796402s ago: executing program 2 (id=153): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 3.121389123s ago: executing program 2 (id=154): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x841e, &(0x7f0000000100)={[{@dioread_lock}, {@jqfmt_vfsold}, {@lazytime}, {@usrquota}, {@usrquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x181042, 0x65) pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0x84fed0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x4000) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mmap(&(0x7f0000315000/0x3000)=nil, 0x3000, 0x1000008, 0x11, r0, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2.915788898s ago: executing program 0 (id=155): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x400, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) listen(r0, 0x9) 2.866300039s ago: executing program 4 (id=156): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 2.753774942s ago: executing program 0 (id=157): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x80}}, 0x24060000) listen(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x8000000010, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000500000a0900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a310000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d300000000000000800054000000000140000"], 0xac}}, 0x24004000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r3 = socket(0x2, 0x3, 0x6) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000140)={0x84, @dev={0xac, 0x14, 0x14, 0x3a}, 0x4e21, 0x3, 'ovf\x00', 0x1d, 0x80002, 0x64}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x5, 0x15}, {@dev={0xac, 0x14, 0x14, 0x50}, 0x4e21, 0x1, 0xcd, 0x4}}, 0x44) sendmsg$sock(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.752592972s ago: executing program 4 (id=158): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0) 2.652539105s ago: executing program 4 (id=159): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, &(0x7f0000001b00)='comm\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) pwritev(r5, &(0x7f0000000740)=[{&(0x7f0000000200)='3', 0x1}], 0x1, 0x800, 0x0) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@multicast2, @multicast1, 0x1, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x0, 0x0, 0x7}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x1, "c6cfe6ec8355b5dc4e305886d95f0867070e5a036900", 0x7}, 0x3c) 1.943799412s ago: executing program 2 (id=160): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c783, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x2, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_ACK_FILTER={0x4}]}}]}, 0x44}}, 0x20080800) 1.64809894s ago: executing program 4 (id=161): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000040), 0x100000001, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000000)={0x5, 0x9, 0x1}) dup3(r2, r0, 0x0) 1.521659153s ago: executing program 4 (id=162): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb0}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d86dd6266b5efb88a2c87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) 1.521334153s ago: executing program 2 (id=163): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x1, 0xa}}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, 0x2, @in=@empty}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_lifetime={0x4, 0x4}]}, 0x58}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x40}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fefdffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b70500002a0000006a0a00fe00000000850000001a000000b7000000592000009500000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) socketpair$unix(0x1, 0x2, 0x0, 0x0) mlockall(0x7) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_read_part_table(0x5c6, &(0x7f0000000bc0)="$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") 31.921149ms ago: executing program 0 (id=164): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x1, 0xa}}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, 0x2, @in=@empty}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_lifetime={0x4, 0x4}]}, 0x58}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x40}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fefdffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b70500002a0000006a0a00fe00000000850000001a000000b7000000592000009500000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) socketpair$unix(0x1, 0x2, 0x0, 0x0) mlockall(0x7) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000718000/0x2000)=nil) syz_read_part_table(0x5c6, &(0x7f0000000bc0)="$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") socket(0x10, 0x3, 0x0) 0s ago: executing program 4 (id=165): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc0046209, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xb, 0x0, &(0x7f0000000100)=""/11}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.25' (ED25519) to the list of known hosts. [ 61.529878][ T4171] cgroup: Unknown subsys name 'net' [ 61.665609][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.166931][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.313279][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 65.342196][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 65.385912][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 65.431545][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 65.496326][ T4202] chnl_net:caif_netlink_parms(): no params data found [ 65.555734][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.563739][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.572700][ T4187] device bridge_slave_0 entered promiscuous mode [ 65.588188][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.596388][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.604899][ T4187] device bridge_slave_1 entered promiscuous mode [ 65.631897][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.639394][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.647572][ T4188] device bridge_slave_0 entered promiscuous mode [ 65.662075][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.669374][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.677977][ T4188] device bridge_slave_1 entered promiscuous mode [ 65.719303][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.726448][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.734984][ T4186] device bridge_slave_0 entered promiscuous mode [ 65.750409][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.757524][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.766087][ T4190] device bridge_slave_0 entered promiscuous mode [ 65.779904][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.797148][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.804428][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.813013][ T4186] device bridge_slave_1 entered promiscuous mode [ 65.820429][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.827522][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.836307][ T4190] device bridge_slave_1 entered promiscuous mode [ 65.851507][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.869879][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.887702][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.936846][ T4187] team0: Port device team_slave_0 added [ 65.943027][ T4202] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.950435][ T4202] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.958666][ T4202] device bridge_slave_0 entered promiscuous mode [ 65.973963][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.985713][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.996820][ T4187] team0: Port device team_slave_1 added [ 66.003014][ T4202] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.010413][ T4202] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.018551][ T4202] device bridge_slave_1 entered promiscuous mode [ 66.027870][ T4188] team0: Port device team_slave_0 added [ 66.035877][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.047615][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.076819][ T4188] team0: Port device team_slave_1 added [ 66.125700][ T4190] team0: Port device team_slave_0 added [ 66.132930][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.140137][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.166132][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.180008][ T4186] team0: Port device team_slave_0 added [ 66.186445][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.195756][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.221978][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.235111][ T4202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.254017][ T4190] team0: Port device team_slave_1 added [ 66.261695][ T4186] team0: Port device team_slave_1 added [ 66.280610][ T4202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.298027][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.305130][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.331203][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.358369][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.365576][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.392267][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.418931][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.425934][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.452404][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.472770][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.481053][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.507348][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.521372][ T4202] team0: Port device team_slave_0 added [ 66.538973][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.545969][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.571994][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.584891][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.591925][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.617968][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.635621][ T4202] team0: Port device team_slave_1 added [ 66.667759][ T4202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.675212][ T4202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.701564][ T4202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.738360][ T4187] device hsr_slave_0 entered promiscuous mode [ 66.745323][ T4187] device hsr_slave_1 entered promiscuous mode [ 66.761932][ T4202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.769085][ T4202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.795417][ T4202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.811026][ T4188] device hsr_slave_0 entered promiscuous mode [ 66.817899][ T4188] device hsr_slave_1 entered promiscuous mode [ 66.824741][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.832673][ T4188] Cannot create hsr debugfs directory [ 66.851521][ T4190] device hsr_slave_0 entered promiscuous mode [ 66.858429][ T4190] device hsr_slave_1 entered promiscuous mode [ 66.865161][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.872870][ T4190] Cannot create hsr debugfs directory [ 66.916252][ T4186] device hsr_slave_0 entered promiscuous mode [ 66.923112][ T4186] device hsr_slave_1 entered promiscuous mode [ 66.930267][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.937856][ T4186] Cannot create hsr debugfs directory [ 67.010001][ T4194] Bluetooth: hci3: command 0x0409 tx timeout [ 67.016241][ T4194] Bluetooth: hci2: command 0x0409 tx timeout [ 67.025503][ T4194] Bluetooth: hci1: command 0x0409 tx timeout [ 67.042292][ T4194] Bluetooth: hci0: command 0x0409 tx timeout [ 67.049197][ T4194] Bluetooth: hci4: command 0x0409 tx timeout [ 67.064532][ T4202] device hsr_slave_0 entered promiscuous mode [ 67.071310][ T4202] device hsr_slave_1 entered promiscuous mode [ 67.078023][ T4202] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.085966][ T4202] Cannot create hsr debugfs directory [ 67.358690][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.369830][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.380462][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.396158][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.446345][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.469464][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.491355][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.511256][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.550194][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.560769][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.595271][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.605757][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.635830][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.676471][ T4202] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.692514][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.704766][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.728924][ T4202] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.738691][ T4202] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.761387][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.768293][ T4202] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.815100][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.824270][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.834066][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.841434][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.850779][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.861700][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.870491][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.877585][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.886815][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.897863][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.926605][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.940053][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.959849][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.970888][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.979975][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.990224][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.000737][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.011364][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.020301][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.034944][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.043071][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.051597][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.070530][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.079657][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.093704][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.109709][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.121967][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.136014][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.144914][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.154928][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.164100][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.173293][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.195201][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.230636][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.247323][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.256493][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.272720][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.282233][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.289395][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.307250][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.356032][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.367982][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.383572][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.390761][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.401195][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.415147][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.424200][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.431353][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.440709][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.449757][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.458368][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.467154][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.474287][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.482469][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.491497][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.501019][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.509915][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.518501][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.526796][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.550555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.560830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.570455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.585093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.615233][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.624013][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.633086][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.642886][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.652103][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.662428][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.677873][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.695158][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.711750][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.722790][ T4202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.733843][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.741815][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.749911][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.758334][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.767427][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.778497][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.815007][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.826357][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.840471][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.849904][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.861392][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.871259][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.896304][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.907124][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.935175][ T4188] device veth0_vlan entered promiscuous mode [ 68.952290][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.975760][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.984872][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.000828][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.030989][ T4202] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.042406][ T4188] device veth1_vlan entered promiscuous mode [ 69.089151][ T4233] Bluetooth: hci4: command 0x041b tx timeout [ 69.098566][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.101310][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 69.123111][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.132737][ T23] Bluetooth: hci1: command 0x041b tx timeout [ 69.134295][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.148906][ T23] Bluetooth: hci2: command 0x041b tx timeout [ 69.159022][ T23] Bluetooth: hci3: command 0x041b tx timeout [ 69.170312][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.186174][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.194939][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.202102][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.211727][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.221651][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.232047][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.239207][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.269575][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.285081][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.296956][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.318336][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.341816][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.349505][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.357057][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.368147][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.377397][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.386324][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.394585][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.404846][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.414410][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.423527][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.432752][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.441657][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.450674][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.457771][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.465920][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.474972][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.483913][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.491058][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.501477][ T4188] device veth0_macvtap entered promiscuous mode [ 69.513635][ T4188] device veth1_macvtap entered promiscuous mode [ 69.526272][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.535882][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.544652][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.554224][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.564071][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.598588][ T4202] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.609848][ T4202] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.628258][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.638133][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.646930][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.657729][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.676573][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.687706][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.704269][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.715617][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.727673][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.737590][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.750670][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.758478][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.767213][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.789199][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.804216][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.826135][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.863945][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.877543][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.896430][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.907845][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.923955][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.935495][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.944442][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.953889][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.966401][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.002660][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.014612][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.025904][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.035925][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.050667][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.060526][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.069345][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.078069][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.100897][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.121600][ T4202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.131462][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.142258][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.151216][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.158662][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.176336][ T4186] device veth0_vlan entered promiscuous mode [ 70.238148][ T4186] device veth1_vlan entered promiscuous mode [ 70.255663][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.265484][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.289562][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.380194][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.389499][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.401106][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.416789][ T4186] device veth0_macvtap entered promiscuous mode [ 70.427825][ T4202] device veth0_vlan entered promiscuous mode [ 70.450161][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.458385][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.467267][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.477620][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.486805][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.496235][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.510526][ T4186] device veth1_macvtap entered promiscuous mode [ 70.542280][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.570088][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.586460][ T1465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.599595][ T1465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.615569][ T4202] device veth1_vlan entered promiscuous mode [ 70.651867][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.665210][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.677210][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.686081][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.696295][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.705052][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.715008][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.724448][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.734118][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.742677][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.752449][ T4187] device veth0_vlan entered promiscuous mode [ 70.763051][ T1465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.779898][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.791896][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.802218][ T1465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.811412][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.827485][ T4187] device veth1_vlan entered promiscuous mode [ 70.837012][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.850120][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.858284][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.867985][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.877616][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.887683][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.900230][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.909941][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.925895][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.935883][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.945985][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.976008][ T4202] device veth0_macvtap entered promiscuous mode [ 71.019514][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.028530][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.044944][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.061804][ T4267] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.085890][ T4187] device veth0_macvtap entered promiscuous mode [ 71.097909][ T4202] device veth1_macvtap entered promiscuous mode [ 71.123010][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.137698][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.147553][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.163322][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.172342][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 71.179566][ T4236] Bluetooth: hci3: command 0x040f tx timeout [ 71.186098][ T4236] Bluetooth: hci2: command 0x040f tx timeout [ 71.192743][ T4236] Bluetooth: hci1: command 0x040f tx timeout [ 71.195113][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.207023][ T4236] Bluetooth: hci0: command 0x040f tx timeout [ 71.228588][ T4187] device veth1_macvtap entered promiscuous mode [ 71.247758][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.258377][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.282727][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.300695][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.311588][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.326603][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.339517][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.350903][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.353114][ T4202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.357477][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.403932][ T4271] loop1: detected capacity change from 0 to 256 [ 71.416494][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.427350][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.439338][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.451038][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.461601][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.473929][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.510572][ T4202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.544456][ T4190] device veth0_vlan entered promiscuous mode [ 71.554321][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.565192][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.581136][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.601362][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.620472][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.631059][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.641892][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.662251][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.672484][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.684788][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.696714][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.707542][ T4202] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.717859][ T4202] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.727165][ T4202] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.737135][ T4202] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.741382][ T4273] loop1: detected capacity change from 0 to 256 [ 71.772232][ T4190] device veth1_vlan entered promiscuous mode [ 71.780835][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.791664][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.800503][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.809748][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.871185][ T1465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.890650][ T1465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.914234][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.938617][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.952694][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.963572][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.982760][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.999935][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.013127][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.026714][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.035982][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.046352][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.056588][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.067907][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.076861][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.086267][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.163660][ T1465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.173073][ T1465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.204722][ T4190] device veth0_macvtap entered promiscuous mode [ 72.236732][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.252324][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.266297][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.285577][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.462872][ T4190] device veth1_macvtap entered promiscuous mode [ 72.477878][ T4249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.285352][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.317789][ T4249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.327377][ T2288] Bluetooth: hci0: command 0x0419 tx timeout [ 73.334307][ T2288] Bluetooth: hci1: command 0x0419 tx timeout [ 73.342548][ T2288] Bluetooth: hci2: command 0x0419 tx timeout [ 73.348643][ T2288] Bluetooth: hci3: command 0x0419 tx timeout [ 73.354775][ T2288] Bluetooth: hci4: command 0x0419 tx timeout [ 73.421390][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.443263][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.505401][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.525006][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.544348][ T4284] loop1: detected capacity change from 0 to 512 [ 73.576901][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.585374][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.622924][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.636347][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.653269][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.669241][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.685979][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.705414][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.732508][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.745488][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.756341][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.770027][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.806291][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.840880][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.860660][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.872034][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.883347][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.897331][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.916340][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.927150][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.937945][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.950978][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.964053][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.975870][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.002472][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.021301][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.030266][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.060817][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.088612][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.106345][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.116653][ T4296] ip_tables: iptables: counters copy to user failed while replacing table [ 74.131619][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.147456][ T4296] ip_tables: iptables: counters copy to user failed while replacing table [ 74.149458][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.167371][ T4296] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 74.398984][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 74.738041][ T4296] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.746490][ T4296] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.769585][ T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.949067][ T7] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 74.966289][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.989192][ T7] usb 3-1: Product: syz [ 74.993818][ T7] usb 3-1: Manufacturer: syz [ 75.009314][ T7] usb 3-1: SerialNumber: syz [ 75.828934][ T4307] loop1: detected capacity change from 0 to 256 [ 75.928184][ T4307] exFAT-fs (loop1): Invalid boot checksum (boot checksum : 0x11190001, checksum : 0x1119abd0) [ 75.938883][ T4307] exFAT-fs (loop1): invalid boot region [ 75.944531][ T4307] exFAT-fs (loop1): failed to recognize exfat type [ 77.008618][ T4296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.092069][ T4296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.268737][ C0] sched: RT throttling activated [ 77.362612][ T4296] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.371879][ T4296] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.382052][ T4296] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.391318][ T4296] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.542484][ T4296] syz.0.11 (4296) used greatest stack depth: 20176 bytes left [ 77.554034][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.568470][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.630670][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.642070][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.685517][ T4329] ip_tables: iptables: counters copy to user failed while replacing table [ 77.841247][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.886795][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.890318][ T7] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 77.906700][ T7] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 77.915249][ T7] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 78.138934][ T7] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 78.286906][ T4334] loop4: detected capacity change from 0 to 512 [ 78.716845][ T4334] EXT4-fs error (device loop4): ext4_orphan_get:1410: inode #15: comm syz.4.5: iget: bad i_size value: 38620345925642 [ 78.742929][ T4334] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.5: couldn't read orphan inode 15 (err -117) [ 78.756651][ T4334] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 79.011484][ T4334] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.5: bg 0: block 5: invalid block bitmap [ 79.260296][ T7] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 79.277365][ T7] usb 3-1: USB disconnect, device number 2 [ 79.303722][ T4334] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 79.316285][ T4334] EXT4-fs (loop4): This should not happen!! Data will be lost [ 79.316285][ T4334] [ 79.326099][ T4334] EXT4-fs (loop4): Total free blocks count 0 [ 79.332181][ T4334] EXT4-fs (loop4): Free/Dirty block details [ 79.334739][ T7] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 79.338245][ T4334] EXT4-fs (loop4): free_blocks=0 [ 79.352462][ T4334] EXT4-fs (loop4): dirty_blocks=2 [ 79.357529][ T4334] EXT4-fs (loop4): Block reservation details [ 79.363597][ T4334] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 79.717068][ T4342] loop1: detected capacity change from 0 to 8192 [ 79.971106][ T4349] syz.2.18 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 81.510592][ T4357] loop2: detected capacity change from 0 to 512 [ 81.522024][ T4358] loop3: detected capacity change from 0 to 1024 [ 82.875916][ T4363] loop0: detected capacity change from 0 to 2048 [ 82.971503][ T26] audit: type=1326 audit(1791225223.580:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4351 comm="syz.0.21" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15cd3fd199 code=0x7ffc0000 [ 83.708952][ T4363] loop0: p1 < > p4 [ 83.708952][ T4363] p4: [ 83.730630][ T4363] loop0: p4 size 722688 extends beyond EOD, truncated [ 83.973652][ T4357] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 84.050589][ T4358] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,bsddf,quota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,lazytime,,errors=continue. Quota mode: writeback. [ 84.278094][ T26] audit: type=1326 audit(1791225223.580:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4351 comm="syz.0.21" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15cd3fd199 code=0x7ffc0000 [ 84.352688][ T26] audit: type=1326 audit(1791225223.590:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4351 comm="syz.0.21" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f15cd3fd199 code=0x7ffc0000 [ 84.412760][ T3558] loop0: p1 < > p4 [ 84.412760][ T3558] p4: [ 84.598044][ T3558] loop0: p4 size 722688 extends beyond EOD, truncated [ 84.619426][ T4357] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.647162][ T4372] Illegal XDP return value 4294967262, expect packet loss! [ 84.669479][ T26] audit: type=1326 audit(1791225223.590:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4351 comm="syz.0.21" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15cd3fd199 code=0x7ffc0000 [ 84.736564][ T26] audit: type=1326 audit(1791225223.590:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4351 comm="syz.0.21" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15cd3fd199 code=0x7ffc0000 [ 84.760873][ T26] audit: type=1326 audit(1791225223.590:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4351 comm="syz.0.21" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f15cd3fd199 code=0x7ffc0000 [ 84.794827][ T26] audit: type=1326 audit(1791225223.870:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4351 comm="syz.0.21" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15cd3fd199 code=0x7ffc0000 [ 84.844882][ T26] audit: type=1326 audit(1791225223.870:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4351 comm="syz.0.21" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15cd3fd199 code=0x7ffc0000 [ 84.962273][ T26] audit: type=1326 audit(1791225224.160:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4351 comm="syz.0.21" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f15cd3fd199 code=0x7ffc0000 [ 84.988653][ T4375] loop4: detected capacity change from 0 to 512 [ 84.996768][ T26] audit: type=1326 audit(1791225224.160:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4351 comm="syz.0.21" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15cd3fd199 code=0x7ffc0000 [ 85.114100][ T4375] EXT4-fs (loop4): Ignoring removed nobh option [ 85.269944][ T4369] udevd[4369]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 85.570352][ T4375] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.19: invalid indirect mapped block 256 (level 2) [ 85.645841][ T4390] udevd[4390]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 85.714731][ T4375] EXT4-fs (loop4): 2 truncates cleaned up [ 85.759052][ T4375] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 85.808476][ T4390] udevd[4390]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 86.051160][ T4189] udevd[4189]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 86.080964][ T4398] loop3: detected capacity change from 0 to 128 [ 87.125784][ T1344] cfg80211: failed to load regulatory.db [ 88.102532][ T26] kauditd_printk_skb: 28 callbacks suppressed [ 88.102705][ T26] audit: type=1326 audit(1791225229.500:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.1.39" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293173a199 code=0x7ffc0000 [ 88.702392][ T26] audit: type=1326 audit(1791225229.500:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.1.39" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293173a199 code=0x7ffc0000 [ 88.869548][ T26] audit: type=1326 audit(1791225229.510:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.1.39" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f293173a199 code=0x7ffc0000 [ 89.044343][ T4442] loop4: detected capacity change from 0 to 256 [ 89.058849][ T26] audit: type=1326 audit(1791225229.510:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.1.39" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293173a199 code=0x7ffc0000 [ 89.199987][ T4442] ======================================================= [ 89.199987][ T4442] WARNING: The mand mount option has been deprecated and [ 89.199987][ T4442] and is ignored by this kernel. Remove the mand [ 89.199987][ T4442] option from the mount to silence this warning. [ 89.199987][ T4442] ======================================================= [ 89.271498][ T26] audit: type=1326 audit(1791225229.510:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.1.39" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293173a199 code=0x7ffc0000 [ 89.295964][ T26] audit: type=1326 audit(1791225229.510:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.1.39" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f293173a199 code=0x7ffc0000 [ 89.475347][ T26] audit: type=1326 audit(1791225229.810:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.1.39" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293173a199 code=0x7ffc0000 [ 89.565380][ T4442] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 89.688964][ T26] audit: type=1326 audit(1791225229.810:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.1.39" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293173a199 code=0x7ffc0000 [ 90.221285][ T26] audit: type=1326 audit(1791225229.870:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.1.39" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f293173a199 code=0x7ffc0000 [ 90.515788][ T26] audit: type=1326 audit(1791225229.870:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.1.39" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293173a199 code=0x7ffc0000 [ 90.894900][ T4460] loop3: detected capacity change from 0 to 1024 [ 91.481545][ T4460] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 92.261456][ T4460] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.382208][ T4458] loop1: detected capacity change from 0 to 8192 [ 92.813115][ T4486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.57'. [ 92.894546][ T4485] device syzkaller1 entered promiscuous mode [ 93.802102][ T4497] loop4: detected capacity change from 0 to 512 [ 95.219973][ T4498] sctp: failed to load transform for md5: -2 [ 95.336219][ T4497] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 96.036899][ T4528] loop2: detected capacity change from 0 to 2048 [ 96.317635][ T4534] Bluetooth: hci5: Frame reassembly failed (-84) [ 96.699185][ T4535] sctp: failed to load transform for md5: -2 [ 96.890908][ T4528] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 96.909024][ T4528] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.957301][ T4547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70'. [ 98.005207][ T4564] syz.2.73 uses obsolete (PF_INET,SOCK_PACKET) [ 98.141007][ T4567] FAULT_INJECTION: forcing a failure. [ 98.141007][ T4567] name failslab, interval 1, probability 0, space 0, times 1 [ 98.172243][ T4567] CPU: 0 PID: 4567 Comm: syz.0.76 Not tainted syzkaller #0 [ 98.179523][ T4567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 98.189632][ T4567] Call Trace: [ 98.192956][ T4567] [ 98.195929][ T4567] dump_stack_lvl+0x188/0x250 [ 98.200673][ T4567] ? show_regs_print_info+0x20/0x20 [ 98.205912][ T4567] ? load_image+0x410/0x410 [ 98.210461][ T4567] ? __lock_acquire+0x7d40/0x7d40 [ 98.215566][ T4567] should_fail+0x383/0x4b0 [ 98.220041][ T4567] should_failslab+0x5/0x20 [ 98.224582][ T4567] slab_pre_alloc_hook+0x51/0xc0 [ 98.229569][ T4567] __kmalloc+0x6b/0x340 [ 98.233758][ T4567] ? __vb2_queue_alloc+0x133/0x1390 [ 98.238999][ T4567] __vb2_queue_alloc+0x133/0x1390 [ 98.244090][ T4567] vb2_core_create_bufs+0x443/0x8c0 [ 98.249419][ T4567] ? __vb2_queue_alloc+0x1390/0x1390 [ 98.254736][ T4567] ? __mutex_trylock_common+0x15c/0x260 [ 98.260340][ T4567] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 98.266288][ T4567] vb2_create_bufs+0x6c9/0xcd0 [ 98.271119][ T4567] ? vb2_queue_or_prepare_buf+0xe90/0xe90 [ 98.276897][ T4567] ? vb2_verify_memory_type+0x1f8/0x570 [ 98.282496][ T4567] vb2_ioctl_create_bufs+0x449/0x6f0 [ 98.287870][ T4567] v4l_create_bufs+0x1bd/0x330 [ 98.292682][ T4567] __video_do_ioctl+0xa10/0xe40 [ 98.297586][ T4567] ? __lock_acquire+0x7d40/0x7d40 [ 98.302702][ T4567] ? video_ioctl2+0x30/0x30 [ 98.307260][ T4567] ? __might_fault+0xb3/0x110 [ 98.311985][ T4567] ? _copy_from_user+0x111/0x170 [ 98.316974][ T4567] video_usercopy+0x930/0xf10 [ 98.321714][ T4567] ? video_ioctl2+0x30/0x30 [ 98.326277][ T4567] ? v4l_printk_ioctl+0x130/0x130 [ 98.331373][ T4567] v4l2_ioctl+0x183/0x1d0 [ 98.335747][ T4567] ? v4l2_poll+0x2b0/0x2b0 [ 98.340209][ T4567] __se_sys_ioctl+0xfa/0x170 [ 98.344890][ T4567] do_syscall_64+0x4c/0xa0 [ 98.349352][ T4567] ? clear_bhb_loop+0x30/0x80 [ 98.354073][ T4567] ? clear_bhb_loop+0x30/0x80 [ 98.358798][ T4567] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.364751][ T4567] RIP: 0033:0x7f15cd3fd199 [ 98.369208][ T4567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.388849][ T4567] RSP: 002b:00007f15cb655028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 98.397311][ T4567] RAX: ffffffffffffffda RBX: 00007f15cd684fa0 RCX: 00007f15cd3fd199 [ 98.405330][ T4567] RDX: 0000200000000140 RSI: 00000000c100565c RDI: 0000000000000004 [ 98.413346][ T4567] RBP: 00007f15cd4940b8 R08: 0000000000000000 R09: 0000000000000000 [ 98.421360][ T4567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.429377][ T4567] R13: 00007f15cd685038 R14: 00007f15cd684fa0 R15: 00007fffd634f888 [ 98.437413][ T4567] [ 98.805410][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 98.805429][ T26] audit: type=1326 audit(1791225240.730:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.3.78" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45cf27199 code=0x7ffc0000 [ 98.922711][ T4578] loop2: detected capacity change from 0 to 512 [ 98.968795][ T26] audit: type=1326 audit(1791225240.740:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.3.78" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45cf27199 code=0x7ffc0000 [ 99.088853][ T26] audit: type=1326 audit(1791225240.740:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.3.78" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa45cf27199 code=0x7ffc0000 [ 99.146144][ T4578] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 99.175712][ T4578] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.222679][ T26] audit: type=1326 audit(1791225240.740:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.3.78" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45cf27199 code=0x7ffc0000 [ 99.251368][ T26] audit: type=1326 audit(1791225240.740:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.3.78" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45cf27199 code=0x7ffc0000 [ 99.296244][ T26] audit: type=1326 audit(1791225240.740:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.3.78" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7fa45cf27199 code=0x7ffc0000 [ 99.821517][ T4578] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 99.851925][ T26] audit: type=1326 audit(1791225240.850:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.3.78" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45cf27199 code=0x7ffc0000 [ 99.965524][ T4578] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 99.988161][ T26] audit: type=1326 audit(1791225240.850:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.3.78" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45cf27199 code=0x7ffc0000 [ 100.013897][ T4578] EXT4-fs (loop2): This should not happen!! Data will be lost [ 100.013897][ T4578] [ 100.023693][ T4578] EXT4-fs (loop2): Total free blocks count 0 [ 100.030643][ T4578] EXT4-fs (loop2): Free/Dirty block details [ 100.036610][ T4578] EXT4-fs (loop2): free_blocks=65280 [ 100.042034][ T4578] EXT4-fs (loop2): dirty_blocks=33 [ 100.047190][ T4578] EXT4-fs (loop2): Block reservation details [ 100.053406][ T4578] EXT4-fs (loop2): i_reserved_data_blocks=33 [ 100.115596][ T4597] binder: 4596:4597 ioctl c0306201 2000000002c0 returned -14 [ 100.262024][ T4602] netlink: 44 bytes leftover after parsing attributes in process `syz.4.86'. [ 100.689892][ T4615] loop2: detected capacity change from 0 to 2048 [ 100.911076][ T4615] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 100.972483][ T4615] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 101.745791][ T4634] loop0: detected capacity change from 0 to 2048 [ 102.271032][ T4634] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 102.417236][ T4634] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.574924][ T4642] loop2: detected capacity change from 0 to 512 [ 102.626668][ T4642] EXT4-fs (loop2): Ignoring removed nobh option [ 102.659715][ T4642] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 102.720300][ T4642] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 102.736440][ T4642] EXT4-fs (loop2): orphan cleanup on readonly fs [ 102.779525][ T4642] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.100: attempt to clear invalid blocks 1024 len 1 [ 102.804054][ T4642] EXT4-fs (loop2): Remounting filesystem read-only [ 102.812157][ T4646] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 102.823965][ T4642] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.100: bg 0: block 361: padding at end of block bitmap is not set [ 102.869076][ T4642] EXT4-fs (loop2): Remounting filesystem read-only [ 102.883159][ T4642] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 102.916742][ T4642] EXT4-fs (loop2): Remounting filesystem read-only [ 102.938309][ T4649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.103'. [ 102.949784][ T4642] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.100: invalid indirect mapped block 1811939328 (level 0) [ 102.976501][ T4642] EXT4-fs (loop2): Remounting filesystem read-only [ 102.986685][ T4642] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.100: invalid indirect mapped block 2185560079 (level 1) [ 103.009383][ T4642] EXT4-fs (loop2): Remounting filesystem read-only [ 103.016382][ T4642] EXT4-fs (loop2): 1 truncate cleaned up [ 103.028317][ T4642] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,nobh,errors=remount-ro,max_dir_size_kb=0x00000000000000ff. Quota mode: none. [ 103.146879][ T4655] loop4: detected capacity change from 0 to 512 [ 103.191445][ T4657] loop1: detected capacity change from 0 to 512 [ 103.478630][ T4660] capability: warning: `syz.4.105' uses deprecated v2 capabilities in a way that may be insecure [ 103.513920][ T4660] loop4: detected capacity change from 0 to 256 [ 103.656952][ T4660] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 103.861654][ T4657] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 104.149267][ T4657] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.355304][ T4657] EXT4-fs (loop1): shut down requested (0) [ 104.478034][ T4666] loop2: detected capacity change from 0 to 1024 [ 104.555743][ T4666] EXT4-fs (loop2): Unrecognized mount option "obj_user=" or missing value [ 104.655057][ T4199] Bluetooth: unknown link type 130 [ 106.057960][ T4692] overlayfs: failed to get inode (-116) [ 106.161815][ T4692] overlayfs: failed to get inode (-116) [ 106.756186][ T4317] Bluetooth: hci4: command 0x0409 tx timeout [ 106.797627][ T4700] binder: 4699:4700 ioctl c0306201 0 returned -14 [ 106.822736][ T4703] loop0: detected capacity change from 0 to 512 [ 106.831497][ T4706] loop3: detected capacity change from 0 to 512 [ 106.862678][ T4707] loop4: detected capacity change from 0 to 2048 [ 106.952183][ T4390] loop4: p1 < > p4 [ 106.952183][ T4390] p4: [ 106.996737][ T4706] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.118: inode #1: comm syz.3.118: iget: illegal inode # [ 107.002072][ T4703] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 107.013393][ T4390] loop4: p4 size 722688 extends beyond EOD, [ 107.021402][ T4703] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.125981][ T4390] truncated [ 107.158462][ T4706] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.118: error while reading EA inode 1 err=-117 [ 107.191646][ T4706] EXT4-fs (loop3): 1 orphan inode deleted [ 107.236026][ T4706] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000fff,resgid=0x0000000000000000,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,barrier,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 107.279229][ T4707] loop4: p1 < > p4 [ 107.279229][ T4707] p4: [ 107.304804][ T4707] loop4: p4 size 722688 extends beyond EOD, truncated [ 108.414708][ T4200] udevd[4200]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 108.416502][ T4390] udevd[4390]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 108.541923][ T4189] udevd[4189]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 108.561981][ T4200] udevd[4200]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 108.604829][ T4738] binder: 4737:4738 ioctl c0306201 2000000002c0 returned -14 [ 108.815703][ T4750] tmpfs: Bad value for 'mpol' [ 109.067699][ T4762] loop1: detected capacity change from 0 to 2048 [ 109.152848][ T4200] loop1: p1 < > p4 [ 109.152848][ T4200] p4: [ 109.173300][ T4200] loop1: p4 size 722688 extends beyond EOD, truncated [ 109.193859][ T4762] loop1: p1 < > p4 [ 109.193859][ T4762] p4: [ 109.210777][ T4762] loop1: p4 size 722688 extends beyond EOD, truncated [ 109.370353][ T4740] crypto_alloc_aead failed rc=-4 [ 111.143947][ T4200] udevd[4200]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 111.163662][ T4189] udevd[4189]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 111.286012][ T4200] udevd[4200]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 111.322167][ T4189] udevd[4189]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 111.362273][ T4791] loop2: detected capacity change from 0 to 256 [ 112.423084][ T4805] binder: 4803:4805 ioctl c0306201 200000000280 returned -14 [ 112.974298][ T4813] loop2: detected capacity change from 0 to 256 [ 112.993550][ T4811] loop4: detected capacity change from 0 to 2048 [ 113.062746][ T4811] loop4: p1 < > p4 [ 113.062746][ T4811] p4: [ 113.072407][ T4811] loop4: p4 size 722688 extends beyond EOD, truncated [ 113.285955][ T4825] process 'syz.4.152' launched '/dev/fd/7' with NULL argv: empty string added [ 113.307668][ T4827] loop2: detected capacity change from 0 to 512 [ 113.372716][ T4827] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 113.406354][ T4827] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 113.450015][ T4827] EXT4-fs (loop2): 1 truncate cleaned up [ 113.464541][ T4827] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 114.103936][ T4845] FAULT_INJECTION: forcing a failure. [ 114.103936][ T4845] name failslab, interval 1, probability 0, space 0, times 0 [ 114.116716][ T4845] CPU: 1 PID: 4845 Comm: syz.4.159 Not tainted syzkaller #0 [ 114.124044][ T4845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 114.134146][ T4845] Call Trace: [ 114.137458][ T4845] [ 114.140416][ T4845] dump_stack_lvl+0x188/0x250 [ 114.145134][ T4845] ? show_regs_print_info+0x20/0x20 [ 114.150360][ T4845] ? load_image+0x410/0x410 [ 114.154901][ T4845] ? __might_sleep+0xf0/0xf0 [ 114.159520][ T4845] ? __lock_acquire+0x7d40/0x7d40 [ 114.164619][ T4845] should_fail+0x383/0x4b0 [ 114.169081][ T4845] should_failslab+0x5/0x20 [ 114.173618][ T4845] slab_pre_alloc_hook+0x51/0xc0 [ 114.178586][ T4845] ? ipmr_mfc_add+0x8df/0x2bd0 [ 114.183402][ T4845] kmem_cache_alloc+0x3d/0x280 [ 114.188209][ T4845] ipmr_mfc_add+0x8df/0x2bd0 [ 114.192844][ T4845] ? lock_chain_count+0x20/0x20 [ 114.197732][ T4845] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 114.202712][ T4845] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 114.208383][ T4845] ? lockdep_hardirqs_on+0x94/0x140 [ 114.213616][ T4845] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 114.219307][ T4845] ? ip_mroute_setsockopt+0xa36/0x1230 [ 114.224833][ T4845] ip_mroute_setsockopt+0xecd/0x1230 [ 114.230164][ T4845] ? ipmr_rule_default+0x70/0x70 [ 114.235170][ T4845] ? ip_setsockopt+0x549/0x31e0 [ 114.240066][ T4845] ip_setsockopt+0x568/0x31e0 [ 114.244809][ T4845] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 114.250216][ T4845] ? aa_sk_perm+0x7dc/0x910 [ 114.254759][ T4845] ? aa_af_perm+0x340/0x340 [ 114.259297][ T4845] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 114.264970][ T4845] ? aa_sock_opt_perm+0x74/0x100 [ 114.269941][ T4845] ? sock_common_setsockopt+0x32/0xb0 [ 114.275344][ T4845] ? raw_setsockopt+0xc2/0x170 [ 114.280147][ T4845] ? sock_common_recvmsg+0x1c0/0x1c0 [ 114.285464][ T4845] __sys_setsockopt+0x2bf/0x3d0 [ 114.290359][ T4845] __x64_sys_setsockopt+0xb1/0xc0 [ 114.295421][ T4845] do_syscall_64+0x4c/0xa0 [ 114.299872][ T4845] ? clear_bhb_loop+0x30/0x80 [ 114.304586][ T4845] ? clear_bhb_loop+0x30/0x80 [ 114.309322][ T4845] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 114.315254][ T4845] RIP: 0033:0x7f11a9aec199 [ 114.319721][ T4845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.339356][ T4845] RSP: 002b:00007f11a7d02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 114.347806][ T4845] RAX: ffffffffffffffda RBX: 00007f11a9d74180 RCX: 00007f11a9aec199 [ 114.355828][ T4845] RDX: 00000000000000cc RSI: 0000000000000000 RDI: 0000000000000003 [ 114.363832][ T4845] RBP: 00007f11a9b830b8 R08: 000000000000003c R09: 0000000000000000 [ 114.371833][ T4845] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 114.379952][ T4845] R13: 00007f11a9d74218 R14: 00007f11a9d74180 R15: 00007ffe465ea848 [ 114.387969][ T4845] [ 114.816128][ T4850] netlink: 'syz.2.160': attribute type 16 has an invalid length. [ 116.013754][ T4860] loop2: detected capacity change from 0 to 2048 [ 116.028655][ T26] audit: type=1326 audit(1791225257.140:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4854 comm="syz.2.163" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620c77e199 code=0x7ffc0000 [ 116.078744][ T4820] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 116.251426][ T4860] loop2: p1 < > p4 [ 116.251426][ T4860] p4: [ 116.270875][ T4860] loop2: p4 size 722688 extends beyond EOD, truncated [ 116.320546][ T4814] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 116.382878][ T3558] loop2: p1 < > p4 [ 116.382878][ T3558] p4: [ 116.435353][ T4814] [ 116.437745][ T4814] ====================================================== [ 116.444777][ T4814] WARNING: possible circular locking dependency detected [ 116.451824][ T4814] syzkaller #0 Not tainted [ 116.456252][ T4814] ------------------------------------------------------ [ 116.463281][ T4814] syz.1.151/4814 is trying to acquire lock: [ 116.469197][ T4814] ffffffff8cb64048 (nci_mutex){+.+.}-{3:3}, at: virtual_nci_close+0x13/0x40 [ 116.477944][ T4814] [ 116.477944][ T4814] but task is already holding lock: [ 116.485318][ T4814] ffff8880602ec350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_close_device+0x102/0x600 [ 116.494694][ T4814] [ 116.494694][ T4814] which lock already depends on the new lock. [ 116.494694][ T4814] [ 116.505112][ T4814] [ 116.505112][ T4814] the existing dependency chain (in reverse order) is: [ 116.514155][ T4814] [ 116.514155][ T4814] -> #3 (&ndev->req_lock){+.+.}-{3:3}: [ 116.521848][ T4814] __mutex_lock_common+0x1e5/0x2400 [ 116.527595][ T4814] mutex_lock_nested+0x17/0x20 [ 116.532908][ T4814] nci_start_poll+0x8de/0xd10 [ 116.538141][ T4814] nfc_start_poll+0x141/0x2c0 [ 116.543364][ T4814] nfc_genl_start_poll+0x1d7/0x340 [ 116.549020][ T4814] genl_rcv_msg+0xd0b/0xfa0 [ 116.554080][ T4814] netlink_rcv_skb+0x1e9/0x430 [ 116.559386][ T4814] genl_rcv+0x24/0x40 [ 116.563914][ T4814] netlink_unicast+0x78f/0x940 [ 116.569226][ T4814] netlink_sendmsg+0x8ba/0xbe0 [ 116.574538][ T4814] ____sys_sendmsg+0x5be/0x8f0 [ 116.579848][ T4814] ___sys_sendmsg+0x236/0x2e0 [ 116.585072][ T4814] __se_sys_sendmsg+0x1b7/0x2a0 [ 116.590467][ T4814] do_syscall_64+0x4c/0xa0 [ 116.595431][ T4814] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 116.601874][ T4814] [ 116.601874][ T4814] -> #2 (&genl_data->genl_data_mutex){+.+.}-{3:3}: [ 116.610588][ T4814] __mutex_lock_common+0x1e5/0x2400 [ 116.616334][ T4814] mutex_lock_nested+0x17/0x20 [ 116.621663][ T4814] nfc_urelease_event_work+0x120/0x310 [ 116.627667][ T4814] process_one_work+0x867/0xff0 [ 116.633065][ T4814] worker_thread+0xad7/0x12a0 [ 116.638417][ T4814] kthread+0x42e/0x520 [ 116.643130][ T4814] ret_from_fork+0x1f/0x30 [ 116.648092][ T4814] [ 116.648092][ T4814] -> #1 (nfc_devlist_mutex){+.+.}-{3:3}: [ 116.655954][ T4814] __mutex_lock_common+0x1e5/0x2400 [ 116.661697][ T4814] mutex_lock_nested+0x17/0x20 [ 116.667015][ T4814] nfc_register_device+0x38/0x300 [ 116.672587][ T4814] nci_register_device+0x89f/0x9f0 [ 116.678264][ T4814] virtual_ncidev_open+0x55/0xc0 [ 116.683766][ T4814] misc_open+0x31f/0x390 [ 116.688563][ T4814] chrdev_open+0x585/0x5f0 [ 116.693530][ T4814] do_dentry_open+0x7f7/0xf90 [ 116.698744][ T4814] path_openat+0x2718/0x2fb0 [ 116.703876][ T4814] do_filp_open+0x1df/0x400 [ 116.708924][ T4814] do_sys_openat2+0x14b/0x500 [ 116.714139][ T4814] __x64_sys_openat+0x135/0x160 [ 116.719534][ T4814] do_syscall_64+0x4c/0xa0 [ 116.724494][ T4814] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 116.730937][ T4814] [ 116.730937][ T4814] -> #0 (nci_mutex){+.+.}-{3:3}: [ 116.738085][ T4814] __lock_acquire+0x38f7/0x7d40 [ 116.743483][ T4814] lock_acquire+0x19f/0x400 [ 116.748553][ T4814] __mutex_lock_common+0x1e5/0x2400 [ 116.754302][ T4814] mutex_lock_nested+0x17/0x20 [ 116.759609][ T4814] virtual_nci_close+0x13/0x40 [ 116.764924][ T4814] nci_close_device+0x383/0x600 [ 116.770323][ T4814] nci_unregister_device+0x5e/0x250 [ 116.776062][ T4814] virtual_ncidev_close+0x55/0x90 [ 116.781627][ T4814] __fput+0x212/0x8c0 [ 116.786152][ T4814] task_work_run+0x125/0x1a0 [ 116.791285][ T4814] exit_to_user_mode_loop+0x10f/0x130 [ 116.797212][ T4814] exit_to_user_mode_prepare+0xee/0x180 [ 116.803304][ T4814] syscall_exit_to_user_mode+0x16/0x40 [ 116.809308][ T4814] do_syscall_64+0x58/0xa0 [ 116.814270][ T4814] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 116.820714][ T4814] [ 116.820714][ T4814] other info that might help us debug this: [ 116.820714][ T4814] [ 116.830957][ T4814] Chain exists of: [ 116.830957][ T4814] nci_mutex --> &genl_data->genl_data_mutex --> &ndev->req_lock [ 116.830957][ T4814] [ 116.844541][ T4814] Possible unsafe locking scenario: [ 116.844541][ T4814] [ 116.852002][ T4814] CPU0 CPU1 [ 116.857383][ T4814] ---- ---- [ 116.862763][ T4814] lock(&ndev->req_lock); [ 116.867204][ T4814] lock(&genl_data->genl_data_mutex); [ 116.875206][ T4814] lock(&ndev->req_lock); [ 116.882159][ T4814] lock(nci_mutex); [ 116.886072][ T4814] [ 116.886072][ T4814] *** DEADLOCK *** [ 116.886072][ T4814] [ 116.894230][ T4814] 1 lock held by syz.1.151/4814: [ 116.899189][ T4814] #0: ffff8880602ec350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_close_device+0x102/0x600 [ 116.908971][ T4814] [ 116.908971][ T4814] stack backtrace: [ 116.914873][ T4814] CPU: 1 PID: 4814 Comm: syz.1.151 Not tainted syzkaller #0 [ 116.922180][ T4814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 116.932255][ T4814] Call Trace: [ 116.935557][ T4814] [ 116.938510][ T4814] dump_stack_lvl+0x188/0x250 [ 116.943220][ T4814] ? load_image+0x410/0x410 [ 116.947753][ T4814] ? show_regs_print_info+0x20/0x20 [ 116.952989][ T4814] ? print_circular_bug+0x12b/0x1a0 [ 116.958211][ T4814] check_noncircular+0x2f8/0x400 [ 116.963172][ T4814] ? print_deadlock_bug+0x5d0/0x5d0 [ 116.968496][ T4814] ? lockdep_lock+0xf1/0x1f0 [ 116.973120][ T4814] ? mark_lock+0x94/0x320 [ 116.977468][ T4814] ? _find_first_zero_bit+0xd1/0xf0 [ 116.982690][ T4814] __lock_acquire+0x38f7/0x7d40 [ 116.987580][ T4814] ? verify_lock_unused+0x140/0x140 [ 116.992808][ T4814] ? __schedule+0x11cb/0x4350 [ 116.997508][ T4814] ? vprintk_emit+0xc0/0x150 [ 117.002123][ T4814] ? read_lock_is_recursive+0x10/0x10 [ 117.007617][ T4814] lock_acquire+0x19f/0x400 [ 117.012147][ T4814] ? virtual_nci_close+0x13/0x40 [ 117.017133][ T4814] ? __might_sleep+0xf0/0xf0 [ 117.021766][ T4814] ? read_lock_is_recursive+0x10/0x10 [ 117.027175][ T4814] ? preempt_schedule_common+0xa5/0xd0 [ 117.032662][ T4814] ? preempt_schedule+0xbc/0xd0 [ 117.037538][ T4814] __mutex_lock_common+0x1e5/0x2400 [ 117.042760][ T4814] ? virtual_nci_close+0x13/0x40 [ 117.047810][ T4814] ? __irq_work_queue_local+0x12c/0x190 [ 117.053383][ T4814] ? irq_work_queue+0xb8/0x140 [ 117.058178][ T4814] ? __wake_up_klogd+0xd9/0x100 [ 117.063052][ T4814] ? virtual_nci_close+0x13/0x40 [ 117.068022][ T4814] ? mutex_lock_io_nested+0x60/0x60 [ 117.073249][ T4814] ? load_image+0x410/0x410 [ 117.077785][ T4814] ? _raw_spin_unlock_irq+0x1f/0x40 [ 117.083008][ T4814] mutex_lock_nested+0x17/0x20 [ 117.087805][ T4814] virtual_nci_close+0x13/0x40 [ 117.092600][ T4814] nci_close_device+0x383/0x600 [ 117.097517][ T4814] ? kfree+0xef/0x2a0 [ 117.101614][ T4814] ? nci_unregister_device+0x250/0x250 [ 117.107095][ T4814] ? kobject_put+0x41d/0x450 [ 117.111709][ T4814] nci_unregister_device+0x5e/0x250 [ 117.116932][ T4814] ? virtual_ncidev_open+0xc0/0xc0 [ 117.122072][ T4814] virtual_ncidev_close+0x55/0x90 [ 117.127122][ T4814] __fput+0x212/0x8c0 [ 117.131138][ T4814] task_work_run+0x125/0x1a0 [ 117.135756][ T4814] exit_to_user_mode_loop+0x10f/0x130 [ 117.141152][ T4814] exit_to_user_mode_prepare+0xee/0x180 [ 117.146724][ T4814] syscall_exit_to_user_mode+0x16/0x40 [ 117.152207][ T4814] do_syscall_64+0x58/0xa0 [ 117.156663][ T4814] ? clear_bhb_loop+0x30/0x80 [ 117.161365][ T4814] ? clear_bhb_loop+0x30/0x80 [ 117.166066][ T4814] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 117.171983][ T4814] RIP: 0033:0x7f293173a199 [ 117.176420][ T4814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.196049][ T4814] RSP: 002b:00007ffccdeeeca8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 117.204495][ T4814] RAX: 0000000000000000 RBX: 00007f29319c3da0 RCX: 00007f293173a199 [ 117.212491][ T4814] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 117.220488][ T4814] RBP: 00007f29319c3da0 R08: 0000000000000006 R09: 0000000000000000 [ 117.228481][ T4814] R10: 00007f29319c3cb0 R11: 0000000000000246 R12: 000000000001bc76 [ 117.236481][ T4814] R13: 00007f29319c218c R14: 000000000001b9fd R15: 00007f29319c2180 [ 117.244489][ T4814] [ 117.262294][ T3558] loop2: p4 size 722688 extends beyond EOD, truncated [ 117.271275][ T26] audit: type=1326 audit(1791225257.140:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4854 comm="syz.2.163" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620c77e199 code=0x7ffc0000 [ 117.299816][ T4864] binder: 4863:4864 ioctl c0046209 0 returned -22 [ 117.741134][ T4867] loop0: detected capacity change from 0 to 2048 [ 117.809086][ T26] audit: type=1326 audit(1791225257.150:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4854 comm="syz.2.163" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f620c77e199 code=0x7ffc0000 [ 117.837309][ T4867] loop0: p1 < > p4 [ 117.837309][ T4867] p4: [ 117.851753][ T4867] loop0: p4 size 722688 extends beyond EOD, truncated [ 118.224896][ T3558] loop0: p1 < > p4 [ 118.224896][ T3558] p4: [ 118.248618][ T3558] loop0: p4 size 722688 extends beyond EOD, truncated [ 118.261132][ T26] audit: type=1326 audit(1791225257.150:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4854 comm="syz.2.163" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620c77e199 code=0x7ffc0000 [ 118.290938][ T26] audit: type=1326 audit(1791225257.150:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4854 comm="syz.2.163" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620c77e199 code=0x7ffc0000 [ 118.365632][ T4189] udevd[4189]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 118.380721][ T4200] udevd[4200]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 118.392803][ T26] audit: type=1326 audit(1791225257.150:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4854 comm="syz.2.163" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f620c77e199 code=0x7ffc0000 [ 118.586100][ T26] audit: type=1326 audit(1791225257.440:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4854 comm="syz.2.163" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620c77e199 code=0x7ffc0000 [ 118.652119][ T4189] udevd[4189]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 118.669046][ T4200] udevd[4200]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 118.705282][ T26] audit: type=1326 audit(1791225257.440:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4854 comm="syz.2.163" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620c77e199 code=0x7ffc0000 [ 118.750671][ T4390] udevd[4390]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 118.767233][ T4200] udevd[4200]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 118.793787][ T26] audit: type=1326 audit(1791225257.500:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4854 comm="syz.2.163" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f620c77e199 code=0x7ffc0000 [ 118.868233][ T26] audit: type=1326 audit(1791225257.510:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4854 comm="syz.2.163" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620c77e199 code=0x7ffc0000